last executing test programs: 1m16.695496452s ago: executing program 3 (id=752): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@dfltgid}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1m16.694239385s ago: executing program 3 (id=753): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m15.294516074s ago: executing program 3 (id=794): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1ff, 0x80000000, 0x9, 0x3, 0xe48d, 0x0}) ptrace$setsig(0x4203, r0, 0x7fff, &(0x7f0000000080)={0x3, 0x3ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="11022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c00050002"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(r6, 0x0, 0x4000004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x20050800) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x80, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c11d58674e624c1a146558aab57fff"}}}}}}}, 0x0) 1m13.794959782s ago: executing program 3 (id=831): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000280)={0xf7ffffffffffff7f, 0x1, 0xc2, 0x6, 0x65a9, 0x9, 0x80000000002, 0x0, 0x2000404}) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) (async) chdir(&(0x7f0000000000)='./file1\x00') (async) r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) r3 = getpgid(r2) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20000, 0x0) 1m13.246740082s ago: executing program 3 (id=844): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r5, &(0x7f0000002880)=[{&(0x7f0000000b80)=""/92, 0x5c}], 0x1, 0xa2e1, 0xc) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x6, 0xfffffffd, 0xff, 0x3, 0xcb, 0x2, 0x3ff, 0x3, 0x2, 0x1, 0x81, 0x6, 0x4, 0xffffffff, 0x8, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fff, 0x1, 0x0, 0xfffff000, 0x6, 0xf318, 0x4, 0x8, 0xcd]}) preadv(0xffffffffffffffff, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0xffff, 0x7) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="000000004900000000000000010000000400000000000000"]) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000000000) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x2, 0x9, '\x00', 0x2}) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000500)=""/47, 0x2f}], 0x4, 0x2, 0x80) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000070000040"]) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100081050000007a0f00000000000000", @ANYRES32=0x0, @ANYRES16=r9], 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 1m13.052755993s ago: executing program 3 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x2c}, 0x1, 0xc00000000000000, 0x0, 0x44010}, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x2c}, 0x1, 0xc00000000000000, 0x0, 0x44010}, 0x0) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) 1m13.016033656s ago: executing program 32 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x2c}, 0x1, 0xc00000000000000, 0x0, 0x44010}, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x2c}, 0x1, 0xc00000000000000, 0x0, 0x44010}, 0x0) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) 12.691229152s ago: executing program 0 (id=2179): chmod(&(0x7f0000000000)='./file0\x00', 0x1c) socketpair(0x3, 0x1, 0x3ff, &(0x7f0000000040)) 12.626752477s ago: executing program 0 (id=2181): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0) socket(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 12.626426671s ago: executing program 0 (id=2182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001000040"]) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r8 = socket(0x10, 0x803, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 12.32650192s ago: executing program 0 (id=2185): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r1, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mmap$usbmon(&(0x7f0000191000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r0, 0x10001) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f0000039000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 12.276330892s ago: executing program 0 (id=2186): r0 = socket$inet6(0xa, 0x1, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0xc0000, 0xfffffffe}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000100)={&(0x7f0000000600)={0x3c, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x77}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x30) sendfile(r3, r3, 0x0, 0x1) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff0a00000000000060dd282ddafe9b3ae58cf1c03db9813296471fe96db98201feffff39ffb645d936c4fbc9745434b1acf121b696933f097b7804000000000000009fcfc4b17db2e2354bc5f402059a4352f6711cfd83b6132dcd1fa2581200000000000000"], 0x58) openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$cgroup_devices(r2, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0) open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) 12.204250302s ago: executing program 0 (id=2188): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000200)=0x8) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pwritev2(r1, &(0x7f0000002640)=[{&(0x7f0000000580)="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", 0xff8}], 0x1, 0x7ff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf251c00006576000000000000000b0b00010000006b89f72a4b0ddfb5bff047000000000000000000000000000092c2a8863f42c60c8a8a3df9059ac5f2a301c9acbce9f04ff70b4dbfc3d27d9b84d1ac2122ccf7228072901dbf619cbdbeea12b470878a3288bf57c96b1f797d1b692900d7b489a5cb2dcf0dc6d027b32680914118a063301f21caf7493d8c46630ba5736c0d3a735609e45eddc1a740689006f104f9a131f7e1709e1e1e36876e033e4b259207d265f2a61afb3f"], 0x3c}}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x0, 0x20, 0x9, 0x0, 0x0, 0xf2, 'syz0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000007b1148000000000085000000c4000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) socket$kcm(0x2, 0x7, 0x106) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x3, 0x2, 0xbd, 0xe9f, 'syz1\x00', 0x3}, 0x3, 0x10, 0x7f, r5, 0x7, 0x3, 'syz0\x00', &(0x7f0000000240)=['netdevsim\x00', '#%#@!${}\x00', 'netdevsim', 'netdevsim', 'devlink\x00', '\x00', '\x00'], 0x2f}) 1.275572069s ago: executing program 4 (id=2355): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-serpent-sse2)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80800) (async) r5 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r3) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) sendfile(r7, r7, 0x0, 0x7a68001f) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r10, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r9, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a333143b6ae9"}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c10349044b"}]]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.186211571s ago: executing program 2 (id=2357): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) 1.185699569s ago: executing program 4 (id=2358): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r2, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2]) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x61c8a6e6) 1.176146929s ago: executing program 2 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="63cfa10e9aa69be49a1236f7c82b3bd041ad12255db5a6b8d2c7614229c30a7165f520eea3e3ee0aa5c41b7b350cd9eab6c29b2446b53f89fec3a1d41abb9cf782679973b1898271469d6d80bbf68704811a04388be39fdacb4a1eb3798d528a2d08ec095939ed71c9b1a070369d4a5a4a51bc0964a8db1e0f877b172a8ff5538de3d199837cc9d2c3b9fb8d16", 0x8d}, {&(0x7f0000000140)="abf7db99b65559bbf3", 0x9}, {&(0x7f00000001c0)="d0860023f7ccf9645c7528427c1bb28bfcef53b64e2a7199bb76233024e9e546e771009e9d361844ecdada5fce6a3b398c1eddb2154357a7c8ab1fcb", 0x3c}, {&(0x7f00000002c0)="896db1ac1f7be76a35f54da528086ee0f73cdca58a56c86e8536574c9e3c4b98afe83a6a6df8f56b7f50d885ab2f48ab29d79788fdea2017d09a4ba0c9393564c0603ea2b9a5bf2645b76fd89fed5475a6d7285114dba8f678884b0a8c1c07814015b0e77580b45791ec480f9357f02a7c695103ec9a2a4506fc3f645cf49b2ae1c2ff236e61e0615d4ac6d71bf8b3103aaaed40737bca5154e94ea87569cae15dd7d9c73f18bfb7fa8136296b9d7e87e6783f6fb31bc15b", 0xb8}, {&(0x7f0000000380)="a3b8717e2964f35b033b659dbf30813819ec10a7b8004086b1e6671fa045763794a3c5d62a90d0f6d5c2ab693e3a2b6435717aa1bc73142f30f5ce7e15c386819266373c2aca551b90564bb11da9d71e29cc5148a21a99d2fccf20b74740c4b0dae234dfd791a2a245436b7cbc6e454d79df831340e600a17ae75f589783c33f0642b485c0c3482a988dbf2551f2d65cdf3981bcbce9ea9d46dca5d7939b011807a61472c28fcba8aec795677c62fbfea550fedaf5e937e66be992d6ec6913372a45c4e0406678f6de67bc3c38e0ac9723fe6e2b92f20cfdd0651c7305bf12f17ea9e35af639fdb45fa5699bb8f538d8594d3a84461669b1c3", 0xf9}, {&(0x7f0000000480)="e3feafc1bf282f3e53a1a11536f11ab5340d39fc6bea56dfffe55b7b5f845669d64a142013e4362f5b318d9211deee5429f97f63a85d556547602e1a5120146873a2e2078245f9f6b8e7020a83bed89f17983f5054561f32ca405a2d243c4d274ad4fe31da1c0d8b8572a09af5f49b1a1ca4b5edf256fde76bd380f559936ddc1577e4697d9dc9695a2857013f171d779c845e9d9ed4adf0bf4ce226ddadd016cc199df62877d33a45299b97bcc1c4100c88e9a7", 0xb4}], 0x6, &(0x7f0000000540)}, 0x4) 1.172355116s ago: executing program 4 (id=2361): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x94) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f00000004c0)={&(0x7f0000000480)=[r3, r4, r5, r6], 0x4}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3ff}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r7, &(0x7f0000000380)='./mnt\x00', r7, &(0x7f0000000340)='./file0\x00', 0x5) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES8=r6], 0xa0}}, 0x4044010) creat(&(0x7f0000000740)='./file1/file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x20000, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) r9 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1e, 0x80000, 0x74) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x85, &(0x7f0000000540)={r11, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0413c5000000000001090224000100e0ba0009040000010300000009210000fd01220700090581030004000000"], 0x0) 1.09616218s ago: executing program 2 (id=2362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000005480)={0x0, 'syz1\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x0, 0x1, {0xa, 0x4e22, 0xffffe540, @loopback, 0x80}}}, 0x32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r5, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r2, 0x6}, &(0x7f00000003c0)=0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000f80)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xce}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@union={0xb, 0x3, 0x0, 0x5, 0x0, 0x7, [{0x0, 0x5, 0x800}, {0xe, 0x0, 0x7fffffff}, {0xb, 0x2, 0x2}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000027c0)=""/4096, 0x4c, 0x1000, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f0", 0x1}], 0x1}}], 0x2, 0x20000010) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="8e00010003"], 0xa) 596.355292ms ago: executing program 4 (id=2365): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000003040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000003000), 0x201, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt(r4, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x5}, 0x8) fstat(r2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) r8 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) close(r8) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001000)=ANY=[@ANYBLOB="24aa332d18f5831457a844acd15d600000001a00010000000000000000000a000000000000000000000008000300", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 596.083728ms ago: executing program 4 (id=2366): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0801100000000904000003fe03010009cd8d1f00020000000905050200de7e0010090599494426a8bbe4b1b210dff6fe023fabc73b665eab7b38403ef18c24d0f6e396e3df9dc4776a0baa9ea0cec997f2894823c5b0d2e6ecad86d7d181e222214db60085a9dc0c374482692c9b62a4cba5aed3168e5041aa224ebb0b8eb2cc8f95b9e27960d6c24548297662b7c365130ec8945178883f74d3bd6c3b1d166c80fa517aa298021c195def864e49755da2959c25385b8aae019079a702"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40088d0}, 0x240000d4) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0xffffff6b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000400)='.dead\x00', &(0x7f0000000440)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r4, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0), 0x0, 0x1) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000500)=0x9, 0xffffffbb) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) 495.96261ms ago: executing program 1 (id=2368): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000003b00)=ANY=[@ANYBLOB="480000000b1402002abd7000fbdbdf250800010001000000080003000200000008000100010000000800030004000000080001000300000008003f000400000008000100000000004d25163d0b514a7743"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) clock_gettime(0x0, &(0x7f0000003a80)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000003900)=[{{&(0x7f0000000380)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f00000006c0)=""/199, 0xc7}], 0x3, &(0x7f00000007c0)=""/188, 0xbc}, 0x2}, {{&(0x7f0000000880)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000900)=""/86, 0x56}], 0x1}, 0x8}, {{&(0x7f00000009c0)=@pppol2tpv3, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/247, 0xf7}, {&(0x7f0000000a40)=""/144, 0x90}], 0x2, &(0x7f0000002200)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000000cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000d40)=""/188, 0xbc}, {&(0x7f0000000e00)=""/207, 0xcf}, {&(0x7f0000000f00)=""/172, 0xac}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000002080)=""/105, 0x69}], 0x5}, 0x3ff}, {{&(0x7f0000003200)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/4096, 0x1000}], 0x2, &(0x7f0000003280)=""/215, 0xd7}, 0x2}, {{&(0x7f0000003380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003400)=""/233, 0xe9}, {&(0x7f0000003500)=""/143, 0x8f}, {&(0x7f0000001040)=""/19, 0x13}, {&(0x7f0000002180)=""/42, 0x2a}, {&(0x7f00000035c0)=""/254, 0xfe}, {&(0x7f00000036c0)=""/189, 0xbd}, {&(0x7f0000003780)=""/30, 0x1e}, {&(0x7f00000037c0)=""/144, 0x90}], 0x8, &(0x7f0000008040)=""/4096, 0x1000}, 0x7fffffff}], 0x6, 0x40, &(0x7f0000003ac0)={r7, r8+10000000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_CMDTEST(r9, 0x8050640a, &(0x7f0000000040)={0x0, 0x40, 0xfffffd3e, 0x3d50, 0x2, 0x400008, 0x1, 0x9f, 0xffffffff, 0xe, 0xffffffff, 0x1, 0x0, 0x0, 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r11, 0x0, 0x0, &(0x7f0000000140)="766bb0bc8e9a17da1bebc9184c9e615127ea023dfd5859ecdb6415676da4ab716a961200a667a2ffbf3906c3028e66ee26474b1bdec68944b32013f632bb1766539ba0eff18d860f3518bb3623863b8dd966ff420927f793ae773e5f7ade76366ff9a7a4a279bc4358360697f7019b9b210c3b0ffe99e4eabb74fa6aef3a9b11ac028603094eebbb2f7c7267beb6425bbbb4b96191c258c934697f430c9daa65529da47ffba9375b7a9d76250e8bf0951f759f6ac1a3829efbfff93a33d22c411dbf2a2a3ad8e712023080e22879c8e92752da58ff6b81370f3c", 0xda) socket$key(0xf, 0x3, 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r12, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000018fcffffffffffff4d02000000000000faffffff000038000100fdff7f000808030000000400000007000000000000000a000000000000000101000000000000060000000000000007000000000000007fffffffffffffffdb55a3354ca6d746db00abec75c7bab5a753e28de04049bfa713bf4cef51bb53d0ad"], 0x9a) close(r12) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r13 = accept4$alg(r10, 0x0, 0x0, 0x425d9e32a55478b9) sendmmsg$alg(r13, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000021c0)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000003c80), 0x0, 0x20040884}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003b80)="52e9ecbe49348ffd85ac835bdf3a4bdad005197085241f484b83da36b8d84e32a351ea0885052bc86d9d7a30b0168c004d5381a593a015b47f32ca36f5e77dc88b0ec522fe49c5b03860811f0c8ccb5b3930fd71ce701586a9aad35f540c4e6e27b82fcc62122f202572708ece112c3bb6b8e9a6932de26ef23fc8439f9403cd7a3913a5683a8e69f67eb6085a5b222846a7e5cb740ec81715aa1c60a1febc1c9c7e6a31ac888aa28f0b86646d3f7df9a4fccd41cb61", 0xb6}], 0x1, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0xfffffff1}], 0x18, 0x800}], 0x2, 0x80001) recvmmsg(r13, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0) 395.600723ms ago: executing program 1 (id=2369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x26040090) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x8, {0x20, 0x1, 0x80000001, 0x3, 0x8}}) 393.321095ms ago: executing program 1 (id=2370): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r1, &(0x7f0000001ec0)=""/142, 0x8e) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000440)=[{{0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{}, {0x4, 0x1}}, {{0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{}, {0x4}}], 0x48) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000640)={r3, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000600bf090000000000005509010000000bb1d1dcbf2cfcb90000bf9800000000000056080000ffffffff8500000007000000b7000000000095000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f00000002c0)={0x3ed, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/182, 0xb6}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/23, 0x17}], &(0x7f0000000280)=[0xd], 0x6}, 0x20) 336.087435ms ago: executing program 1 (id=2371): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x80000000, 0xb9, {{0xb, 0x4, 0x3, 0x9, 0x2c, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x17, 0x81, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, @empty]}]}}}}}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)="92", 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x240488c4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000200)={'gretap0\x00', r4, 0x1, 0x8, 0x8, 0x0, {{0x8, 0x4, 0x3, 0xa, 0x20, 0x67, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0xa, 0x3, [{0x8, 0x4, "5bc8"}]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) (async, rerun: 64) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0xffff}) 235.255159ms ago: executing program 2 (id=2372): syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xffff, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x20004044) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r8, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000000001c001700"], 0x38}}, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r11, 0x180000000) (async) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 174.135157ms ago: executing program 1 (id=2373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0xfff2, 0xfff1}}}, 0x24}}, 0x40004) 173.853788ms ago: executing program 2 (id=2374): arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030528bd7000ffffffff00cf0000", @ANYRES32=0x0, @ANYBLOB="8b800000000000001800128008000100677265000c00028008000600ac14143a08000a00", @ANYRES32=r2, @ANYBLOB="25043d576e76e12ae2ed4ece076a69d9053204d31c660aee3bfca884f21b1c5701b8168b62830d956f95fa8db65f7f2a5c706c6dcd5fc6f96fbbfcc5e98c8ca1191008e6018f73af7473e5434215eb4bc7a8c0d1df18d5e0535ac3f88436325e3739a84f6d15e35124c784fb60dec205da85881e9a971972da80e1bad2ca4f4295cb42769062ccdb681e5692"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0xfffffc76, 0x32, 0x800, 0x70bd2b, 0x255fdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x0, 0x1}}]}, 0x54}}, 0x20000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08"], 0x122}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000300), 0x3, 0x4080c0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x101]}, &(0x7f00000001c0)=0x6) prlimit64(0x0, 0x2, 0x0, &(0x7f0000000400)) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r7, 0x11, 0xb, &(0x7f0000000100)=0x5af50c0f, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xaf315f30e86e748f}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x44c, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x418, 0x2, [@TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xb31, 0x1003, 0x0, 0x300000, 0xca88, 0x700, 0xe969, 0x2, 0x401, 0x6, 0x400000, 0x0, 0x3, 0x7, 0xf, 0x401, 0x3a0, 0x3, 0x5, 0x5, 0x5, 0x2, 0x2, 0x3, 0x8, 0x5, 0xffff8040, 0x1, 0x5, 0x6, 0x9, 0x2, 0xfffffffb, 0x2, 0x4, 0x9, 0x8000, 0x1, 0x9, 0x1, 0x10000, 0x2, 0xffffffff, 0x10c94d8c, 0x40b4, 0x4, 0x4, 0x8, 0x2b25, 0xffff, 0x6, 0x10, 0xffff, 0x2, 0xe, 0x2, 0xbfe, 0x8, 0xa3, 0x6, 0x7fff, 0x64f7587e, 0x9, 0x988, 0x5, 0xcee, 0x8, 0x9, 0x9, 0x4, 0xfff, 0xb5c6, 0x101, 0x4, 0x9bf, 0x7, 0x10, 0x2, 0x4, 0x5, 0xd6, 0x6fb, 0x9, 0xf, 0x400, 0x2, 0x10000, 0x6, 0xfff, 0x9, 0xc, 0x7fff, 0x8, 0x5, 0xd949, 0x4, 0xc, 0xbfba, 0x3, 0x5, 0xdba7, 0x8, 0x25, 0x80000000, 0x8000, 0x2, 0xffffffff, 0x8, 0xb, 0x3, 0xd0f1, 0x1e, 0x8, 0x4, 0xfffffff8, 0x9, 0x200, 0x8, 0xa, 0x3, 0x25, 0xffff, 0x1, 0x40, 0x7dc, 0x3, 0x0, 0x5, 0x4, 0x2, 0x81, 0x8, 0x8, 0x9, 0x5b, 0x74c, 0x5, 0x10001, 0x5, 0x8000, 0x7, 0x5, 0x4, 0x316, 0x8, 0x7f, 0x1, 0xe, 0x2, 0x3ff, 0x9, 0xffff, 0x3, 0xffffff64, 0x9, 0x6, 0xfffffff8, 0x0, 0xfffffff3, 0x10000, 0x8, 0x8, 0x3, 0x7, 0x3, 0x1ff, 0x5f03441a, 0x8, 0x0, 0xf, 0x5, 0x7, 0x8001, 0x3, 0xfffffffd, 0x7, 0x7, 0x2, 0x98b, 0x1, 0x0, 0xa, 0x74, 0x4de, 0x4, 0x1, 0x1, 0x6, 0x1, 0xc360, 0x8, 0x7, 0x4, 0xfff, 0x1, 0x2, 0x5, 0x80000001, 0x80000000, 0x5, 0x9, 0xabf, 0x18000000, 0x3, 0x7, 0xaa2, 0x4, 0xd, 0x7fffffff, 0xdf, 0xe3f6, 0x7, 0x35, 0x6, 0x8, 0x1000, 0x0, 0x2, 0x3ff, 0x8, 0xffff7fff, 0x5c, 0xff000000, 0x7, 0x8, 0x1, 0x41, 0x3ff, 0x6, 0x7fff, 0x6, 0x2, 0x9, 0x2, 0x3, 0x4, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7fff, 0x1, 0x3, 0x1, 0x6, 0x9, 0x7, 0x2, 0x1000, 0x2, 0x10000, 0x4, 0x0, 0x2]}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xffe9, 0x3}, {0xfff3}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240508c8}, 0x40004) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f00000004c0)={0x0, 0x3, 0xffffffff, '\x00', &(0x7f0000000480)=0x3d}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 5.462563ms ago: executing program 2 (id=2375): r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc9) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000e00)) (async, rerun: 32) fspick(r3, &(0x7f0000000040)='./file0\x00', 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x44, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x1c, 0x2, {0x3c, 0x2, 0x4, 0x1, 0x5, 0xe8, 0xfff, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}]}, 0x44}}, 0x0) 3.762568ms ago: executing program 4 (id=2376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x2000c045) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000004100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000040c0)={&(0x7f00000002c0)={0x3da4, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_IES={0x284, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x218, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x93, 0x3, "ec6b96c5b3f7d607cb5e34ea6f3ff32b84219990d7ff51f34b442151b0d522df2e16da35fe0d87a4200e629898511d19d01af358f5478758cbb9ef194fa9887b274f39a19f23ba5d268fe26dea7458e91ce5619b2d2aa8dfb67a5542bff22a840a9282019d6146375e4cb4c9da0876c506e28be95ac95916f23323d22004f1e6eabf3bad2f1126d500e168527b7a92"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "9d52569b7e31d7971bf97c60551b9b2ea383c847bc1eec87a311d6f4e3f3601b0cf3a02652d08619dd8129017250913afb16613f17f2e1b76411a17524ce5513e41254a6d5b195e00439e161ed9c14db573b41fb1ff3f99b97b00a34948c0106f222e501797db72d922e3dc6c9959131ab98d28360404dc596203280815fda65f1a3c003ce46b29911b3453c383c2c10c722d33432984a"}, @NL80211_FTM_RESP_ATTR_LCI={0xe1, 0x2, "d498ad664a1b3757c11781d932267238e6990b73b88b7764015039410d7f4ac87adb78ded1e667cc46e5304aa32294dc4b3b94fade447ce10966c5187983d99d579024deade6443c284e344941a91929e0f3b5900841900034dbd284fadb24942eaa9d245b5ffa0139fdefc04f815b8e8618589a46dccf0c525f96ac9c446a3ea17fbaf3de7e0e9439ac7c8f9a04f25717a3e0840de8d8c48021a6dc6cf616e561091d4600992bbf0c8d1a2b698a3f6fb2d9c138ff39a27f2bc278d3f5d51eba228859b26127c7524df65f987cb5e3fc19e44a4fee3ab42113564523c9"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4d, 0x80, [@prep={0x83, 0x1f, {{}, 0x93, 0x8, @broadcast, 0x0, @void, 0x80000001, 0x9, @broadcast, 0x7fffffff}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8, 0x24, 0x7f]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x3ab8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x200, 0x0, 0x7, 0x5b38, 0x6]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x145, 0x7f, [@ht={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0x8, 0x4, 0x0, 0x2}, 0x1, 0x5d, 0x1}}, @perr={0x84, 0x82, {0xff, 0x8, [{{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0xe}, {{}, @device_b, 0x101, @void, 0x23}, {{}, @device_b, 0xf, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x86eb, @value=@broadcast, 0x24}, {{0x0, 0x1}, @device_b, 0xfffff74a, @value=@broadcast, 0x10}, {{}, @device_b, 0xffff, @void, 0x3d}, {{}, @broadcast, 0x2, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0xe}]}}, @channel_switch={0x25, 0x3, {0x0, 0x88, 0xac}}, @random={0x81, 0x77, "d179d549aba68d49f3c86038fcd053c692da4aeba539aeac9e3ee94e35c39f6e16693e49b2f7bfae2145f6dd608a142bcb450a442e7d641d8ee66f79f210925df69c6dc9c771f602747b2b0050d66a242073e7ebe4fb30b576a31702b3920148582f01c4db480ee4bdf15da60a33ee707ab6ba93cdb80f"}, @ssid={0x0, 0x6, @default_ap_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x6, {0x0, 0x5, @val=0x40, @void, @void}}, @gcr_ga={0xbd, 0x6, @device_b}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_PROBE_RESP={0x2fd, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_PROBE_RESP={0x1aa, 0x91, "fd3210a4682a1a67f6a0f730faf8050b78fbe5164deed68905298ef9a2dbc8042c2b284a7ad147af283fe38768c2e51e2411674ab18954391e1a39f14902af2f4b620c6849e82ce55392a2a16ba22bbc953df5e72c9fa63b874ac378e1836af8353c0f462b9df446f0a37294fdcfba7e22197956c50d4f97acee4cb476c42e8bb6cb7fe8b228f9f1270fee0accb4a436838cdc21f69911551c9431e24a3c1f5610f9983e6daed572b5cba327539ac438d19973fbfbf20059d31ae0e7902ee64ce280c87884eaedbac042dd522f3ee5a265600450c30849db4239131a847381150a0eda6e4b577aa3666100c0f98f63f8df78b2999f1368299b902d21bd227318824322240664ccb21c8f71e598b6c2c4aa9d2d5b25dba58902e43f675e3f77d56be0c2065e14a6e7cf21dbbf07eb907642d9807de122df51f779348eed24e71e484c08460acae683c95c64608f6e52ae54a7558b68dc8307b840ed5685c3529e6ab3f8ee4cde9f87d7bb56e051562586c3c56e5e98bd408488577f8da60f5abc7626a5b610cce4bc18c8da6f5b8328194320d3a3a4eaafa6c7d107dbf190a2c94908ba0de8df"}, @NL80211_ATTR_IE_PROBE_RESP={0x1b7, 0x7f, [@perr={0x84, 0xc2, {0x1, 0xc, [{{0x0, 0x1}, @broadcast, 0xffffffff, @value, 0x1d}, {{}, @device_b, 0x10, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x13}, {{}, @device_a, 0x9, @void, 0x1f}, {{}, @device_b, 0x1ff, @void, 0x37}, {{}, @device_a, 0xdac9, @void, 0x6}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x1c}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x17}, {{0x0, 0x1}, @broadcast, 0x380000, @value, 0x8}, {{}, @broadcast, 0x1, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x101, @value, 0x3f}, {{}, @broadcast, 0x3, @void, 0x3d}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @challenge={0x10, 0x1, 0xd8}, @preq={0x82, 0x78, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x1c, 0x4, 0x60ff, @broadcast, 0x908, @value, 0xfff, 0x0, 0x8, [{{0x1}, @broadcast, 0x4}, {{}, @broadcast, 0x6}, {{}, @device_a, 0xf}, {{0x1}, @device_a, 0x9}, {{0x1}, @device_b}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{}, @device_b, 0x8}]}}, @tim={0x5, 0x52, {0xe, 0x72, 0x7, "ff3bc5c43ddced0ec071995c0b455ee717ce26c65f3bac5c552859830a37c58b25bce44c909d2b3269f10b0e3164e2f7facc0c38aa77cbd6247b2125e8ce5f3bb24992c4b9081ad1dbf2fa0ed78842"}}, @dsss={0x3, 0x1, 0x68}, @cf={0x4, 0x6, {0x10, 0x4, 0x40, 0x3}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @cf={0x4, 0x6, {0x7, 0x2, 0x0, 0x9}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x3}, 0x2, 0x6, @broadcast, 0x0, 0x7, 0x381}}, @challenge={0x10, 0x1, 0x2d}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x1, 0x1, 0x0, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xa4ae]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0xfff, 0x5, 0x2, 0xfff, 0x1, 0x8000, 0x8a0d]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x4, 0x1, 0xfee5]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x10d3, 0xf, [@chsw_timing={0x68, 0x4, {0x5, 0x2583}}, @random_vendor={0xdd, 0xa0, "c288c81f00f239716013899db16094b8197ee8024ab4c2c4149a6d668f92743d887e38b20d0e82069d5606b54409602df1c7583c185c646f57e105a8b0116bf20cce1cda5ed694c04b35f27cc46d790d327d79e56510c5e01b2c3dd98e1e4676ecedcc754b67ac5abf1cd81bf4bd282a707ef8340a7ae90bf7fd6da706dd968f9b99a8037898255b822b50da6efe2dc03b06305a245c3ab66415fc684e08af0a"}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0x3}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x66, 0xbe, @broadcast, 0x7, 0xb, 0x2}}, @measure_req={0x26, 0x1003, {0x8, 0x8, 0xa, "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"}}, @dsss={0x3, 0x1, 0x2c}]}, @NL80211_ATTR_PROBE_RESP={0x891, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x18d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2d33}, @device_a, @device_b, @initial, {0x6, 0x1}}, 0x4, @default, 0x0, @void, @val={0x1, 0x6, [{0x2, 0x1}, {0x48, 0x1}, {0xb, 0x1}, {0x1b, 0x1}, {0x6, 0x1}, {0x9}]}, @val={0x3, 0x1, 0xb0}, @void, @val={0x6, 0x2, 0x9d}, @val={0x5, 0x65, {0x6, 0xdf, 0x3, "635a808c0c9376b72189d1f025b3be1dc7e21230b8fe36b7af4c9900fd6269976ff05579bfe2f60a1b0be0e546fbec97212f2907ed7997e065f79fd1ecaff9a9a93f6a90a363768220357efaaf49c322fd43f518002d3e365440544395164a4fdc34"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x810, 0x2, 0x0, 0x0, {0x7, 0x5, 0x0, 0x2a3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x3, 0x47}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x20}}, @void, [{0xdd, 0x4c, "7a7b3afa2948f688990de5e64ce251d1c15945269d6fd3bc8932a5bf2217596961570a97f9e483287f9ced89fd0f7d662f8f8f846f1577dae9230a63a956c222a1e066212b021f75d7091754"}, {0xdd, 0x6f, "17bd89ea5441288a7119d5e5451b1e9465dfca4c664e293d11618b98309d67a845e3db3a4f9c0069acdbf4546c0f76166ea9e67aa5aab86e1663f5da3d15d0d0cd6eaf585d78c623fa16aa98c68258a6ca765913d2fa45e6f95dbfa6ec538c00da068eceeecff6b3338745f57d771e"}]}}, @NL80211_ATTR_PROBE_RESP={0x603, 0x91, "e222c0e271395d65fd84ccfdc615cde7b1a1a91a999b5b054eacf901b95dcc4ef836de241a957ebfb421078415b7415a838956a56c387c4bd69b37474cad060517f322389644e0343535a491b3cd5d31a7757c9a02e6c6e2ab556a79f4473d9fb7eb4032681728906ab69307d032bae7d16d66f2688553dbf0548637b4ab02593256ac900634b9eddd3e6eed8673cc6f7967c94326ef415e9c2154ff34ec45d4cd341ee7d0f76e170c434723fc912f797ee23c47183be5ca9e650aaf7a4a2ba516c04ba3e60f604cf5bd125b4008aaceb1a6e8ae435ad1dce7bc7fc7185998c7096a877199cbcd447c08f08e995657c7124514379413e74196221624566a02fb99e2a46dea7a9571710ddd2831b2f37c0835cfec3a08b53c3d5cd2d190dc50ef4545e8af7a6f8100b88dc0b87909534207de56e6d7053f72b2a97fb2d7721c6a45c8de9655e626d674584f42f6a110bffbe1437308b13dbb4ea1cad88850015e6dba16b044645f00fd9dd8ad06f61a713938fa70a4ab06d0f05886e423c7fe089fbef725c5938c1707d56a55a614e8a5252fff583d8bb7e09b5eb8ea28819d14650200d7290c3c23af6de2ad445a89b4a789be508d9019867176a59f2d948b13fda761d835a238f4470494993effb9411cf0aa6fad49b9b60f185ff2c16234aced277df1c5984a77cbfe7a08b26c9ac0527a835c56dfe7ecd8e1e8bbda00a5810424a69fd0c4b14ee9dc05f25fa607036446bd99c2568a0c88dfb6c4a3d65cabeb1f98c5c6771e860c0bca822aee5416123f5c924840f1daa783031acc4b049828013c158dc459cb728cb00d80c541121d7850238bd25e449be1946fef4febf3e1bcc3b4ad66163b3f1a9f91ed5537b2ff17d4b04b9f6aadadf79e920ad34413a7185c1405236abaf2f7dd9b9c65228291f564645d41df62b23e1cb702ad1aff994768969d1dbfec1540f06cb786b2448ae19c03bdf0efe7791ae7d6f582fa41a0e8bb2668b620843d057e76d2e77c5d806399c95e897d2949ce3b49454058ec97c881b0a3673797f47e05e5658dd1ad14b76aa3e107f7e6981ffeaef5f74067f570615354c5f6f3302005e54c09792363406cbfdbb58f4fb3f48b803c8b4b1dc4b0e9a3a922a380c99a3af6cc4da40e52d3cddc20985306438cd2e2dbc3b65d8199b0f55d15856de298119d71241317de3c39d0297406efee89b1067883c0dbf4c2e63a9e2044cf51790ac522e2ccf428b1a8febd63a3549812ec306d3e447cf7e7c64e1fcda0223b6daf189c5e154cf1fefe341a45961d6471aab40eb8cf674a6f8bb94a841753bb01811358136c15e1dcbb7047dad80d8ee01878bcb8e420fea091e0671cf0ec8552c7eecc0ff3347a9a5860d26f8711dcc3e9a13dd0f01c1b77895f5ceaa084feb323e25e2de67d1b9721be3c5a48d2f5ad682e6603a237af148e93b01d2aa6547acd42097face7f1b3c1efe46e4b686ad5bf327ad81c76cac419a26113aad653488ec97ff6cd680e6e1f97ed62d8b298298cfc5900f99236d0c492756a0f1f05be94844e768308d804f607d544025e4fcb53ec9d16a5183b85dc0995dac3f0cbf47b11ad7f862521b15ca890292cccaf073dad9c7f8eb714c1766e75dbe9af606394161ec25557bc537a0e8f10a748a53e877c64a0f73e4d2d148cf9731008aa147f2b794fcaede09b93178ca8c8b3354f71706244074ed1a59068d75e1618282d7106cef46ae437d350dd80d2ca9de323e4d2c111229b4cd6af5e843c297909ba5f8606605281127fdbe6a03b4d53c31b6a268f782d7fc5832dbedbfb475d12e61a1fb419472c194c184c839f05a4c13b50c2c503c04ccfadda29a504f2886de84c921af6359dda648d772bdf3df3a58f92d30ad8e264318f1fc3ff24f9cd309e0ef2892aae0e49a074a6996c51a83f036c8a7b8fde79793a584acccb38327e55b0a0f5163a0858a845b7bf242977e45675b89df89d4ad50b5405cb33a9f666eafe0afa418ee08ae19e9607c9e12d3b324570d9d420d6f06c49d724147e8ae0b7dcf8a078b7d57a86fe3e010063ff925c1bf7ae3a2bbeafc6d53138d0781a2c3f1594532f392fff79a34dcb7ab3ae2a155ddf45137062ccfe226fab21f5050b933c8030d75d149a4b0bcaa31a5a8eebb36e6d3ed5c7"}, @NL80211_ATTR_BEACON_TAIL={0x11c, 0xf, [@chsw_timing={0x68, 0x4, {0xff39, 0x2647}}, @mic={0x8c, 0x18, {0xdc3, "3a46ccab2d80", @long="f6882a1dd2b9383be7270eac982c15cf"}}, @fast_bss_trans={0x37, 0x8f, {0x2, 0x3, "1463c4ea61cb643ba7c971f001f056fe", "5b1e47f6ef7a99cc75f52b625e22d83424c3c413a6230c4576092776cf2d3a29", "34a2083e882a78128d05cd724aa6cb6afb7dbf7220f4af6a60acb8f5a24267a3", [{0x3, 0x11, "130117e9e7ebd0b794e75ddcf8dae7731e"}, {0x4, 0x17, "4590f35b56909418c4f02ff40d6ec87735604c700c6f66"}, {0x3, 0xf, "e1e64df176e81929b52a1312bf2c7b"}]}}, @ht={0x2d, 0x1a, {0x20, 0x3, 0x6, 0x0, {0x10, 0x2, 0x0, 0x82, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x1, 0x7f}}, @random_vendor={0xdd, 0x49, "191d89ae5233126faedb5beb2ff5558411968692e9c2a61e89aadd90eab58c25d0f04a6426af1f275712f001692f6f1b812a11295765a509d594b8808f3d587baa3b24b8c4c969d4e1"}]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x326, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2f}, @device_a, @broadcast, @initial, {0x0, 0x9}, @value=@ver_80211n={0x0, 0x81, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, @random=0x1, 0x48c, @void, @val={0x1, 0x8, [{0x9}, {0x48}, {0x48, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0xb}, {0x3}]}, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0xae, {0x3e, 0xf2, 0xd8, "5f8e783f3ba5496f3b8d34d047391d03eb5b8bc28d0aefd01d6029ad445092d2f8181c66b1537ec30a17b51cb5b7746c86d52afdf73fcb9b76a0aade613ae335346b9019c9832526d7bb8d2d51535f5d0c91a2c4b2055b6e8ab4fcfc567aebf915df33ad34ffc4cb2d454b41ea44056a7f42481b2390cbe48933d6e95d51ebb0ada4db9be51725f5994ab9d394f9e23430ce645a9a9504905c6fea571ff76131ab304cab1d4e1b5be547d9"}}, @val={0x25, 0x3, {0x1, 0xb1, 0x36}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x21}}, @val={0x76, 0x6, {0x6, 0x5, 0x10, 0xfffc}}, [{0xdd, 0x26, "3ae27eb0128c7db3d8384c9fa7229eddd149f3fdb2e1d52629598c0378d1e6e988790f3a2218"}, {0xdd, 0xb3, "57f4b78441745aac933d92686136d3963b9d42b0850dc13fc0023bb8f7c197193617f1f41d9ebea2750496d7a6c9e93a59d0b416926bfa60129b175a80ac788a3e11f5f5b38a3c8e662780692e3419f460c1601a520e823d68db56043b482ecfe1110cf42cb095f7c183b6014d51fa5a85b776445bcde21855cd4d8ed12b0645b3fc10e49c6ddb4e9828aadc68fc39dee4cb98b6b22462c7f3dc26913010dd3b82ed7f744d098fb02cef37538d2ae3449268f9"}, {0xdd, 0x3c, "47d8c9561189db48ee42b98dfe90180e17af37829177d71310ad19bef2cdb3546e4dd6e1c8e8792bf18405015daeadb40c6385339e3cc2a556b0686a"}, {0xdd, 0x18, "273f9186abb15f4005beef9cc79aba66682e37217d7d952b"}, {0xdd, 0xe, "91314df03888fcb9a4da9d21e0a0"}, {0xdd, 0x7, "aad9cfe45555fa"}, {0xdd, 0x9f, "9644ba4ea1090634521dcbe30f3448fdaef30c7b3cb81cdacbcbaf20b2d47e22ed847ea3b756da8896a091eb77719c5bebfa48fd9d1987991ba77f5fd69cc6e7e8a600fa332a4f9cc1f0280610e2ba989535fb86f91e51e5bb909cb7261ebf4c90d6ec4f9711978543bb85ca2c3a49d64fb804e15003da65e27086b85baa280cf4f58baa723f134aee5fa42887115d9a67a038483160ed4e40cfcc4207d311"}, {0xdd, 0x12, "516aaf7ae5870609f78e5f2a2e7b0af7b3da"}, {0xdd, 0x19, "6196dcba20611b0cdeb500dd58abd0480f7ce904edd8950428"}]}}, @NL80211_ATTR_PROBE_RESP={0x32f, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x456, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x5c6, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_b, @random="b5d3b2a89031", {0x0, 0x5}}, 0x7f, @default, 0x20, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x12, 0x1}, {0x48}, {0x36, 0x1}]}, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x40, 0x1, 0x3, 0x3940}}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xaf, 0x1}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xff, 0x28}}, @val={0x76, 0x6, {0x7, 0x10, 0x7, 0x10}}, [{0xdd, 0xe9, "9ee6c48ea263750a669eace32efd003ab81b5f5cb523466438eb65354b608fbb8209413e87688ea58c7191f6f731e079876aa847efa37a78152fe7c67af7374242c049b6254edbe576a71306b8e9a29b1b375af414751aea82b152235043d6263ee3a617173549790ee7c944460ef4014f9bb8a04ed346e8a625259ce020854633d35aeb6a072eb76756435e849a84bfd682704aaf468c88e92325beee51edd6ea911dbcfc0146377e5d8bd2bf77def7bdaaf850ce4febffc60289457218b943d929344eb83af6e39d5db42ece7fd193ffbb25246303f3a0856e85e19bd02e3c78ae8fd33f89d34f6f"}, {0xdd, 0xb9, "b4b3b5b59574be2fc91ae4685ad87da0d141d7c987a6c994c68be5b96abb0d243cc0cba90795c8ee9543200636467a6a4ff6f74680b6319628517afc5c575299b84bed0140df11601fdbe2bd0ab289d74fc8772f7c9e62e7e9c5b30d1805d58a6ab6825686626596e0e21bd9e694380084b963fa4aa3c00508a4b53ac455c881f3ca9a8bf9f18c36483a2699874b57542267fa411367a8e5c5b7089d3f490ae192c2f3033bcc610b56a2bf3bc3dbb800e581df4e6589283aa7"}, {0xdd, 0x8a, "20d0a22e299266e00abe0671c3100ae80bad0d7e996669038859488cd4af63e1d1fc37419c248e1a5c3028824aefd22958b4dbcfdcc4ed69f6b0660eead1947a8c140dc29516832723a7e3edca73167bf5bbcd69b0802356e34d89e3d704e5cfd10bfa934a59df305e8fb168687cad49c4c27e1032b23c0bd0e3c210a08b7cd9f66261078fbdd83e7745"}, {0xdd, 0xc, "3fef997bbe11187033038177"}, {0xdd, 0x86, "bfb9d9d5774ea01e997bbcba3232dc0e2d4b3f3bc8dc7bf6f858f4203d4bf108fa55ec8177937766fe84f31c16aaff75294f09ee262a8a14e183851d953a2f139fd7e0b30b18414e8502e182acbcae9888402f1dcd270f85d9c90536c38583865a328836e3d7e270ea881cfa86bf7e3cb0c251aceb72f3f372ffb8a5c4b1d61ea70d8a19d0d5"}, {0xdd, 0xbb, "8e67b89f41fa97601b970a07f6981762226bc2eeb61b928978a73a809b1260696083c3eb66fa1654775a7e9eb1d2fc1483ed6eb84064dfef11aa94d9808e8de08e77e100dc9d5833c204acd15a516dac039db85a93de6aa25e5f4ba678f14c8f03463bc7f6082613932b01477c44fcd7bdfa50ed0618fe263e8f5e307525c5cc26e899f63684bf0aa32234aef4ee716071444461fbc7a29a1305aaf6d501b8b6c402fbb60539874c1b5b22c8f2fec75cf5cb73d2484128c7a44c65"}, {0xdd, 0x65, "435fcf84c6fca79a4fee8195ea6695f09017fd315d200ea4985e3b4d4723a3b2793b5b1f8b98291b6368750b6fca1bd7672a4e82669d47c586e066fc1501b4f3e6be0d8bb19650e81f59cea71164282914ba88d07b1f4726c04e68b8d75311d82ada5526a7"}, {0xdd, 0x56, "723449b46b16389bf8e149aee94c13a1a27c7eb17b4e40e0fc8e7b63f82cbfb227f0faf9b642e6ff28f34992003a4968720896a4d5a8089cee913a1efae88216295a7588b8ff8247cd107c6c3cec2d04f2f8a80eb715"}, {0xdd, 0x4c, "135be41df8d0f4e3723cb9841afdded546f07dcce77f195bc4f073f33fa88839cb3fa2a3d41364301e475cc96d75e5336af2d0d2df7816da12c8f4528529f98d85353442b991e4ab68b63dc7"}, {0xdd, 0xd7, "34766350fb1bf2975a09c8570d3806b48a0cd4b86490fd1dd2e49d7715239f99abd22f7c5cd6893216b955f682024282d6ec1e6a99119dbceed5ea5422408cc9d469442a21ecc66387f73981b32aa576af179b0a7c38cedfaf007d8686ff6296b1f4df8be92c12d61da4bc809842f8a98680fd4335a8ca505264ce2a9ced423452fb462028a903dd59357a13ca8c34398cb65b02314134e0c88d9fa0abcc4120fe10fdfd0cb104149fa101af085312e2b02d944058a3e74458695327ac69e851535d00c99d5d5cb0e3f41cd09304a88bbf64bed17da884"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x36, 0xac, 0x9}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x73}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x3da4}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004180), r0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x38, r5, 0x200, 0x8, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40055}, 0x8001) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000004280)='TIPCv2\x00', &(0x7f00000042c0)='\xff\xff\xff\xff\xff\xff', 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x38, 0x1403, 0x300, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040c4}, 0x81782a76d33a5b45) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f00000044c0)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x18, r1, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44040}, 0x810) setns(r6, 0x80) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000004500)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000004640)={&(0x7f0000004540)=[0x0], &(0x7f0000004580)=[0x0], &(0x7f00000045c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000004900)={&(0x7f0000004700)=[0x0, 0x0], &(0x7f0000004740)=[{}, {}, {}, {}], &(0x7f0000004880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000048c0)=[0x0, 0x0, 0x0], 0x4, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000004a00)={&(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000049c0)=[0x0], 0x6, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000004b80)={&(0x7f0000004a40)=[0x0], &(0x7f0000004a80)=[{}], &(0x7f0000004b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000004c80)={0x100, 0x2, &(0x7f0000004680)=[r9, r13], &(0x7f00000046c0)=[0x4, 0x5, 0x3], &(0x7f0000004c00)=[r16, r19, r22], &(0x7f0000004c40)=[0x87, 0x6f], 0x0, 0x2}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000004cc0)=""/98, &(0x7f0000004d40)=""/42, &(0x7f0000004d80)=""/4096, 0x8000000}) r23 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000005dc0), 0x420200, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000006040)={&(0x7f0000005e00)=[0x0], &(0x7f0000005e40)=[{}, {}, {}, {}, {}], &(0x7f0000005fc0)=[0x0], &(0x7f0000006000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x1, 0x0, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r23, 0xc03864bc, &(0x7f00000061c0)={0x0, 0x9, &(0x7f00000060c0)=[r12, r24, r14, r21, r15, r17, r10, r18, r17], &(0x7f0000006100)=[0x1], &(0x7f0000006140)=[r20], &(0x7f0000006180)=[0x400, 0x9, 0x6, 0x0], 0x0, 0x7fffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000006200)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000079c0)={&(0x7f0000006240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007980)={&(0x7f0000006280)={0x16a0, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x8}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x103, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "ba3f021d434aa19ec5aef7767559ecd77ea3599427aa6c8a3acda164b3767a5aedcdc6299ac51871626f85dd16616799d530b652fdb053fba610725a70a80416fdd97224e28836217bb55e380a316e41167c65dcf52c81d7e5b23714e25a2bd19f2a35517fd9f694616c9c0f0d273e8ac39de2dcf2c3bf0a2b373acba6987515b26346c68eeeecd6697f69b6fd055a904c58b43ba23a60c2f305bf6fe71acfae215d8e8f1303175547c0361e27bb4c04183069094eed2a577b9f4d509a41214136fe5ef10153bf6ab4f221654bd4a8716407f7d781d5491b03e71954ca481ce1d0baad0dd292aeee70e93f7339407637c1c0f9ab319a92911b199b671644677b97ca050eeb4a563cb640d567e10de6f9447f51c33c3dcacd2386456544f5c140189a8a742a1fc3e26c7a9097130165b7456013d240c03191cc6287fa044fa8f583f5dc8b3a62246c5b9860c6ced3bd3566eb7c5390a8441a217bffa6327a724b51b2df87eda3907a32580335de1213c2b2095b25de263e0660d06b54cae3ccac0d287188cfaa69388a5af85d2547b2d4a8ab27eb9c30efc5572e8741d8d4ecdde6fd336842f8d8e386e31f9b5b4082c584e74029b9c6f0ae9a65da1af06812e13bdc0eabf7f702d7efc59ca5ea401917b78e8ae51c9627ee6815dbffda32bbc09d39fe5ecdbd6a79f3991c12bd15146d45276666e644ceb77884dee502162feba3f9c4a30f161d72ac8e1c8f2887ab176f2201877fa3b5c51b2b0dd498bc187598078df171b4ce4e3d1ba6d3fc449c8d089ebba5a9d58900248070f755e10f9e8456f2e77301d3ee599b90a80d0c9decea8dbde9943f37291c63f35a2fd4df78756909c09d32460ac818f275001f51f0eeaa460632592dca47d3bcb6ac596c00907832f5ebf697a176e5ad82b6317da1dcc47a6f3823a50f49fdb56805295eb0ad1bd00973d3526b7bb56691724716025a4bd92994c4cfbe95bdf702f5861221efb938c003b05a521a3774e7412ff2d57e1db8016fb6022d0f2a90433d5f56cb7afe5519d4096d916ed1cbd80535c208195175a1992e7f5d7eb209032d8cc336cbd4b67969fe9a1678afa205a14e1a481b0d0312913a6d9912f9dfb7d04ac9e116ce1303da3f0e69b83c9159a9402e7d7d8fde0fc7bad0d1365670711c18256c48b6ab8e3757c4fae964f4aa38cc18d05e7d0224820693ef08f503a6ed758834b6f09ba934eb7cee6af2cad56716ce23f7c62c45fd68ff69900e7d366ac15f6a8b781e7125f63c9a45d86ad0b71110b260a34b73b61d886303fddfb2d25e260197b850b5d15c9000a8a9c3843cc35ec59c2a6e60b1b8ed73e67a5c980be59267b439d3c7cc253e011798f2d6140849c42a4adf16e642b6ba22868b3fcb0ddb00fef0a688abd8ef8d880887b58bf034fe77a2e9f24ac3cec4bff513a4adf112a8054dbab799721105409d4d6444af51471d0cfe703f5aac347b52c9936eb33056242ab8fa0a93115d5fae9ecaf7ea628070a0b4309a022d767f933c6c8b6501cbb77ceeabcc3133c36b52692d8730866b93ae1d92d3060f3c7ec84af7c167b7bcca2221113ba0783f7e24852b2e988cf757b8771a4deab0971977c66292808c672b85b89dfaccb73c8537e17a7b064e6809461dc746aff6601bb6d0c0b1c7b09508538bbf758a0be2ff94a6edbe6f4a118e54a1e5f50886ac639b03f3581b3bd32ea5ea0c92f8c3b68bd8ef5cb75dd58012fb3f0520faef86d5d44f9e2f8108d93d5d40cb0d7ee32da0d008417048afb7c5795fdeab51e8388a3e708cdfe9a0e21947ab5dc59c2e497a258686ecc4f46cf4df774f7b6830a7c3389f42eb56d1410155cd01209aadc76bf0390bc26089af74dc2b27b10dc02187eff2dc294db6dc7ec5ba883907939c484b6c41a14d6d1a1c2c1d87da4b8fb275745697ba4a67523f4a2886916d1d87eb21ceeb46dbafd3c9cd35b24ba8398a385ddc5675f77aa2c66bbb52595b5469d4abd070a2c0fe09f609957f58ca9ded93f5a9fd92a172961fb5d4551f0aa9dfc51061088cc9980e130a770dc5087913d8023a936346a3010129fed5d071f7f19e2e716b09273f339a5aeae875926254c4090f5a1e17c760f9306c65fb5c94355e40a506b04034697d88d0f6e895e2e62b8082daa09749466f152e313b3b5290e24ec2ad503dae3d0c88a85d16b30f15c4d6bd916b7e2ca9a6c7a74374ba6a4840b60fb44b341afc8be16bb443d755d04df73004199d61879f1a64d700a09a49290fa57ecc5d4c2d7f68b7044c08cc52915cef1933b3f67368d7e4b7f9ec51d050c2d99a470c92845e3dbb68e13ea299dab4b43c9e7732d3fd82c840455d069839d727d441d778ea437a9b565487d2d3fc10175bd5a38bb586e4b561b18c8d093ffc23302e190c06453c48a85c2e4728a70f08227044866231341cb3ad3d47f7385d2e692bef3efbb979444bc081091169659003ec958e6ab953f8e5b42ccee88ba6838b606d80d1a717f8b314f1bdb0eb2e0057ce60d53cbc08474581f478e17bd16d4149eaa8d89b11fa233ac2e8b62be5421bc88c11dce2f6953b56da699bedb43375ef41ff3ea4e5cdc73e6340401d8f553e36540e5759ccac79322705f5a05639a04dc8552600fff90f29e8d925879a9c84676d3f66752bc57ca07a52477718e2dbdd2720ea53df2660202a931508ef05c4f1184d94da2c3fdc028e050e8a14c0769d2826a6b028aa794d067f8d882cb35122f7b4f6affd03d55de7231a1e6952b8a943bea7e2a36c8fad403e037e9594dd7a966b4b506dc3d91579b6324976fb4ffe20174f3067e6685be7c8805515b4a361a592056675cc9ea614eaddbc3ad632c3ea9f85744ed251af521961de34a4162cd3049f867b6c18bdbed182c04d378d20666fe94634160c4efa0850e4b564d188edebaa019ae7ca9431b387e49d514c4208bfac37cddf0acdb82e2da5fd0e518db6a1f86f104bc824d3999e80c396067f6abd8be02ac3940f140e30762330da38970fc43b2f30344b7b78bb744947ecc216aa4cee1d88dc2fb08f171d35aa4e5a0ad0c6b2fa239a1a8a73d4cb17a450f80b15d97546e083b4585e5305ba18d914feafc6c01400ab19e74fa99c2daa80af6e25345e67014fde2a3ab5770e82856c9fb6277fc65b657bff108fc65730dbea0d1bca890bd5a417b71390e7fdb29ac630f314d2f8a72cc5618002577de9f57bd990d67f02cb202578e7e6eed496abd64ea0256a2aaf83dd3d5b595e0164d22f39d949dbce23c84604e67992c96fa7d1a6c9a01d63e7c44a96f241ad121f90c0c6e8a52345e5a74b9e421ded74a03de2d17378002fb293379ba0bad328896fbf0d88480f68c360bae18384cd811a646655a67a932770448987f68901e4657ac5e06fabd636526bf73332a4a1b6651078d4f38d438358dfb6994c7dcb51ab998f594875ac7fc261fe5bcb90632056daa506636fa522bf12aab94effa93f5b66a16925afc6b9232993f20dd74339b212eeefd49a5f24e4a2c93071b1cd5ae960ac8c8a0a06a5277b8f0f14197ecb1b21f437a1f5f6c9e8d8321dc59da4a7744fc2edd6a33d7d71f43245ef092f0bce0ced30cf40d383d729084993064f408c3fef95f682c9d6ba5dc41c41d9eef3dfdf699b852ab69ea83942fd3730ef8d186ec7e8f6fa0804cb43ac1317485662b6803653cc4e1aefe38cbb367bff57c3a763288156e7c6d28162e551fd7eee773eb642c3ac0ec47c80811f8c6444d1040e3acbd63eedaeaa34bf3f91d7da3f66b5ed67b08a7145bd00e79cabba1641f302a71838802a5a228e2597e4c6f17bdaa338503152b786f848e63497fa4b53fa26d5456292449a69b6ce27b9e9c422d91993fdb12e60def7ee6fa40cae81218b257429993bc3b8e801145359488fe778a9446a7d523c042a3f410602e3df31231c142d0911173bd64c9c309170cb58bd80884e71b497b83d288bdc82ee8c36d98b7d7a12642ea7d5d2b65443ff0b14d2c5f8dfa6bc7549243c365cd5ab07301ecec9ed84650e368c43c0f1558d1e2da127df9ebbfdc9f2af3091a52c166fc540573159c6294b51e6100905a21d6ad3ed6f7eb2c9a7c11276565ea040aa5c7f534a6eef1c0c88dde845c7860505f60e41ace0e195775b50966e7f5532d285ed5ef676b45056aeb72b654c85dec8a78be130e5798bb0805a0db5c5c1379f9a1904496245d87a62204a5803c8b81cc7cd6e5e8d2aebdd266c0bad3f561e42eba88753de736d5c04973162e5a2d6b04f37869b9e481c267e4610c7b7ad9fd614e19211389db3f2ffbcc68b3e9cd193470088fec11b9078b739fbe9f7557e90190bb32422f273217b50db67bc7de95931c5e8ec796c4fadc3538b789ce7c5f4cc65fe33728569b0c31a70a0cb4571ee2ad34c3fc3018e795cd81e6476ddb7f332c6a2f1e9cc755f3a4664a462d69435457a934c44622906fdcf280f195399a96caa5f2c5e13a84b7097ccd41b7be11a994f5f33b30a7446c327862287c4bd35f58426af73c8d88f7f601cd91a936c7a28e7a3df2cca809f719e9bb7208201de1f6a33455966d0737753dc6f9a17bfb58d1158ba8c25f1e73edfa0cb778f2cfdeeccdca92a6468d98cd0a1caedd12ef882515e75bb8ffedea2c29719fe905dedf2423a2eb3d6c94780a1d5365e9c739052ee84ca616af06b78f705adc0d6971de741275d4324add51220f0c910b03f42b2f2244622d320d400723f4b0cc82b6a7bbceb5d1612a81365ab549fcbf52f55dc440e429ef0d8a6b5ed5ab2a6ce2950204def606dcc12a6b53224ba95074d824bf0462b405b810c17786fef80e5c5216c1f0511c757c657add3a1df635c52a4bd3f70580c04d01e9495d30231f027e84bb81e28203870837c4f6a4613dd52dc6397ab054e2fc5a2822e90ad7f47a9db3f693fd538f3f4ccf057afa4bdc39f6cb10cdab1f7220e9185eeaa3a10dbc11b35e15bc7a9a83179c5272468527d95230b2f79bc8ac0dbc42a223f21201fa3b3e6e048d4290ce5ac96cd27e49fdd590479d4731fa73f874aa28d569bf7963b0daa5638e7103ae4538bc250087579f25eea55a0b4882e01d3411dce30202ef32aeb3a4603ba8f2f256b32d525ede2797ba2015889a53338275976730c4c6acc43366f5647e051e2d7637b78994f77627151a84cb17bfd45cadfb01b1c0f1397668dfe14681db37cfc5df3df2b6c6a3ef6e7550b7f7e17048aab394b3ec629511f0abb73e3de76b5933905359f48a2df51bb97f8e12aafb1cc5b9ab4e023cad085a2058995d2c48e00e9e6d2f384147dee56d3b5833762faf19b1967c8f8566c0c16113938c5a06e7f2952c2c5b6f1f55b6b95150fd11eeef5a14b49ab2d0fb38ba732dfed85634f5a2446fc59b48c9acc9b89c0759eaaab564b31854867a1bb786fac19cd8678b3ff9d7efdf1b2b64cc91f0311c40c012223322b8ec798a176e02bc7fecb19f1088da3e2e8bb014e27757c4ab00293b96ed2e7034bd3b64ad06bbedd300c5f6e7ab9c82facd1a9c0fb1f32bb39b8b1d0bc5bcf6828396fe6954ab278068fd628d358eacf7a2ccd4e564a59b245373c3e887d6e9d3eebf398d5bab3d2b22291262a6a36ffd81733f67f2e6319fd11d3b61c6a8094b7db6e71f3ff9fabf765ae3c5667ff805449e7704d1c76e931c9f153d0a67958d553d84935ea0e5be57ddafebaa8c53df8cb254afa2a4c8769453d95be0314fd54f4b5ddda41138abd354742a16a450b915c887fec162253372e1c4b05d289"}, @NL80211_ATTR_FILS_ERP_REALM={0x6c, 0xfa, "da35da5ff86892779baefad6420c070d6d85495e11f0940939ed48b90dcd73d282ab7bcabb6d3e7be74a5694e0452dc58210a483898bf4b632b0e20308dba5020d56c51eda0e7866059f0fe8ebb10f4f493f32fcd84be6b81d471fcaa468e5cea5756aa24af29624"}, @NL80211_ATTR_FILS_ERP_REALM={0xb6, 0xfa, "614580a0532d8ebed8fb1476b9ff9a5bc1794184a0b600c66c63f4af43c22bce6d1477bc0b5b5855ca4e84e1a90c2581003ab59dba60dd63b58d80e6f92d0653d1e244a7ec5d7363f30635171b9c645d7fd7db1a8a524e7c6e4f2e99598342bd17401c3f19da6394df8965e1117bbff5776905e5bf6a48bbf228f7084a9c9c96942f95d80b6be7e5f90efd05f9ecb52759058e1cabe909f2aa4beeb85ca8798f1e4dbeaeeb5e975b628412b515c3ce987813"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_REALM={0x103, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "bfb97062282fe0a4c3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "dd0fdbc0eb1eae53f3add9"}, @NL80211_ATTR_FILS_ERP_REALM={0x102, 0xfa, "50a778f70fa350fb567eab0c6764569adb0d08546aef185939d39f5553def02d365a6873419cedc7fc03ad078e2c3705ac5315cb28a93b35f91682fa6650a6eb908dbbaa0eb1c21f3ade5be0e7c988c5e8180552c463a17fedcc367d32e39ab42295d7122165a8d367307c5aade5fe3169bbe8eb3c390b984ac2aa052ba22b2df54ed1446088fbf0f99b028e0313e4f00a8d004a4a9036d8432a6970e0aaafef2a42877ec135f38c5942a1b9c679ddf1cf3cbb9e44d30d2b7178281abea053fd4f9006ca9cf148acf2ea1ecbd06e9802e24875f5f6fe171f7aec5cca6cd660829888201630c0b1e2686a72cc7d3b587d6fdced34bcdccced78cc72157a17"}], @NL80211_ATTR_IE={0x219, 0x2a, [@gcr_ga={0xbd, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x2, 0xb}}, @measure_req={0x26, 0x55, {0x3, 0x3, 0x9, "a1bf6c4d1af3101bf821e42e97b0c97f24f0726043a7d416848a1073c3beb2fcc6188928a4f668936c91d07103b32f74371085de7104d5146387d6891147fa8d9749a2cb1c06c16c79612adbde6364ed0f41"}}, @challenge={0x10, 0x1, 0x43}, @mic={0x8c, 0x18, {0x9e4, "748d1abe393c", @long="7ab3bdc25f7a18051160bbeff7b8e425"}}, @preq={0x82, 0x4c, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x10001, @device_a, 0x6, @value, 0x3, 0x8, 0x4, [{{0x0, 0x0, 0x1}, @broadcast}, {{0x1}, @broadcast, 0x2}, {{}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0xffffffff}]}}, @mic={0x8c, 0x10, {0x803, "0f247f111f5d", @short="9380ca6b42d14a32"}}, @perr={0x84, 0x12f, {0xa, 0x13, [{{}, @device_a, 0xffffc1ad, @void, 0x36}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0xc}, {{}, @device_a, 0x0, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0xa, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0x10000, @value=@device_b, 0x20}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x24}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x1a}, {{}, @device_a, 0x3, @void, 0xe}, {{}, @broadcast, 0xd, @void, 0x7}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x42}, {{}, @device_a, 0x7, @void, 0x1a}, {{}, @broadcast, 0xffffffff, @void, 0x3b}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x1c}, {{}, @broadcast, 0xfffff622, @void, 0x38}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x35}, {{}, @device_a, 0x10000, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x80000001, @value=@device_b, 0x3f}, {{}, @device_b, 0x40000000, @void, 0x8}, {{}, @device_a, 0x1000, @void, 0x2a}]}}, @supported_rates]}]}, 0x16a0}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) ioctl$BTRFS_IOC_BALANCE_CTL(r8, 0x40049421, 0x3) 0s ago: executing program 1 (id=2377): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180b340000000000000000000000000085000000230000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=@delsa={0x440, 0x11, 0x404, 0x70bd29, 0x25dfdbfb, {@in=@broadcast, 0x4d6, 0x2, 0x32}, [@lifetime_val={0x24, 0x9, {0x4, 0x781e, 0xd9, 0x10000}}, @policy={0xac, 0x7, {{@in=@multicast1, @in=@multicast2, 0x800, 0x5, 0x4e21, 0x1000, 0x2, 0xa0, 0x90, 0x2f, r1, r7}, {0x7, 0x0, 0xffffffff, 0x7fffffffffffffff, 0xdb1c, 0x2, 0xea, 0x400}, {0x0, 0x8, 0x2, 0x6}, 0x8, 0x6e6bbb, 0x1, 0x0, 0x0, 0x2}}, @algo_crypt={0xd6, 0x2, {{'cbc-aes-ce\x00'}, 0x470, "31be3558cca2d64813d076153412d50654f8f49bf67e3ddb77f6db1f6100d821840883af2162cb718b9336c304fd85888e47c5e4d8f07fa040f745ead4abb7813fd5236ea9c7becd68edde98d8fbf40ebb0bec508b912db0e9c74af060935f10961960180a82a76d4eb0d7e12fed9c27f8cf9a07bf86cb7978f03df4d42139e357fe637b3e2851b0f8ba4f7833dd"}}, @coaddr={0x14, 0xe, @in=@multicast2}, @srcaddr={0x14, 0xd, @in6=@loopback}, @coaddr={0x14, 0xe, @in=@broadcast}, @algo_aead={0x13e, 0x12, {{'gcm(aes)\x00'}, 0x790, 0x200, "6ba92602bac7e101088835031a8f35a067c940a1fdeb2210dc18284ac787922a366f79ca02c3e1513d34553dfe97949b7c9db4bbcb3feb2fcffe147e1636209b1c94f11417840a9aefeb45c7768a0b297ac185d7cd5b044e6435ccaa527077254500955908007fe58c9f719b5e364cbe0a45288826d417e60fda093153b86280bf4f822a9c5cb166cd400cc0114eda0019069e888cd9a526ba0c1be4261089c8d1495bc58e8efa9f7f24ca938869bbb857e61535847615dd2c89a2fb0b3eed9739f380d1e33dba809c8b009a0899327b9675fabff67d3c0fc91457c9fe3c904e361ca2c28babc7c71af0d566c5b0bdfda8d3"}}, @etimer_thresh={0x8, 0xc, 0x200}, @sec_ctx={0xe3, 0x8, {0xdf, 0x8, 0x0, 0x2, 0xd7, "9acea69e463577290e1e653c2ad72743df3f24230364f52b62951e745df57a954279c572533a68293c6c19802d0580923694b528782a63b01e0fd429c57cd1807c41dbef09b42b3a4f1f7d1d3b5dd21cacbce9cfa57f2e94dae20c03a6da033b5a7ed949818a88ca311646bd76e5befee35991615df87762ca5ce7fae4663b7ee945254ee554087cc6cbdb3bea580c974a6003fdb2ae9313d80a9b3521ea76a7d382d3a76d8048c20d05e9f74cc4536b22fb13a659e0d0ec69bc1b8a7c6bb0d4abc67e7201190df83acba156ebc069a2ff5671259ccff5"}}, @extra_flags={0x8, 0x18, 0xffffffff}]}, 0x440}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) socket$netlink(0x10, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f80)=ANY=[@ANYBLOB="30000000190021042abd7000ffdbdf250a102008ff04c803000c000005001400060000000c0012"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x200000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x3, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2c}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) kernel console output (not intermixed with test programs): 101.229967][ T9639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.256095][ T9648] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.261453][ T9649] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.293772][ T9651] overlayfs: failed to clone upperpath [ 101.314455][ T9654] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 101.336181][ T9654] bond5: entered promiscuous mode [ 101.339919][ T9654] 8021q: adding VLAN 0 to HW filter on device bond5 [ 101.367513][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.370042][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.418253][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.483163][ T9657] veth1_vlan: left allmulticast mode [ 101.485486][ T9] lo speed is unknown, defaulting to 1000 [ 101.493512][ T9] syz0: Port: 1 Link DOWN [ 101.495002][ T9660] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 101.499109][ T9660] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 101.502370][ T9660] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 101.519049][ T6279] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.521762][ T6279] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.524918][ T6279] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.528186][ T6279] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.533015][ T6279] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.536433][ T6279] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.539840][ T6279] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.543003][ T6279] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.893557][ T9680] __nla_validate_parse: 11 callbacks suppressed [ 101.893574][ T9680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1079'. [ 101.899322][ T9680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1079'. [ 102.215014][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 102.218119][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.223252][ T9699] bridge_slave_1: left allmulticast mode [ 102.226298][ T9699] bridge_slave_1: left promiscuous mode [ 102.228696][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.235303][ T9699] bond0: (slave bond_slave_0): Releasing backup interface [ 102.239537][ T9701] netlink: 'syz.2.1086': attribute type 1 has an invalid length. [ 102.240868][ T9699] bond_slave_0: left allmulticast mode [ 102.242619][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'. [ 102.249782][ T9699] bond0: (slave bond_slave_1): Releasing backup interface [ 102.253327][ T9699] bond_slave_1: left allmulticast mode [ 102.258077][ T9699] team0: Port device team_slave_0 removed [ 102.262645][ T9699] team0: Port device team_slave_1 removed [ 102.265922][ T9699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.270958][ T9699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.275635][ T9699] team0: Port device geneve0 removed [ 102.278992][ T9699] bond0: (slave macvlan2): Releasing backup interface [ 102.323715][ T9704] vlan0: entered promiscuous mode [ 102.399528][ T9713] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1089'. [ 102.461447][ T9721] overlayfs: failed to clone upperpath [ 102.471144][ T9722] overlayfs: failed to clone upperpath [ 102.508892][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 102.514122][ T9729] openvswitch: netlink: Unknown nsh attribute 0 [ 102.518091][ T9729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.586029][ T9738] lo: entered promiscuous mode [ 102.647440][ T9747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9747 comm=syz.2.1101 [ 102.652379][ T9747] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 102.700119][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 102.742814][ T9755] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.1102'. [ 102.745861][ T9755] openvswitch: netlink: Message has 5 unknown bytes. [ 102.801105][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 102.804394][ T9764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1106'. [ 103.057778][ T9800] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1117'. [ 103.219839][ T9811] kAFS: No cell specified [ 103.826271][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.951983][ T9882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.009917][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.013149][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.015952][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.019856][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.023553][ T9] usb 5-1: config 0 descriptor?? [ 104.023979][ T63] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 104.530654][ T9942] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 104.562883][ T1145] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.565960][ T1145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.568854][ T1145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.571614][ T1145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.637982][ T9957] tipc: Cannot configure node identity twice [ 104.644914][ T3246] usb 5-1: USB disconnect, device number 7 [ 104.660269][ T63] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 104.692126][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 104.692142][ T40] audit: type=1400 audit(1757475775.034:653): avc: denied { getopt } for pid=9967 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.848352][ T9988] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 104.850827][ T9988] netlink: 'syz.4.1175': attribute type 4 has an invalid length. [ 104.908633][ T9990] netlink: 'syz.4.1176': attribute type 13 has an invalid length. [ 104.966649][ T40] audit: type=1400 audit(1757475775.304:654): avc: denied { relabelfrom } for pid=9989 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.973764][ T40] audit: type=1400 audit(1757475775.314:655): avc: denied { relabelto } for pid=9989 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.413854][ T40] audit: type=1800 audit(1757475775.754:656): pid=10011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1182" name="bus" dev="overlay" ino=1492 res=0 errno=0 [ 105.421304][ T40] audit: type=1400 audit(1757475775.754:657): avc: denied { remount } for pid=10010 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.462310][ T40] audit: type=1400 audit(1757475775.804:658): avc: denied { setattr } for pid=10014 comm="syz.0.1183" path="/dev/snd/controlC0" dev="devtmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 105.652760][T10026] fuse: blksize only supported for fuseblk [ 105.751987][T10032] .: renamed from bond0 [ 106.011051][ T40] audit: type=1400 audit(1757475776.354:659): avc: denied { remount } for pid=10038 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 106.191317][T10058] Trying to write to read-only block-device nullb0 [ 106.263043][T10066] overlayfs: failed to clone upperpath [ 106.266671][T10065] input: syz1 as /devices/virtual/input/input17 [ 106.301867][T10075] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 106.320180][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.351596][T10075] gretap1: entered promiscuous mode [ 106.466726][T10093] unsupported nlmsg_type 40 [ 106.502117][ T40] audit: type=1400 audit(1757475776.844:660): avc: denied { execute } for pid=10099 comm="syz.4.1213" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=35194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 106.636172][ T40] audit: type=1400 audit(1757475776.974:661): avc: denied { map } for pid=10122 comm="syz.1.1221" path="socket:[32499]" dev="sockfs" ino=32499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.645851][ T40] audit: type=1400 audit(1757475776.974:662): avc: denied { read } for pid=10122 comm="syz.1.1221" path="socket:[32499]" dev="sockfs" ino=32499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.696153][T10129] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 106.943538][T10141] __nla_validate_parse: 12 callbacks suppressed [ 106.943556][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 106.963357][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 107.085809][T10153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 107.236118][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1236'. [ 107.274146][T10174] lo speed is unknown, defaulting to 1000 [ 107.283004][T10174] openvswitch: netlink: Flow actions attr not present in new flow. [ 107.373989][T10180] tipc: Enabling of bearer rejected, failed to enable media [ 107.436864][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 107.481489][T10188] overlayfs: failed to clone upperpath [ 107.507702][T10190] afs: Unknown parameter 'dynmgS(Qn{FىD[p}oy  H@vʽٙ;<򽕋ՂRC1{&?x_߰"6҇-&jv\{m e$0H8' [ 107.544731][T10192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1245'. [ 107.603811][T10198] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 107.606823][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'. [ 107.609692][T10198] dummy0: entered promiscuous mode [ 107.612685][T10198] bridge0: port 2(dummy0) entered blocking state [ 107.614836][T10198] bridge0: port 2(dummy0) entered disabled state [ 107.617172][T10198] dummy0: entered allmulticast mode [ 107.625040][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1249'. [ 107.672331][T10213] trusted_key: encrypted_key: insufficient parameters specified [ 107.680506][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1253'. [ 107.680579][T10216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1253'. [ 107.688242][T10211] netlink: 'syz.0.1246': attribute type 10 has an invalid length. [ 107.842790][T10243] kAFS: unable to lookup cell '/,cL' [ 107.869603][T10245] netlink: 'syz.1.1265': attribute type 10 has an invalid length. [ 107.872654][T10245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1265'. [ 107.875451][T10245] batadv0: entered promiscuous mode [ 107.877384][T10245] batadv0: entered allmulticast mode [ 107.879504][T10245] bridge0: port 1(batadv0) entered blocking state [ 107.881962][T10245] bridge0: port 1(batadv0) entered disabled state [ 108.046265][ T6279] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 108.049208][ T6279] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 108.066451][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.187213][T10258] lo speed is unknown, defaulting to 1000 [ 108.236152][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 108.239793][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.249656][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.252809][ T980] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.266119][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.271333][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.274858][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.281548][ T980] usbtmc 5-1:16.0: bulk endpoints not found [ 108.409768][T10294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10294 comm=syz.2.1280 [ 108.416924][T10293] batadv1: entered promiscuous mode [ 108.492208][T10237] overlayfs: missing 'lowerdir' [ 108.568443][T10305] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 108.570890][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.628321][ T980] usb 5-1: USB disconnect, device number 8 [ 108.737755][T10317] macvlan0: entered promiscuous mode [ 108.743886][T10317] batadv_slave_1: entered promiscuous mode [ 108.766123][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 108.897066][ T9] usb 9-1: device descriptor read/64, error -71 [ 108.986679][ T63] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 109.062526][ T63] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 109.136250][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 109.181071][T10358] binder: 10356:10358 ioctl c0306201 200000000080 returned -14 [ 109.266172][ T9] usb 9-1: device descriptor read/64, error -71 [ 109.324977][T10374] loop6: detected capacity change from 0 to 524287999 [ 109.360589][ T6271] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.363323][ T6271] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.367173][ T6271] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.369894][ T6271] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.378474][ T9] usb usb9-port1: attempt power cycle [ 109.716119][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 109.746916][ T9] usb 9-1: device descriptor read/8, error -71 [ 109.750572][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 109.750585][ T40] audit: type=1400 audit(1757475780.094:667): avc: denied { map } for pid=10386 comm="syz.2.1312" path="socket:[35408]" dev="sockfs" ino=35408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.006108][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 110.011632][ T40] audit: type=1400 audit(1757475780.354:668): avc: denied { setattr } for pid=10422 comm="syz.1.1319" name="[userfaultfd]" dev="anon_inodefs" ino=36957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.036688][ T9] usb 9-1: device descriptor read/8, error -71 [ 110.148088][ T9] usb usb9-port1: unable to enumerate USB device [ 110.186198][T10450] dlm: no local IP address has been set [ 110.190240][T10450] dlm: cannot start dlm midcomms -107 [ 110.316848][T10456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.646172][ T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.662980][T10461] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 110.675282][T10461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 110.683585][T10461] bond5: entered promiscuous mode [ 110.806269][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 110.810234][ T60] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 110.813430][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.818356][ T60] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.822655][ T40] audit: type=1400 audit(1757475781.164:669): avc: denied { setattr } for pid=10471 comm="syz.2.1335" path="socket:[34683]" dev="sockfs" ino=34683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.823115][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.839998][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.845278][ T60] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 110.849824][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.854337][ T60] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.859266][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.864355][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.868909][T10474] syz_tun: refused to change device tx_queue_len [ 110.872410][ T60] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 110.875366][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.880281][ T60] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.884060][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.887757][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.893477][ T60] usb 5-1: string descriptor 0 read error: -22 [ 110.895461][ T60] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.898600][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.904346][ T60] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 110.932058][ T40] audit: type=1400 audit(1757475781.274:670): avc: denied { mount } for pid=10479 comm="syz.2.1338" name="/" dev="configfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.941761][ T40] audit: type=1400 audit(1757475781.274:671): avc: denied { search } for pid=10479 comm="syz.2.1338" name="/" dev="configfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.951262][ T40] audit: type=1400 audit(1757475781.274:672): avc: denied { search } for pid=10479 comm="syz.2.1338" name="/" dev="configfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.960531][ T40] audit: type=1400 audit(1757475781.274:673): avc: denied { read open } for pid=10479 comm="syz.2.1338" path="/" dev="configfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.454464][T10459] netlink: 'syz.0.1329': attribute type 39 has an invalid length. [ 111.762993][T10502] kvm: kvm [10501]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x11e) = 0xfffffc18 [ 111.767629][T10502] kvm: kvm [10501]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0xfffffc18 [ 111.789686][T10502] kvm: kvm [10501]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x186) = 0xfffffc18 [ 111.792996][T10502] kvm: kvm [10501]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x186) = 0xfffffc18 [ 111.796527][T10502] kvm: kvm [10501]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x187) = 0xfffffc18 [ 111.801109][T10502] kvm: kvm [10501]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x187) = 0xfffffc18 [ 111.863429][ T40] audit: type=1326 audit(1757475782.204:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.2.1347" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fbb9778eba9 code=0x0 [ 111.913344][ T40] audit: type=1326 audit(1757475782.254:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.2.1347" exe="/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fbb977c1465 code=0x0 [ 112.193924][T10521] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 112.502484][T10535] lo: Caught tx_queue_len zero misconfig [ 112.650014][T10541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.730287][T10548] block nbd4: Attempted send on invalid socket [ 112.732830][T10548] blk_print_req_error: 54 callbacks suppressed [ 112.732844][T10548] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 112.740048][T10548] XFS (nbd4): SB validate failed with error -5. [ 112.773194][T10548] Process accounting resumed [ 112.799558][T10558] __nla_validate_parse: 10 callbacks suppressed [ 112.799568][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1362'. [ 112.821949][ T40] audit: type=1400 audit(1757475783.164:676): avc: denied { create } for pid=10557 comm="syz.4.1362" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.822079][T10558] (syz.4.1362,10558,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 113.013165][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 113.015895][T10577] openvswitch: netlink: Flow key attr not present in new flow. [ 113.112688][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1370'. [ 113.127546][T10585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=10585 comm=syz.4.1370 [ 113.166751][T10592] netlink: 'syz.4.1373': attribute type 4 has an invalid length. [ 113.177260][ T63] Bluetooth: hci3: unexpected event for opcode 0x202f [ 113.317650][T10605] vlan4: entered promiscuous mode [ 113.319362][T10605] vlan4: entered allmulticast mode [ 113.321012][T10605] hsr_slave_1: entered allmulticast mode [ 113.356820][ T9] usb 5-1: USB disconnect, device number 9 [ 113.496546][ T3246] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 113.503550][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 113.559627][T10627] bond0: entered allmulticast mode [ 113.618340][T10632] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 113.621506][T10633] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 113.658106][ T3246] usb 9-1: not running at top speed; connect to a high speed hub [ 113.662071][ T3246] usb 9-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 113.665745][ T3246] usb 9-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.669850][ T3246] usb 9-1: config 1 interface 0 has no altsetting 0 [ 113.670769][T10633] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1386'. [ 113.672352][ T3246] usb 9-1: string descriptor 0 read error: -22 [ 113.675867][T10632] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1386'. [ 113.677556][ T3246] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.684226][ T3246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.688440][T10607] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.691210][T10607] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.696001][ T3246] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 113.897503][ T3246] usb 9-1: USB disconnect, device number 10 [ 114.051628][T10674] tipc: Enabling of bearer rejected, failed to enable media [ 114.095301][T10676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10676 comm=syz.1.1401 [ 114.108017][T10676] netlink: 'syz.1.1401': attribute type 10 has an invalid length. [ 114.110476][T10676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1401'. [ 114.115158][T10676] team0: Port device geneve0 added [ 114.122038][T10676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10676 comm=syz.1.1401 [ 114.524790][T10715] tmpfs: Bad value for 'mpol' [ 114.566997][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 114.690536][T10736] lo speed is unknown, defaulting to 1000 [ 114.763037][T10741] tc_dump_action: action bad kind [ 114.857767][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 114.857781][ T40] audit: type=1400 audit(1757475785.204:687): avc: denied { nlmsg_write } for pid=10753 comm="syz.0.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.862068][T10754] input: syz1 as /devices/virtual/input/input19 [ 115.054116][T10754] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 115.066599][T10754] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1427'. [ 115.111010][T10770] tc_dump_action: action bad kind [ 115.117229][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 115.145978][ T40] audit: type=1400 audit(1757475785.484:688): avc: denied { getopt } for pid=10773 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.629356][T10791] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1442'. [ 115.661110][ T40] audit: type=1400 audit(1757475786.004:689): avc: denied { ioctl } for pid=10795 comm="syz.1.1443" path="socket:[37244]" dev="sockfs" ino=37244 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.697334][T10803] netlink: 'syz.1.1445': attribute type 10 has an invalid length. [ 115.700004][T10803] .: (slave hsr0): The slave device specified does not support setting the MAC address [ 115.703386][T10803] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 115.707446][T10803] .: (slave hsr0): Error -22 calling dev_set_mtu [ 115.771829][T10815] overlayfs: failed to resolve './file0': -2 [ 115.800181][T10818] lo speed is unknown, defaulting to 1000 [ 115.805443][T10818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.809428][T10818] buffer_io_error: 54 callbacks suppressed [ 115.809436][T10818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.813837][T10818] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.816874][T10818] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.819362][T10818] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.822233][T10818] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.824723][T10818] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.828839][T10818] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.831293][T10818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.834097][T10818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.836813][T10818] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.839639][T10818] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.842077][T10818] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.844882][T10818] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.847727][T10818] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.850508][T10818] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.852956][T10818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.855742][T10818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.858578][T10818] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.861044][ T40] audit: type=1400 audit(1757475786.204:690): avc: denied { ioctl } for pid=10826 comm="syz.2.1454" path="socket:[35797]" dev="sockfs" ino=35797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.872809][T10818] ldm_validate_partition_table(): Disk read failed. [ 115.877874][T10818] Dev nbd0: unable to read RDB block 0 [ 115.882693][T10818] nbd0: unable to read partition table [ 115.900993][T10827] netlink: 'syz.2.1454': attribute type 12 has an invalid length. [ 115.915034][T10829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10829 comm=syz.0.1455 [ 115.980051][ T40] audit: type=1400 audit(1757475786.324:691): avc: denied { ioctl } for pid=10842 comm="syz.2.1458" path="socket:[38440]" dev="sockfs" ino=38440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.062307][T10853] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 116.065049][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.067553][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.073012][T10853] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.075226][T10853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.077745][T10853] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.080047][T10853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.085226][T10853] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.108465][T10853] bridge_slave_1: left allmulticast mode [ 116.110269][T10853] bridge_slave_1: left promiscuous mode [ 116.112228][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.124925][T10853] bridge_slave_0: left allmulticast mode [ 116.127239][T10853] bridge_slave_0: left promiscuous mode [ 116.129140][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.150667][T10853] bond0: (slave bridge0): Releasing backup interface [ 116.302044][ T40] audit: type=1400 audit(1757475786.644:692): avc: denied { listen } for pid=10871 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.394513][T10881] program syz.4.1471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.966205][ T3246] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.057284][T10949] hugetlbfs: Bad value for 'uid' [ 117.058940][T10949] hugetlbfs: Bad value for 'uid' [ 117.116881][ T3246] usb 5-1: Using ep0 maxpacket: 16 [ 117.119904][ T3246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 117.125198][ T3246] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.129148][ T3246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.131694][ T3246] usb 5-1: Product: syz [ 117.133320][ T3246] usb 5-1: Manufacturer: syz [ 117.134979][ T3246] usb 5-1: SerialNumber: syz [ 117.138263][ T3246] usb 5-1: config 0 descriptor?? [ 117.142925][ T3246] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.146737][ T3246] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 117.556991][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 117.559941][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 117.562937][ T5973] Bluetooth: hci3: hardware error 0x00 [ 117.705987][T10990] geneve2: entered promiscuous mode [ 117.708373][T10990] geneve2: entered allmulticast mode [ 117.748314][ T3246] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 117.799889][T10993] overlayfs: failed to resolve './file0': -2 [ 117.895826][T10998] netlink: 'syz.4.1508': attribute type 2 has an invalid length. [ 117.911137][ T40] audit: type=1400 audit(1757475788.254:693): avc: denied { ioctl } for pid=10997 comm="syz.4.1508" path="socket:[38643]" dev="sockfs" ino=38643 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.002332][T11008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11008 comm=syz.1.1512 [ 118.095623][ T40] audit: type=1400 audit(1757475788.434:694): avc: denied { setopt } for pid=11014 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.160609][ T3246] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 118.163514][ T3246] em28xx 5-1:0.0: board has no eeprom [ 118.255981][T11027] __nla_validate_parse: 7 callbacks suppressed [ 118.255998][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 118.419541][T11035] netlink: 'syz.1.1519': attribute type 10 has an invalid length. [ 118.422189][T11035] openvswitch: netlink: Flow key attr not present in new flow. [ 118.478671][ T40] audit: type=1400 audit(1757475788.824:695): avc: denied { read } for pid=11038 comm="syz.4.1521" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.486188][ T40] audit: type=1400 audit(1757475788.824:696): avc: denied { open } for pid=11038 comm="syz.4.1521" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.491959][T11043] netlink: 'syz.1.1522': attribute type 39 has an invalid length. [ 118.681198][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 118.681660][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1529'. [ 118.690122][T11068] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 118.692982][ T63] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 118.821587][T11087] lo speed is unknown, defaulting to 1000 [ 118.859491][T11087] ip6erspan0: entered allmulticast mode [ 118.875585][T11087] lo speed is unknown, defaulting to 1000 [ 119.238401][T10917] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 119.306207][ T3246] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 119.308806][ T3246] em28xx 5-1:0.0: dvb set to bulk mode. [ 119.312999][ T61] em28xx 5-1:0.0: Binding DVB extension [ 119.320380][ T3246] usb 5-1: USB disconnect, device number 10 [ 119.322822][ T3246] em28xx 5-1:0.0: Disconnecting em28xx [ 119.340430][ T61] em28xx 5-1:0.0: Registering input extension [ 119.342816][ T3246] em28xx 5-1:0.0: Closing input extension [ 119.354244][ T3246] em28xx 5-1:0.0: Freeing device [ 119.646231][ T5973] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 119.650627][T11101] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1540'. [ 119.673872][T11105] netlink: 'syz.4.1541': attribute type 1 has an invalid length. [ 119.775265][T11112] tap0: tun_chr_ioctl cmd 1074025675 [ 119.777534][T11112] tap0: persist disabled [ 119.781273][T11113] binder: 11111:11113 ioctl c0306201 200000000080 returned -22 [ 119.817970][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1546'. [ 119.963309][T11125] netlink: 'syz.0.1548': attribute type 13 has an invalid length. [ 119.965993][T11125] netlink: 'syz.0.1548': attribute type 27 has an invalid length. [ 120.154293][T11130] rdma_rxe: rxe_newlink: failed to add lo [ 120.192291][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 120.192306][ T40] audit: type=1400 audit(1757475790.534:699): avc: denied { read write } for pid=11134 comm="syz.0.1551" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.204426][ T40] audit: type=1400 audit(1757475790.534:700): avc: denied { open } for pid=11134 comm="syz.0.1551" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.214157][ T40] audit: type=1400 audit(1757475790.534:701): avc: denied { map } for pid=11134 comm="syz.0.1551" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.773242][T11149] netlink: zone id is out of range [ 120.774899][T11149] netlink: zone id is out of range [ 120.776846][T11149] netlink: del zone limit has 4 unknown bytes [ 121.263210][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1563'. [ 121.267117][T11175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1563'. [ 121.313484][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1565'. [ 121.323503][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 121.388341][T11189] gtp0: entered promiscuous mode [ 122.189918][ T40] audit: type=1400 audit(1757475792.534:702): avc: denied { firmware_load } for pid=11197 comm="syz.1.1570" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 122.200373][T11198] syz.1.1570 (11198) used greatest stack depth: 19576 bytes left [ 122.585185][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1585'. [ 122.614416][ T40] audit: type=1400 audit(1757475792.954:703): avc: denied { mount } for pid=11244 comm="syz.1.1586" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 122.623301][T11245] 9p: Unknown Cache mode or invalid value fs [ 122.957415][T11250] fuse: Bad value for 'fd' [ 123.075082][T11266] MPI: mpi too large (16392 bits) [ 123.080621][T11266] ip6tnl0: Caught tx_queue_len zero misconfig [ 123.273894][T11285] syz_tun: entered allmulticast mode [ 123.282080][T11288] netlink: 'syz.4.1600': attribute type 4 has an invalid length. [ 123.327297][T11299] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 123.400194][ T40] audit: type=1400 audit(1757475793.744:704): avc: denied { getopt } for pid=11300 comm="syz.4.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 123.400840][T11301] tmpfs: Unknown parameter 'smackfshat' [ 123.427871][T11305] random: crng reseeded on system resumption [ 123.439448][ T40] audit: type=1400 audit(1757475793.784:705): avc: denied { read } for pid=11303 comm="syz.0.1604" dev="sockfs" ino=40116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.482311][T11313] netlink: 'syz.4.1608': attribute type 10 has an invalid length. [ 123.487981][T11313] team0: Cannot enslave team device to itself [ 123.541596][ T40] audit: type=1400 audit(1757475793.884:706): avc: denied { map } for pid=11317 comm="syz.4.1609" path="/proc/453/task/454/smaps" dev="proc" ino=40129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 123.541961][T11319] nft_compat: unsupported protocol 0 [ 123.554484][T11319] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11319 comm=syz.4.1609 [ 123.611155][ T40] audit: type=1400 audit(1757475793.954:707): avc: denied { mounton } for pid=11327 comm="syz.4.1613" path="/150/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 123.621927][T11328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.756485][T11352] IPVS: set_ctl: invalid protocol: 11793 172.30.1.1:0 [ 123.840366][T11360] netlink: 'syz.1.1621': attribute type 21 has an invalid length. [ 123.843003][T11360] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1621'. [ 123.919925][ T40] audit: type=1400 audit(1757475794.264:708): avc: denied { watch } for pid=11372 comm="syz.2.1625" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 123.945742][T11377] overlayfs: failed to clone upperpath [ 123.954782][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 123.958323][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 123.960819][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 123.963333][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 123.965795][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 123.968642][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 123.971145][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 123.973623][T11380] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 124.625209][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.631299][ T6271] Bluetooth: (null): Too short H5 packet [ 124.634076][ T6271] Bluetooth: (null): Invalid header checksum [ 124.636822][ T6271] Bluetooth: (null): Invalid header checksum [ 124.665225][T11412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.674362][T11412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.737829][ T6277] Bluetooth: (null): Invalid header checksum [ 124.794388][ T1145] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.797422][ T1145] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.800317][ T1145] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.804885][ T1145] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.858315][ T6271] Bluetooth: (null): Invalid header checksum [ 124.921806][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 124.925271][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'. [ 124.967221][ T6279] Bluetooth: (null): Invalid header checksum [ 125.077126][ T6279] Bluetooth: (null): Invalid header checksum [ 125.166996][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 125.186578][ T6271] Bluetooth: (null): Invalid header checksum [ 125.306712][ T6279] Bluetooth: (null): Invalid header checksum [ 125.516569][T11494] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 125.519844][T11494] SELinux: failed to load policy [ 125.521569][T11495] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 125.524415][T11495] SELinux: failed to load policy [ 125.529809][T11495] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1650'. [ 125.529811][T11494] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1650'. [ 125.562272][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 125.562281][ T40] audit: type=1400 audit(1757475795.904:710): avc: denied { write } for pid=11498 comm="syz.4.1652" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 125.619203][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 125.722403][T11510] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 125.767254][T11520] tipc: Enabling of bearer rejected, media not registered [ 125.780095][T11520] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1659'. [ 125.888538][T11534] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 125.899244][ T40] audit: type=1400 audit(1757475796.244:711): avc: denied { append } for pid=11531 comm="syz.4.1662" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 125.900695][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 125.986998][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 125.989476][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 126.008440][T11541] lo speed is unknown, defaulting to 1000 [ 126.069951][T11557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1666'. [ 126.096323][ T40] audit: type=1400 audit(1757475796.404:712): avc: denied { append } for pid=11554 comm="syz.0.1668" name="file0" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.284941][ T40] audit: type=1400 audit(1757475796.624:713): avc: denied { map } for pid=11578 comm="syz.2.1672" path="socket:[39475]" dev="sockfs" ino=39475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 126.401823][T11593] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.405552][T11593] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 126.409992][T11593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.422502][T11593] macsec0: entered promiscuous mode [ 126.424198][T11593] bridge0: entered promiscuous mode [ 126.740282][ T40] audit: type=1400 audit(1757475797.084:714): avc: denied { watch watch_reads } for pid=11621 comm="syz.1.1685" path="pipe:[39505]" dev="pipefs" ino=39505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.768362][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.779121][ T63] Bluetooth: hci0: unexpected event 0x03 length: 4 < 11 [ 127.170621][ T40] audit: type=1400 audit(1757475797.514:715): avc: denied { lock } for pid=11639 comm="syz.4.1691" path="socket:[39591]" dev="sockfs" ino=39591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 127.186633][T11640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.352843][ T40] audit: type=1400 audit(1757475797.694:716): avc: denied { execute } for pid=11657 comm="syz.4.1696" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.387875][ T40] audit: type=1400 audit(1757475797.734:717): avc: denied { create } for pid=11665 comm="syz.4.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 127.428441][T11666] SELinux: ebitmap start bit (4294967294) is not a multiple of the map unit size (64) [ 127.434522][T11666] SELinux: failed to load policy [ 127.438741][ T40] audit: type=1400 audit(1757475797.784:718): avc: denied { shutdown } for pid=11665 comm="syz.4.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.477426][T11673] /dev/nullb0: Can't lookup blockdev [ 127.663303][ T40] audit: type=1400 audit(1757475798.004:719): avc: denied { getopt } for pid=11689 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.748563][T11687] veth0_macvtap: left allmulticast mode [ 127.759779][ T6277] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.762590][ T6277] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.765400][ T6277] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.770818][ T6277] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.774364][ T6277] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.777695][ T6277] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.780445][ T6277] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.783290][ T6277] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.976335][T11419] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 128.036262][ T3246] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.126133][T11419] usb 9-1: device descriptor read/64, error -71 [ 128.186188][ T3246] usb 5-1: Using ep0 maxpacket: 8 [ 128.189098][ T3246] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 128.191713][ T3246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.194868][ T3246] usb 5-1: config 0 has no interfaces? [ 128.196971][ T3246] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 128.199863][ T3246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.203636][ T3246] usb 5-1: config 0 descriptor?? [ 128.366583][T11419] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 128.374604][ T6279] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.509909][T11419] usb 9-1: device descriptor read/64, error -71 [ 128.619932][T11419] usb usb9-port1: attempt power cycle [ 128.742279][ T6271] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.748836][ T6271] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.751634][ T6271] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.956212][T11419] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 128.976897][T11419] usb 9-1: device descriptor read/8, error -71 [ 129.226128][T11419] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 129.246626][T11419] usb 9-1: device descriptor read/8, error -71 [ 129.356457][T11419] usb usb9-port1: unable to enumerate USB device [ 129.757917][T11820] __nla_validate_parse: 10 callbacks suppressed [ 129.757929][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 129.800463][T11822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11822 comm=syz.1.1735 [ 129.805857][T11824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=11824 comm=syz.1.1735 [ 129.811741][T11822] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1735'. [ 129.865064][T11829] openvswitch: netlink: Message has 8 unknown bytes. [ 129.873932][T11829] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1736'. [ 129.956321][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1742'. [ 130.078864][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 130.118552][T11863] validate_nla: 62 callbacks suppressed [ 130.118568][T11863] netlink: 'syz.2.1749': attribute type 64 has an invalid length. [ 130.124514][T11863] netlink: 'syz.2.1749': attribute type 4 has an invalid length. [ 130.128531][T11863] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1749'. [ 130.237552][T11877] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1754'. [ 130.241007][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 130.244122][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1754'. [ 130.453807][T11888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1758'. [ 130.501262][T11890] fuse: Unknown parameter 'group_Id' [ 130.508601][T11883] netlink: 'syz.2.1751': attribute type 4 has an invalid length. [ 130.532307][T11873] netlink: 'syz.2.1751': attribute type 4 has an invalid length. [ 130.628573][T11901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11901 comm=syz.1.1762 [ 130.631152][T11902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11902 comm=syz.1.1762 [ 130.664438][T11906] overlayfs: failed to clone upperpath [ 130.794987][ T3246] usb 5-1: string descriptor 0 read error: -71 [ 130.797860][ T3246] usb 5-1: USB disconnect, device number 11 [ 130.861622][T11931] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.114479][T11929] netlink: 'syz.1.1773': attribute type 14 has an invalid length. [ 131.118002][T11929] netlink: 'syz.1.1773': attribute type 14 has an invalid length. [ 131.176189][ T3246] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.336250][ T3246] usb 5-1: Using ep0 maxpacket: 16 [ 131.339920][ T3246] usb 5-1: config 0 has no interfaces? [ 131.344531][ T3246] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.348894][ T3246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.369239][ T3246] usb 5-1: Product: syz [ 131.371057][ T3246] usb 5-1: Manufacturer: syz [ 131.373278][ T3246] usb 5-1: SerialNumber: syz [ 131.377797][ T3246] usb 5-1: config 0 descriptor?? [ 131.602189][T11932] syzkaller1: entered promiscuous mode [ 131.604443][T11932] syzkaller1: entered allmulticast mode [ 131.634140][ T40] audit: type=1400 audit(1757475801.974:720): avc: denied { setattr } for pid=11952 comm="syz.4.1781" name="/" dev="9p" ino=577023702256844802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 132.330291][T11964] netlink: 'syz.2.1786': attribute type 12 has an invalid length. [ 132.361564][T11965] lo speed is unknown, defaulting to 1000 [ 132.418129][T11696] usb 5-1: USB disconnect, device number 12 [ 132.474347][T11978] netlink: 'syz.1.1789': attribute type 2 has an invalid length. [ 132.541190][T11986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.579410][T11996] overlay: ./file0 is not a directory [ 132.612085][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.614419][T11999] syz.1.1794 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.614782][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.748300][ T40] audit: type=1326 audit(1757475803.084:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.2.1799" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9778eba9 code=0x0 [ 132.948281][T12037] lo: Caught tx_queue_len zero misconfig [ 132.950595][T12037] netlink: 'syz.0.1806': attribute type 15 has an invalid length. [ 133.356508][ T3246] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 133.506240][ T3246] usb 9-1: Using ep0 maxpacket: 16 [ 133.515201][ T3246] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.523338][ T3246] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.529635][ T3246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.533299][ T3246] usb 9-1: Product: syz [ 133.535246][ T3246] usb 9-1: Manufacturer: syz [ 133.538362][ T3246] usb 9-1: SerialNumber: syz [ 133.544625][ T3246] usb 9-1: config 0 descriptor?? [ 133.549983][ T3246] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.553905][ T3246] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 133.697306][T12075] ipip0: entered promiscuous mode [ 134.151529][ T3246] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 134.309511][T12099] tipc: Enabling of bearer rejected, failed to enable media [ 134.420000][T12110] netlink: 'syz.1.1829': attribute type 21 has an invalid length. [ 134.500854][T12116] overlayfs: failed to clone upperpath [ 134.557828][ T3246] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 134.560766][ T3246] em28xx 9-1:0.0: board has no eeprom [ 134.711486][ T40] audit: type=1800 audit(1757475805.054:722): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1837" name="/newroot/576/file0" dev="tmpfs" ino=3091 res=0 errno=0 [ 134.787327][T12146] ip6erspan0: entered promiscuous mode [ 134.920494][T12154] overlayfs: failed to clone upperpath [ 134.947561][T12154] __nla_validate_parse: 17 callbacks suppressed [ 134.947627][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'. [ 135.246461][ T40] audit: type=1326 audit(1757475805.594:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.2.1851" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9778eba9 code=0x0 [ 135.636281][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 135.637856][T12051] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 135.696211][ T3246] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 135.699603][ T3246] em28xx 9-1:0.0: dvb set to bulk mode. [ 135.702070][ T7449] em28xx 9-1:0.0: Binding DVB extension [ 135.709387][ T3246] usb 9-1: USB disconnect, device number 15 [ 135.712866][ T3246] em28xx 9-1:0.0: Disconnecting em28xx [ 135.730534][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.771547][ T7449] em28xx 9-1:0.0: Registering input extension [ 135.774344][ T3246] em28xx 9-1:0.0: Closing input extension [ 135.784331][ T3246] em28xx 9-1:0.0: Freeing device [ 135.824613][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.828349][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.831770][ T10] usb 5-1: Product: syz [ 135.833632][ T10] usb 5-1: Manufacturer: syz [ 135.835629][ T10] usb 5-1: SerialNumber: syz [ 135.839881][ T10] usb 5-1: config 0 descriptor?? [ 136.110297][T12200] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 136.250718][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 136.252645][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 136.254917][ T40] audit: type=1400 audit(1757475806.594:724): avc: denied { ioctl } for pid=12206 comm="syz.4.1859" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 136.267350][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1858'. [ 136.267383][T12209] validate_nla: 3 callbacks suppressed [ 136.267392][T12209] netlink: 'syz.2.1858': attribute type 7 has an invalid length. [ 136.316116][ T40] audit: type=1400 audit(1757475806.654:725): avc: denied { map } for pid=12210 comm="syz.4.1860" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.321712][T11419] usb 5-1: USB disconnect, device number 13 [ 136.325561][ T40] audit: type=1400 audit(1757475806.654:726): avc: denied { execute } for pid=12210 comm="syz.4.1860" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.525224][T12219] dlm: non-version read from control device 138 [ 136.568318][T12221] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.640402][T12226] lo speed is unknown, defaulting to 1000 [ 136.794570][ T40] audit: type=1400 audit(1757475807.134:727): avc: denied { write } for pid=12237 comm="syz.4.1869" name="ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 136.823062][T12243] tmpfs: User quota block hardlimit too large. [ 136.898601][ T40] audit: type=1800 audit(1757475807.224:728): pid=12249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1872" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 137.008941][T12246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1871'. [ 137.012566][T12246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1871'. [ 137.048147][T12268] sch_fq: defrate 0 ignored. [ 137.092877][T12271] netlink: 'syz.1.1880': attribute type 12 has an invalid length. [ 137.140883][T12277] overlayfs: failed to clone upperpath [ 137.186919][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'. [ 137.198560][T12284] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1884'. [ 137.521780][ T40] audit: type=1400 audit(1757475807.864:729): avc: denied { map } for pid=12322 comm="syz.0.1897" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.542817][ T40] audit: type=1400 audit(1757475807.864:730): avc: denied { execute } for pid=12322 comm="syz.0.1897" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.813812][T12346] macvtap1: entered allmulticast mode [ 137.816024][T12346] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 137.821725][T12346] batman_adv: batadv0: Adding interface: macvtap1 [ 137.824404][T12346] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.834401][T12346] batman_adv: batadv0: Interface activated: macvtap1 [ 137.929277][T12351] overlayfs: failed to clone upperpath [ 138.576601][T12367] overlayfs: failed to clone upperpath [ 138.619828][T12374] tmpfs: Bad value for 'mpol' [ 138.693079][T12379] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1917'. [ 138.779529][T12385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1919'. [ 138.812158][T12395] syz.4.1921 (12395): attempted to duplicate a private mapping with mremap. This is not supported. [ 138.911522][ T5973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.916930][ T5973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.921600][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.927042][ T5973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.931245][ T5973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.957836][T12399] lo speed is unknown, defaulting to 1000 [ 139.047686][T12399] chnl_net:caif_netlink_parms(): no params data found [ 139.144746][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.148266][T12399] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.149317][T12417] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 139.150981][T12399] bridge_slave_0: entered allmulticast mode [ 139.156191][ T40] audit: type=1400 audit(1757475809.494:731): avc: denied { append } for pid=12416 comm="syz.0.1927" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.157178][T12399] bridge_slave_0: entered promiscuous mode [ 139.165426][ T40] audit: type=1400 audit(1757475809.494:732): avc: denied { ioctl } for pid=12416 comm="syz.0.1927" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.178250][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.180873][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.183435][T12399] bridge_slave_1: entered allmulticast mode [ 139.186286][T12399] bridge_slave_1: entered promiscuous mode [ 139.237146][T12399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.244125][T12399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.294148][T12399] team0: Port device team_slave_0 added [ 139.299487][T12399] team0: Port device team_slave_1 added [ 139.309521][T12429] overlayfs: failed to resolve './file0': -2 [ 139.330165][T12415] macvtap1: entered allmulticast mode [ 139.332400][T12415] veth0_macvtap: entered allmulticast mode [ 139.353021][ T40] audit: type=1326 audit(1757475809.694:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.1932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404f8eba9 code=0x7ffc0000 [ 139.361304][ T40] audit: type=1326 audit(1757475809.694:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.1932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404f8eba9 code=0x7ffc0000 [ 139.369582][ T40] audit: type=1326 audit(1757475809.694:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.1932" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff404f8eba9 code=0x7ffc0000 [ 139.375914][ T40] audit: type=1326 audit(1757475809.694:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.0.1932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff404f8eba9 code=0x7ffc0000 [ 139.398773][T12399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.401278][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.426952][T12399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.438693][T12432] tipc: New replicast peer: 0.0.0.0 [ 139.441963][T12432] tipc: Enabled bearer , priority 10 [ 139.447296][T12399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.450174][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.493009][T12399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.504187][T12433] tipc: New replicast peer: 255.255.255.255 [ 139.544360][T12399] hsr_slave_0: entered promiscuous mode [ 139.545006][T12435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 139.547320][T12399] hsr_slave_1: entered promiscuous mode [ 139.560473][T12399] debugfs: 'hsr0' already exists in 'hsr' [ 139.562778][T12399] Cannot create hsr debugfs directory [ 139.615186][T12437] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 139.712067][T12442] bond_slave_0: Caught tx_queue_len zero misconfig [ 139.733228][T12399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.777899][T12451] netlink: 171852 bytes leftover after parsing attributes in process `syz.0.1936'. [ 139.827947][T12399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.837119][T12462] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 139.839025][T12462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.841781][T12462] vhci_hcd vhci_hcd.0: Device attached [ 139.847724][T12463] vhci_hcd: connection closed [ 139.849103][ T1145] vhci_hcd: stop threads [ 139.853915][ T1145] vhci_hcd: release socket [ 139.855887][ T1145] vhci_hcd: disconnect device [ 139.905244][T12399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.971778][T12399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.090094][T12399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.095888][T12399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.108629][T12399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.113286][T12399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 140.190007][T12399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.207282][T12399] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.214992][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.218165][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.222256][T12517] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 140.239383][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.242595][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.262135][T12520] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 140.273364][T12520] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 140.280546][T12519] sch_tbf: peakrate 9 is lower than or equals to rate 5306287756915423550 ! [ 140.382180][T12399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.407522][T12399] veth0_vlan: entered promiscuous mode [ 140.414076][T12399] veth1_vlan: entered promiscuous mode [ 140.432209][T12399] veth0_macvtap: entered promiscuous mode [ 140.438350][T12399] veth1_macvtap: entered promiscuous mode [ 140.447854][T12399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.454464][T12399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.467106][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.470212][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.475790][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.477999][ T3246] tipc: Node number set to 1825604739 [ 140.483443][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.490299][T12538] bpf: Bad value for 'uid' [ 140.524145][ T6242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.527006][ T6242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.550668][ T6242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.553987][ T6242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.561701][T12548] openvswitch: netlink: IPv4 tunnel dst address is zero [ 140.591876][T12550] libceph: resolve '4' (ret=-3): failed [ 140.594608][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 140.601085][T12554] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 140.711179][T12555] veth3: entered promiscuous mode [ 140.759554][T12567] netlink: 'syz.2.1964': attribute type 10 has an invalid length. [ 140.762197][T12567] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1964'. [ 140.793554][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 140.919302][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'. [ 140.922967][T12587] IPVS: length: 184 != 3864 [ 140.996321][ T63] Bluetooth: hci3: command tx timeout [ 140.999757][T12598] overlayfs: failed to clone upperpath [ 141.039935][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 141.042722][T12600] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 141.316420][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 141.360720][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1985'. [ 141.364052][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1985'. [ 141.370782][T12633] erspan0: entered promiscuous mode [ 141.373063][T12633] gretap0: entered promiscuous mode [ 141.375081][T12633] debugfs: 'hsr1' already exists in 'hsr' [ 141.377848][T12633] Cannot create hsr debugfs directory [ 141.380056][T12633] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 141.383264][T12633] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 141.478740][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.482651][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.485671][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.489555][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.493736][ T10] usb 5-1: config 0 descriptor?? [ 141.498421][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 141.502529][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 141.507618][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.511864][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.514895][ T10] usb 5-1: media controller created [ 141.519184][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.526030][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 141.528731][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.532822][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 141.534078][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input22 [ 141.546858][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 141.547421][T12651] syz_tun (unregistering): left allmulticast mode [ 141.549199][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 141.614788][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.618618][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.621852][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.625078][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.628611][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.635031][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.639403][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.645441][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.650481][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.654219][T12654] overlayfs: failed lookup in lower (newroot/8, name='bus', err=-40): overlapping layers [ 141.718465][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 141.720543][ T10] dvb-usb: error while querying for an remote control event. [ 141.758955][ T3246] IPVS: starting estimator thread 0... [ 141.831759][ T10] usb 5-1: USB disconnect, device number 14 [ 141.846880][T12662] IPVS: using max 26 ests per chain, 62400 per kthread [ 141.850988][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 141.893587][T12668] netlink: 'syz.4.1995': attribute type 2 has an invalid length. [ 141.993197][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 141.993213][ T40] audit: type=1400 audit(1757475812.334:776): avc: denied { shutdown } for pid=12670 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.996006][T12672] block nbd4: not configured, cannot reconfigure [ 142.219284][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 142.422553][T12681] wg1: entered promiscuous mode [ 142.424205][T12681] wg1: entered allmulticast mode [ 142.429266][T12681] No source specified [ 142.836385][ T6050] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 142.941968][T12704] comedi comedi0: Minor 3 specified more than once! [ 142.945584][T12704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'. [ 142.950704][T12704] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 142.987129][ T6050] usb 5-1: Using ep0 maxpacket: 8 [ 142.990839][ T6050] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.993972][ T6050] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.997024][ T6050] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 143.000558][ T6050] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 143.004717][ T6050] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.010326][ T6050] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.013942][ T6050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.076205][ T63] Bluetooth: hci3: command tx timeout [ 143.105953][T12710] random: crng reseeded on system resumption [ 143.106148][ T40] audit: type=1400 audit(1757475813.444:777): avc: denied { append } for pid=12709 comm="syz.4.2007" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.124283][T12712] can: request_module (can-proto-0) failed. [ 143.220999][ T6050] usb 5-1: GET_CAPABILITIES returned 0 [ 143.222799][ T6050] usbtmc 5-1:16.0: can't read capabilities [ 143.365174][ T40] audit: type=1400 audit(1757475813.704:778): avc: denied { read write } for pid=12735 comm="syz.1.2012" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.371693][ T7449] hid (null): global environment stack underflow [ 143.380716][ T7449] hid (null): unknown global tag 0x47 [ 143.381228][ T40] audit: type=1400 audit(1757475813.704:779): avc: denied { open } for pid=12735 comm="syz.1.2012" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.383158][ T7449] hid (null): bogus close delimiter [ 143.395303][ T7449] hid (null): unknown global tag 0xe [ 143.397792][ T7449] hid (null): unknown global tag 0xe [ 143.413500][ T7449] hid (null): invalid report_size -1284463538 [ 143.416455][ T7449] hid (null): invalid report_size 55645 [ 143.418841][ T7449] hid (null): unknown global tag 0xd [ 143.421809][ T7449] hid (null): invalid report_size 36185 [ 143.424324][ T6050] usb 5-1: USB disconnect, device number 15 [ 143.424363][ T7449] hid (null): report_id 19025 is invalid [ 143.428800][ T7449] hid (null): unknown global tag 0xc [ 143.431082][ T7449] hid (null): global environment stack underflow [ 143.434032][ T7449] hid (null): unknown global tag 0xc [ 143.436570][ T7449] hid (null): invalid report_size 11503 [ 143.438931][ T7449] hid (null): report_id 0 is invalid [ 143.441464][ T7449] hid (null): unknown global tag 0x72 [ 143.444234][ T7449] hid (null): unknown global tag 0xd [ 143.447340][ T7449] hid (null): report_id 962161444 is invalid [ 143.449932][ T7449] hid (null): unknown global tag 0xe [ 143.452218][ T7449] hid (null): unknown global tag 0xd [ 143.454407][ T7449] hid (null): invalid report_size 64336 [ 143.457986][ T7449] hid (null): global environment stack overflow [ 143.460806][ T7449] hid (null): unknown global tag 0xd [ 143.463038][ T7449] hid (null): unknown global tag 0xe [ 143.465237][ T7449] hid (null): unknown global tag 0x81 [ 143.469524][ T7449] hid (null): bogus close delimiter [ 143.471298][ T7449] hid (null): global environment stack overflow [ 143.473944][ T7449] hid (null): unknown global tag 0xd [ 143.478012][ T7449] hid (null): unknown global tag 0xc [ 143.480810][T12755] overlayfs: missing 'workdir' [ 143.481796][ T7449] hid (null): unknown global tag 0xa8 [ 143.484567][ T7449] hid (null): unknown global tag 0xd [ 143.485317][T12755] netlink: 'syz.2.2019': attribute type 25 has an invalid length. [ 143.488123][ T7449] hid (null): unknown global tag 0x42 [ 143.491918][ T7449] hid (null): unknown global tag 0xd [ 143.494138][ T7449] hid (null): unknown global tag 0xe [ 143.497502][ T7449] hid (null): unknown global tag 0xd [ 143.499717][ T7449] hid (null): unknown global tag 0xe [ 143.505900][ T7449] hid-generic 0006:0004:0101.0004: reserved main item tag 0xe [ 143.510406][ T7449] hid-generic 0006:0004:0101.0004: global environment stack underflow [ 143.513790][ T7449] hid-generic 0006:0004:0101.0004: item 0 2 1 11 parsing failed [ 143.517541][ T7449] hid-generic 0006:0004:0101.0004: probe with driver hid-generic failed with error -22 [ 143.577144][ T40] audit: type=1400 audit(1757475813.924:780): avc: denied { connect } for pid=12762 comm="syz.1.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 143.586498][T12767] tmpfs: Bad value for 'huge' [ 143.611612][ T40] audit: type=1400 audit(1757475813.954:781): avc: denied { name_connect } for pid=12770 comm="syz.1.2023" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 143.751570][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.754025][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.760550][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.778171][T12797] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.801780][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.808795][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.812930][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.817839][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.821818][T12798] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 143.825608][T12797] xfrm0 speed is unknown, defaulting to 1000 [ 143.827277][T12798] ptrace attach of "/syz-executor exec"[8904] was attempted by "  [ 143.925950][T12814] netlink: 'syz.2.2036': attribute type 1 has an invalid length. [ 143.956481][ T63] Bluetooth: hci1: command tx timeout [ 143.976010][T12814] 8021q: adding VLAN 0 to HW filter on device bond6 [ 144.257572][ T40] audit: type=1400 audit(1757475814.604:782): avc: denied { relabelto } for pid=12840 comm="syz.4.2044" name="231" dev="tmpfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 144.259085][T12841] netlink: 'syz.4.2044': attribute type 4 has an invalid length. [ 144.310625][T12848] random: crng reseeded on system resumption [ 144.356710][T12848] program syz.4.2046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.532343][T12867] tmpfs: Bad value for 'mpol' [ 144.564372][T12864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12864 comm=syz.2.2051 [ 144.640131][T12875] /dev/sg0: Can't lookup blockdev [ 144.673765][T12878] xt_socket: unknown flags 0xe4 [ 144.765428][ T40] audit: type=1400 audit(1757475815.104:783): avc: denied { write } for pid=12889 comm="syz.4.2060" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.907905][T12914] lo: left promiscuous mode [ 144.925514][T12914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.930089][T12914] bridge0: port 2(dummy0) entered blocking state [ 144.932749][T12914] bridge0: port 2(dummy0) entered listening state [ 144.937306][T12914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.968768][T11422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.086310][T11422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.154503][ T5973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.158442][ T5973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.161840][ T5973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.165615][ T5973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.166422][ T5979] Bluetooth: hci3: command tx timeout [ 145.166740][ T6242] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.169313][ T5973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.190952][T12916] lo speed is unknown, defaulting to 1000 [ 145.194062][T12916] xfrm0 speed is unknown, defaulting to 1000 [ 145.275595][T12916] chnl_net:caif_netlink_parms(): no params data found [ 145.359433][T12916] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.361772][T12916] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.364018][T12916] bridge_slave_0: entered allmulticast mode [ 145.366713][T12916] bridge_slave_0: entered promiscuous mode [ 145.369980][T12916] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.372286][T12916] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.374537][T12916] bridge_slave_1: entered allmulticast mode [ 145.378773][T12916] bridge_slave_1: entered promiscuous mode [ 145.423509][T12916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.428454][T12916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.459765][T12916] team0: Port device team_slave_0 added [ 145.463120][T12916] team0: Port device team_slave_1 added [ 145.493644][T12916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.495934][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.505011][T12916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.511067][T12916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.513284][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.521122][T12916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.569614][T12916] hsr_slave_0: entered promiscuous mode [ 145.571861][T12916] hsr_slave_1: entered promiscuous mode [ 145.573943][T12916] debugfs: 'hsr0' already exists in 'hsr' [ 145.575717][T12916] Cannot create hsr debugfs directory [ 145.733546][T12929] Process accounting resumed [ 145.970379][T12946] __nla_validate_parse: 9 callbacks suppressed [ 145.970395][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2075'. [ 146.036999][ T40] audit: type=1400 audit(1757475816.384:784): avc: denied { read } for pid=12950 comm="syz.1.2077" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 146.044437][ T40] audit: type=1400 audit(1757475816.384:785): avc: denied { connect } for pid=12950 comm="syz.1.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.150435][T12916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.157714][T12916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.162151][T12916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.166488][T12916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.197165][ T6271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 146.199929][ T6271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 146.211984][T12916] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.214181][T12916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.216704][T12916] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.218984][T12916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.254108][T12916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.254820][T12977] netlink: 'syz.1.2083': attribute type 11 has an invalid length. [ 146.270240][T12916] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.274660][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.281630][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.300576][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2085'. [ 146.302321][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.305651][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.314879][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.317178][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.332663][T12983] cgroup: none used incorrectly [ 146.340296][T12983] unknown channel width for channel at 909000KHz? [ 146.340782][T12981] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 146.342588][T12983] unknown channel width for channel at 909000KHz? [ 146.347832][T12983] unknown channel width for channel at 909000KHz? [ 146.420252][T12916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.439542][T12916] veth0_vlan: entered promiscuous mode [ 146.445208][T12916] veth1_vlan: entered promiscuous mode [ 146.461256][T12916] veth0_macvtap: entered promiscuous mode [ 146.465078][T12916] veth1_macvtap: entered promiscuous mode [ 146.476014][T12916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.483206][T12916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.490273][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.493080][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.496447][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.499228][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.535816][ T6271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.539107][ T6271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.542983][T12995] sg_write: process 766 (syz.4.2088) changed security contexts after opening file descriptor, this is not allowed. [ 146.552963][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.555349][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.585821][T13001] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2067'. [ 146.618637][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2091'. [ 146.622522][T13004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2091'. [ 146.681562][T13017] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 146.840625][T11422] hid (null): global environment stack underflow [ 146.843963][T11422] hid (null): bogus close delimiter [ 146.852251][T11422] hid-generic 0000:000F:7A97.0005: global environment stack underflow [ 146.854768][T11422] hid-generic 0000:000F:7A97.0005: item 0 0 1 11 parsing failed [ 146.857955][T11422] hid-generic 0000:000F:7A97.0005: probe with driver hid-generic failed with error -22 [ 146.886288][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 146.917965][T13033] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 146.939545][T13032] veth3: entered promiscuous mode [ 146.996442][ T3246] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 147.146138][ T3246] usb 9-1: Using ep0 maxpacket: 16 [ 147.150310][ T3246] usb 9-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.155538][ T3246] usb 9-1: config 1 interface 0 has no altsetting 0 [ 147.160766][ T3246] usb 9-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.40 [ 147.164588][ T3246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.168269][ T3246] usb 9-1: Product: Ж [ 147.169967][ T3246] usb 9-1: Manufacturer: ᰊ [ 147.171863][ T3246] usb 9-1: SerialNumber: ␉ [ 147.236327][ T5973] Bluetooth: hci2: command tx timeout [ 147.236386][ T63] Bluetooth: hci3: command tx timeout [ 147.239940][T11419] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 147.380015][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 147.380031][ T40] audit: type=1400 audit(1757475817.724:788): avc: denied { accept } for pid=13019 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 147.393270][ T3246] usbhid 9-1:1.0: can't add hid device: -71 [ 147.395991][ T3246] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 147.402468][ T3246] usb 9-1: USB disconnect, device number 16 [ 147.419243][T13060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2108'. [ 147.424048][T13060] tipc: Started in network mode [ 147.425661][T13060] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 147.428228][T13060] tipc: Enabled bearer , priority 0 [ 147.466844][T13067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2110'. [ 147.746280][ T7449] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 147.906131][ T7449] usb 6-1: Using ep0 maxpacket: 8 [ 147.912168][ T7449] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 147.914926][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.921173][ T7449] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.926326][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.930586][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.935539][ T40] audit: type=1400 audit(1757475818.274:789): avc: denied { write } for pid=13089 comm="syz.2.2118" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 147.939652][ T7449] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 147.948285][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.952476][ T7449] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.958111][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.962153][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.968181][ T7449] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 147.970860][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.974706][ T7449] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.979328][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.983687][ T7449] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.990082][ T7449] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 147.993547][ T7449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.995056][ T40] audit: type=1400 audit(1757475818.334:790): avc: denied { map } for pid=13087 comm="syz.4.2117" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.004193][ T7449] usb 6-1: Product: syz [ 148.005900][ T7449] usb 6-1: Manufacturer: syz [ 148.008715][ T7449] usb 6-1: SerialNumber: syz [ 148.128943][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 148.133168][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 148.359097][ T7449] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 148.362810][ T7449] usb 6-1: USB disconnect, device number 8 [ 148.426166][T11422] tipc: Node number set to 11578026 [ 148.441711][T13130] geneve2: entered promiscuous mode [ 148.443406][T13130] geneve2: entered allmulticast mode [ 148.493069][T13135] binder: Bad value for 'stats' [ 148.886186][T11422] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 149.036254][T11422] usb 9-1: Using ep0 maxpacket: 16 [ 149.040668][T11422] usb 9-1: unable to get BOS descriptor or descriptor too short [ 149.044945][T11422] usb 9-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024 [ 149.049257][T11422] usb 9-1: config 1 interface 0 has no altsetting 0 [ 149.053957][T11422] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 149.057894][T11422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.061276][T11422] usb 9-1: Product: ఁ [ 149.063049][T11422] usb 9-1: Manufacturer: ࿘㓄眫諡Ṉ쪼䞋楠䒋謫첮ꃡຠ⭊ख़㘜蛺褟嵢㳖闵啻ꪭꈠ᳛聏姰챂齶核㓛띝᫄洺熜︁욒⟿鷤鸴惜箮좡絙；鲺覹泄噯忉韝峬儯垠᷎뀐贞䰣啕괄颈르ퟭ [ 149.072575][T11422] usb 9-1: SerialNumber: щ [ 149.077848][T13151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.316207][ T63] Bluetooth: hci2: command tx timeout [ 149.334282][T13151] netlink: 'syz.4.2134': attribute type 13 has an invalid length. [ 149.337993][T13151] netlink: 'syz.4.2134': attribute type 17 has an invalid length. [ 149.377181][T13151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.381534][T13151] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.392109][T13151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.422231][T11422] usb 9-1: USB disconnect, device number 17 [ 149.756303][T11422] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 149.766331][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 149.907753][T11422] usb 9-1: unable to get BOS descriptor or descriptor too short [ 149.910542][T11422] usb 9-1: not running at top speed; connect to a high speed hub [ 149.913870][T11422] usb 9-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.918018][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 149.919677][T11422] usb 9-1: config 1 interface 0 has no altsetting 0 [ 149.923198][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.925860][ T9] usb 6-1: config 179 has no interface number 0 [ 149.928059][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 149.931495][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 149.935087][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 149.938756][T11422] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.941548][T11422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.944025][T11422] usb 9-1: Product: syz [ 149.945375][T11422] usb 9-1: Manufacturer: syz [ 149.946908][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 149.950369][ T9] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 149.954269][ T9] usb 6-1: config 179 interface 65 has no altsetting 0 [ 149.956578][T11422] usb 9-1: SerialNumber: syz [ 149.959036][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 149.964238][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.975262][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input23 [ 150.018084][ T5363] input input23: unable to receive magic message: -110 [ 150.024912][ T5363] input input23: unable to receive magic message: -32 [ 150.030070][ T5363] input input23: unable to receive magic message: -32 [ 150.033413][ T5363] input input23: unable to receive magic message: -32 [ 150.116241][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.171225][T13160] input input23: unable to receive magic message: -32 [ 150.174728][ T40] audit: type=1400 audit(1757475820.569:791): avc: denied { map } for pid=13159 comm="syz.1.2137" path="/41/file1/bus/file0" dev="autofs" ino=51738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 150.185530][T11422] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 150.190767][T11422] usb 9-1: USB disconnect, device number 18 [ 150.195668][T11419] usb 6-1: USB disconnect, device number 9 [ 150.196897][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.816024][T13174] kvm: pic: non byte write [ 150.871396][T13184] block device autoloading is deprecated and will be removed. [ 151.170513][T13204] __nla_validate_parse: 9 callbacks suppressed [ 151.170524][T13204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2153'. [ 151.179599][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2153'. [ 151.182825][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2153'. [ 151.220025][T13216] syz.1.2157 uses old SIOCAX25GETINFO [ 151.348725][T11773] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 151.395558][ T40] audit: type=1400 audit(1757475821.789:792): avc: denied { read } for pid=13227 comm="syz.2.2161" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 151.396258][ T63] Bluetooth: hci2: command tx timeout [ 151.474820][ T40] audit: type=1400 audit(1757475821.869:793): avc: denied { connect } for pid=13231 comm="syz.2.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.481800][ T40] audit: type=1400 audit(1757475821.879:794): avc: denied { write } for pid=13231 comm="syz.2.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.497613][T11773] usb 9-1: Using ep0 maxpacket: 8 [ 151.500426][T11773] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.503334][T11773] usb 9-1: config 179 has no interface number 0 [ 151.505461][T11773] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 151.510138][T11773] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 151.514201][T11773] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.518755][T11773] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 151.521890][T11773] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.526579][T11773] usb 9-1: config 179 interface 65 has no altsetting 0 [ 151.528812][T11773] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 151.531634][T11773] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.539985][T11773] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input24 [ 151.569724][T13237] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 151.588228][T13237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.628821][T13240] fuse: Bad value for 'fd' [ 151.671412][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 151.715054][T13244] .: renamed from bond0 (while UP) [ 151.728086][T13244] team0: No ports can be present during mode change [ 151.767920][T11773] usb 9-1: USB disconnect, device number 19 [ 151.769937][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.054489][T13253] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 152.119759][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.122758][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.193227][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.202180][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.250810][T13265] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2175'. [ 152.296530][ T6271] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.300183][ T6271] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.301831][T13277] ata1.00: invalid multi_count 1 ignored [ 152.304557][ T6271] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.309856][ T6566] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.353683][T13277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=13277 comm=syz.4.2178 [ 152.401410][T13287] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 152.413218][T13287] bond7: entered promiscuous mode [ 152.415410][T13287] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.429377][T13287] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.433261][T13287] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.437133][T13287] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 152.656142][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 152.779376][ T40] audit: type=1400 audit(1757475823.159:795): avc: denied { mounton } for pid=13299 comm="syz.0.2186" path="/416/file1/file0" dev="autofs" ino=54817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 152.809191][ T9] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 152.812832][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.818841][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.822539][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.825449][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.828581][ T9] usb 7-1: Product: syz [ 152.829971][ T9] usb 7-1: Manufacturer: syz [ 152.831461][ T9] usb 7-1: SerialNumber: syz [ 152.834403][ T9] usb 7-1: config 0 descriptor?? [ 152.837360][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 152.839461][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 152.843556][ T9] usb 7-1: selecting invalid altsetting 0 [ 152.938811][T13307] tmpfs: Too few inodes for current use [ 153.476881][ T63] Bluetooth: hci2: command tx timeout [ 153.496483][ T29] usb 7-1: USB disconnect, device number 8 [ 153.736483][T13355] kvm: Disabled LAPIC found during irq injection [ 153.930587][T13373] netlink: 'syz.2.2201': attribute type 9 has an invalid length. [ 153.989086][T13375] ip6gretap1: entered promiscuous mode [ 153.991259][T13375] ip6gretap1: entered allmulticast mode [ 154.226475][ T40] audit: type=1400 audit(1757475824.619:796): avc: denied { map } for pid=13388 comm="syz.1.2207" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 154.264154][ T40] audit: type=1400 audit(1757475824.659:797): avc: denied { bind } for pid=13391 comm="syz.2.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.672107][T13402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2210'. [ 154.822168][T13415] overlayfs: empty lowerdir [ 154.863497][T13420] netlink: 'syz.1.2216': attribute type 10 has an invalid length. [ 154.867175][T13420] veth0_macvtap: left promiscuous mode [ 154.905097][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 154.905104][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 155.045648][T13430] Process accounting resumed [ 155.110992][T13449] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2225'. [ 155.117219][T13449] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 155.126434][T13449] gretap1: entered promiscuous mode [ 155.186370][ T7449] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 155.196639][T13460] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 155.214025][T13460] SELinux: ebitmap start bit (4294967294) is not a multiple of the map unit size (64) [ 155.219284][T13460] SELinux: failed to load policy [ 155.225065][ T40] audit: type=1400 audit(1757475825.629:798): avc: denied { getopt } for pid=13461 comm="syz.4.2229" lport=45566 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.264950][T13467] binder: 13465:13467 unknown command 0 [ 155.267368][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.270402][T13467] binder: 13465:13467 unknown command 0 [ 155.272567][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.275516][T13467] binder: 13465:13467 unknown command 0 [ 155.277791][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.280834][T13467] binder: 13465:13467 unknown command 0 [ 155.283011][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.285983][T13467] binder: 13465:13467 unknown command 0 [ 155.288489][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.291748][T13467] binder: 13465:13467 unknown command 0 [ 155.294114][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.297804][T13467] binder: 13465:13467 unknown command 0 [ 155.299975][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.302947][T13467] binder: 13465:13467 unknown command 0 [ 155.305112][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.308405][T13467] binder: 13465:13467 unknown command 0 [ 155.310545][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.313578][T13467] binder: 13465:13467 unknown command 0 [ 155.315694][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.317061][T13466] binder_alloc: binder_alloc_mmap_handler: 13465 200000ffc000-200000fff000 already mapped failed -16 [ 155.318864][T13467] binder: 13465:13467 unknown command 7388459 [ 155.322164][T13466] binder_alloc: binder_alloc_mmap_handler: 13465 200000ffc000-200000fff000 already mapped failed -16 [ 155.324389][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.328036][T13466] binder_alloc: binder_alloc_mmap_handler: 13465 200000ffc000-200000fff000 already mapped failed -16 [ 155.331106][T13467] binder: 13465:13467 unknown command 7388459 [ 155.337332][ T7449] usb 7-1: Using ep0 maxpacket: 8 [ 155.338868][T13467] binder: 13465:13467 ioctl c0306201 200000000080 returned -22 [ 155.342664][ T7449] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 155.346634][ T7449] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.350001][ T7449] usb 7-1: Product: syz [ 155.351816][ T7449] usb 7-1: Manufacturer: syz [ 155.353463][ T7449] usb 7-1: SerialNumber: syz [ 155.356143][ T7449] usb 7-1: config 0 descriptor?? [ 155.371053][T13475] : entered promiscuous mode [ 155.402887][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2232'. [ 155.407426][T13474] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.414533][T13474] netlink: 'syz.1.2232': attribute type 5 has an invalid length. [ 155.560503][ T7449] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.563981][ T7449] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 155.567938][ T7449] usb 7-1: USB disconnect, device number 9 [ 155.587695][T13488] veth0_macvtap: left allmulticast mode [ 155.622318][T13492] unknown channel width for channel at 909000KHz? [ 156.090500][ T40] audit: type=1400 audit(1757475826.489:799): avc: denied { append } for pid=13497 comm="syz.1.2240" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.293053][T13522] netlink: 'syz.2.2248': attribute type 12 has an invalid length. [ 156.295849][T13522] __nla_validate_parse: 2 callbacks suppressed [ 156.295860][T13522] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2248'. [ 156.332414][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 156.436825][T13532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2252'. [ 156.440445][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 156.444950][ T40] audit: type=1400 audit(1757475826.839:800): avc: denied { lock } for pid=13531 comm="syz.2.2252" path="socket:[53970]" dev="sockfs" ino=53970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 156.755264][T13548] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 156.790946][T13548] vlan0: entered promiscuous mode [ 157.302965][T13562] syzkaller0: entered promiscuous mode [ 157.304825][T13562] syzkaller0: entered allmulticast mode [ 157.310056][T13565] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.706237][ T29] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 157.885621][T13600] misc userio: Invalid payload size [ 157.887897][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 157.892322][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.896466][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.899464][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.902528][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.909092][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.911907][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.120878][ T29] usb 9-1: GET_CAPABILITIES returned 0 [ 158.122621][ T29] usbtmc 9-1:16.0: can't read capabilities [ 158.206236][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 158.388763][T13624] lo speed is unknown, defaulting to 1000 [ 158.717950][T13628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2277'. [ 159.116111][ T7449] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 159.277428][ T7449] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 159.280003][ T7449] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.283441][ T7449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.286998][ T7449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.290397][ T7449] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.294393][ T7449] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.297246][ T7449] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.301117][ T7449] usb 7-1: config 0 descriptor?? [ 159.303087][T13637] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.693285][ T40] audit: type=1400 audit(1757475830.089:801): avc: denied { setopt } for pid=13640 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.710782][ T7449] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 159.718687][ T7449] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 159.730410][ T40] audit: type=1400 audit(1757475830.129:802): avc: denied { setopt } for pid=13645 comm="syz.1.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 159.826765][T13651] netlink: 'syz.1.2285': attribute type 21 has an invalid length. [ 159.829329][T13651] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2285'. [ 159.913201][ T9] usb 7-1: USB disconnect, device number 10 [ 159.938901][T13660] lo speed is unknown, defaulting to 1000 [ 159.990367][T13663] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2289'. [ 160.471721][ T7449] usb 9-1: USB disconnect, device number 20 [ 160.612322][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2300'. [ 161.065098][T13739] lo speed is unknown, defaulting to 1000 [ 161.296794][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 161.298354][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 161.303977][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 161.307903][T13761] JFS: discard option not supported on device [ 161.310629][T13761] block nbd1: Attempted send on invalid socket [ 161.312799][T13761] blk_print_req_error: 55 callbacks suppressed [ 161.312808][T13761] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.319631][T13761] block nbd1: Attempted send on invalid socket [ 161.322223][T13761] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.326251][T13761] Mount JFS Failure: -5 [ 161.356202][ T40] audit: type=1400 audit(1757475831.749:803): avc: denied { create } for pid=13763 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 161.356962][T13764] 8021q: VLANs not supported on ip6tnl0 [ 161.362905][ T40] audit: type=1400 audit(1757475831.749:804): avc: denied { write } for pid=13763 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 161.369076][T13764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2321'. [ 161.371414][ T40] audit: type=1400 audit(1757475831.749:805): avc: denied { getattr } for pid=13763 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 161.381220][ T40] audit: type=1400 audit(1757475831.749:806): avc: denied { nlmsg_write } for pid=13763 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 161.388864][ T40] audit: type=1400 audit(1757475831.769:807): avc: denied { create } for pid=13763 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 161.395165][ T40] audit: type=1400 audit(1757475831.769:808): avc: denied { write } for pid=13763 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 161.411477][T13768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.437062][T13772] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 161.445050][T13772] CIFS mount error: No usable UNC path provided in device string! [ 161.445050][T13772] [ 161.448531][T13772] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 161.452386][T13776] CIFS mount error: No usable UNC path provided in device string! [ 161.452386][T13776] [ 161.455547][T13776] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 161.456756][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 161.462493][ T29] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 161.465997][ T29] usb 7-1: config 179 has no interface number 0 [ 161.468825][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 161.473333][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 161.480642][ T29] usb 7-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.487989][ T29] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 161.493667][ T29] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 161.497919][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.504998][T13738] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.546683][T13779] kvm: pic: non byte write [ 161.708636][T13793] "syz.1.2330" (13793) uses obsolete ecb(arc4) skcipher [ 161.710174][ T29] usb 7-1: USB disconnect, device number 11 [ 161.712448][T13738] dlm: no locking on control device [ 161.769175][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 161.780107][T13803] syz_tun: entered allmulticast mode [ 161.783671][T13802] syz_tun: left allmulticast mode [ 161.783862][ T6242] Bluetooth: Error in BCSP hdr checksum [ 162.243361][ T40] audit: type=1400 audit(1757475832.639:809): avc: denied { mounton } for pid=13813 comm="syz.4.2335" path="/bus" dev="bpf" ino=58500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 162.245933][T13814] overlayfs: upper fs does not support tmpfile. [ 162.251284][T13817] autofs4:pid:13817:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32.1), cmd(0xc018937a) [ 162.251302][T13817] autofs4:pid:13817:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) [ 162.266421][T13814] netlink: 'syz.4.2335': attribute type 6 has an invalid length. [ 162.269394][T13814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'. [ 162.270049][ T40] audit: type=1400 audit(1757475832.669:810): avc: denied { ioctl } for pid=13816 comm="syz.2.2336" path="socket:[57689]" dev="sockfs" ino=57689 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 162.307408][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 162.314492][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 162.418865][T13831] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 162.421944][T13831] 9pnet_fd: Insufficient options for proto=fd [ 162.691962][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 163.408291][T13855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2350'. [ 163.448196][T13860] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 163.532328][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 163.561985][T13865] netlink: 'syz.4.2353': attribute type 16 has an invalid length. [ 163.564928][T13865] netlink: 'syz.4.2353': attribute type 17 has an invalid length. [ 163.570548][T13865] vlan0: left promiscuous mode [ 163.573436][T13865] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 163.576129][T13865] macvtap1: left allmulticast mode [ 163.742360][T13874] lo speed is unknown, defaulting to 1000 [ 163.796176][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.796232][ T5973] Bluetooth: hci4: command 0x1003 tx timeout [ 163.849651][T13888] openvswitch: netlink: Duplicate or invalid key (type 0). [ 163.852686][T13888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.867702][T13885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13885 comm=syz.1.2359 [ 163.890568][T13891] sctp: [Deprecated]: syz.2.2362 (pid 13891) Use of int in max_burst socket option. [ 163.890568][T13891] Use struct sctp_assoc_value instead [ 164.583311][T13918] geneve1: entered allmulticast mode [ 164.642311][ T9] IPVS: starting estimator thread 0... [ 164.697095][T13924] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 164.700889][T13924] IPVS: set_ctl: invalid protocol: 5 0.0.0.0:256 [ 164.737909][T13926] IPVS: using max 44 ests per chain, 105600 per kthread [ 164.912157][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 164.912169][ T40] audit: type=1400 audit(1757476091.317:816): avc: denied { mounton } for pid=13939 comm="syz.2.2374" path="/103/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 164.914981][T13944] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 165.013949][T13601] ------------[ cut here ]------------ [ 165.016352][T13601] refcount_t: underflow; use-after-free. [ 165.018367][T13601] WARNING: CPU: 1 PID: 13601 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 165.021312][T13601] Modules linked in: [ 165.023073][T13601] CPU: 1 UID: 0 PID: 13601 Comm: syz.2.2271 Not tainted syzkaller #0 PREEMPT(full) [ 165.027846][T13601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.031226][T13601] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 165.033219][T13601] Code: ff 89 de e8 88 e0 d7 fc 84 db 0f 85 66 ff ff ff e8 9b e5 d7 fc c6 05 57 1e b0 0b 01 90 48 c7 c7 00 9c 15 8c e8 a7 88 96 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 78 e5 d7 fc 0f b6 1d 32 1e b0 0b 31 [ 165.039399][T13601] RSP: 0018:ffffc90004707728 EFLAGS: 00010286 [ 165.041282][T13601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3388 [ 165.043708][T13601] RDX: ffff88802c31c880 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 165.046597][T13601] RBP: ffff888061602878 R08: 0000000000000001 R09: 0000000000000000 [ 165.049264][T13601] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888034995c00 [ 165.051679][T13601] R13: ffff888061602878 R14: ffffffff86157c50 R15: ffffffff908e5de0 [ 165.054141][T13601] FS: 0000000000000000(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000 [ 165.057030][T13601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.059015][T13601] CR2: 0000000000000000 CR3: 000000002ae8f000 CR4: 0000000000352ef0 [ 165.061439][T13601] DR0: 0000000000008009 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.063828][T13601] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 165.066355][T13601] Call Trace: [ 165.067396][T13601] [ 165.068598][T13601] klist_put+0x11b/0x1b0 [ 165.070390][T13601] klist_remove+0x13f/0x2e0 [ 165.072190][T13601] ? kobject_move+0x15d/0x260 [ 165.073677][T13601] ? __pfx_klist_remove+0x10/0x10 [ 165.075259][T13601] ? __pfx_kobject_move+0x10/0x10 [ 165.077134][T13601] ? get_device_parent+0x1ed/0x4e0 [ 165.078764][T13601] device_move+0x12d/0x10d0 [ 165.080225][T13601] hci_conn_del_sysfs+0x81/0x180 [ 165.081786][T13601] hci_conn_del+0x657/0x1180 [ 165.083248][T13601] hci_conn_hash_flush+0x186/0x260 [ 165.084880][T13601] hci_dev_close_sync+0x602/0x11d0 [ 165.086650][T13601] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 165.088431][T13601] ? up_write+0x1b2/0x520 [ 165.089798][T13601] hci_dev_do_close+0x2e/0x90 [ 165.091304][T13601] hci_unregister_dev+0x227/0x640 [ 165.092856][T13601] vhci_release+0x17d/0x230 [ 165.094286][T13601] ? __pfx_vhci_release+0x10/0x10 [ 165.095853][T13601] __fput+0x3ff/0xb70 [ 165.097224][T13601] task_work_run+0x150/0x240 [ 165.098718][T13601] ? __pfx_task_work_run+0x10/0x10 [ 165.100346][T13601] do_exit+0x86f/0x2bf0 [ 165.101669][T13601] ? __pfx_do_exit+0x10/0x10 [ 165.103124][T13601] ? cgroup_update_frozen_flag+0x107/0x210 [ 165.104951][T13601] ? find_held_lock+0x2b/0x80 [ 165.106658][T13601] do_group_exit+0xd3/0x2a0 [ 165.108133][T13601] get_signal+0x2673/0x26d0 [ 165.109569][T13601] ? hrtimer_nanosleep+0x187/0x380 [ 165.111093][T13601] ? __pfx_get_signal+0x10/0x10 [ 165.112686][T13601] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 165.114317][T13601] arch_do_signal_or_restart+0x8f/0x7d0 [ 165.116134][T13601] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 165.118065][T13601] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 165.119918][T13601] exit_to_user_mode_loop+0x84/0x110 [ 165.121571][T13601] do_syscall_64+0x3f6/0x4c0 [ 165.122962][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.124749][T13601] RIP: 0033:0x7f37947c1465 [ 165.126186][T13601] Code: Unable to access opcode bytes at 0x7f37947c143b. [ 165.128343][T13601] RSP: 002b:00007f37955e2f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 165.130916][T13601] RAX: fffffffffffffdfc RBX: 00007f37949d5fa0 RCX: 00007f37947c1465 [ 165.133393][T13601] RDX: 00007f37955e2fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.135853][T13601] RBP: 00007f3794811e19 R08: 0000000000000000 R09: 0000000000000000 [ 165.138529][T13601] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.140982][T13601] R13: 00007f37949d6038 R14: 00007f37949d5fa0 R15: 00007ffe1a0e7158 [ 165.143671][T13601] [ 165.144667][T13601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.146933][T13601] CPU: 1 UID: 0 PID: 13601 Comm: syz.2.2271 Not tainted syzkaller #0 PREEMPT(full) [ 165.149843][T13601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.153143][T13601] Call Trace: [ 165.154194][T13601] [ 165.155134][T13601] dump_stack_lvl+0x3d/0x1f0 [ 165.156611][T13601] vpanic+0x6e8/0x7a0 [ 165.157874][T13601] ? __pfx_vpanic+0x10/0x10 [ 165.159306][T13601] ? refcount_warn_saturate+0x14a/0x210 [ 165.161059][T13601] panic+0xca/0xd0 [ 165.162252][T13601] ? __pfx_panic+0x10/0x10 [ 165.163663][T13601] ? check_panic_on_warn+0x1f/0xb0 [ 165.165280][T13601] check_panic_on_warn+0xab/0xb0 [ 165.166898][T13601] __warn+0xf6/0x3c0 [ 165.168177][T13601] ? refcount_warn_saturate+0x14a/0x210 [ 165.169924][T13601] report_bug+0x3c3/0x580 [ 165.171301][T13601] ? refcount_warn_saturate+0x14a/0x210 [ 165.173047][T13601] handle_bug+0x184/0x210 [ 165.174411][T13601] exc_invalid_op+0x17/0x50 [ 165.175823][T13601] asm_exc_invalid_op+0x1a/0x20 [ 165.177294][T13601] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 165.179230][T13601] Code: ff 89 de e8 88 e0 d7 fc 84 db 0f 85 66 ff ff ff e8 9b e5 d7 fc c6 05 57 1e b0 0b 01 90 48 c7 c7 00 9c 15 8c e8 a7 88 96 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 78 e5 d7 fc 0f b6 1d 32 1e b0 0b 31 [ 165.185130][T13601] RSP: 0018:ffffc90004707728 EFLAGS: 00010286 [ 165.187017][T13601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3388 [ 165.189407][T13601] RDX: ffff88802c31c880 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 165.191876][T13601] RBP: ffff888061602878 R08: 0000000000000001 R09: 0000000000000000 [ 165.194316][T13601] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888034995c00 [ 165.196776][T13601] R13: ffff888061602878 R14: ffffffff86157c50 R15: ffffffff908e5de0 [ 165.199251][T13601] ? __pfx_klist_children_put+0x10/0x10 [ 165.201015][T13601] ? __warn_printk+0x198/0x350 [ 165.202510][T13601] ? __warn_printk+0x1a5/0x350 [ 165.204074][T13601] ? refcount_warn_saturate+0x149/0x210 [ 165.205802][T13601] klist_put+0x11b/0x1b0 [ 165.207142][T13601] klist_remove+0x13f/0x2e0 [ 165.208571][T13601] ? kobject_move+0x15d/0x260 [ 165.210051][T13601] ? __pfx_klist_remove+0x10/0x10 [ 165.211668][T13601] ? __pfx_kobject_move+0x10/0x10 [ 165.213260][T13601] ? get_device_parent+0x1ed/0x4e0 [ 165.214902][T13601] device_move+0x12d/0x10d0 [ 165.216348][T13601] hci_conn_del_sysfs+0x81/0x180 [ 165.217917][T13601] hci_conn_del+0x657/0x1180 [ 165.219370][T13601] hci_conn_hash_flush+0x186/0x260 [ 165.220922][T13601] hci_dev_close_sync+0x602/0x11d0 [ 165.222498][T13601] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 165.224179][T13601] ? up_write+0x1b2/0x520 [ 165.225520][T13601] hci_dev_do_close+0x2e/0x90 [ 165.226959][T13601] hci_unregister_dev+0x227/0x640 [ 165.228524][T13601] vhci_release+0x17d/0x230 [ 165.229945][T13601] ? __pfx_vhci_release+0x10/0x10 [ 165.231507][T13601] __fput+0x3ff/0xb70 [ 165.232782][T13601] task_work_run+0x150/0x240 [ 165.234199][T13601] ? __pfx_task_work_run+0x10/0x10 [ 165.235807][T13601] do_exit+0x86f/0x2bf0 [ 165.237098][T13601] ? __pfx_do_exit+0x10/0x10 [ 165.238508][T13601] ? cgroup_update_frozen_flag+0x107/0x210 [ 165.240285][T13601] ? find_held_lock+0x2b/0x80 [ 165.241731][T13601] do_group_exit+0xd3/0x2a0 [ 165.243126][T13601] get_signal+0x2673/0x26d0 [ 165.244524][T13601] ? hrtimer_nanosleep+0x187/0x380 [ 165.246102][T13601] ? __pfx_get_signal+0x10/0x10 [ 165.247613][T13601] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 165.249247][T13601] arch_do_signal_or_restart+0x8f/0x7d0 [ 165.250884][T13601] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 165.252735][T13601] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 165.254560][T13601] exit_to_user_mode_loop+0x84/0x110 [ 165.256183][T13601] do_syscall_64+0x3f6/0x4c0 [ 165.257636][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.259462][T13601] RIP: 0033:0x7f37947c1465 [ 165.260861][T13601] Code: Unable to access opcode bytes at 0x7f37947c143b. [ 165.262992][T13601] RSP: 002b:00007f37955e2f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 165.265564][T13601] RAX: fffffffffffffdfc RBX: 00007f37949d5fa0 RCX: 00007f37947c1465 [ 165.268011][T13601] RDX: 00007f37955e2fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.270433][T13601] RBP: 00007f3794811e19 R08: 0000000000000000 R09: 0000000000000000 [ 165.272908][T13601] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.275305][T13601] R13: 00007f37949d6038 R14: 00007f37949d5fa0 R15: 00007ffe1a0e7158 [ 165.277790][T13601] [ 165.279495][T13601] Kernel Offset: disabled [ 165.280869][T13601] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:43:55 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005e RBX=ffffc90006b03818 RCX=ffffffff86b46dc9 RDX=1ffff11020b64de3 RSI=ffffffff86b46dd6 RDI=ffff888105b26f2a RBP=000000000000005e RSP=ffffc90003e66f28 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000ab10003c R13=dffffc0000000000 R14=ffff888106528000 R15=ffff888105b26f00 RIP=ffffffff86b46e6b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f47b1544300 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c38846f CR3=000000002ae8f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff ffffffffff890809 da0300020009d803 00080009d0030010 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806060126 9a00000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001080808c100001 808010000ffdc080 040c0241d4088004 188ac2cda4080001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000021006 0201749601808080 8010000108002010 001080808c100001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 808010000ffdc080 040c0241d4088004 188ac2cda4080001 0000000806060126 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a00000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff ZMM25=3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 ZMM26=595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 ZMM27=2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1f0b00001f0b0000 1f0b00001f0b0000 1f0b00001f0b0000 1f0b00001f0b0000 1f0b00001f0b0000 1f0b00001f0b0000 1f0b00001f0b0000 1f0b00001f0b0000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90004707090 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002ae8f000 CR4=00352ef0 DR0=0000000000008009 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 001c000e00000000 0000000000000000 0945000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079000000000dd4 0a00000000140000 001c0000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008ffffff5e0000 0000030000000000 0008ffffff4e0000 0000030000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008ffffff3e0000 0000070000000000 0008ffffff2e0000 03e6000000080004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080000 0024000000380000 004c000000200000 0064000000780000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0098000000b00000 00c4000000d80000 00ec000001000000 01200000000d0000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffee00000000 0300000000000008 ffffffde00000000 0300000000000008 ZMM25=3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 3e5933b23e5933b2 ZMM26=595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 595df3a8595df3a8 ZMM27=2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 2395abc22395abc2 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1d0b00001d0b0000 1d0b00001d0b0000 1d0b00001d0b0000 1d0b00001d0b0000 1d0b00001d0b0000 1d0b00001d0b0000 1d0b00001d0b0000 1d0b00001d0b0000 info registers vcpu 2 CPU#2 RAX=00000000001c491d RBX=0000000000000002 RCX=ffffffff8b945c29 RDX=0000000000000000 RSI=ffffffff8de522e0 RDI=ffffffff8c162d00 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab6b90 R15=0000000000000000 RIP=ffffffff8b94478f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e57f89f98 CR3=0000000050656000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedf2dcef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedf2dcef6 00007ffedf2dcefc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e57212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e57212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e57212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e57212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e57212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e57212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e573a74a8 00007f8e573a74a0 00007f8e573a7498 00007f8e573a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e57f0d100 00007f8e573a7460 00007f8e573a7478 00007f8e573a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e573a74b8 00007f8e573a74b0 00007f8e573a74a8 00007f8e573a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff914c748e RBX=ffffffff90c41ab8 RCX=dffffc0000000000 RDX=ffffffff81f727f8 RSI=0000000000000000 RDI=ffffffff90c41ab4 RBP=ffffffff90c41ab4 RSP=ffffc900214b71d8 R8 =ffffffff914c74b8 R9 =0000000000000000 R10=0000000000000001 R11=000000000000f727 R12=ffffffff90c41ab4 R13=ffffffff81f7275e R14=ffffffff90c41ab4 R15=ffffffff90c41ab4 RIP=ffffffff816adb42 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000079c0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25e4b8f7efbb6011 05187a5fc2bdb37a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2e2a3816 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2e2a3816 00007ffd2e2a381c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f789ee12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f789ee12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f789ee12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f789ee12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f789ee12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f789ee12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8dfa471189d68763 14d50471de851037 742fb30371d0916c 9368f6a4288918c6 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 410fed6463dedb2a 61796cc1061ccba2 49978dfa47110004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1037742fb30371d0 916c9368f6a42889 18c6fcb2bec37310 8a8416d4a7436072 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 177a1572cc78edcc dcbc34eddc6f7d58 3b7dcc726a68e2b1 c030162088988260 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d66cca5cec7a1f17 fef6f57548e20298 6ed0cb1eeaf2ac48 f19cca06904ffd53 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0be1a2878712b0d d3449ebb3ccff1dd 79c6b9a142598cf3 35c17e87422aefaf ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aae070692a43d836 904a4a008d0af0e4 13038e029bf9f0fb 886044d14ef52d2b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77d238001f360e5d 6696cd094380b595 b54dab41bb3748fe 7b831dc37c0bd6a9 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000