last executing test programs: 3m24.474988762s ago: executing program 0 (id=1171): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/215, &(0x7f0000000100)=0xd7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000640)="2a6f94193795bf074152c7634b5ed1869ccbe2e5fc20", 0x16}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000400000/0xc00000)=nil) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x9}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x98, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0xb2ba, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd17}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22, @multicast2}}, 0xf, 0x821, 0x3f63, 0x4, 0x7}, &(0x7f0000000440)=0x98) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@metacopy_on}]}) 3m24.10541777s ago: executing program 0 (id=1175): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x80) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000005c0)=0x7e) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x60180, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, &(0x7f00000003c0)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) bind$phonet(r2, &(0x7f0000000040)={0x23, 0xa, 0x5, 0x2}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) close(r2) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x294}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 3m24.102478262s ago: executing program 0 (id=1178): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000072c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000007380)={0x0, 0x0, &(0x7f0000007340)={&(0x7f0000007300)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0xba01}, 0x4000014) 3m24.044907728s ago: executing program 0 (id=1180): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000080)={0x6, 0x28, "a950c51c89872b596941ab6932e0ae0161cd8d4177b3a53a34063413c67af2ff071d330e01c08dbf"}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3m23.980472822s ago: executing program 0 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc00, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_FLAGS_EXT={0x8}, @NDA_LLADDR={0xa, 0x2, @random="f5cd1533841a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r3, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="057c513006000000b2f65c1ed93dbef241e879f83815d43b89223889c2a9a06af229774dff4f4bc3961401f3650830f2eebac2f70d2c2bc061d23f2f5ab0191f6b6ca482104ddca535", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0xfffffffb, 0x2045404a, 0xb835, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r6, r7, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) fcntl$dupfd(r11, 0x404, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x9, 0x33685bdb, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0x9}) mount$bpf(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x400, &(0x7f0000000440)=ANY=[@ANYBLOB='mode=00000000000000000000001,uid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=r6, @ANYBLOB=',gid=', @ANYRESHEX=r8, @ANYBLOB, @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=r10, @ANYBLOB=',uid=', @ANYRESHEX=r12, @ANYBLOB=',appraise_type=imasig,\x00']) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m23.91582312s ago: executing program 0 (id=1184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0102000000000000000003002600080004000a0101041400060073697437000000fff7000000000000001400070000000000000000000000ffffac141400080005"], 0x4c}, 0x8, 0x3000000000002}, 0x8000) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m8.377404655s ago: executing program 32 (id=1184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0102000000000000000003002600080004000a0101041400060073697437000000fff7000000000000001400070000000000000000000000ffffac141400080005"], 0x4c}, 0x8, 0x3000000000002}, 0x8000) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m42.211401587s ago: executing program 1 (id=1637): r0 = socket$packet(0x11, 0xa, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', r1, 0x80, 0x7, 0x7f, 0xffff, {{0x23, 0x4, 0x1, 0x36, 0x8c, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0xf, 0xf2, [@private=0xa010102, @local, @rand_addr=0x64010100]}, @rr={0x7, 0xb, 0xfe, [@private=0xa010102, @local]}, @noop, @cipso={0x86, 0x19, 0xfffffffffffffffe, [{0x7, 0x4, "ab36"}, {0x1, 0xf, "81962dd6bb34714466b96b27f1"}]}, @timestamp={0x44, 0x24, 0x2b, 0x0, 0x1, [0x0, 0x0, 0x3, 0x7ff, 0xfffffff9, 0x1000, 0x80000000, 0xfffffffc]}, @rr={0x7, 0x1f, 0x5e, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @remote, @empty]}]}}}}}) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xfffffffffffffdb3) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r1, 0x2f, 0x1e, 0x9, 0x1, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8, 0x1, 0x1, 0x28}}) 2m42.211124611s ago: executing program 1 (id=1638): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) (rerun: 64) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbbf, 0x14}) (async) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x8000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x3b4, 0x3, 0x87, 0x0, 0x5, 0x0, 0xbdb], 0xf000, 0x3c4210}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m42.076087717s ago: executing program 1 (id=1641): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000340)="010001000000000000001000015b097ead8584780aed42abbad05dd5", 0x1c, r0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m42.021252716s ago: executing program 1 (id=1644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000780), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x6, {0xfffffffe, 0x1, 0x0, 0xfffffffd}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2020d7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c004}, 0x48004) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "59185f0bd9db64b9b1908760d51324e23387a5a6d9796d129e3a6eef3ffcaec0e144e3da7ba2ca6900844bf44e3b23d9cc90a339ac9d818ce14932727ec9df91530117359e1dbc80f2181388430cbd40e76824d304961e38149c9a91714e4f9d3fca03eadc72b47c9bc0802ed1f18811159c65a7b4800cdee24840fcebb6a1847c15432a1f4e43a71139e92dfc7afc18e46277817274b6af024fec580f65caea6eff5865798aee57b052a5db47781f92f8e30a3aec58d19558a9e74df4678aaf2d2270"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x42}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x400c004) 2m41.965725024s ago: executing program 1 (id=1647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x84102, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x9, 0x2, r4}) r5 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4, 0x7, 0x2, r5}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xf21e1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.57260678s ago: executing program 1 (id=1656): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000640)={0x2, &(0x7f0000000540)=[{0x80, 0x63, &(0x7f0000000180)="d5639b7d9313d7d3a3c1f3987e156c4fe8ce0334a7af96323c0db4447fb46f41eb31150132c96b0214f076d8d1113e2d5ac99bc00a2eeff603a78eb922e8667901e2a9f0b591864769ea813ca1da8239439aaec13760df21437daeb8524b1294d06bc1", 0x1}, {0x6, 0x9e, &(0x7f0000000400)="1feef112b9cba99c7c4a4a81edf7bc1c6eb7c3c131fc6a91a6436965bac28b1060a1c2ba22baffe7f03967a34dc10b8807a74e3ac400ca8f1bd777bee0a2157cb6b81dc7903e08f22f6542d1ed0615c66d8ddef58642948a1adf1a7b0701318f53ed38f00926d7d3971d5cde323d37b0b10389329e2d02ed24629a368bc3effc4fbe3676540dc9e7a51b4bcb664c022b96dc1aa296325a376e7a3e5241cc", 0x1}]}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000640)={0x2, &(0x7f0000000540)=[{0x80, 0x63, &(0x7f0000000180)="d5639b7d9313d7d3a3c1f3987e156c4fe8ce0334a7af96323c0db4447fb46f41eb31150132c96b0214f076d8d1113e2d5ac99bc00a2eeff603a78eb922e8667901e2a9f0b591864769ea813ca1da8239439aaec13760df21437daeb8524b1294d06bc1", 0x1}, {0x6, 0x9e, &(0x7f0000000400)="1feef112b9cba99c7c4a4a81edf7bc1c6eb7c3c131fc6a91a6436965bac28b1060a1c2ba22baffe7f03967a34dc10b8807a74e3ac400ca8f1bd777bee0a2157cb6b81dc7903e08f22f6542d1ed0615c66d8ddef58642948a1adf1a7b0701318f53ed38f00926d7d3971d5cde323d37b0b10389329e2d02ed24629a368bc3effc4fbe3676540dc9e7a51b4bcb664c022b96dc1aa296325a376e7a3e5241cc", 0x1}]}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) (async) 2m41.544807603s ago: executing program 33 (id=1656): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000640)={0x2, &(0x7f0000000540)=[{0x80, 0x63, &(0x7f0000000180)="d5639b7d9313d7d3a3c1f3987e156c4fe8ce0334a7af96323c0db4447fb46f41eb31150132c96b0214f076d8d1113e2d5ac99bc00a2eeff603a78eb922e8667901e2a9f0b591864769ea813ca1da8239439aaec13760df21437daeb8524b1294d06bc1", 0x1}, {0x6, 0x9e, &(0x7f0000000400)="1feef112b9cba99c7c4a4a81edf7bc1c6eb7c3c131fc6a91a6436965bac28b1060a1c2ba22baffe7f03967a34dc10b8807a74e3ac400ca8f1bd777bee0a2157cb6b81dc7903e08f22f6542d1ed0615c66d8ddef58642948a1adf1a7b0701318f53ed38f00926d7d3971d5cde323d37b0b10389329e2d02ed24629a368bc3effc4fbe3676540dc9e7a51b4bcb664c022b96dc1aa296325a376e7a3e5241cc", 0x1}]}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000640)={0x2, &(0x7f0000000540)=[{0x80, 0x63, &(0x7f0000000180)="d5639b7d9313d7d3a3c1f3987e156c4fe8ce0334a7af96323c0db4447fb46f41eb31150132c96b0214f076d8d1113e2d5ac99bc00a2eeff603a78eb922e8667901e2a9f0b591864769ea813ca1da8239439aaec13760df21437daeb8524b1294d06bc1", 0x1}, {0x6, 0x9e, &(0x7f0000000400)="1feef112b9cba99c7c4a4a81edf7bc1c6eb7c3c131fc6a91a6436965bac28b1060a1c2ba22baffe7f03967a34dc10b8807a74e3ac400ca8f1bd777bee0a2157cb6b81dc7903e08f22f6542d1ed0615c66d8ddef58642948a1adf1a7b0701318f53ed38f00926d7d3971d5cde323d37b0b10389329e2d02ed24629a368bc3effc4fbe3676540dc9e7a51b4bcb664c022b96dc1aa296325a376e7a3e5241cc", 0x1}]}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) (async) 2m11.006227822s ago: executing program 5 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x20001000, 0x4000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x8000002) 2m10.937207425s ago: executing program 5 (id=2300): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0x7, &(0x7f0000000780), 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000fef000/0x11000)=nil) 2m10.871136094s ago: executing program 5 (id=2303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008814) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) (async) r5 = syz_open_dev$hiddev(&(0x7f00000004c0), 0x1, 0x80280) (async) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r5, 0x0, r6, &(0x7f00000005c0)={0x10, 0x4, 0x8, 0xfffffffffffffff8, 0xc0, 0x7, 0x3, 0x7, 0x2}) (async) sync_file_range(r0, 0x4, 0x1ff, 0x5) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000680)}}, 0x18) (async) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x6736782e5f828320}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r1, 0xb16, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "65e44d4e84fba29695e49073daed5dff"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5799d32fc5eca429f90b3abe8fbff9cb"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b890d869ce1ac0968373ac0271124ef5"}, @NL80211_ATTR_PMK={0x14, 0xfe, "30594ae662cfdcafc05f511b83b015dc"}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x800) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400000c) (async) r10 = syz_open_dev$dri(&(0x7f0000000ac0), 0x4, 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000bc0)={&(0x7f0000000b00)="badd508ffc70b937aec2d2cfba01bc15d5bdbe292035e03487e6d5c4d4bf2f757a5888ceafa37b6bc0591e504df98f3226f451dc32c357a32629e3a98d18da222eaa16253bbb7e22d50b5d0a0068f1c6d7331d17a99e928f46d23126823607ee1128d094d20b7a0d97cc26aeb68eb1699217186458b3a76801e490dbaa57e86ba008484f070c986c2de1f359d39fa6ef084b151961b84c3ca61e1caf0c3690561c2c62d9156fbba233c2ca71737169cd1b1367217de92edf3764130222c18c", 0xbf}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x24}}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xa900800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x30ed13b1b3fdcdf1}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000010}, 0x20000000) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001080), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000010c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r11, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008840}, 0x10) 2m10.782107892s ago: executing program 5 (id=2306): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x4018, r0}, 0x18) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0x0, 0x38, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = dup(r3) fanotify_mark(r3, 0x401, 0x1018, r4, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780)={0xffffffffffffffff}, 0x2, 0x4}}, 0x6b) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r6, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x6, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"0000000000a8313ee200000000000001"}, 0x80000015}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6}}, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000680)={r2, 0x1}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x75, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x9, 0x11, 0x8, 0xa, 0xd2}}}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c004aa0"], 0x44}}, 0x0) 2m10.721874293s ago: executing program 5 (id=2307): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) write$dsp(r0, &(0x7f0000000300)="47e8", 0x2) 2m10.589645585s ago: executing program 5 (id=2311): syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045030078000000000004907800000000e00000010000000000649078020000000300000000000000f3a6012efff2432f55966460a6e32663b6f209eb912c65b0400c186a88daa96c155f6ff08a0a9bea16fcc47e59a89c2e1051a66114baa9046fe4f1d41908aad9f7f3abe27ec832b2ed1b623e81dc83ead99371efacb3e298279b1d5399727e85f9f7008cbefd62731769487afb0f6e398365c9ee7beb17f2af5293c15a895178241437470071429d8e23a48770c6df426d4ca20f961b906dfaef5eb0fc2bed2c59c684b1d4370af428b019be5ea243db8234f4a72b9ac14025eaeee80f6cfff6b422cc3cfd14b20d9afda44cb1cabfde539c50031eafa3b56f4d469ea955fb4cf7958deaaa96bd2bcd77015e76f3b782015a1c2bc45d2b482f155c9cc12335aa3170ba8cef26cd12bae4595559158484aacee527fb1540ac458b1017bc11428286cb09c2fbe01a30cc3cc0b20cc3ebc9bb64c0b68518dcd9a4aca8e0cf4c346d3ebfb40f7a748f2c449c2580b61690a70d0ddfa2262a5d3b6f9c226eda4f9a3d4fa90d70d93f283725b4167773da873339a08362c28aa2f0dfcf"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x1, 0x83, 0x7, 0x7, 0x3, 0x101, 0x4, 0x7, 0xb, 0x2, 0x0, 0x0, 0x7, 0x8000000000000001], 0xdddd0000, 0x80}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}], [], 0x6b}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c00198008000100"], 0x44}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x81}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x2, 0x0, 0x0, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)={0x10, 0x2e, 0x1}, 0x10}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 2m10.486604666s ago: executing program 34 (id=2311): syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x1, 0x83, 0x7, 0x7, 0x3, 0x101, 0x4, 0x7, 0xb, 0x2, 0x0, 0x0, 0x7, 0x8000000000000001], 0xdddd0000, 0x80}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}], [], 0x6b}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c00198008000100"], 0x44}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x81}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x2, 0x0, 0x0, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)={0x10, 0x2e, 0x1}, 0x10}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 1m45.21186324s ago: executing program 3 (id=2775): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0xf8, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xe3, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @generic="11673b7fbeb390e20029b8c2cce81d167903b977ed03daecc3870ff7042148", @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xaa, 0x6a, 0x0, 0x1, [@nested={0x4, 0x132}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5"]}]}, @nested={0x4, 0x2}]}, 0xf8}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060005000000000008000a00", @ANYRES32=0x0, @ANYBLOB="a6acaa508ad42e0873affbf219a54d312cefc96b57fef1001917faffffffffffffffca2b6cc45806829a5d55cb60bdde385402d40d140547e66baf5cd38c107ba026bffc65bc14116233d235cfc1404aad728fe57873dcfa835a92fa14000647f4b7da"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',rootmo']) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000002c0)={'mangle\x00', 0x0, [0xef34, 0x7, 0xa, 0x33eeba0c]}, &(0x7f0000000500)=0x54) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x105000, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m45.069699373s ago: executing program 3 (id=2778): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d1}, 0x404c800) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m44.919973184s ago: executing program 3 (id=2781): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x80008, 0x0, 0x0, 'queue1\x00', 0xff}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close(0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r3, 0x88b25, &(0x7f0000000480)="cc90b362da84c33a3ebd3ef9f2f5be5c9b1058dbc11d3f7686f85ed6f8c95b49b46877d40277168ff4a8034fa7077f713fd9ea4de1c68fd8e7deb5eff988defafacf088a7b05e5cb60d60325f8b295dbcfb1b710d65c65047ff472a7af7190bb1c7c66c8b6e2721c2946cee30c7eee2957d843ce9c7187799b86cf828d90435dec9c697295a0cc5d642b064a877b3395b6299472104dbafc4fd61498405e3a1e9e48854b88b9b55c949aef48bbad72a7f232e023953c6fb742d988161493fe07") (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) syz_emit_ethernet(0x31, &(0x7f0000000200)={@local, @broadcast, @void, {@generic={0x4305, "fc2cfaaf3eac8346e574ec3d199ce5202a7be692b6e7a9cf0ae79297c83ef16aec79c9"}}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000040)={0x7, 'veth0_to_bond\x00', {0x7}, 0xfffd}) (async) socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001d00070000004363f16c039bf44e7c05116b5363702ddd3197b221e70af415300000", @ANYRES32=r6, @ANYBLOB="000096090a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000080)={0x100}, 0x4) (async) socket(0x27, 0x1, 0x10000000000002) 1m44.772094829s ago: executing program 3 (id=2783): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000240)={0x8, 0x97, 0xffff}, 0xc) (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async, rerun: 32) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 1m44.697354652s ago: executing program 3 (id=2785): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bind$rds(r0, &(0x7f00000008c0)={0x2, 0x4e24, @multicast1}, 0x10) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000880)=0x0) fcntl$setown(r1, 0x8, r2) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000040)) 1m44.37542486s ago: executing program 3 (id=2789): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x3, 0x1048, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x6, 0xa}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000980)="26000000010047fc050007108980e8ff06016d20002b1ffec0ff0301c77f0000000000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x4040040) 1m44.298259033s ago: executing program 35 (id=2789): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x3, 0x1048, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x6, 0xa}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000980)="26000000010047fc050007108980e8ff06016d20002b1ffec0ff0301c77f0000000000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x4040040) 53.941192758s ago: executing program 7 (id=3586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50881}, 0x24008040) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50881}, 0x24008040) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) 53.86412019s ago: executing program 7 (id=3587): r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x201) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x100, 0xc003) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000030000000000000000007f0000000000000000000000004b10d7caa822f13555e8be00"/99], 0x58) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000240)=""/252) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x1, 0x1903, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0xd35b, '\x00', @string=0x0}}) socket$phonet(0x23, 0x2, 0x1) (async) recvfrom$phonet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x201) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x100, 0xc003) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000030000000000000000007f0000000000000000000000004b10d7caa822f13555e8be00"/99], 0x58) (async) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000240)=""/252) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x1, 0x1903, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0xd35b, '\x00', @string=0x0}}) (async) 53.862254498s ago: executing program 7 (id=3588): mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000007, 0x80010, 0xffffffffffffffff, 0x16332000) openat$kvm(0xffffffffffffff9c, 0x0, 0x202, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0, 0x1068, 0x1, 0x1f}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x2a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 53.801224187s ago: executing program 7 (id=3589): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="060200000104000037000000"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000580), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x16) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x12, 0x66, 0xfffff2bb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000000080), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x8500, 0x46) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r1, 0x1e5f9000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x2007}], 0x1, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000340)={0x2, 0x2}) 53.671488387s ago: executing program 7 (id=3590): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x1000a) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x35314152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x400000) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000a40)={0x1, 0x0, {0x9, 0x6, 0x374, 0x6}}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x80100, 0x0) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x80100, 0x0) ioctl$BSG_EMULATED_HOST(r4, 0x2203, &(0x7f00000000c0)) (async) ioctl$BSG_EMULATED_HOST(r4, 0x2203, &(0x7f00000000c0)) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = syz_io_uring_setup(0x6375, &(0x7f0000000140)={0x0, 0xca65, 0x10000, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x23456}) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r7, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x4a) (async) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x4a) fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x2}]}, 0xc, 0x2) add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000003c0)="6e0c9b6b38d8854d85727d43ce556eb22c5cb5fc81ee9f9941ba0c6c60c1ab528285e82284ed3c1478e8aea7dc02172e3a9755e16789af43f35444c503b905f0f48c295eead1cb90085023fb1d3546e33e6107011b1d3963eff1de242c4d51df88ffa9ef6dded54bd702fc891616a60466b0771476907653531caff22903f9c70ccf029dbb31868224a803744fe50b1497de47c94a58b49784ac42a2a16cb020fe53504bef26a4bc09df87bd132ff20d29544352f2ccc6ab2fb5ab1bbf820fec0af6b091e26d0f4af751a4cec7c5ec739b29aba620d4624355ad12b4177e4792b90c005f7b4fba056e5211236d95be73f601c5186ac23f672db56762cf54bcb034f8d485103661412189d5919fe63b0179465a5026cac8a590f6b49d35e2bce1876cef5625e99d3d5dbda46431f10a1e772465704e64d919ed70c0f085e74d9a9acb92dd0e85c66d1ef0681205b9b09ebec13b243bc18a0a912f3a511ada1d78030f8437f97674b02f3181b33d43cba3004bf9aa25d02bbbacec283716fd18773e3b75e431f340d11313c8689283501b78087f848ca54a3016ea180443e3e08c7fee7b1222bf36713d9468508086c8f6bef47fab5603321739203565512ff0c4d247673b6b7cb0a6644e13003fad2b8dd5db73676dd6864fe8fedbbe88ce48a52565cf476404238f4798c3464f45107a8ea93bf0c8b29bbe8c9ed55eb98891fadd2eece5c8e604472ea44a578aece6876980f880d431e5783a476ffbcadc4658f4761357333668ff890d8b33a583f61fe774cb05c93bc223742046832ac9de4f7e2f3dec915f1092174c7e1908bd155d08a666fd16e60b14f2906eace05a2763cb1b7638a52a60234c4c3ca6b2dc866ffa89f8a7bce7b3882918e028903f5bfadd98a1da11ae806faf0031ee3bcf02086bca65d3ce02bed0d96437c386c7ca345ad91080a0aadeae1f08c83c319134bf157f986a7f019581493f91f267972ccc5c6f6c9422e679866b56cf278ec2358ee779696caa04d439583be641043874375dd7782e98f359aaf7eb722aa393e3e0846c2f199f189ca83c8a3a64b3ff650fcedef52b366c6fa47f135ce98eac96ba4e2081dfb28e9234fdd9c00ad99ad9f07e1912dbede37cdccade1536c1b64f62321b40648faab1e282a01c342cb879bead9cc1a2b1ec15af2be7d34755834030768643b318e83cd4514448a8aed0c73e477eae4d6dc46e4a56e52c773377282c9dc7210e921b5ca0aa256c9d026ed0f11a00ea72896ebe0ddceae01d915a251045cd7c111a9a5ed31e4309ef3febc86ddf70f1b6d588699cd4fea874599570ddc142773c7c376688f696fd4c412bb570de5959e3174e0938cf99b791e1f4b1c5b3caf3ce36333a2d18561992644da22673938ee524a73974ca5d5d9b5fead6e84d20a479c45454ec40dc5c05d4e3236f950ff0b50d842062cfff7f51d9d68acb870b3abbeb51e72a482fa3797bf624044d8a4b2e4a83a9c4d378ae187f706802b55ced5c6334f78210daffb70527aeccf1807fb2743264daa59d9e040a5c744851e880395048c15670e311e7c267a45966d89cf9f042cccf4be4fd3ca9e21a033d2a108fb318f5e392d5393a544cd7ca4e6500a819f062740cc3ecead9745116be7c9fd46b6e5afea5348ff5808ea582a8efa958537d99318c50a6dbf9eadd035c309a4f4f7ddfb95e89fa73eae672423bfbbe5b64a9626d30ee5797a49b31a46dcea377a24e02bc1a000bc09ebe03c1c7417379957cdadd93f3830e912d18c6ba302a41e5bc5127a482c9b426afa53f30302b9e1ebbaf4c85e42b418f89afc5515cfcb0b29143785e4c2146424335e16769ff526e57d419ce9742521748539371e1ac32a7d0eeff94fb07704e0d58e26c2206f1309c8d326952de382b3d8485442019730b1e2a504dd04131e7eae0e1776b8799d5f8844c90d596104dd235834e92ef086995e0e02b3472a9d264313a851ddc9f21e715cea39cafd31345caf1dc2a53e425f5bb41894285a339bcf6f233f2a9584e291bf6c098e7d0c7d390e99e62f439a408cd1ff11cce7529698edb41659d3ec0b01c39fe1b927420539a28a65cab42bc56dcaf530fcbdc4f71784becc95228c8fe5cad74eeb5dee6db9b4fb1b572c0891b222139dbbe919fdc2df5bf51ccd803eca73029a56b600a25b84c5dbd4190b9ffb2e4126bdcf42c7f4684e14e17e32031ad9a80dda6d986d2b580bbb13502ac336fa834fc27b279438756b2173d3ac2c07e", 0xffffffffffffff5e, 0xffffffffffffffff) 52.56040947s ago: executing program 7 (id=3604): r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x40) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x2, 0x2400000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 52.459509481s ago: executing program 36 (id=3604): r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x40) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x2, 0x2400000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 8.746544585s ago: executing program 4 (id=4308): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x102, 0x8000, 0x0, 0x0, r2, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000480)={&(0x7f0000000080)={0x50, 0x0, 0x5, {0x7, 0x28, 0x6, 0x33887e60, 0xfffc, 0x100, 0x5, 0xfffffffd, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x42603ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) 8.570042275s ago: executing program 4 (id=4315): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x60, {"420f05c4017b11a75d280000ee0f237a7abad00466b80a0066efc4c1ff7051af00400f01df65450f01dfb9e90a0000bab19400000404000000000f30b805000000b9f894e1630f01d92e67670fc72b"}}], 0x60}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 8.131257401s ago: executing program 4 (id=4337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 8.12863229s ago: executing program 4 (id=4339): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x7cc6675254a1fe52, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x2, 0x7fa62fec, {{0x10, 0x4, 0x2, 0x1, 0x40, 0x64, 0x0, 0x4, 0x0, 0x0, @remote, @remote, {[@timestamp={0x44, 0x8, 0xd7, 0x0, 0xd, [0x8]}, @lsrr={0x83, 0x7, 0x97, [@multicast2]}, @timestamp={0x44, 0xc, 0x21, 0x0, 0xf, [0x6, 0x0]}, @ssrr={0x89, 0xf, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}]}}}}}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="02002abd7000fedbdf2503000000040005000400050006000a004e23000008000b00", @ANYRES32=r5, @ANYBLOB="14000700fc01000000000000000000000000000106000a004e220000060001004e21000014000900fe80000000000000000000000000000a08000b00", @ANYRES32=r7, @ANYBLOB="080006000a010101"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x7cc6675254a1fe52, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) (async) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000400)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000080)={0x0, 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x2, 0x7fa62fec, {{0x10, 0x4, 0x2, 0x1, 0x40, 0x64, 0x0, 0x4, 0x0, 0x0, @remote, @remote, {[@timestamp={0x44, 0x8, 0xd7, 0x0, 0xd, [0x8]}, @lsrr={0x83, 0x7, 0x97, [@multicast2]}, @timestamp={0x44, 0xc, 0x21, 0x0, 0xf, [0x6, 0x0]}, @ssrr={0x89, 0xf, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}]}}}}}) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="02002abd7000fedbdf2503000000040005000400050006000a004e23000008000b00", @ANYRES32=r5, @ANYBLOB="14000700fc01000000000000000000000000000106000a004e220000060001004e21000014000900fe80000000000000000000000000000a08000b00", @ANYRES32=r7, @ANYBLOB="080006000a010101"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (async) 7.990902603s ago: executing program 4 (id=4346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x1fd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1fc4, 0x1, [@m_pedit={0x1fc0, 0xe, 0x0, 0x0, {{0xa}, {0x1f44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x401, 0x6, 0x0, 0x6, 0x2}, 0x7, 0x5, [{0x3d, 0xfff, 0x8000, 0x3ded55f9, 0x6bcc, 0x3b37}, {0x5, 0x0, 0xff, 0x4, 0xfffffffa, 0x452}, {0x33, 0xffffffff, 0x2, 0xfc, 0x8001, 0x9a7}]}, [{0x10001, 0x400, 0x2c6b, 0xdcc, 0x1ff, 0x5}, {0x4, 0x8, 0x7, 0xa5ae, 0x10, 0x2}, {0x3, 0x3, 0x1000, 0x5b7, 0x918, 0x6}, {0xf8d, 0x6, 0x8, 0x3, 0x7, 0x4}, {0x1, 0x3, 0x80000001, 0x8f6f, 0x1, 0x9}, {0x7, 0xb264, 0xfffffff8, 0x1, 0x3, 0xffffffff}, {0x5, 0x5, 0x6, 0x3, 0xff, 0xb7c6}, {0x4, 0x7ff, 0xb, 0xf3, 0xfffffff8, 0x3}, {0x7, 0x7, 0x20, 0x5, 0x7fff, 0x7fffffff}, {0x4, 0x6, 0xff, 0xffff, 0x0, 0xe}, {0x8001, 0x0, 0x3, 0xffffffff, 0x5, 0x1}, {0x9, 0x5, 0x3, 0x8, 0xe5fa, 0x3}, {0xfffffff9, 0xb1, 0x1, 0x262, 0x5, 0x401}, {0x8, 0x3, 0x9, 0x6559bc8c, 0x0, 0x5}, {0x4, 0x7, 0x6, 0x7, 0xb9, 0x350833b0}, {0x6, 0x3, 0xf3f, 0x0, 0x8, 0x1}, {0x10000, 0x2, 0x10001, 0x4, 0x0, 0x3ff}, {0x4000000, 0x3, 0x80, 0xb, 0xffff, 0xfffffff7}, {0x9, 0xa1f6, 0x5, 0x8001, 0x80000000, 0x4}, {0x0, 0x6, 0x6, 0x146, 0xfffffffd, 0xd}, {0x2, 0xcb2, 0x6, 0x7, 0x3, 0x5}, {0x8, 0xfffff7d5, 0x8, 0x23e97f93, 0x3, 0x3}, {0x4, 0x80, 0x6, 0x1, 0x3, 0x800}, {0x5, 0xa, 0xd, 0x4, 0x6, 0x1}, {0x3, 0xffffffff, 0xd2a, 0x2, 0x6, 0x4}, {0x4, 0x5, 0x2ba4, 0x5, 0x8, 0x3}, {0x5, 0x8, 0x0, 0x3, 0x3, 0x8}, {0x2, 0x4f, 0x10001, 0x101, 0x6, 0x7}, {0x4, 0x6, 0x7, 0xf, 0xffffffda, 0x160000}, {0xff, 0x9, 0xfffffc00, 0x10000, 0x7ff}, {0x2, 0xa, 0x0, 0x9, 0x0, 0x1}, {0x9, 0x5, 0xfffff2b7, 0x9, 0x5, 0x9e}, {0x3, 0xa, 0x2, 0x12ab106b, 0x3, 0xffff}, {0x2a70, 0xfff, 0x91, 0x7fffffff, 0x4, 0x7}, {0x0, 0x7fbe, 0x32, 0x2, 0x8, 0x5000000}, {0xc4f, 0x6, 0x6, 0x9, 0xffffffff, 0x800}, {0x727, 0x6, 0x1, 0x3, 0xfffffffa, 0x9}, {0x8, 0xfffffffb, 0x10001, 0x7, 0x0, 0x2}, {0x6, 0x1, 0x8, 0x2, 0x2}, {0x1, 0x3, 0xffffffff, 0x3, 0x1, 0x1}, {0x7, 0x3, 0x10001, 0x0, 0x1, 0x7}, {0xd8, 0x7, 0x2, 0x3b3f, 0x40, 0x2}, {0x3, 0x81, 0x9, 0x2, 0x2, 0x6}, {0x800, 0x7, 0xfffff8d4, 0x8000, 0x4, 0x401}, {0x8000, 0x8000, 0x80000001, 0x80000001, 0x8, 0xfffffe00}, {0x2004, 0x3, 0x10000, 0x58, 0xc}, {0x200, 0x60a7350a, 0x9, 0x9, 0x2}, {0x9, 0x0, 0xfffffff7, 0x1000, 0x800, 0xf56b}, {0x0, 0x81, 0x7, 0x89e5, 0x7, 0x100}, {0x6, 0x1, 0x8000, 0x74f, 0x3, 0x9}, {0xa2f, 0xb79, 0x6, 0x20, 0x6fc, 0xd5c}, {0x2, 0x7, 0x5, 0x80, 0x1, 0x80000000}, {0x2, 0xb, 0x800, 0x5, 0x3, 0x80000001}, {0x9, 0x5, 0x3, 0x7, 0x10000, 0x9ee}, {0x5, 0x40, 0xc86, 0x0, 0x8, 0x1}, {0xfffffffa, 0x40, 0x2, 0x3, 0x0, 0x5}, {0xd, 0x80000001, 0x5, 0xa7b, 0x5, 0x101}, {0xe511, 0x7fa8476, 0x10001, 0xfff, 0x2}, {0x101, 0x6, 0x3, 0x1, 0x1, 0x4c20}, {0x9, 0xb, 0x0, 0x7, 0x8, 0x5}, {0x1, 0x4906, 0x3, 0x1, 0xffffffff, 0x7}, {0x2, 0x0, 0xef0, 0x3ff, 0x4}, {0x8, 0x8, 0x9, 0x8001, 0x6, 0xffff}, {0xce, 0x3ff, 0x7, 0x21ee, 0x8, 0x1}, {0x675d, 0x6a0, 0x834, 0x8, 0xbf, 0x8}, {0x6, 0x3, 0xe, 0xe9, 0x1, 0x6}, {0x6, 0x6, 0x6, 0x3, 0x1, 0x81}, {0x9e3, 0x81, 0x7, 0x7, 0x8, 0xc}, {0x5, 0x4, 0x8000, 0x9, 0x1, 0xc69b}, {0x4, 0x6, 0x2, 0x5, 0xed03, 0xfffffff9}, {0xb1, 0x10, 0x5, 0x9, 0x5, 0x8000}, {0x9, 0xffffff39, 0x80000001, 0x100, 0x81, 0x200}, {0x0, 0xe5eb, 0x8, 0x3ca, 0x3ff, 0x6}, {0x9, 0x4, 0x7, 0x9, 0x3, 0x5}, {0x6, 0x1000, 0x1ff, 0x1000, 0x1, 0x1}, {0x4, 0x7, 0x3, 0x5, 0x9, 0x2}, {0x2, 0x3, 0x7340, 0x5, 0x401, 0x4}, {0x4, 0x80, 0xff, 0x9, 0x5}, {0x8, 0xe6, 0x9, 0x1, 0x1000, 0x3c}, {0x4, 0x800, 0x3, 0xf4724ee, 0x8, 0x8000}, {0x0, 0x6ab, 0x6, 0xfffffffb, 0x4, 0x9}, {0x2, 0xfff, 0xde56, 0x1, 0x5, 0x8}, {0x6, 0x1ff, 0xffffffff, 0x3, 0xc1, 0x4}, {0x800, 0xa, 0x7, 0x37, 0x9, 0x5}, {0x8, 0x7, 0x9, 0xffffffff, 0x80000000, 0x6}, {0x0, 0x80000000, 0x200, 0xeb8791dd, 0x760, 0x17524c7f}, {0xc4, 0x8, 0x1, 0xfffffffb, 0x0, 0x41b}, {0x31, 0x2, 0x5d0, 0x46e16986, 0x0, 0x6}, {0x3, 0x6, 0x7, 0x9, 0x6, 0x10}, {0x3ff, 0x4, 0x2, 0x8667, 0x101, 0xfff}, {0x6, 0x4, 0x3, 0x7f, 0xa, 0xfffffff9}, {0x7, 0x95, 0x4, 0x1, 0x400, 0x5}, {0x438, 0x3, 0x2, 0x100, 0x80000000, 0x1000}, {0x1, 0x2, 0xffffffff, 0x5, 0x0, 0x2}, {0x6, 0x6, 0x140, 0x400, 0x8, 0x3ff}, {0xb8, 0x8001, 0x8, 0x4, 0x7fffffff, 0xff}, {0x8, 0x3, 0x2, 0x6000, 0xb8d, 0xb}, {0x10ec, 0x8, 0x7, 0x6, 0x6, 0x2}, {0x7ff, 0x3ea, 0xa, 0x6, 0xf, 0x30}, {0x1, 0x2, 0x6, 0x2, 0x200, 0x9}, {0x0, 0x401, 0x6, 0x7, 0x8, 0x8}, {0x5, 0x400, 0x40, 0x5, 0x5, 0x400}, {0x3, 0x7fffffff, 0x7, 0x2, 0x100, 0xfffffe3d}, {0x784, 0x3, 0x5, 0x7, 0x9, 0x1}, {0x4, 0x4, 0x80000000, 0xd, 0x5}, {0x1, 0x0, 0x5, 0x7, 0x6d8d2591, 0x69eb}, {0x8, 0x3, 0x7, 0xbf6, 0x2, 0xf89}, {0x3, 0x5, 0x401, 0x8, 0x7, 0x1}, {0x8, 0x8001, 0x6, 0x1, 0x9, 0x1071}, {0x1, 0x9, 0x4, 0x8, 0x1, 0xfff}, {0x5, 0x8, 0x9, 0x9, 0x5, 0xff}, {0x1, 0x3, 0x4, 0xa56d, 0x7, 0xe6d6}, {0x6, 0x7, 0x200, 0xfffff001, 0x2, 0x2}, {0x9, 0x7, 0x10, 0x4, 0x0, 0x45}, {0x3, 0x9, 0x6, 0x41, 0x8000, 0x6}, {0x9, 0x5, 0x1, 0x0, 0x4, 0x80000000}, {0x8, 0x2, 0x9b9e, 0x2, 0xfffffff8, 0x6}, {0x1, 0xfffffff8, 0x7, 0x5, 0x1ff, 0x3}, {0x8001, 0xfffffffa, 0x401, 0xfffff9e1, 0x3, 0x8000}, {0xee, 0x0, 0x80000000, 0xfffffff7, 0x2, 0x10000}, {0x4, 0x0, 0x4, 0x200, 0x1, 0x9}, {0x1, 0x81, 0xf, 0x400, 0x7, 0x5}, {0x2, 0x6, 0x1ff, 0x5, 0xd, 0x3}, {0x2, 0xc, 0x6, 0x2, 0x101, 0x6}, {0x5, 0x1, 0xc, 0x9, 0x1, 0x5}, {0x5, 0xfffffffb, 0x2, 0x5, 0x8, 0x2}, {0x101, 0x7ff, 0x99, 0x4, 0xb, 0x1}, {0x6, 0x5, 0x40, 0x6, 0x5a9a, 0xb8}], [{0x4}, {0x2, 0x1}, {0x1}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x6}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4b9db97940eef4d0}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x3}, {}, {0x3, 0x2}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x7e208a551b683bb0}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3}, {0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x4}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x120, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3594b8bbe8d5e0b3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xb5356669656331f8}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0xffffd3d5, 0x8, 0x5, 0x4e9b}, 0x6, 0x2, [{0x4, 0x7, 0x8, 0x80000000, 0x2, 0x8}, {0x0, 0x56cf, 0x7fff, 0x7ff, 0x89d, 0x9}, {0x456, 0x9, 0x6e, 0x0, 0x6, 0x7}, {0x3, 0xd, 0x7, 0x400, 0xffffffff}, {0x81, 0x7f, 0x9, 0x3, 0x8, 0x4}, {0xd, 0x7e4, 0x8001, 0x8, 0x401}]}, [{0x5, 0x3, 0x0, 0xfff, 0x3ff, 0x1}, {0x5, 0x4, 0x9, 0xe, 0x7f}, {0x1, 0x9a, 0x1, 0xffffff4d, 0xfffffff8, 0x6}, {0x4, 0x7, 0x0, 0x0, 0x4, 0x7}, {0x0, 0x1, 0x3, 0x80000001, 0xd, 0x100}, {0x7fff, 0xee, 0x81, 0x4, 0xc8, 0xfffffffb}, {0x1, 0xffffffff, 0xc, 0x7, 0x0, 0x4}, {0x5, 0x2a, 0xf, 0x2, 0xc, 0x6}, {0x2, 0x6ad, 0x0, 0x5, 0x3, 0x6}, {0x6, 0x10000, 0x7, 0x2, 0x7fffffff, 0x5b2}, {0x8001, 0x5, 0x8000, 0x3bae, 0x5, 0x2}, {0x0, 0x8, 0x80000000, 0x1, 0x1, 0x2}, {0x60, 0xbfdf, 0x6ab, 0x0, 0x0, 0x8dc}, {0x9, 0xffffffff, 0xc000, 0x0, 0x7, 0x5}, {0xffffffff, 0x2, 0x7, 0x80000000, 0x5c, 0x9}, {0x3, 0x7, 0xfffff674, 0xb, 0x8000, 0x3766}, {0x6, 0x9, 0x3ff, 0x1, 0x10001, 0x8}, {0xba, 0x4800000, 0xcdf, 0x9, 0x832a, 0x401}, {0xffffffff, 0x9, 0x9, 0xb, 0x9, 0x10}, {0x800, 0xd6, 0x2, 0x0, 0x3ff, 0x1000}, {0x0, 0x6be2, 0x1d, 0x401, 0x4, 0x5}, {0x2, 0x7, 0xe, 0x3, 0x8000, 0x3}, {0x8, 0x9, 0x80000001, 0x1, 0x1000, 0xfffffffc}, {0x2, 0x0, 0x401, 0x3, 0x7, 0x7ff}, {0x0, 0x4, 0x2, 0x5, 0x5, 0x7}, {0x1cd1, 0x400, 0xffffff7f, 0x1, 0x0, 0x7}, {0x8, 0x4, 0x42, 0x5, 0x77b, 0x5}, {0x5, 0x1000, 0x7, 0x6, 0x22e, 0x7}, {0xfffffffa, 0xe2ee, 0x3d5d, 0x709, 0x8, 0xfe98}, {0x10051325, 0x6, 0x8, 0x0, 0x0, 0x800}, {0x6, 0x3, 0x2, 0x400, 0xe1b, 0x1}, {0x8, 0x6, 0x101, 0x4, 0x1, 0x7}, {0xfffff001, 0xc2, 0xf25d, 0xee, 0x3, 0x1}, {0x2, 0x3, 0x1, 0x1ff, 0x5, 0x3}, {0x7b00, 0x0, 0xffffffff, 0xa1, 0x0, 0x6fb6}, {0x1, 0x7f, 0x1, 0x7f6, 0x56, 0x1}, {0x9, 0x9, 0x1, 0x7, 0x8, 0x6}, {0x1, 0xfffffffd, 0x6, 0x8, 0xe8, 0x2}, {0x5, 0x3e2, 0x7, 0xffff8000, 0x7, 0x7fff}, {0x1, 0x6, 0x7, 0x1, 0x9, 0x2}, {0x80, 0x4, 0x0, 0xffffffff, 0x10001, 0x81}, {0x1, 0x40, 0x5, 0x3e6, 0x1, 0x4}, {0x3, 0x0, 0x800, 0x8, 0x4, 0x60f}, {0x0, 0x3, 0x26f, 0x4, 0x0, 0x9}, {0x6, 0xfffffff8, 0x80000001, 0x8, 0x4, 0xf97}, {0x800000, 0xfffffffc, 0xee51, 0x3828d2d7, 0x2, 0x4f4}, {0x0, 0x5, 0x2, 0x5, 0xe, 0x9}, {0x6, 0x7, 0xa9, 0xe20, 0x400, 0x8}, {0x1, 0x3, 0xa, 0x4047c6b7, 0xfffff0c4, 0xd89}, {0x9, 0x0, 0xf, 0x80000001, 0x8001, 0xa}, {0x7, 0x3, 0x7c, 0xfffffff3, 0x4, 0x7}, {0xe, 0x8, 0xfffffffd, 0x0, 0xfffffffb, 0x5}, {0x7fff, 0xa00, 0x3, 0x3ab3efa8, 0x8, 0x961}, {0x4, 0x6, 0x7, 0x7fff, 0x0, 0x9}, {0x7, 0x78c, 0x101, 0x90, 0x0, 0x80}, {0x5, 0x9, 0x6, 0x8, 0xff, 0x6a14}, {0xfffffffd, 0x4, 0x12, 0x1, 0x8, 0xfffff6ba}, {0x0, 0x9, 0x3, 0xca, 0x5, 0x1}, {0xffffff80, 0x2, 0x158, 0x0, 0x10000, 0x10001}, {0x9, 0x9, 0xbbac, 0x0, 0xefa5, 0xc}, {0x80000000, 0x6, 0xa311, 0xcbf, 0x200, 0xffffffff}, {0x9, 0x6, 0x200, 0xb178, 0x4, 0x1}, {0x52e, 0x75, 0x800, 0x4, 0x400, 0x2}, {0x39e57860, 0x5, 0xffffffff, 0x9, 0x80000001}, {0xffff7fff, 0xc5, 0xfffffff7, 0x0, 0xfffffffc, 0xee08}, {0xfffffff3, 0x1, 0x5, 0xb, 0x3}, {0x8, 0x80000001, 0xfffffff4, 0xe4d, 0xc, 0x7}, {0x837, 0x49, 0x5, 0xffffffda, 0x2, 0x9}, {0x7ee, 0x4000000, 0x401, 0x100, 0x4, 0x24}, {0x43, 0x4, 0x8, 0x200, 0x65b0, 0x9}, {0x6, 0x3, 0x3, 0x1, 0x9, 0x8001}, {0xa, 0x4, 0x3, 0x7, 0x80000001, 0x9}, {0x7, 0x472cae8, 0x0, 0x7, 0x0, 0x8c}, {0x41, 0x2, 0x4, 0x3, 0x10000000, 0xff}, {0x80000000, 0x8, 0x7, 0x5, 0xfffff940, 0x8}, {0x7, 0xebca, 0xa, 0x788, 0x1, 0xd}, {0x1c00000, 0x0, 0x0, 0x1, 0xff}, {0x495, 0x6, 0x5, 0x9, 0x8, 0x4}, {0xfffffffd, 0x80000000, 0x2, 0x9254, 0x9, 0x7fffffff}, {0x45055154, 0x6, 0x3, 0x8, 0x9, 0x3}, {0x0, 0x45, 0xc, 0x40, 0x0, 0x4}, {0xfffffff8, 0x5, 0x9, 0x8, 0x0, 0x8}, {0x1000000, 0x3, 0x200, 0x7, 0x3, 0x4}, {0x5, 0x6, 0xc, 0x1, 0x2, 0x1}, {0x0, 0x6, 0x9, 0x6, 0xff, 0xa}, {0x3, 0x6, 0x9, 0xfffffff9, 0x3, 0x6}, {0x7, 0xb41, 0x0, 0x8, 0x6, 0x9}, {0x3, 0x800, 0x61, 0x400, 0x2, 0x1}, {0x3ff, 0x800, 0x6, 0x1, 0xc0, 0x2}, {0x7, 0x6, 0x7, 0x101, 0xa9, 0x1}, {0x5, 0x0, 0x224, 0x5, 0x1, 0x7f1}, {0x7f, 0x10001, 0xfff, 0x0, 0x0, 0x5}, {0xd, 0x7, 0x4, 0xab28, 0x2b, 0x2525}, {0x1, 0x4, 0xfffffffc, 0x8, 0x4}, {0x5, 0x4, 0xffffff01, 0x1, 0x7, 0x8}, {0x3, 0xfffffff9, 0x1, 0xfff, 0x0, 0x8}, {0x1, 0x2, 0xb, 0x8, 0x5, 0xff}, {0x7, 0x100, 0x9, 0x7, 0xc, 0x562}, {0x112b, 0x7, 0x0, 0x2, 0x6996, 0xd2f9}, {0x8, 0x9, 0x1, 0x7, 0xfffffffc, 0x7}, {0x5a, 0x30, 0x1fb, 0x9, 0x1, 0x31}, {0x8, 0x0, 0x8, 0x8, 0x64b9, 0x1ff}, {0x18, 0x5, 0x178, 0x3, 0x10001, 0xfffffbff}, {0x40, 0x1, 0xf6b7, 0x3a7, 0x0, 0x5}, {0x0, 0x8, 0x5, 0x80000000, 0x10, 0x6}, {0x6ab, 0x5, 0x10001, 0x8, 0x80000001, 0xfffffffc}, {0x7, 0x6e, 0x101, 0x80000000, 0x4, 0x2}, {0x7, 0x9, 0x9, 0x5, 0x4, 0x4}, {0x3, 0x10, 0xb, 0x0, 0xffffffff, 0x5}, {0x138b, 0x7f, 0x703, 0x2, 0x5, 0x3be}, {0xfffffffd, 0x6, 0x7, 0x7, 0x0, 0xed94}, {0x5, 0x3, 0x8, 0x10, 0x8, 0x8}, {0x10, 0x3, 0xa, 0x5, 0x2}, {0x101, 0x9, 0x6, 0x0, 0x203f, 0x6}, {0x9, 0x8, 0x0, 0x4, 0x8, 0x3}, {0x6, 0x5, 0x5, 0x3, 0xdf2, 0x3}, {0x8, 0x0, 0x8, 0xffffffff, 0xaf, 0x2c}, {0x1, 0x14000, 0xff, 0x1, 0x0, 0xff}, {0x0, 0x7, 0x2, 0x7, 0x1, 0x40a799e9}, {0xfffffffc, 0x8000, 0x81, 0x4, 0x3, 0x5}, {0x83, 0x2, 0x8e15, 0xfffffff8, 0x200, 0xed}, {0x0, 0xf859, 0x79e, 0x8, 0x9, 0x1}, {0xf, 0x6, 0x6, 0x1000, 0x7, 0x5}, {0x2, 0x4, 0x8, 0x7a, 0x9, 0x1ca9}, {0x2, 0x5, 0x80, 0x9, 0x80000001, 0x2}, {0x4ca2, 0x6, 0xfffff000, 0x0, 0xa59, 0x7}, {0x4483, 0x1ff, 0xb, 0x5, 0x1, 0x101}, {0x4, 0x80, 0xbfb7, 0x7, 0x8001, 0x8b}], [{0x1, 0x1}, {0x1}, {0x5}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x3}, {}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x4}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x1}, {0x3}, {}, {0x4}, {}, {0x1}, {0x5}, {0xddfef99e998b38c5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x51, 0x6, "66857e0e1f9e5c07b4f960cb1784dbddba3321266538b33d416f7243bc9092c306f75c94d3a5055bd93eada092b3dd90f6e49d53d3627767bc628dfc9d5167e7e65da75bc8db79b8d9ee32b6b7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1fd8}}, 0x0) 7.987903296s ago: executing program 4 (id=4349): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x187) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$dsp(r4, &(0x7f0000000100)="e19f1f75b60e942834c66d73ae1b38fc18c09de4a45e106d64b7cdef483025290173f3be879eb7d4ae6b627213bb312d2f0bf11bf2fe4be0a00a3a5baff28a4ed2e218e099a40a549ccb17999a652005a113df4ae537701ff016a8b8d05918f811aeb7de2698b79132abb26e571d04668f6b9ea2c6d771a64ecd9b22938e363517f7306389bcb9fa3d8a8b066b662f3a243c69b414208a29d556ee0959ea8051d3db607e4135c72b747c9f62795403c346331300001000", 0xffffffab) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r4, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x8085}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000100)) ioctl$TIOCSERGETLSR(r2, 0x5459, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x0, 0x3, 0x1000, 0x0, 0x401, 0x7fff, "7ff49580e1596890a61f8bba2775a2d5", 0xfe, 0x9, 0x7, 0x9, 0x5, 0x3, 0x3}) 3.211249987s ago: executing program 2 (id=4409): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 3.210634417s ago: executing program 2 (id=4410): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="9771"}) 3.110845627s ago: executing program 2 (id=4411): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x40000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r4 = socket$inet(0x2, 0x6, 0xa17) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000002e00000050b23b11f41430fd6811371449c8b5efa2a7177f234dee33447ac8b264c7be24a94b3be9c783838a34a188ed6fda"], &(0x7f00000002c0)=0x52) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x2, 0x9, 0xfffe}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa720}) ioctl(r5, 0x8b32, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r7, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x1}, {0x5, 0x3}, {0x7a, 0x2}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x8, 0x5}, {0xe8, 0x6}, {0x3, 0x4}, {0x8, 0x5}, {0x9, 0x2}, {0x6, 0x2}, {0x4, 0x6}], "7ecd4163b8fccf09"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) munmap(&(0x7f0000127000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 1.728808838s ago: executing program 8 (id=4421): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.72859892s ago: executing program 8 (id=4422): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$CDROM_DISC_STATUS(r1, 0x5327) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000300)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xa3w\x9fk\xae\xfeF\xd1\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\p\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\x00E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97v\x9c\xbd%fN1\xd4[\xa0\x0f\xdd.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5U|+K*\x9f\x01u\xb0\xe4\x98_o\xb5\xdcN\xe3C\x15\x1f\xa91g\x89v\\^\x107N\'r\xa4\xb1tVv\bej\xf8\xa0\xe0\a\xd1\xfb\xa6\x80s\xd5L\x87f\"\xaf\xd2\xe1qc\xde\x03\xd1\xf6\x12\x9c\x11\xe58\xa6&\xa1I\x93\xfa\xed\xe0w\x9eM\xa3\xf2\xe0\xaa\x9d\xbf\xa9\xda|\xaa\xc3\x86$\x835\xca\x88', 0xfeffffff00000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x2d) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)='/dev/ptp1\x00', &(0x7f0000000580)='rpfilter\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x160, 0xc8, 0x8, 0x160, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0xf8, 0x160, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x12}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0xc, 0x0, 0x401, 'snmp\x00', 'syz1\x00', {0x100000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f00000004c0)) 1.650851604s ago: executing program 8 (id=4423): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2200, 0x0) fspick(r2, &(0x7f0000000200)='./file0\x00', 0x1) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.644652866s ago: executing program 8 (id=4425): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0xffffffd9, 0x103, 0x0, 0x7, 0x3, "03f03f0900000000000000000007000000fbff", 0x2, 0x1ff}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans9fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(0x4) 1.100106363s ago: executing program 6 (id=4429): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x1f}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xfffffffc}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="580000001500bfd427323b472547a45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffff1900e7ee000000deff0000000200000000", 0x58}], 0x1) 1.099828045s ago: executing program 6 (id=4430): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r2}}}, 0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xce024d, 0x0, 0x2}, 0x9c) 760.822643ms ago: executing program 8 (id=4431): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r3 = dup2(r2, r2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) connect$phonet_pipe(r4, &(0x7f0000000200)={0x23, 0x8, 0x16, 0xdc}, 0x10) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0xffffffff00000000) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000500)={0x9, 0x0, [{0xb82, 0x0, 0x7f}, {0x338, 0x0, 0x1}, {0x247, 0x0, 0x5}, {0xa01, 0x0, 0x5}, {0x922, 0x0, 0x7f}, {0x9db, 0x0, 0x1}, {0x32fef9da5690c57a, 0x0, 0x1}, {0x40000082, 0x0, 0x1}, {0x9cd, 0x0, 0x7b4}]}) (async) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x4, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1c001}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000070000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'geneve0\x00', @multicast}) 660.154149ms ago: executing program 8 (id=4432): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x11}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xafea}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38a4f97e", @ANYRES16=r2, @ANYBLOB="100027bd7000fbdbdf25160000000a001a0008021100000100000a001a0008021100000100000a001a000802110000000000"], 0x38}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newlink={0x380, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x360, 0x16, 0x0, 0x1, [{0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x8000000000000001}}, @IFLA_VF_MAC={0x28, 0x1, {0x9690, @broadcast}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xd59, 0xf49}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x401, 0x7, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0xa}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6c, 0x80000001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x7f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0xef}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x796b, 0x10}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xa1, 0x683, 0x3, 0x8100}}, {0x14, 0x1, {0x3, 0xb5a, 0x9, 0x88a8}}, {0x14, 0x1, {0x0, 0xde3, 0x40, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xd2, 0xb}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfffffff7, 0xc91, 0x80000001}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x306, 0x7, 0x88a8}}, {0x14, 0x1, {0x2, 0xea6, 0x9, 0x8100}}, {0x14, 0x1, {0x4, 0x29a, 0x9, 0x8100}}, {0x14, 0x1, {0xa0, 0xdfb, 0x4, 0x8100}}, {0x14, 0x1, {0x8001, 0x739, 0x1, 0x88a8}}, {0x14, 0x1, {0x4c7, 0xba5, 0xea, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x4fb, 0x6, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x6ab, 0x5b, 0x8100}}]}]}, {0xf0, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x10000}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0xb5d, 0x0, 0x8100}}, {0x14, 0x1, {0x5, 0x2a4, 0x42, 0x88a8}}, {0x14, 0x1, {0x40, 0x400, 0xc02a, 0x88a8}}, {0x14, 0x1, {0x6, 0xd65, 0x7, 0x88a8}}, {0x14, 0x1, {0x9, 0x97a, 0x3, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0xf8c, 0x100, 0x88a8}}, {0x14, 0x1, {0x2, 0x549, 0x0, 0x88a8}}, {0x14, 0x1, {0x5, 0xb8, 0xfffff001, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x45ed}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x70000000, 0x1f}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa73, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x7, 0x4}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xff, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xb07, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4ea, 0xffffffffffffb51b}}]}]}]}, 0x380}, 0x1, 0x4c00000000000000, 0x0, 0x80}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b00060065"], 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) connect$ax25(r10, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r9, 0xb97534d5fe9704cf, 0x70bd29, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r14 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r14, &(0x7f0000000080)={0x1d, r13, 0x0, {}, 0xfd}, 0x18) sendmsg$can_j1939(r14, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x0, 0x198}, &(0x7f00000002c0), &(0x7f0000000100)) 200.772185ms ago: executing program 6 (id=4433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2010003200000400140003"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) io_setup(0xff, &(0x7f0000000380)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='fdinfo/3\x00') preadv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x3) io_submit(r2, 0x0, &(0x7f00000002c0)) 80.12763ms ago: executing program 2 (id=4434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x22, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "07000000000000001b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 78.154348ms ago: executing program 6 (id=4435): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0xfffffe7e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x7, 0x1c, 0x5, 0xfffffff7, 0x80000002, 0x800f6, 0x8000004]}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000001040)) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) 77.503078ms ago: executing program 6 (id=4436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002"], 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) (async, rerun: 64) r3 = dup3(r2, r0, 0x0) (rerun: 64) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000300)={{0x7, 0xa6}, {0xe, 0x4760}, 0xd143}) (async, rerun: 32) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000340)=0x402, 0x4) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1, 0x10003}) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) (async) readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f00000007c0)=""/12, 0xc}, {&(0x7f0000000800)=""/110, 0x6e}, {&(0x7f0000000880)=""/191, 0xbf}, {&(0x7f0000000940)=""/22, 0x16}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/176, 0xb0}, {&(0x7f0000000b00)=""/132, 0x84}], 0x9) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000180)={{0x80, 0xfe}, 'port0\x00', 0x0, 0x49, 0x0, 0x0, 0xa6ed}) (async) syz_open_dev$usbfs(&(0x7f00000005c0), 0x6, 0x200180) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (rerun: 32) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000c80)={'mangle\x00', 0x32, "1c26ab2f9baf39e62b291b28277c0a63c4267463cf98714c2bef5a7ae243a22bf6027ef425c08c3e91a603699087a39f19b6"}, &(0x7f0000000d00)=0x56) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 69.332156ms ago: executing program 2 (id=4437): recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008060500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 1.130368ms ago: executing program 6 (id=4438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe4c) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000000c0)={{0x80, 0xfc}, 'port1\x00', 0xe08836a972529309, 0x20c04, 0x2, 0x0, 0x6, 0x0, 0xb, 0x0, 0x1, 0xfc}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x5}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/igmp6\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 0s ago: executing program 2 (id=4439): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2}}, 0x2e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r4, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0xbff}, @ib={0x1b, 0xd9, 0xfff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$eventfd(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x30, 0x1904}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) writev(r9, &(0x7f0000001480)=[{&(0x7f0000000600)="0c37f8246f3e4c0f268894edcd5b1a9964c8dae6b413258a16aa77258ad9a416bb6c2ed80e4c948037035c05a300d188b7f720f619c3aed8885056565487fbfcf347f9759031056a5c6f6510bba78a970af194a3bfff9ee162bfd08f9d87b199bad71d4b704bbe05f9458f7edb6ea6df3da93d4439b26d0a2fd23b7969b4ccf926f6c02246b837960e2e6ffd0b628381b7", 0x91}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r13 = syz_open_dev$rtc(&(0x7f0000000140), 0x5, 0x80) poll(&(0x7f0000000100)=[{r0, 0x1020}, {r10, 0x185}, {r11, 0x1}, {r12, 0x2002}, {r13, 0x43a0}, {0xffffffffffffffff, 0x1001}], 0x6, 0x5) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) kernel console output (not intermixed with test programs): : kernel(1.1), user(40960.1), cmd(0xc0189374) [ 290.063284][T18091] autofs4:pid:18091:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 290.099262][T18094] No memory to map [ 290.218810][T18112] input: syz1 as /devices/virtual/input/input33 [ 290.311535][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3557'. [ 290.311593][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3557'. [ 290.466161][ T8014] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 290.628123][ T8014] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.631437][ T8014] usb 9-1: config 0 interface 0 has no altsetting 0 [ 290.635298][ T8014] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.638632][ T8014] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.641672][ T8014] usb 9-1: Product: syz [ 290.643126][ T8014] usb 9-1: Manufacturer: syz [ 290.644760][ T8014] usb 9-1: SerialNumber: syz [ 290.647950][ T8014] usb 9-1: config 0 descriptor?? [ 290.652216][ T8014] usb 9-1: selecting invalid altsetting 0 [ 290.673844][T18124] binder: 18123:18124 ioctl c0306201 200000000080 returned -14 [ 290.722587][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.725857][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.731183][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.735427][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.741067][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.745440][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.750862][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.755002][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.759441][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.763521][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.768672][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.772502][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.775459][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.778927][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.781901][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.784802][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.790553][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.795089][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.799354][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.802499][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.805687][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.809688][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.812750][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.815930][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.819632][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.822914][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.825975][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.830523][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.833859][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.837940][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.841221][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.844402][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.850068][T18128] overlayfs: workdir and upperdir must reside under the same mount [ 290.850332][T18132] bridge_slave_0: left allmulticast mode [ 290.854298][ T5998] usb 9-1: USB disconnect, device number 24 [ 290.854885][T18132] bridge_slave_0: left promiscuous mode [ 290.859277][T18132] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.864296][T18132] bridge_slave_1: left allmulticast mode [ 290.867923][T18132] bridge_slave_1: left promiscuous mode [ 290.870273][T18132] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.876987][T18132] bond0: (slave bond_slave_0): Releasing backup interface [ 290.881411][T18132] bond0: (slave bond_slave_1): Releasing backup interface [ 290.888237][T18132] team0: Port device team_slave_0 removed [ 290.892876][T18132] team0: Port device team_slave_1 removed [ 290.896044][T18132] bond0: (slave batadv_slave_0): Releasing backup interface [ 290.900531][T18132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.902906][T18132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.907794][T18132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.927621][T18133] vlan0: entered promiscuous mode [ 290.932846][T18133] team0: Port device vlan0 added [ 291.036640][ T40] audit: type=1400 audit(2000524520.135:43909): avc: denied { append } for pid=18136 comm="syz.7.3564" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 291.037253][T18137] loop4: detected capacity change from 0 to 7 [ 291.049718][T18137] Dev loop4: unable to read RDB block 7 [ 291.051565][T18137] loop4: AHDI p1 p2 p3 [ 291.052916][T18137] loop4: partition table partially beyond EOD, truncated [ 291.055487][T18137] loop4: p1 start 1601398130 is beyond EOD, truncated [ 291.058044][T18137] loop4: p2 start 1702059890 is beyond EOD, truncated [ 291.134562][ T5340] Dev loop4: unable to read RDB block 7 [ 291.136660][ T5340] loop4: AHDI p1 p2 p3 [ 291.138315][ T5340] loop4: partition table partially beyond EOD, truncated [ 291.140840][ T5340] loop4: p1 start 1601398130 is beyond EOD, truncated [ 291.143176][ T5340] loop4: p2 start 1702059890 is beyond EOD, truncated [ 291.176675][T18141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.188777][ T40] audit: type=1400 audit(2000524520.285:43910): avc: denied { accept } for pid=18145 comm="syz.7.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 291.314407][T18158] rdma_op ffff8880391821f0 conn xmit_rdma 0000000000000000 [ 291.342546][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3572'. [ 291.350140][ T5938] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 291.458592][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.463002][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.465377][T18165] veth1: entered promiscuous mode [ 291.466470][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.468491][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3575'. [ 291.470812][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.478845][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.682799][ T7822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.689168][ T7822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.774592][T18177] binder: 18175:18177 ioctl c0306201 200000000080 returned -14 [ 291.813096][T18181] tmpfs: Bad value for 'huge' [ 291.832534][ T7822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.837557][ T7822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.874490][T18162] chnl_net:caif_netlink_parms(): no params data found [ 291.987496][ T7822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.991746][ T7822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.001348][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.004119][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.007017][T18162] bridge_slave_0: entered allmulticast mode [ 292.010627][T18162] bridge_slave_0: entered promiscuous mode [ 292.014109][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.017692][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.020762][T18162] bridge_slave_1: entered allmulticast mode [ 292.024708][T18162] bridge_slave_1: entered promiscuous mode [ 292.073269][ T7822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.077642][ T7822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.114675][T18162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.119898][T18162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.154161][T18162] team0: Port device team_slave_0 added [ 292.157725][T18162] team0: Port device team_slave_1 added [ 292.194230][T18162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.197635][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.206346][T18162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.211490][T18162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.213860][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.222903][T18162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.265070][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3584'. [ 292.305491][T18198] 8021q: adding VLAN 0 to HW filter on device bond10 [ 292.329703][T18162] hsr_slave_0: entered promiscuous mode [ 292.333237][T18162] hsr_slave_1: entered promiscuous mode [ 292.337439][T18198] dummy0: entered allmulticast mode [ 292.339602][T18198] netlink: 'syz.6.3584': attribute type 10 has an invalid length. [ 292.342895][T18198] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3584'. [ 292.485363][ T7822] team0: Port device sit0 removed [ 292.488379][T18212] binder: 18211:18212 ioctl c0306201 200000000080 returned -14 [ 292.525398][T18214] program syz.7.3589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.547178][T18214] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 292.638253][ T40] audit: type=1400 audit(2000524521.735:43911): avc: denied { unlink } for pid=15365 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=71827939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 292.652251][ T40] audit: type=1400 audit(2000524521.735:43912): avc: denied { rename } for pid=15365 comm="syz-executor" name="#67" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.659944][ T40] audit: type=1400 audit(2000524521.755:43913): avc: denied { unlink } for pid=15365 comm="syz-executor" name="file5" dev="overlay" ino=71827917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 292.678122][ T40] audit: type=1400 audit(2000524521.775:43914): avc: denied { remove_name } for pid=15365 comm="syz-executor" name="file0" dev="overlay" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.687996][ T40] audit: type=1400 audit(2000524521.775:43915): avc: denied { create } for pid=15365 comm="syz-executor" name="#71" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.931379][ T7822] bond0 (unregistering): Released all slaves [ 293.020790][ T7822] bond1 (unregistering): (slave batadv1): Releasing active interface [ 293.024558][ T7822] bond1 (unregistering): Released all slaves [ 293.113592][ T7822] bond2 (unregistering): (slave veth11): Releasing active interface [ 293.119574][ T7822] bond2 (unregistering): Released all slaves [ 293.130743][ T7822] bond3 (unregistering): Released all slaves [ 293.228012][ T7822] bond4 (unregistering): (slave veth13): Releasing active interface [ 293.232189][ T7822] bond4 (unregistering): (slave batadv2): Releasing active interface [ 293.235963][ T7822] bond4 (unregistering): Released all slaves [ 293.242352][T18198] dummy0: entered promiscuous mode [ 293.243816][T18198] dummy0: left allmulticast mode [ 293.273422][T18223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.380922][ T7822] tipc: Disabling bearer [ 293.383293][ T7822] tipc: Left network mode [ 293.426614][ T7822] IPVS: stopping backup sync thread 16858 ... [ 293.521074][T18242] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3597'. [ 293.586171][ T5938] Bluetooth: hci0: command tx timeout [ 293.947408][ T7822] hsr_slave_0: left promiscuous mode [ 293.950127][ T7822] hsr_slave_1: left promiscuous mode [ 293.978339][ T7822] veth1_macvtap: left promiscuous mode [ 293.980142][ T7822] veth0_macvtap: left allmulticast mode [ 293.981838][ T7822] veth0_macvtap: left promiscuous mode [ 294.065855][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.079480][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.082745][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.085926][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.089111][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.674867][ T5938] Bluetooth: hci0: command tx timeout [ 295.676188][T18303] delete_channel: no stack [ 295.698982][T18308] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3611'. [ 295.702667][T18308] IPv6: Can't replace route, no match found [ 295.863350][T18162] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.870425][T18162] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.877639][T18162] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.884547][T18162] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.905546][T18293] chnl_net:caif_netlink_parms(): no params data found [ 296.068761][T18293] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.072161][T18293] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.075241][T18293] bridge_slave_0: entered allmulticast mode [ 296.082144][T18293] bridge_slave_0: entered promiscuous mode [ 296.090096][T18293] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.093138][T18293] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.096317][T18293] bridge_slave_1: entered allmulticast mode [ 296.100496][T18293] bridge_slave_1: entered promiscuous mode [ 296.160989][T18293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.167892][T18293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.210104][T18350] netlink: 'syz.2.3621': attribute type 21 has an invalid length. [ 296.224301][T18293] team0: Port device team_slave_0 added [ 296.226356][ T5938] Bluetooth: hci2: command tx timeout [ 296.232374][T18293] team0: Port device team_slave_1 added [ 296.236375][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 296.236385][ T40] audit: type=1400 audit(2000524525.335:43928): avc: denied { setopt } for pid=18349 comm="syz.2.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.282073][T18293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.284312][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.292509][T18293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.304810][T18293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.308287][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.318147][T18293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.332530][ T7822] IPVS: stop unused estimator thread 0... [ 296.366450][T18354] [U]  [ 296.393654][T18293] hsr_slave_0: entered promiscuous mode [ 296.397060][T18293] hsr_slave_1: entered promiscuous mode [ 296.399534][T18293] debugfs: 'hsr0' already exists in 'hsr' [ 296.401771][T18293] Cannot create hsr debugfs directory [ 296.406925][T18370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=18370 comm=syz.6.3628 [ 296.407672][T18162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.467245][ T7822] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.499894][T18373] netlink: 'syz.6.3629': attribute type 2 has an invalid length. [ 296.502062][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3629'. [ 296.527150][T18373] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3629'. [ 296.562052][ T7822] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.573009][T18162] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.636833][ T7822] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.663043][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.665678][ T7821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.679610][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.682263][ T7821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.730183][ T7822] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.759700][T18293] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 296.764614][T18293] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 296.769974][T18293] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 296.776215][T18293] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 296.867425][T18293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.175950][ T7822] bond1 (unregistering): (slave bridge2): Releasing active interface [ 297.330636][ T7822] bond0 (unregistering): Released all slaves [ 297.337764][ T7822] bond1 (unregistering): Released all slaves [ 297.344228][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3632'. [ 297.349409][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3632'. [ 297.364037][T18162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.381374][T18293] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.389030][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.391857][ T7824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.400029][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.402863][ T7824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.415456][ T7822] : left promiscuous mode [ 297.548609][T18162] veth0_vlan: entered promiscuous mode [ 297.583136][T18162] veth1_vlan: entered promiscuous mode [ 297.592163][T18293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.606564][T18162] veth0_macvtap: entered promiscuous mode [ 297.615787][T18162] veth1_macvtap: entered promiscuous mode [ 297.630990][T18162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.649275][T18162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.667352][ T7853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.670402][ T7853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.675436][ T7853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.679950][ T7853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.733547][ T7822] hsr_slave_0: left promiscuous mode [ 297.735593][ T7822] hsr_slave_1: left promiscuous mode [ 297.746411][ T5938] Bluetooth: hci0: command tx timeout [ 297.761575][ T7822] veth1_macvtap: left promiscuous mode [ 297.763292][ T7822] veth0_macvtap: left promiscuous mode [ 297.765016][ T7822] veth1_vlan: left promiscuous mode [ 297.958645][ T7822] team0 (unregistering): Port device vlan0 removed [ 298.316153][ T5938] Bluetooth: hci2: command tx timeout [ 299.265755][ T7821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.269219][ T7821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.280440][ T7827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.283011][ T7827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.296898][T18293] veth0_vlan: entered promiscuous mode [ 299.311507][ T40] audit: type=1400 audit(2000524528.405:43929): avc: denied { write } for pid=18162 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 299.329362][T18293] veth1_vlan: entered promiscuous mode [ 299.333731][ T40] audit: type=1400 audit(2000524528.405:43930): avc: denied { open } for pid=18162 comm="syz-executor" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 299.380132][T18293] veth0_macvtap: entered promiscuous mode [ 299.393666][T18293] veth1_macvtap: entered promiscuous mode [ 299.422351][T18293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.431261][T18293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.440997][ T7853] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.443919][ T7853] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.448683][ T7853] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.451591][ T7853] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.551256][ T7825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.553659][ T7825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.577977][ T7825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.580430][ T7825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.585776][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3641'. [ 299.609404][T18465] bridge3: entered promiscuous mode [ 299.676438][T18468] netlink: 'syz.2.3641': attribute type 13 has an invalid length. [ 299.679915][T18468] netlink: 'syz.2.3641': attribute type 17 has an invalid length. [ 299.765202][T18468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.831870][ T5938] Bluetooth: hci0: command tx timeout [ 299.859149][T18496] overlayfs: failed to clone upperpath [ 300.257878][T18531] netlink: 'syz.4.3655': attribute type 8 has an invalid length. [ 300.324744][T18538] overlay: ./file0 is not a directory [ 300.387482][ T5938] Bluetooth: hci2: command tx timeout [ 300.647488][T15545] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 300.796575][T15545] usb 9-1: Using ep0 maxpacket: 32 [ 300.800366][T15545] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 300.803944][T15545] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 300.808384][T15545] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 300.812542][T15545] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 300.818958][T15545] usb 9-1: config 0 interface 0 has no altsetting 0 [ 300.826308][T15545] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 300.830033][T15545] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 300.833514][T15545] usb 9-1: Product: syz [ 300.835013][T15545] usb 9-1: Manufacturer: syz [ 300.842767][T15545] usb 9-1: SerialNumber: syz [ 300.846734][T15545] usb 9-1: config 0 descriptor?? [ 300.853413][T15545] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 300.857296][T15545] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 300.872646][T18553] tipc: Started in network mode [ 300.874950][T18553] tipc: Node identity 5a1a78708433, cluster identity 4711 [ 300.881835][T18553] tipc: Enabled bearer , priority 0 [ 300.898237][T18553] tipc: Disabling bearer [ 301.035430][T18560] raw_sendmsg: syz.8.3665 forgot to set AF_INET. Fix it! [ 301.068713][T18542] netlink: 'syz.4.3661': attribute type 63 has an invalid length. [ 301.080228][ T9] usb 9-1: USB disconnect, device number 25 [ 301.085284][ T9] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 301.313204][T18571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3669'. [ 301.367988][T18574] CIFS mount error: No usable UNC path provided in device string! [ 301.367988][T18574] [ 301.371469][T18574] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.424114][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3673'. [ 301.578473][T18581] hsr_slave_1 (unregistering): left promiscuous mode [ 301.668723][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 301.683292][T18596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3678'. [ 301.693061][T18596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3678'. [ 301.702853][T18604] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3681'. [ 301.719105][ T40] audit: type=1400 audit(2000524530.805:43931): avc: denied { setattr } for pid=18603 comm="syz.4.3681" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 301.748387][T18609] overlayfs: failed to clone upperpath [ 301.749173][T18610] binder: 18607:18610 ioctl c0306201 200000000080 returned -14 [ 301.829859][T18617] overlayfs: failed to clone upperpath [ 301.891034][ T40] audit: type=1400 audit(2000524530.985:43932): avc: denied { read } for pid=18618 comm="syz.4.3687" path="socket:[84512]" dev="sockfs" ino=84512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.947725][T18635] openvswitch: netlink: Flow key attr not present in new flow. [ 301.947807][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3688'. [ 301.969097][T18638] binder: 18637:18638 ioctl c0306201 200000000080 returned -14 [ 302.012558][ T40] audit: type=1400 audit(2000524531.105:43933): avc: denied { accept } for pid=18639 comm="syz.6.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 302.053237][ T40] audit: type=1800 audit(2000524531.145:43934): pid=18646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3695" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 302.096374][ T40] audit: type=1400 audit(2000524531.185:43935): avc: denied { setopt } for pid=18648 comm="syz.6.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.132176][T18653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=18653 comm=syz.6.3698 [ 302.230465][ T40] audit: type=1326 audit(2000524531.315:43936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.4.3701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2ef8efc9 code=0x7ffc0000 [ 302.238896][ T40] audit: type=1326 audit(2000524531.315:43937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.4.3701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2ef8efc9 code=0x7ffc0000 [ 302.247309][ T40] audit: type=1326 audit(2000524531.325:43938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.4.3701" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea2ef8efc9 code=0x7ffc0000 [ 302.257014][ T40] audit: type=1326 audit(2000524531.335:43939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.4.3701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2ef8efc9 code=0x7ffc0000 [ 302.264601][ T40] audit: type=1326 audit(2000524531.335:43940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.4.3701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2ef8efc9 code=0x7ffc0000 [ 302.288150][T18664] binder: 18663:18664 ioctl c0306201 200000000080 returned -14 [ 302.304471][T18655] netlink: 'syz.8.3699': attribute type 32 has an invalid length. [ 302.307805][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3699'. [ 302.333186][T18655] bond1: option coupled_control: invalid value (115) [ 302.338615][T18655] bond1 (unregistering): Released all slaves [ 302.466161][ T5938] Bluetooth: hci2: command tx timeout [ 302.601924][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3711'. [ 302.659889][T18703] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3713'. [ 302.717002][T18697] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3712'. [ 302.893263][T18712] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3714'. [ 302.900320][T18712] 0·: renamed from hsr0 (while UP) [ 302.907723][T18712] 0·: entered allmulticast mode [ 302.909369][T18712] hsr_slave_0: entered allmulticast mode [ 302.911623][T18712] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 303.040050][T18725] No memory to map [ 303.199461][ T9] IPVS: starting estimator thread 0... [ 303.244745][T18742] syz_tun: entered allmulticast mode [ 303.250934][T18741] syz_tun: left allmulticast mode [ 303.286188][T18737] IPVS: using max 45 ests per chain, 108000 per kthread [ 303.704064][T18776] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 303.708836][T18776] bond0: (slave sit0): Error -95 calling set_mac_address [ 303.813946][T18788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18788 comm=syz.4.3740 [ 304.306098][T15545] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 304.446138][T15545] usb 9-1: device descriptor read/64, error -71 [ 304.706351][T15545] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 304.743638][T18817] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 304.836159][T15545] usb 9-1: device descriptor read/64, error -71 [ 304.926806][T18820] program syz.8.3750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.959652][T15545] usb usb9-port1: attempt power cycle [ 304.972884][T18823] netlink: 'syz.8.3751': attribute type 2 has an invalid length. [ 305.063480][T18828] netlink: 'syz.8.3753': attribute type 1 has an invalid length. [ 305.306429][T15545] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 305.326875][T15545] usb 9-1: device descriptor read/8, error -71 [ 305.422800][T18844] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 305.566376][T15545] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 305.591306][T15545] usb 9-1: device descriptor read/8, error -71 [ 305.597161][T18852] syzkaller0: entered promiscuous mode [ 305.599471][T18852] syzkaller0: entered allmulticast mode [ 305.639068][T18858] bridge_slave_0: left allmulticast mode [ 305.641592][T18858] bridge_slave_0: left promiscuous mode [ 305.644291][T18858] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.650430][T18858] bridge_slave_1: left allmulticast mode [ 305.652934][T18858] bridge_slave_1: left promiscuous mode [ 305.655565][T18858] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.662214][T18858] bond0: (slave bond_slave_0): Releasing backup interface [ 305.668263][T18858] bond0: (slave bond_slave_1): Releasing backup interface [ 305.675444][T18858] team0: Port device team_slave_0 removed [ 305.681089][T18858] team0: Port device team_slave_1 removed [ 305.684339][T18858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.688923][T18858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.707622][T18859] team0: Mode changed to "loadbalance" [ 305.707908][T15545] usb usb9-port1: unable to enumerate USB device [ 305.732212][T18858] tipc: Enabled bearer , priority 0 [ 305.815897][T18873] overlay: filesystem on ./bus is read-only [ 305.994212][T18893] netlink: 'syz.2.3772': attribute type 1 has an invalid length. [ 306.008362][T18893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.635489][T18910] binder: 18909:18910 ioctl c0306201 200000000080 returned -14 [ 306.681784][T18913] fuse: Bad value for 'rootmode' [ 306.863973][T18925] __nla_validate_parse: 6 callbacks suppressed [ 306.863984][T18925] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3784'. [ 306.925758][T18933] input: syz0 as /devices/virtual/input/input34 [ 306.954066][T18933] SELinux: policydb version 0 does not match my version range 15-35 [ 306.957317][T18933] SELinux: failed to load policy [ 306.980182][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803778d000: rx timeout, send abort [ 307.046924][T18937] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3789'. [ 307.081843][T18941] bond0: (slave bond_slave_1): Releasing backup interface [ 307.354908][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 307.354920][ T40] audit: type=1400 audit(2000524536.445:43954): avc: denied { getopt } for pid=18953 comm="syz.4.3795" lport=38107 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 307.480287][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803778c400: rx timeout, send abort [ 307.483613][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803778d000: abort rx timeout. Force session deactivation [ 307.606392][ T9] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 307.767897][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 307.770554][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.787130][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 307.789993][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 307.792478][ T9] usb 9-1: Manufacturer: syz [ 307.817497][ T9] usb 9-1: config 0 descriptor?? [ 307.886144][ T9] rc_core: IR keymap rc-hauppauge not found [ 307.888107][ T9] Registered IR keymap rc-empty [ 307.890355][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 307.892023][T18976] binder: 18975:18976 ioctl c0306201 200000000080 returned -14 [ 307.894713][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input35 [ 307.926233][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3802'. [ 307.972310][T18981] netlink: 'syz.8.3803': attribute type 1 has an invalid length. [ 307.975300][T18981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.982967][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803778c400: abort rx timeout. Force session deactivation [ 308.030793][ T40] audit: type=1400 audit(2000524537.125:43955): avc: denied { map } for pid=18953 comm="syz.4.3795" path="/dev/input/event4" dev="devtmpfs" ino=3475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.045288][ T7823] tipc: Subscription rejected, illegal request [ 308.554758][T19002] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 308.898983][ T7821] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.902167][ T7821] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.904922][ T7821] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.927242][ T7821] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.956214][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 308.964623][ T29] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 308.966971][ T29] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 308.977150][T19015] binder: 19014:19015 ioctl c0306201 200000000080 returned -14 [ 308.993708][T19017] netlink: 456 bytes leftover after parsing attributes in process `syz.6.3813'. [ 309.006180][T19017] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3813'. [ 309.020784][T19017] netlink: 'syz.6.3813': attribute type 4 has an invalid length. [ 309.037789][T19017] netlink: 'syz.6.3813': attribute type 4 has an invalid length. [ 309.548624][T19044] tmpfs: Bad value for 'mpol' [ 309.622667][ T40] audit: type=1400 audit(2000524538.715:43956): avc: denied { read } for pid=19045 comm="syz.8.3821" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 309.656115][ T40] audit: type=1400 audit(2000524538.715:43957): avc: denied { open } for pid=19045 comm="syz.8.3821" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 309.711134][ T40] audit: type=1400 audit(2000524538.805:43958): avc: denied { setattr } for pid=19049 comm="syz.6.3824" name="AF_VSOCK" dev="sockfs" ino=88455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 309.743114][ T40] audit: type=1400 audit(2000524538.835:43959): avc: denied { setattr } for pid=19050 comm="syz.8.3823" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 309.919643][T19065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3827'. [ 310.268182][ T9] usb 9-1: USB disconnect, device number 30 [ 310.361066][T19085] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3830'. [ 310.378681][ T839] hid_parser_main: 5 callbacks suppressed [ 310.378698][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.384410][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.398659][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.401155][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.403939][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.445597][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.448404][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.450732][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.453251][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.455542][ T839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.456078][T16527] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 310.496269][ T839] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.03 Device [syz1] on syz1 [ 310.591996][T19091] fido_id[19091]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.628364][T16527] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.631722][T16527] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.637792][T16527] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.642358][T16527] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.646369][T16527] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.658712][T16527] usb 13-1: config 0 descriptor?? [ 311.037203][ T29] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 311.037278][ T5938] Bluetooth: hci4: command 0x0405 tx timeout [ 311.039140][ T29] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 311.068344][T16527] usbhid 13-1:0.0: can't add hid device: -71 [ 311.070392][T16527] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 311.074152][T16527] usb 13-1: USB disconnect, device number 2 [ 311.416130][T16527] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 311.532806][T19125] binder: 19123:19125 ioctl c0306201 200000000080 returned -14 [ 311.577471][T16527] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.580985][T16527] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.584375][T16527] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.589287][T16527] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.592137][T16527] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.601379][T16527] usb 13-1: config 0 descriptor?? [ 311.603618][T19132] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 311.608575][T19132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3846'. [ 311.794538][T19149] binder: 19148:19149 ioctl c0306201 200000000080 returned -14 [ 311.811216][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3831'. [ 311.863830][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 311.878800][T16527] usbhid 13-1:0.0: can't add hid device: -71 [ 311.885055][T16527] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 311.896528][T16527] usb 13-1: USB disconnect, device number 3 [ 312.034920][T19171] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3856'. [ 312.638372][T19218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=19218 comm=syz.2.3863 [ 312.720578][T19220] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3864'. [ 312.794213][T19227] binder: 19226:19227 ioctl c0306201 200000000080 returned -14 [ 312.865302][ T40] audit: type=1400 audit(2000524541.955:43960): avc: denied { read } for pid=19233 comm="syz.2.3868" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 312.881054][ T40] audit: type=1400 audit(2000524541.955:43961): avc: denied { open } for pid=19233 comm="syz.2.3868" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 312.931040][T19235] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 312.935722][T19235] input: syz1 as /devices/virtual/input/input36 [ 312.953314][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3870'. [ 312.957809][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3870'. [ 312.963099][ T40] audit: type=1400 audit(2000524542.055:43962): avc: denied { bind } for pid=19238 comm="syz.4.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 312.971449][ T40] audit: type=1400 audit(2000524542.055:43963): avc: denied { lock } for pid=19238 comm="syz.4.3870" path="socket:[89290]" dev="sockfs" ino=89290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 313.074298][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 313.106134][ T29] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 313.109050][ T29] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 313.116190][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 313.236905][T19256] binder: 19255:19256 ioctl c0306201 200000000080 returned -14 [ 313.314140][T19262] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 313.316733][T19262] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 313.320375][T19262] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 313.322750][T19262] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 313.597940][T15545] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 313.756147][T15545] usb 13-1: Using ep0 maxpacket: 32 [ 313.760549][T15545] usb 13-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.764072][T15545] usb 13-1: config 0 has no interface number 0 [ 313.769709][T15545] usb 13-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.773623][T15545] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.777433][T15545] usb 13-1: Product: syz [ 313.779239][T15545] usb 13-1: Manufacturer: syz [ 313.781192][T15545] usb 13-1: SerialNumber: syz [ 313.785982][T15545] usb 13-1: config 0 descriptor?? [ 313.790039][T15545] smsc95xx v2.0.0 [ 314.105187][T19270] bond1: ARP target 4.0.0.0 is already present [ 314.108291][T19270] bond1: option arp_ip_target: invalid value (4) [ 314.113584][T19270] bond1 (unregistering): Released all slaves [ 314.142415][T19271] bond1: ARP target 4.0.0.0 is already present [ 314.144990][T19271] bond1: option arp_ip_target: invalid value (4) [ 314.151002][T19271] bond1 (unregistering): Released all slaves [ 314.278363][T19280] binder: 19279:19280 ioctl c0306201 200000000080 returned -14 [ 314.343005][ T40] audit: type=1400 audit(2000524543.435:43964): avc: denied { attach_queue } for pid=19263 comm="syz.8.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 314.343131][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3886'. [ 314.352932][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 314.360262][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3886'. [ 314.361227][ T7821] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.363542][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 314.366397][ T7821] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.369951][ T40] audit: type=1400 audit(2000524543.465:43965): avc: denied { write } for pid=19286 comm="syz.2.3882" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 314.370646][T19287] random: crng reseeded on system resumption [ 314.371930][ T7821] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.371951][ T7821] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.427230][T19289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 314.430097][T19289] overlayfs: missing 'lowerdir' [ 314.479556][ T40] audit: type=1400 audit(2000524543.575:43966): avc: denied { shutdown } for pid=19286 comm="syz.2.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.487669][ T40] audit: type=1400 audit(2000524543.575:43967): avc: denied { create } for pid=19286 comm="syz.2.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 314.491534][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 314.495958][ T40] audit: type=1400 audit(2000524543.575:43968): avc: denied { connect } for pid=19286 comm="syz.2.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 314.499570][T19293] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 315.196099][ T29] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 315.196155][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 315.198117][ T29] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 315.273808][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.279729][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.283067][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.289987][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.296267][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.302835][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.305868][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.309060][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.312242][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.314903][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.446388][T19152] chnl_net:caif_netlink_parms(): no params data found [ 315.576940][T19152] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.579221][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.581626][T19152] bridge_slave_0: entered allmulticast mode [ 315.584240][T19152] bridge_slave_0: entered promiscuous mode [ 315.587994][T19152] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.590516][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.592799][T19152] bridge_slave_1: entered allmulticast mode [ 315.595395][T19152] bridge_slave_1: entered promiscuous mode [ 315.650825][T19312] netlink: 'syz.4.3890': attribute type 10 has an invalid length. [ 315.656905][T19312] macvlan1: entered allmulticast mode [ 315.658621][T19312] veth1_vlan: entered allmulticast mode [ 315.660428][T19312] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 315.668470][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.678268][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.690748][ T40] audit: type=1400 audit(2000524544.785:43969): avc: denied { read write } for pid=19313 comm="syz.4.3891" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 315.721835][T19152] team0: Port device team_slave_0 added [ 315.725620][T19152] team0: Port device team_slave_1 added [ 315.762320][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.764674][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.775454][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.781613][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.784364][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.794828][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.857492][T19317] efs: cannot read volume header [ 315.875200][T19152] hsr_slave_0: entered promiscuous mode [ 315.879641][T19152] hsr_slave_1: entered promiscuous mode [ 315.882198][T19152] debugfs: 'hsr0' already exists in 'hsr' [ 315.884460][T19152] Cannot create hsr debugfs directory [ 315.981737][T19152] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.048938][T19320] binder: 19319:19320 ioctl c0306201 200000000080 returned -14 [ 316.054561][T19152] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.114657][T19152] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.171075][T19330] netlink: 'syz.4.3895': attribute type 8 has an invalid length. [ 316.184425][T19152] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.248664][T19332] tipc: Started in network mode [ 316.250301][T19332] tipc: Node identity ac14140f, cluster identity 4711 [ 316.253055][T19332] tipc: New replicast peer: 255.255.255.255 [ 316.255791][T19332] tipc: Enabled bearer , priority 10 [ 316.305419][T19152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.311688][T19152] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.317946][T19152] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.322444][T19152] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.367454][T15545] smsc95xx 13-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 316.372667][T15545] smsc95xx 13-1:0.67: probe with driver smsc95xx failed with error -71 [ 316.388034][T19287] Restarting kernel threads ... [ 316.388280][T19152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.390172][T19287] Done restarting kernel threads. [ 316.396350][T15545] usb 13-1: USB disconnect, device number 4 [ 316.398606][T19152] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.403487][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.405758][ T7821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.422195][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.424580][ T7822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.425322][T19349] 9pnet_virtio: no channels available for device syz [ 316.543006][T19152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.604996][T19365] binder: 19364:19365 ioctl c0306201 200000000080 returned -14 [ 316.678021][T19152] veth0_vlan: entered promiscuous mode [ 316.683083][T19152] veth1_vlan: entered promiscuous mode [ 316.700251][T19152] veth0_macvtap: entered promiscuous mode [ 316.704412][T19152] veth1_macvtap: entered promiscuous mode [ 316.713854][T19152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.720084][T19152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.729194][ T7825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.732079][ T7825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.737309][ T7825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.740832][ T7825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.755037][T19376] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 [ 316.782704][ T7827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.785195][ T7827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.802033][ T7827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.804451][ T7827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.811150][T19380] netlink: 'syz.8.3906': attribute type 1 has an invalid length. [ 316.844096][T19380] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 316.848879][T19380] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 316.853871][T19380] bond1: (slave vcan1): making interface the new active one [ 316.857641][T19380] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 316.865693][T19380] bond1: entered allmulticast mode [ 316.865804][T19379] netlink: 'syz.2.3905': attribute type 62 has an invalid length. [ 316.867917][T19380] vcan1: entered allmulticast mode [ 317.136180][ T9] usb 13-1: new low-speed USB device number 5 using dummy_hcd [ 317.193501][T19410] __nla_validate_parse: 1 callbacks suppressed [ 317.193511][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3914'. [ 317.287868][ T9] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 317.290664][ T9] usb 13-1: config 0 has no interface number 0 [ 317.292635][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.296866][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 317.300211][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 317.303851][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 317.307920][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 317.311327][ T9] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.315558][ T9] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 317.318600][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.325440][ T9] usb 13-1: config 0 descriptor?? [ 317.330475][T19391] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 317.333267][T19391] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 317.340421][ T9] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 317.347852][T19429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3920'. [ 317.356272][ T5942] Bluetooth: hci3: command tx timeout [ 317.366312][ T4616] tipc: Node number set to 2886997007 [ 317.430925][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.538288][T19391] ldusb 13-1:0.55: Write buffer overflow, 92 bytes dropped [ 317.577158][T19439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3923'. [ 318.295041][T19442] 9pnet: Could not find request transport: viŒÖ*19hƈle=fscache [ 318.302135][T19442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=19442 comm=syz.4.3924 [ 318.504841][T19462] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3928'. [ 318.631549][T19472] veth0_to_bond: entered allmulticast mode [ 319.073207][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3937'. [ 319.199870][T19501] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3938'. [ 319.427488][ T5942] Bluetooth: hci3: command tx timeout [ 319.454039][T19513] sg_write: process 60 (syz.6.3941) changed security contexts after opening file descriptor, this is not allowed. [ 319.921395][ C0] ldusb 13-1:0.55: usb_submit_urb failed (-1) [ 319.928512][ T9] usb 13-1: USB disconnect, device number 5 [ 319.932364][ T9] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 320.093094][T19563] netlink: 'syz.4.3947': attribute type 10 has an invalid length. [ 320.097415][T19563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 320.276147][ T9] usb 13-1: new low-speed USB device number 6 using dummy_hcd [ 320.406155][ T9] usb 13-1: device descriptor read/64, error -71 [ 320.476108][T19565] binder: 19564:19565 ioctl c0306201 200000000080 returned -14 [ 320.520947][T19574] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 320.523528][T19574] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 320.526475][T19574] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 320.528959][T19574] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 320.633313][T19581] fuse: Unknown parameter '' [ 320.650332][ T9] usb 13-1: new low-speed USB device number 7 using dummy_hcd [ 320.721115][T19588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3954'. [ 320.786421][ T9] usb 13-1: device descriptor read/64, error -71 [ 320.862793][T19611] binder: 19610:19611 ioctl c0306201 200000000080 returned -14 [ 320.897600][ T9] usb usb13-port1: attempt power cycle [ 321.007226][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 321.007236][ T40] audit: type=1400 audit(2000524550.105:43975): avc: denied { node_bind } for pid=19626 comm="syz.6.3966" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 321.017037][ T40] audit: type=1400 audit(2000524550.105:43976): avc: denied { execute } for pid=19626 comm="syz.6.3966" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 321.052096][T19631] netlink: 'syz.2.3968': attribute type 1 has an invalid length. [ 321.054572][T19631] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3968'. [ 321.057696][T19633] binder: 19632:19633 ioctl c0306201 200000000080 returned -14 [ 321.059602][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3968'. [ 321.100839][T19638] vlan2: entered promiscuous mode [ 321.102673][T19638] syz_tun: entered promiscuous mode [ 321.107355][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3970'. [ 321.113329][T19638] program syz.6.3970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.170399][T19642] netlink: 'syz.4.3972': attribute type 1 has an invalid length. [ 321.178520][T19644] No such timeout policy "syz1" [ 321.236200][ T9] usb 13-1: new low-speed USB device number 8 using dummy_hcd [ 321.257235][ T9] usb 13-1: device descriptor read/8, error -71 [ 321.259306][ T40] audit: type=1326 audit(2000524550.355:43977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.269161][ T40] audit: type=1326 audit(2000524550.355:43978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.278190][ T40] audit: type=1326 audit(2000524550.355:43979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.285617][T19654] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 321.285868][ T40] audit: type=1326 audit(2000524550.355:43980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.288036][T19654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.289355][T19654] vhci_hcd vhci_hcd.0: Device attached [ 321.295692][ T40] audit: type=1326 audit(2000524550.365:43981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.303610][T19654] ucma_write: process 101 (syz.6.3976) changed security contexts after opening file descriptor, this is not allowed. [ 321.314702][ T40] audit: type=1326 audit(2000524550.365:43982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.316919][T19659] vhci_hcd: connection closed [ 321.322751][ T7825] vhci_hcd: stop threads [ 321.325718][ T7825] vhci_hcd: release socket [ 321.326070][ T40] audit: type=1326 audit(2000524550.365:43983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.327627][ T7825] vhci_hcd: disconnect device [ 321.337592][ T40] audit: type=1326 audit(2000524550.365:43984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.6.3976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 321.414521][T19668] binder: 19667:19668 ioctl c0306201 200000000080 returned -14 [ 321.506385][ T9] usb 13-1: new low-speed USB device number 9 using dummy_hcd [ 321.506454][ T5942] Bluetooth: hci3: command tx timeout [ 321.526704][ T9] usb 13-1: device descriptor read/8, error -71 [ 321.636369][ T9] usb usb13-port1: unable to enumerate USB device [ 321.830262][T19680] x_tables: duplicate underflow at hook 2 [ 321.888651][T19684] program syz.2.3987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.906294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.994307][T19695] fuse: Bad value for 'fd' [ 322.568645][ C2] vcan0: j1939_tp_rxtimer: 0xffff888053905000: rx timeout, send abort [ 322.571314][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888053905000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 322.606260][T19705] netlink: 'syz.4.3995': attribute type 10 has an invalid length. [ 322.609285][T19705] __nla_validate_parse: 2 callbacks suppressed [ 322.609298][T19705] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3995'. [ 322.614560][T19705] batadv0: entered promiscuous mode [ 322.616594][T19705] batadv0: entered allmulticast mode [ 322.618742][T19705] bridge0: port 3(batadv0) entered blocking state [ 322.621312][T19705] bridge0: port 3(batadv0) entered disabled state [ 322.625368][T19705] bridge0: port 3(batadv0) entered blocking state [ 322.627634][T19705] bridge0: port 3(batadv0) entered forwarding state [ 322.630239][ T7823] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 322.633118][ T7823] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 322.640601][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 322.647312][T19705] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 322.754275][T19707] netlink: 'syz.4.3996': attribute type 1 has an invalid length. [ 322.851147][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3998'. [ 322.866911][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3998'. [ 323.023685][T19733] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4003'. [ 323.136597][T19748] tipc: Started in network mode [ 323.139004][T19748] tipc: Node identity , cluster identity 4711 [ 323.142073][T19748] tipc: Failed to obtain node identity [ 323.143779][T19748] tipc: Enabling of bearer rejected, failed to enable media [ 323.175804][T19752] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 323.184864][T19752] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 323.208190][T19756] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4012'. [ 323.221717][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 323.237524][T19760] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4014'. [ 323.277039][T19764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=19764 comm=syz.8.4016 [ 323.282067][T19764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19764 comm=syz.8.4016 [ 323.282163][T19765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19765 comm=syz.8.4016 [ 323.296525][ T4616] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 323.457926][ T4616] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 323.461168][ T4616] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.465668][ T4616] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.468810][ T4616] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.473904][ T4616] usbtmc 11-1:16.0: bulk endpoints not found [ 323.576175][T15545] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 323.586178][ T5942] Bluetooth: hci3: command tx timeout [ 323.687710][ T4616] usb 11-1: USB disconnect, device number 2 [ 323.729057][T15545] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.733581][T15545] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 323.738238][T15545] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 323.742070][T15545] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.745270][T15545] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.751717][T19767] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 323.760075][T15545] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.960311][ T5992] usb 13-1: USB disconnect, device number 10 [ 324.099372][T19762] overlayfs: statfs failed on './file0' [ 324.106224][T15545] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 324.165393][T19792] EXT4-fs (nbd2): unable to read superblock [ 324.211960][T19797] binder: 19796:19797 ioctl c0306201 200000000080 returned -14 [ 324.250818][T19798] delete_channel: no stack [ 324.281197][T15545] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 324.284390][T15545] usb 9-1: can't read configurations, error -71 [ 324.813101][T19826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4035'. [ 324.843170][T19828] netlink: 'syz.4.4036': attribute type 10 has an invalid length. [ 324.851385][T19828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 324.881106][T19830] binder: 19829:19830 ioctl c0306201 200000000080 returned -14 [ 325.035175][T19842] netlink: 'syz.4.4041': attribute type 1 has an invalid length. [ 325.052072][T19842] bond34: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 325.057877][T19842] bond34: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 325.061796][T19842] bond34: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 325.111918][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4042'. [ 325.128475][T19849] bond1: Invalid ad_actor_system MAC address. [ 325.130654][T19849] bond1: option ad_actor_system: invalid value (255) [ 325.133769][T19849] bond1 (unregistering): Released all slaves [ 325.178660][T19854] overlayfs: conflicting options: userxattr,metacopy=on [ 325.334406][T19868] binder: 19867:19868 ioctl c0306201 200000000080 returned -14 [ 325.423645][T19872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.530368][T19872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.644058][T19872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.679767][T19886] hfs: can't find a HFS filesystem on dev sr0 [ 325.722421][T19872] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 325.728227][T19872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.808482][T19900] binder: 19899:19900 ioctl c0306201 200000000080 returned -14 [ 325.828711][ T7822] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.839950][ T7822] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.850051][ T7822] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.861417][ T7822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.924893][T19912] IPVS: set_ctl: invalid protocol: 91 172.30.0.9:20000 [ 326.045707][T19922] overlayfs: invalid origin (0000) [ 326.227994][T19930] binder: 19929:19930 ioctl c0306201 200000000080 returned -14 [ 326.352788][T19938] geneve2: entered promiscuous mode [ 326.354458][T19938] geneve2: entered allmulticast mode [ 326.368982][T19938] netlink: 'syz.6.4074': attribute type 16 has an invalid length. [ 326.621354][T19974] netlink: 'syz.2.4083': attribute type 1 has an invalid length. [ 326.623946][T19974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.626279][T19974] IPv6: NLM_F_CREATE should be set when creating new route [ 326.628605][T19974] IPv6: NLM_F_CREATE should be set when creating new route [ 326.877241][T20009] xt_bpf: check failed: parse error [ 326.947331][T20012] bridge0: port 3(batadv0) entered disabled state [ 326.949777][T20012] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.952218][T20012] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.051556][T20012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.059129][T20012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.110513][T20012] veth1_vlan: left allmulticast mode [ 327.161699][ T7853] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.164517][ T7853] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.167648][ T7853] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.170546][ T7853] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.173320][ T7853] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.176191][ T7853] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.181504][ T7853] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.185023][ T7853] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.586209][T20048] loop4: detected capacity change from 0 to 2560 [ 327.590312][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 327.590321][ T40] audit: type=1400 audit(2000524556.685:44049): avc: denied { execute } for pid=20047 comm="syz.6.4099" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.592999][T10437] Buffer I/O error on dev loop4, logical block 0, async page read [ 327.594889][T20047] Buffer I/O error on dev loop4, logical block 1, async page read [ 327.595289][T20047] Buffer I/O error on dev loop4, logical block 1, async page read [ 327.595553][T20047] Buffer I/O error on dev loop4, logical block 1, async page read [ 327.595677][T20047] Buffer I/O error on dev loop4, logical block 1, async page read [ 327.595793][T20047] Buffer I/O error on dev loop4, logical block 1, async page read [ 327.595982][T20047] Buffer I/O error on dev loop4, logical block 2, async page read [ 327.597623][T20047] Buffer I/O error on dev loop4, logical block 2, async page read [ 327.597743][T20047] Buffer I/O error on dev loop4, logical block 2, async page read [ 327.625793][T10437] Buffer I/O error on dev loop4, logical block 0, async page read [ 327.799804][T20062] binder: 20061:20062 ioctl c0306201 200000000080 returned -14 [ 327.856263][T20066] sp0: Synchronizing with TNC [ 328.078422][T20086] binder: 20085:20086 ioctl c0306201 200000000080 returned -14 [ 328.218848][T20091] binder: 20090:20091 ioctl c0306201 2000000003c0 returned -14 [ 328.242924][T20091] nfs: Unknown parameter 'mock' [ 328.248311][T20094] binder: BINDER_SET_CONTEXT_MGR already set [ 328.250223][T20094] binder: 20090:20094 ioctl 4018620d 200000000000 returned -16 [ 328.283786][T20097] binder: 20096:20097 ioctl c0306201 200000000080 returned -14 [ 329.484497][T20133] usb usb8: usbfs: process 20133 (syz.4.4122) did not claim interface 0 before use [ 329.542015][ T40] audit: type=1400 audit(2000524558.635:44050): avc: denied { map } for pid=20132 comm="syz.4.4122" path="socket:[94834]" dev="sockfs" ino=94834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.602044][T20139] binder: 20138:20139 ioctl c0306201 200000000080 returned -14 [ 329.737484][T20150] __nla_validate_parse: 7 callbacks suppressed [ 329.737495][T20150] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4127'. [ 329.746534][T20150] netlink: 'syz.6.4127': attribute type 1 has an invalid length. [ 329.924265][T20153] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4128'. [ 329.929516][ T53] IPVS: starting estimator thread 0... [ 330.016180][T20156] IPVS: using max 46 ests per chain, 110400 per kthread [ 330.478161][T20167] binder: 20166:20167 ioctl c0306201 200000000080 returned -14 [ 330.614038][ T40] audit: type=1400 audit(2000524559.705:44051): avc: denied { shutdown } for pid=20168 comm="syz.4.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.621436][ T40] audit: type=1400 audit(2000524559.705:44052): avc: denied { write } for pid=20168 comm="syz.4.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.697093][ T40] audit: type=1400 audit(2000524559.795:44053): avc: denied { rename } for pid=20182 comm="syz.6.4137" name="file0" dev="9p" ino=71827847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.705252][ T40] audit: type=1400 audit(2000524559.795:44054): avc: denied { unlink } for pid=20182 comm="syz.6.4137" name="file1" dev="9p" ino=71827849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.925529][T20190] fuse: Bad value for 'fd' [ 331.051384][T20203] binder: 20202:20203 ioctl c0306201 200000000080 returned -14 [ 331.080295][T20209] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4147'. [ 331.121429][T20213] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 331.125026][T20213] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 331.142435][T20213] bond1: entered promiscuous mode [ 331.144137][T20213] bond1: entered allmulticast mode [ 331.145953][T20213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.363362][T20225] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4151'. [ 331.394839][T20232] random: crng reseeded on system resumption [ 331.454193][ T839] hid_parser_main: 73 callbacks suppressed [ 331.454206][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.458820][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.461337][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.463736][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.468076][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.472096][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.474518][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.477225][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.479731][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.482145][ T839] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 331.502786][T20247] binder: 20246:20247 ioctl c0306201 200000000080 returned -14 [ 331.506388][ T839] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 331.525438][T20251] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4157'. [ 331.537903][T20248] fido_id[20248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 331.620919][T20255] warn_alloc: 1 callbacks suppressed [ 331.620929][T20255] syz.2.4159: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 331.628516][T20255] CPU: 2 UID: 0 PID: 20255 Comm: syz.2.4159 Not tainted syzkaller #0 PREEMPT(full) [ 331.628530][T20255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.628537][T20255] Call Trace: [ 331.628553][T20255] [ 331.628558][T20255] dump_stack_lvl+0x16c/0x1f0 [ 331.628589][T20255] warn_alloc+0x248/0x3a0 [ 331.628606][T20255] ? __pfx_warn_alloc+0x10/0x10 [ 331.628620][T20255] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.628640][T20255] ? kasan_save_stack+0x42/0x60 [ 331.628650][T20255] ? kasan_save_stack+0x33/0x60 [ 331.628659][T20255] ? kasan_save_track+0x14/0x30 [ 331.628669][T20255] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 331.628682][T20255] ? __vb2_queue_alloc+0x8c9/0x1280 [ 331.628692][T20255] ? vb2_core_create_bufs+0x559/0xab0 [ 331.628704][T20255] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 331.628717][T20255] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 331.628735][T20255] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 331.628751][T20255] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.628768][T20255] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 331.628780][T20255] vmalloc_user_noprof+0x9e/0xe0 [ 331.628793][T20255] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 331.628806][T20255] vb2_vmalloc_alloc+0x135/0x3f0 [ 331.628818][T20255] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 331.628831][T20255] __vb2_queue_alloc+0x8c9/0x1280 [ 331.628849][T20255] vb2_core_create_bufs+0x559/0xab0 [ 331.628863][T20255] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 331.628878][T20255] ? __mutex_trylock_common+0xe9/0x250 [ 331.628891][T20255] vb2_create_bufs+0x5e8/0x840 [ 331.628904][T20255] ? __pfx_vb2_create_bufs+0x10/0x10 [ 331.628913][T20255] ? __mutex_lock+0x1c5/0x1060 [ 331.628923][T20255] ? v4l_sanitize_colorspace+0x213/0x400 [ 331.628942][T20255] vb2_ioctl_create_bufs+0x244/0x3e0 [ 331.628953][T20255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 331.628968][T20255] vidioc_create_bufs+0x7d/0xf0 [ 331.628985][T20255] v4l_create_bufs+0x151/0x260 [ 331.628999][T20255] __video_do_ioctl+0xb77/0xf00 [ 331.629016][T20255] ? __might_fault+0xe3/0x190 [ 331.629031][T20255] ? __pfx___video_do_ioctl+0x10/0x10 [ 331.629051][T20255] video_usercopy+0x4d0/0x1720 [ 331.629067][T20255] ? __pfx___video_do_ioctl+0x10/0x10 [ 331.629081][T20255] ? selinux_kernel_read_file+0x80/0x130 [ 331.629104][T20255] ? __pfx_video_usercopy+0x10/0x10 [ 331.629128][T20255] v4l2_ioctl+0x1bd/0x250 [ 331.629142][T20255] ? __pfx_v4l2_ioctl+0x10/0x10 [ 331.629157][T20255] __x64_sys_ioctl+0x18e/0x210 [ 331.629173][T20255] do_syscall_64+0xcd/0xfa0 [ 331.629189][T20255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.629200][T20255] RIP: 0033:0x7ff54358efc9 [ 331.629209][T20255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.629220][T20255] RSP: 002b:00007ff5444b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.629230][T20255] RAX: ffffffffffffffda RBX: 00007ff5437e5fa0 RCX: 00007ff54358efc9 [ 331.629236][T20255] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000007 [ 331.629243][T20255] RBP: 00007ff543611f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.629249][T20255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.629255][T20255] R13: 00007ff5437e6038 R14: 00007ff5437e5fa0 R15: 00007ffd5e4ee5e8 [ 331.629269][T20255] [ 331.629273][T20255] Mem-Info: [ 331.739527][T20255] active_anon:26231 inactive_anon:0 isolated_anon:0 [ 331.739527][T20255] active_file:4255 inactive_file:30294 isolated_file:0 [ 331.739527][T20255] unevictable:12044 dirty:79 writeback:0 [ 331.739527][T20255] slab_reclaimable:8951 slab_unreclaimable:100226 [ 331.739527][T20255] mapped:26693 shmem:13757 pagetables:1779 [ 331.739527][T20255] sec_pagetables:316 bounce:0 [ 331.739527][T20255] kernel_misc_reclaimable:0 [ 331.739527][T20255] free:414449 free_pcp:17893 free_cma:0 [ 331.755795][T20255] Node 0 active_anon:104828kB inactive_anon:0kB active_file:17016kB inactive_file:120968kB unevictable:35632kB isolated(anon):0kB isolated(file):0kB mapped:95448kB dirty:316kB writeback:0kB shmem:55956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18896kB pagetables:6684kB sec_pagetables:1264kB all_unreclaimable? no Balloon:0kB [ 331.766416][T20255] Node 1 active_anon:96kB inactive_anon:0kB active_file:4kB inactive_file:208kB unevictable:12544kB isolated(anon):0kB isolated(file):0kB mapped:11324kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.775789][T20255] Node 0 DMA free:9968kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:124kB unevictable:3952kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:264kB local_pcp:104kB free_cma:0kB [ 331.785677][T20255] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 331.788121][T20255] Node 0 DMA32 free:110792kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104828kB inactive_anon:0kB active_file:17016kB inactive_file:120844kB unevictable:31680kB writepending:316kB zspages:0kB present:2080628kB managed:1269500kB mlocked:0kB bounce:0kB free_pcp:64444kB local_pcp:8560kB free_cma:0kB [ 331.798969][T20255] lowmem_reserve[]: 0 0 0 0 0 [ 331.800572][T20255] Node 1 Normal free:1537036kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96kB inactive_anon:0kB active_file:4kB inactive_file:208kB unevictable:12544kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:7072kB local_pcp:0kB free_cma:0kB [ 331.810525][T20255] lowmem_reserve[]: 0 0 0 0 0 [ 331.812067][T20255] Node 0 DMA: 14*4kB (UM) 11*8kB (UM) 18*16kB (UM) 10*32kB (UM) 18*64kB (UM) 9*128kB (UM) 7*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 9968kB [ 331.817826][T20255] Node 0 DMA32: 194*4kB (UME) 115*8kB (ME) 54*16kB (UME) 136*32kB (ME) 290*64kB (UME) 100*128kB (UME) 65*256kB (UM) 23*512kB (UME) 19*1024kB (UME) 12*2048kB (UM) 0*4096kB = 110720kB [ 331.823433][T20255] Node 1 Normal: 145*4kB (UME) 146*8kB (UME) 110*16kB (UME) 187*32kB (UME) 136*64kB (UME) 56*128kB (UME) 19*256kB (UM) 15*512kB (UME) 8*1024kB (ME) 12*2048kB (UM) 358*4096kB (UM) = 1537044kB [ 331.830157][T20255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.833509][T20255] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.838507][T20255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.842001][T20255] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.845407][T20255] 58578 total pagecache pages [ 331.847222][T20255] 0 pages in swap cache [ 331.848570][T20255] Free swap = 124996kB [ 331.849892][T20255] Total swap = 124996kB [ 331.851253][T20255] 1048443 pages RAM [ 331.852475][T20255] 0 pages HighMem/MovableOnly [ 331.853959][T20255] 281755 pages reserved [ 331.855314][T20255] 0 pages cma reserved [ 331.873193][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4163'. [ 331.880179][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4163'. [ 331.884232][T20274] netlink: 'syz.6.4163': attribute type 10 has an invalid length. [ 331.894220][T20274] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 331.919754][T20274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.922278][T20279] bridge_slave_0: invalid flags given to default FDB implementation [ 331.927397][T20279] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.4165'. [ 332.042573][T20292] binder: 20291:20292 ioctl c0306201 200000000080 returned -14 [ 332.082636][T20301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4172'. [ 332.090526][T20304] fuseblk: Bad value for 'group_id' [ 332.092545][T20304] fuseblk: Bad value for 'group_id' [ 332.119194][T20306] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.129623][T20308] netlink: 'syz.6.4174': attribute type 4 has an invalid length. [ 332.159954][T20311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'. [ 332.163705][T20311] bridge_slave_1: left allmulticast mode [ 332.166355][T20311] bridge_slave_1: left promiscuous mode [ 332.168860][T20311] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.176310][T20311] bridge_slave_0: left allmulticast mode [ 332.178272][T20311] bridge_slave_0: left promiscuous mode [ 332.180239][T20311] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.325330][T20325] binder: 20324:20325 ioctl c0306201 200000000080 returned -14 [ 332.595203][T20339] netlink: 'syz.2.4185': attribute type 10 has an invalid length. [ 332.598774][T20339] macvlan0: entered promiscuous mode [ 332.600529][T20339] macvlan0: entered allmulticast mode [ 332.604287][T20339] veth1_vlan: entered allmulticast mode [ 332.610521][T20339] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 332.617762][T20339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 332.623115][ T40] audit: type=1400 audit(2000524561.715:44055): avc: denied { create } for pid=20338 comm="syz.2.4185" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 332.632976][ T40] audit: type=1400 audit(2000524561.715:44056): avc: denied { link } for pid=20338 comm="syz.2.4185" name="file1" dev="ramfs" ino=95186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 332.859448][T20343] afs: Unknown parameter 'dyn ŒY [ 332.859448][T20343] <ÉùL¤\˜;hšaÖ6jñ”–Æj`økk‚º)!&ØÃñí2èñ¯Ôq&¡‘å7¼ðüÐ.' [ 332.863975][T20343] overlayfs: failed to resolve '/…„†´Í9œ# °ÑÔñÝ빜+­Sâž9˜¶ÒŽÓ3«¯g(PˆjqÙú)„Vdyn ŒY [ 332.863975][T20343] <ÉùL¤˜;hšaÖ6jñ”–Æj`økk‚º)!&ØÃñí2èñ¯Ôq&¡‘å7¼ðüÐ.=ÆŸïJ­6^“‚ùÐeèÙÊ}&˜üP–2ȽӰ4TÒÓ ¶<©ZˆtŒÕÁ Ú|Œ;U€ 4`ÞjEkF4ñœ¸—DñÌ': -2 [ 332.915869][T20348] binder: 20347:20348 ioctl c0306201 200000000080 returned -14 [ 332.981696][T20356] bond0: (slave dummy0): Releasing backup interface [ 332.984959][T20356] bridge0: port 3(batadv0) entered disabled state [ 332.994450][T20356] bridge_slave_0: left allmulticast mode [ 332.997585][T20356] bridge_slave_0: left promiscuous mode [ 333.000456][T20356] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.004806][T20356] bridge_slave_1: left allmulticast mode [ 333.007301][T20356] bridge_slave_1: left promiscuous mode [ 333.008970][T20356] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.017821][T20356] bond0: (slave bond_slave_0): Releasing backup interface [ 333.030357][T20356] bond0: (slave bond_slave_1): Releasing backup interface [ 333.039098][T20356] team0: Port device team_slave_0 removed [ 333.042529][T20356] team0: Port device team_slave_1 removed [ 333.045017][T20356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.048963][T20356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.051511][T20356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.061375][T20369] sit0: entered promiscuous mode [ 333.063596][T20369] team0: Refused to change device type [ 333.069579][T20357] netlink: 'syz.6.4193': attribute type 32 has an invalid length. [ 333.173896][ T40] audit: type=1400 audit(2000524562.265:44057): avc: denied { connect } for pid=20380 comm="syz.6.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.291614][T20398] binder: 20397:20398 ioctl c0306201 200000000080 returned -14 [ 333.309338][T20399] bridge2: entered promiscuous mode [ 333.311012][T20399] bridge2: entered allmulticast mode [ 333.515361][T20411] macvlan2: entered allmulticast mode [ 333.517967][T20411] ip6gretap0: entered allmulticast mode [ 333.521791][ T40] audit: type=1400 audit(2000524562.615:44058): avc: denied { listen } for pid=20414 comm="syz.2.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 333.528998][T20417] team0: Device gtp1 is of different type [ 333.553169][T20419] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 333.562670][T20421] binder: 20420:20421 ioctl c0306201 200000000080 returned -14 [ 333.599320][ T40] audit: type=1400 audit(2000524562.695:44059): avc: denied { listen } for pid=20424 comm="syz.2.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 333.615297][T20425] netlink: 'syz.2.4211': attribute type 4 has an invalid length. [ 333.659708][ T40] audit: type=1400 audit(2000524562.755:44060): avc: denied { accept } for pid=20427 comm="syz.2.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 333.841887][T20437] loop2: detected capacity change from 0 to 7 [ 333.845168][T10437] Dev loop2: unable to read RDB block 7 [ 333.847369][T10437] loop2: AHDI p1 p2 [ 333.848607][T10437] loop2: partition table partially beyond EOD, truncated [ 333.851081][T10437] loop2: p1 start 1835360114 is beyond EOD, truncated [ 333.858120][T20437] Dev loop2: unable to read RDB block 7 [ 333.862907][T20437] loop2: AHDI p1 p2 [ 333.864206][T20437] loop2: partition table partially beyond EOD, truncated [ 333.867321][T20437] loop2: p1 start 1835360114 is beyond EOD, truncated [ 334.422989][T20451] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20004 [ 334.526349][T20458] binder: 20457:20458 ioctl c0306201 200000000080 returned -14 [ 334.659342][T20468] mmap: syz.2.4225 (20468): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 334.721346][T20471] veth3: entered promiscuous mode [ 334.723014][T20471] veth3: entered allmulticast mode [ 334.725061][T20471] bridge0: port 1(veth3) entered blocking state [ 334.729212][T20471] bridge0: port 1(veth3) entered disabled state [ 334.732670][T20471] bridge0: port 1(veth3) entered blocking state [ 334.734675][T20471] bridge0: port 1(veth3) entered forwarding state [ 334.753344][T20471] veth5: entered promiscuous mode [ 334.754994][T20471] veth5: entered allmulticast mode [ 334.757762][T20471] bridge0: port 2(veth5) entered blocking state [ 334.760032][T20471] bridge0: port 2(veth5) entered disabled state [ 334.763184][T20471] bridge0: port 2(veth5) entered blocking state [ 334.765195][T20471] bridge0: port 2(veth5) entered forwarding state [ 334.781637][T20472] veth7: entered promiscuous mode [ 334.783488][T20472] veth7: entered allmulticast mode [ 334.785751][T20472] bridge0: port 3(veth7) entered blocking state [ 334.788507][T20472] bridge0: port 3(veth7) entered disabled state [ 334.791886][T20472] bridge0: port 3(veth7) entered blocking state [ 334.794017][T20472] bridge0: port 3(veth7) entered forwarding state [ 334.829841][ T40] audit: type=1400 audit(2000524563.925:44061): avc: denied { transfer } for pid=20480 comm="syz.4.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 334.837170][T20481] __nla_validate_parse: 8 callbacks suppressed [ 334.837180][T20481] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4224'. [ 334.844695][T20484] 9pnet_fd: Insufficient options for proto=fd [ 334.853173][T20484] netlink: 'syz.2.4229': attribute type 4 has an invalid length. [ 334.885718][T20486] binder: 20485:20486 ioctl c0306201 200000000080 returned -14 [ 334.915475][ T40] audit: type=1400 audit(2000524564.005:44062): avc: denied { setattr } for pid=20489 comm="syz.4.4232" name="vcs6" dev="devtmpfs" ino=3374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 334.997871][T20502] Process accounting resumed [ 335.118732][ T7825] bridge0: port 1(veth3) entered disabled state [ 335.125274][ T7825] bridge0: port 2(veth5) entered disabled state [ 335.133113][ T7825] bridge0: port 3(veth7) entered disabled state [ 335.133915][T20517] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4240'. [ 335.140070][T20517] xt_socket: unknown flags 0xd0 [ 335.151243][T20519] binder: 20518:20519 ioctl c0306201 200000000080 returned -14 [ 335.184604][T20523] tipc: Enabling of bearer rejected, already enabled [ 335.569397][T20543] binder: 20542:20543 ioctl c0306201 200000000080 returned -14 [ 335.632434][T20549] netlink: 'syz.6.4255': attribute type 5 has an invalid length. [ 335.640719][T20549] tipc: Started in network mode [ 335.642302][T20549] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 335.645153][T20549] tipc: Enabling of bearer rejected, failed to enable media [ 335.648939][T20549] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4255'. [ 335.652120][T20549] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4255'. [ 335.655809][T20549] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4255'. [ 335.660064][T20549] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4255'. [ 335.690865][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4251'. [ 335.700818][T20553] xfrm1: entered promiscuous mode [ 335.702447][T20553] xfrm1: entered allmulticast mode [ 335.771973][ T40] audit: type=1326 audit(2000524564.855:44063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.2.4256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54358efc9 code=0x7ffc0000 [ 335.780176][ T40] audit: type=1326 audit(2000524564.855:44064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.2.4256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54358efc9 code=0x7ffc0000 [ 335.848924][T20564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4258'. [ 335.932197][T20572] binder: 20571:20572 ioctl c0306201 200000000080 returned -14 [ 335.978551][T20574] netlink: 696 bytes leftover after parsing attributes in process `syz.2.4262'. [ 336.122975][T20579] batman_adv: batadv0: Adding interface: gretap1 [ 336.125125][T20579] batman_adv: batadv0: Interface activated: gretap1 [ 336.135852][T20579] usb usb9: usbfs: process 20579 (syz.4.4263) did not claim interface 0 before use [ 336.222242][T20581] netlink: 'syz.4.4264': attribute type 10 has an invalid length. [ 336.224866][T20581] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 336.467702][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4268'. [ 336.473372][T20593] netlink: 'syz.2.4268': attribute type 10 has an invalid length. [ 336.490237][T20593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.614448][T20616] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 336.660886][ T5938] Bluetooth: hci1: sending frame failed (-49) [ 336.665288][ T5942] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 336.706436][T20624] netlink: 'syz.4.4276': attribute type 29 has an invalid length. [ 336.818498][T20634] Bluetooth: MGMT ver 1.23 [ 337.259368][T20676] netlink: 'syz.6.4292': attribute type 1 has an invalid length. [ 337.275063][T20676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.286323][T20679] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 337.291638][T20679] bond2 (unregistering): Released all slaves [ 337.299613][T20676] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 337.305625][T20676] bond3: entered allmulticast mode [ 337.315385][T20676] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 337.429647][T20688] misc userio: The device must be registered before sending interrupts [ 337.498782][T20705] binder: 20704:20705 unknown command 0 [ 337.500686][T20705] binder: 20704:20705 ioctl c0306201 200000000080 returned -22 [ 337.518304][T20708] binder: BINDER_SET_CONTEXT_MGR already set [ 337.526703][T20708] binder: 20704:20708 ioctl 4018620d 2000000000c0 returned -16 [ 337.550777][T20712] overlayfs: failed to resolve './file1': -2 [ 337.554726][T20713] binder: 20711:20713 ioctl c0306201 200000000080 returned -14 [ 337.575075][T20715] cgroup: Invalid name [ 337.644760][T20729] overlayfs: failed to resolve './file0': -2 [ 337.655186][T20728] bond6: entered allmulticast mode [ 337.657817][T20728] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.713813][T20737] batadv_slave_1: entered promiscuous mode [ 337.720911][T20736] batadv_slave_1: left promiscuous mode [ 337.763471][T20747] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 337.782390][T20752] binder: 20751:20752 ioctl c0306201 200000000080 returned -14 [ 337.859699][T18432] hid (null): unknown global tag 0xe9 [ 337.862603][T18432] hid-generic 0005:0007:003E.0008: unexpected long global item [ 337.865197][T18432] hid-generic 0005:0007:003E.0008: probe with driver hid-generic failed with error -22 [ 337.906320][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 337.906331][ T40] audit: type=1400 audit(2000524566.995:44089): avc: denied { read } for pid=20773 comm="syz.6.4323" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.933975][ T40] audit: type=1400 audit(2000524566.995:44090): avc: denied { open } for pid=20773 comm="syz.6.4323" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.941748][ T40] audit: type=1400 audit(2000524566.995:44091): avc: denied { ioctl } for pid=20773 comm="syz.6.4323" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.973893][T20780] xt_l2tp: missing protocol rule (udp|l2tpip) [ 337.986079][T20780] autofs: Unknown parameter ' [ 337.986079][T20780] ' [ 338.047198][ T40] audit: type=1400 audit(2000524567.145:44092): avc: denied { write } for pid=20783 comm="syz.4.4315" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 338.241150][T20837] xt_time: unknown flags 0xf4 [ 338.261961][T20841] binder: 20840:20841 ioctl c0306201 200000000080 returned -14 [ 338.292894][ T40] audit: type=1400 audit(2000524567.385:44093): avc: denied { map } for pid=20845 comm="syz.6.4345" path="/139" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 338.368616][ T40] audit: type=1400 audit(2000524567.465:44094): avc: denied { read open } for pid=20861 comm="syz.8.4350" path="/" dev="configfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 338.393821][T20871] fuse: Bad value for 'fd' [ 338.395569][T20871] fuse: Bad value for 'fd' [ 338.398885][T20871] fuse: Bad value for 'fd' [ 338.419216][T20876] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 338.421881][T20876] SELinux: failed to load policy [ 338.552234][T20891] bridge0: entered promiscuous mode [ 338.554965][T20891] macsec1: entered promiscuous mode [ 338.571322][T20893] netlink: 'syz.8.4358': attribute type 1 has an invalid length. [ 338.594785][T20893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.621868][T20893] bond2: (slave veth3): Enslaving as an active interface with a down link [ 338.851989][T20911] vlan3: entered allmulticast mode [ 339.256863][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.259458][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.261931][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.264447][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.267044][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.269534][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.271989][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.274435][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.276954][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.279415][T20930] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 339.653721][T20951] netlink: 'syz.8.4372': attribute type 13 has an invalid length. [ 339.687626][ T40] audit: type=1400 audit(2000524568.785:44095): avc: denied { bind } for pid=20953 comm="syz.8.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 339.696755][ T40] audit: type=1400 audit(2000524568.785:44096): avc: denied { listen } for pid=20953 comm="syz.8.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 339.704065][ T40] audit: type=1400 audit(2000524568.795:44097): avc: denied { accept } for pid=20953 comm="syz.8.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 339.711745][ T40] audit: type=1400 audit(2000524568.805:44098): avc: denied { read } for pid=20953 comm="syz.8.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.279117][T20965] __nla_validate_parse: 15 callbacks suppressed [ 340.279133][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4376'. [ 340.284001][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4376'. [ 340.292486][T20965] overlayfs: failed to clone upperpath [ 340.400695][T20969] fuse: Bad value for 'fd' [ 340.491557][T20973] netlink: 57 bytes leftover after parsing attributes in process `syz.8.4380'. [ 340.496190][T20973] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4380'. [ 340.640605][T20989] overlayfs: failed to resolve './file0': -2 [ 340.720530][T20995] : entered promiscuous mode [ 341.662917][T21007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4392'. [ 341.721477][T21011] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4394'. [ 342.748126][T21039] netlink: 'syz.2.4403': attribute type 1 has an invalid length. [ 342.751292][T21039] netlink: 'syz.2.4403': attribute type 1 has an invalid length. [ 342.768999][T21039] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.772972][T21039] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 342.776402][T21039] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 343.055366][T21054] vlan2: entered allmulticast mode [ 343.057290][T21054] bond0: entered allmulticast mode [ 343.058906][T21054] bond_slave_0: entered allmulticast mode [ 343.060946][T21054] bond_slave_1: entered allmulticast mode [ 343.127638][T21058] binder: 21057:21058 ioctl 4018620d 0 returned -22 [ 343.169277][T21058] binder: 21057:21058 ioctl c0306201 200000000240 returned -11 [ 343.874127][T21069] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 343.877039][T21069] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.880991][T21069] vhci_hcd vhci_hcd.0: Device attached [ 343.886348][T21072] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 343.888993][T21072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.891464][T21072] vhci_hcd vhci_hcd.0: Device attached [ 343.894423][T21073] vhci_hcd: connection closed [ 343.894493][T21070] vhci_hcd: connection closed [ 343.894688][ T7851] vhci_hcd: stop threads [ 343.900380][ T7851] vhci_hcd: release socket [ 343.902336][ T7851] vhci_hcd: disconnect device [ 343.904195][ T7851] vhci_hcd: stop threads [ 343.905648][ T7851] vhci_hcd: release socket [ 343.908718][ T7851] vhci_hcd: disconnect device [ 343.957289][T21077] tmpfs: Bad value for 'size' [ 344.307838][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 344.307851][ T40] audit: type=1400 audit(2000524573.405:44100): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 344.318620][ T40] audit: type=1400 audit(2000524573.405:44101): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 344.528402][T21085] syz_tun: tun_net_xmit 20 [ 344.531445][T21085] netlink: 'syz.8.4419': attribute type 1 has an invalid length. [ 344.554152][T21085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.564781][T21085] xt_hashlimit: max too large, truncated to 1048576 [ 344.601770][T21094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=21094 comm=syz.6.4420 [ 344.634167][T21097] ip6t_rpfilter: unknown options [ 344.672042][ T40] audit: type=1400 audit(2000524573.765:44102): avc: denied { name_bind } for pid=21098 comm="syz.8.4423" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 344.771131][ T40] audit: type=1326 audit(2000524573.865:44103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.6.4426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 344.781466][ T40] audit: type=1326 audit(2000524573.865:44104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.6.4426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 344.789215][ T40] audit: type=1326 audit(2000524573.865:44105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.6.4426" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 344.796586][ T40] audit: type=1326 audit(2000524573.865:44106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.6.4426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 344.804854][ T40] audit: type=1326 audit(2000524573.865:44107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.6.4426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 344.812587][ T40] audit: type=1326 audit(2000524573.865:44108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.6.4426" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 344.823495][ T40] audit: type=1326 audit(2000524573.865:44109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.6.4426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c53f8efc9 code=0x7ffc0000 [ 344.838807][T21111] mkiss: ax0: crc mode is auto. [ 344.842242][T21111] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4427'. [ 344.978338][T21113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4428'. [ 345.034812][T21114] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4428'. [ 345.563473][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4431'. [ 345.573146][T21122] team0: Device ipvlan4 is already an upper device of the team interface [ 346.290564][T21138] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4437'. [ 346.449238][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4440'. [ 346.452117][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4440'. [ 346.591407][T21162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4444'. [ 346.671964][T21167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4446'. [ 346.675922][T21167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4446'. [ 346.920306][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035a67800: rx timeout, send abort [ 346.923650][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035a67800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. May 24 05:16:16 syzkaller kern.alert kernel: [ 346.920306][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035a67800: rx timeout, send abort [ 348.156214][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.666712][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 349.666725][ T40] audit: type=1400 audit(2000524578.765:44188): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=57579 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 350.066571][ T40] audit: type=1400 audit(2000524579.165:44189): avc: denied { recv } for pid=0 comm="swapper/0" saddr=127.0.0.1 src=58442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 353.270945][ T40] audit: type=1400 audit(2000524582.365:44190): avc: denied { egress } for pid=7823 comm="kworker/u32:16" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 353.666532][ T40] audit: type=1400 audit(2000524582.765:44191): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=58442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 354.547752][ T40] audit: type=1400 audit(2000524583.645:44192): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 355.186617][ T40] audit: type=1400 audit(2000524584.285:44193): avc: denied { recv } for pid=0 comm="swapper/1" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=58102 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 357.107516][ T40] audit: type=1400 audit(2000524586.205:44194): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=57579 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 360.947348][ T40] audit: type=1400 audit(2000524590.045:44195): avc: denied { recv } for pid=20020 comm="kworker/0:10" saddr=127.0.0.1 src=58442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 369.907040][ T40] audit: type=1400 audit(2000524599.005:44196): avc: denied { recv } for pid=18432 comm="kworker/1:5" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=58102 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 371.826802][ T40] audit: type=1400 audit(2000524600.925:44197): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=57579 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 373.107207][ T40] audit: type=1400 audit(2000524602.205:44198): avc: denied { egress } for pid=7823 comm="kworker/u32:16" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 375.666529][ T40] audit: type=1400 audit(2000524604.765:44199): avc: denied { recv } for pid=0 comm="swapper/0" saddr=127.0.0.1 src=58442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 378.868504][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.506868][ T40] audit: type=1400 audit(2000524608.605:44200): avc: denied { egress } for pid=7851 comm="kworker/u32:43" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 392.851265][ T40] audit: type=1400 audit(2000524621.945:44201): avc: denied { recv } for pid=0 comm="swapper/1" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 394.226547][ C1] net_ratelimit: 44 callbacks suppressed [ 394.226564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.706589][ T40] audit: type=1400 audit(2000524627.805:44202): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=58102 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 398.918606][ T40] audit: type=1400 audit(2000524628.015:44203): avc: denied { recv } for pid=16527 comm="kworker/3:5" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=58102 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 398.926633][ T40] audit: type=1400 audit(2000524628.015:44204): avc: denied { recv } for pid=16527 comm="kworker/3:5" saddr=127.0.0.1 src=20002 daddr=127.0.0.1 dest=57579 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 404.466816][ T40] audit: type=1400 audit(2000524633.565:44205): avc: denied { recv } for pid=20021 comm="kworker/0:11" saddr=127.0.0.1 src=58442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 414.708620][ T40] audit: type=1400 audit(2000524643.805:44206): avc: denied { egress } for pid=53 comm="kworker/1:1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 414.718334][ T40] audit: type=1400 audit(2000524643.805:44207): avc: denied { egress } for pid=53 comm="kworker/1:1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 419.850314][ T7853] tipc: Resetting bearer [ 419.914596][ T7853] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 420.051597][ T7853] tipc: Disabling bearer [ 420.210072][ T7853] bridge0 (unregistering): left allmulticast mode [ 420.330884][ T7853] bond1 (unregistering): Released all slaves [ 420.417658][ T7853] bond2 (unregistering): Released all slaves [ 420.423851][ T7853] bond3 (unregistering): Released all slaves [ 420.508850][ T7853] bond4 (unregistering): Released all slaves [ 420.627508][ T7853] : left promiscuous mode [ 420.704008][ T7853] tipc: Disabling bearer [ 420.712893][ T7853] tipc: Left network mode [ 420.862086][ T7853] hsr_slave_0: left promiscuous mode [ 420.864949][ T7853] hsr_slave_1: left promiscuous mode [ 420.907497][ T7853] veth1_macvtap: left promiscuous mode [ 420.909813][ T7853] veth0_macvtap: left promiscuous mode [ 420.912118][ T7853] veth1_vlan: left promiscuous mode [ 421.214481][ T7853] team0 (unregistering): Port device vlan0 removed [ 422.403447][ T7853] lo (unregistering): left allmulticast mode [ 422.731343][ T7853] IPVS: stop unused estimator thread 0... [ 430.068433][ T40] audit: type=1400 audit(2000524659.165:44208): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 440.311977][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.320230][ T40] audit: type=1400 audit(2000524669.415:44209): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 446.038616][ T7823] bond6 (unregistering): (slave macvlan1): Releasing backup interface [ 446.047254][ T7823] smc: removing net device bond0 with user defined pnetid SYZ2 [ 446.050427][ T7823] bond0 (unregistering): Released all slaves [ 446.063771][ T7823] bond1 (unregistering): Released all slaves [ 446.153238][ T7823] bond2 (unregistering): (slave bond3): Releasing backup interface [ 446.156276][ T7823] bond2 (unregistering): Released all slaves [ 446.254632][ T7823] bond3 (unregistering): Released all slaves [ 446.265353][ T7823] bond4 (unregistering): Released all slaves [ 446.276281][ T7823] bond5 (unregistering): Released all slaves [ 446.285305][ T7823] bond6 (unregistering): Released all slaves [ 446.404312][ T7823] bond7 (unregistering): Released all slaves [ 446.505581][ T7823] bond8 (unregistering): Released all slaves [ 446.512114][ T7823] bond9 (unregistering): Released all slaves [ 446.599443][ T7823] bond10 (unregistering): Released all slaves [ 446.755739][ T7823] : left promiscuous mode [ 446.836789][ T7823] : left promiscuous mode [ 446.915220][ T7823] tipc: Disabling bearer [ 446.922557][ T7823] tipc: Left network mode [ 447.090384][ T7823] hsr_slave_0: left promiscuous mode [ 447.118563][ T7823] pimreg (unregistering): left allmulticast mode [ 457.756449][ T5942] Bluetooth: hci3: command 0x0406 tx timeout [ 465.907064][ T40] audit: type=1400 audit(2000524695.005:44210): avc: denied { recv } for pid=0 comm="swapper/0" saddr=127.0.0.1 src=58442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 484.218498][ T40] audit: type=1400 audit(2000524713.305:44211): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 491.506176][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.750855][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.101890][ T40] audit: type=1400 audit(2000524741.195:44212): avc: denied { recv } for pid=0 comm="swapper/1" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 532.467340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.471920][ T40] audit: type=1400 audit(2000524761.565:44213): avc: denied { egress } for pid=0 comm="swapper/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 532.486113][ T40] audit: type=1400 audit(2000524761.565:44214): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 538.338234][ T40] audit: type=1400 audit(2000524767.435:44215): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 539.815186][ T40] audit: type=1400 audit(2000524768.905:44216): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 542.815247][ T40] audit: type=1400 audit(2000524771.905:44217): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 547.837635][ T40] audit: type=1400 audit(2000524776.935:44218): avc: denied { egress } for pid=7822 comm="kworker/u32:15" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 548.816209][ T40] audit: type=1400 audit(2000524777.905:44219): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 560.815124][ T40] audit: type=1400 audit(2000524789.905:44220): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 563.192225][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.192366][ T40] audit: type=1400 audit(2000524792.285:44221): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 572.814935][ T40] audit: type=1400 audit(2000524801.905:44222): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 583.677437][ T40] audit: type=1400 audit(2000524812.775:44223): avc: denied { recv } for pid=20021 comm="kworker/0:11" saddr=127.0.0.1 src=58442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 584.814848][ T40] audit: type=1400 audit(2000524813.905:44224): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 588.516236][ T7823] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 588.520726][ T7823] ref_tracker: netdev@ffff8880334e6618 has 1/1 users at [ 588.520726][ T7823] batadv_hard_if_event+0xbb7/0x1550 [ 588.520726][ T7823] notifier_call_chain+0xbc/0x410 [ 588.520726][ T7823] call_netdevice_notifiers_info+0xbe/0x140 [ 588.520726][ T7823] register_netdevice+0x182e/0x2270 [ 588.520726][ T7823] veth_newlink+0x44d/0xa00 [ 588.520726][ T7823] rtnl_newlink+0xc45/0x2000 [ 588.520726][ T7823] rtnetlink_rcv_msg+0x95e/0xe90 [ 588.520726][ T7823] netlink_rcv_skb+0x158/0x420 [ 588.520726][ T7823] netlink_unicast+0x5aa/0x870 [ 588.520726][ T7823] netlink_sendmsg+0x8c8/0xdd0 [ 588.520726][ T7823] __sys_sendto+0x4a3/0x520 [ 588.520726][ T7823] __x64_sys_sendto+0xe0/0x1c0 [ 588.520726][ T7823] do_syscall_64+0xcd/0xfa0 [ 588.520726][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.520726][ T7823] [ 588.557132][ T40] audit: type=1400 audit(2000524817.655:44225): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 588.564738][ T40] audit: type=1400 audit(2000524817.655:44226): avc: denied { read } for pid=5322 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 May 24 05:20:17 syzkaller kern.emerg kernel: [ 588.516236][ T7823] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 596.814746][ T40] audit: type=1400 audit(2000524825.905:44227): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38990 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 VM DIAGNOSIS: 15:20:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000401b8f RBX=0000000000000000 RCX=ffffffff8b6052a9 RDX=0000000000000000 RSI=ffffffff8da2a259 RDI=ffffffff8bf06e40 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff9081f6d0 R15=0000000000000000 RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f38616386c8 CR3=000000000e182000 CR4=00352ef0 DR0=0000000080000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f288a1b7d20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556945bf59 0000555569459610 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555694690f8 0000555569462150 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffeb080280030180 041080c0c9e40800 0100000008060601 0ff4018410000210 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0607b80301000016 100607a803000000 0700000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e00300100003d0 0300100003c00302 100003b003601000 1003010000000ca4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000210000210 00080171f0001000 0380040100001008 06060168e0000800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0138100002800401 0000000806060104 9200080002b00302 04900002a0030004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 900002900303c080 8004880002880300 0484000284031404 0002800306800400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800021000021000 080171f000100003 8004010000100806 060168e000080003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e00300100003d003 00100003c0030210 0003b00360100010 03010000000ca406 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85295155 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc9000ef0f270 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9add6700 R15=ffffffff852950f0 RIP=ffffffff8529517f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f38616386c8 CR3=000000000e182000 CR4=00352ef0 DR0=0000000080000000 DR1=0000000000000000 DR2=0000000000000009 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000301 Opmask01=0000000000000000 Opmask02=0000000000c00030 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ae2ebb374e72288 afd2d7f174aff367 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 98ebf9678318c07c 4c09fdf8d4d67319 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79babd5d121b3fc2 0325e3580a56be00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5cc3811be4103eb0 e474bf3643297f87 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8c5b76b5fa9b421 eb736416d0d6af7d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62174959dcdbae2a 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79a10e735fc49082 10de3734d36814ba ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 24a5bee200000000 f79b12d5868c9094 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 36b11fd5983c8d2c 976a3d70cd4e1665 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7cf0ada73aa3417 f47e65dca2f5991b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f666974656e3a72 5f7463656a626f3a 755f6d6574730000 303d657669737300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5566637465643072 5574636560626530 7555676574730000 3037657663737300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d65747379733d74 7865746e6f637420 745f646873733a72 5f6d65747379733a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 703d7373616c6374 20745f64656c6562 616c6e753a725f74 63656a626f3a755f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d657669737369 6d72657020726565 703d7373616c6374 20745f64656c6562 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c6e753a725f74 63656a626f3a755f 6d65747379733d74 7865746e6f637420 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f646873733a72 5f6d65747379733a 755f6d6574737973 3d747865746e6f63 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7320306874653d66 6974656e2032323d 747365642035312e 322e302e30313d72 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000032bbab RBX=0000000000000002 RCX=ffffffff8b6052a9 RDX=0000000000000000 RSI=ffffffff8da2a259 RDI=ffffffff8bf06e40 RBP=ffffed1003bd4920 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801dea4900 R14=ffffffff9081f6d0 R15=0000000000000000 RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558d88cef168 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000fff Opmask02=000000003f3f3dff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b10563cb90238c82 b56ce9312313b3d5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a433348104e08620 1b94d2d2bcce0a15 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f996595de5630a52 6088c300176035f1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2335f6d3501032fc 7800000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cca4198d00000000 0000037400000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c463599ed19d7d33 3dffb61574e81416 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffb2fe85abe0528 527b94fdd81cead5 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cca4198d00000000 0000037400000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000fa00 2cc4fe0b00000f01 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 690731f2d82a9699 9330010001009100 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff133ddc0302 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a2063200a64610a 6464203661642036 2031206120322061 002020350a366500 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001 info registers vcpu 3 CPU#3 RAX=00000000002b9fe3 RBX=0000000000000003 RCX=ffffffff8b6052a9 RDX=0000000000000000 RSI=ffffffff8da2a259 RDI=ffffffff8bf06e40 RBP=ffffed1003bd6000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=ffffffff9adabb18 R12=0000000000000003 R13=ffff88801deb0000 R14=ffffffff9081f6d0 R15=0000000000000000 RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558d88cef168 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010444000 Opmask01=0000000000000fff Opmask02=00000000fffffbff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e0d99afc43125aa 1a19007e3c3b12f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32d3bc6fe20366fd 62e6c9a71be408a4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38278218da82802a ece1a8500a4a706c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00b15e21ea76c307 c37fbc3f81ba9789 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eaeb5ac5b92acc4c 148e7affe2f4ab82 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5461303dc6cd89ee 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 256d66294818f732 6fa9fc5d661d8584 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8ebf190f00000000 fa2c8a057482d494 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 94b4cd8353faeb86 ea40c2c95b087390 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8209e3c94693f89d ef967718861c1d59 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cca4198d00000000 0000036600000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001