last executing test programs: 5.467142361s ago: executing program 2 (id=275): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0xfffd, @local}, 0x10) getpeername$packet(r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xe, 0x8) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000100)={0x1}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x2, 0x300) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"3f96e5ed3fb33b8639ded3e908f6f1c43896f2c71516154c011519a32eb87dd008510b042d1a59f0364229b1544b47b780e630f447039ed6c752fb193152959d853329e7d7ad6b529c6e1b53555a855daea304948904c777ccebe4b3babea9f0eb66bcce630da219ef303af554d96b615965333c6ba3320d2023ae2ab986cc52d28317f7cb4117cc0b5fbd679e9fa1ebf2cebb97b202c3ccbda3491cd892b8853d605c4164b5d27dbb1a3dd0658b67b9ed0b485ee05da36073ba9f0a86a8c6a2d33a175fd0df4c9e7b84a8955cfd723a6bb491c8a782874001690869a7609ddb7b9b1f58b132f2abc68e3a414b6f08b0b7962f1ce06718623b8d795016899f6217aa4b7ae3d3e0b789056c45da24771db76fe2b9decfe974b8954ccabfdfd2c3fd187ab729f3b3e7c99a7ac568b0e7d2f2f54c7ddf1afc4d60ea93e39582d182506f7298cf80971944adc4ff4e1372540c70b6eb3cd2861b9889350e602583e1cee02cb1ef0b0b1a662ea6ba314454b49cdaf5c4c5a5b0fb700a8965548a2d2c55df85f86e25379b3f1ba79c88dd71e5e93fab7281d5d4979bdefe44adfc8d4a01a9156e200f01cb7605ab5a83a7166cc067c9d8b5c1e2beef43cb2085d661392499fc393951f8457e55467e8446889c2b2034fbf45e04b837e8971f5d4f7a8116d3c9730dbc099805d00a19f943f7373d287cc84320e1d7de1acd182a6bd0296b210442387f588531ea750a52b93510fa3238d5c6c2cc330bccde8fb5f0f48de45c75794b88725e3e6470d086b2b15faa35c181c83325c4dbc0b4f7019eb1ada688f4895b831cd9befa18aca9c219cd25a6bd608d71e057903bf4fe4573dfb2ebf15ef59f7759c0fa6b723e0451eabb78c1a841c705580d3080d1d472af145c05a7df22de1e95e63d99bcddb19c42ae1386d3ccfc0cfcffed3b35d8ee1d7af71913268220ec277105b631549f33593ced053d9f72e887ceb75ab865182c9702d37c362ce658dad1ee293920f9f138bb9e57d568dd6b5e18682d80000450995a1f4317ff3d0c2a1018f44f35bffe3a6c50d16b7b75d188c73b4fece3acb2c835989a69e17e159e9df21bea33a39125bd35b480e59fdbe0cc40d0f4fcb2195b084b119209b4136048b7b4613b8c282a604275251dfbd3c973c847cd1731238e2dfaca8e73b3badfec5215010067094f6843d5a5d4f173e65867374b2e36492530787120a0346e286a5dfd80cf22bc909621cdab3dc589ec11554636321dd715e7d4f278d2357bed21a7ab453a855a8207515225be3ddb6bf5d1d17c5260821f921e851ea34c932540acb23a83ec61718767cffe6255a608bffa3bc592792214271c19b72daa7e03eefc5d15eaaa6de133ddc940fbd196534adc788f8eab271d8e9b2350438e14079e3410ca08dd76358299cab699d411a3c5ee1639fd324c483c1566408b8b779cfecce6a96f8bc31f889c61721fa260d48de1bd3c6f0a05cb495732edba3698205f21864f79423ab587297f0c8767b9cb97304fd3be8b06aa40340ce833d9056bcf43d360c65b285bcb557792d1949592be06202d2c6b3733ba8a4718dd5449f91843dc419ee76b591f63b046e76200a134363c8c36bf174a75f39647f6c637e82a75c517bce4cf36c01d957340055b3fc8e25ca347d93607289046dc804259b42af0e97e25147a504438dce5ac142debb67ba1b080f7cb135d78c5c49ed9ae67022a6c79cae364dd8ce8c55b7f32028b346ece32879abec9e7dbbceb1f19677d91e49856402aedd630146ff04c508a13f4d96ae9b826576d4e96bf4dd686fc82a97c206ad8308b8936425305b37413465359854cc29c22c5f205d28e58777d32c3b71ade356142c16aa12d9aca2595b0898da18754c9dc95d5ca417f4a9391cae38c7f8493bdc673fa129f885e0462cda61e30b60d78235df365bf5811e7323284daf153d1bd90f5696e0a2cb7b9341539e938d9f4b84374a530f6b9fbfac34859e99878195fe9788dea18b443ca8fabb07242dd48df72fc318aab0927fbe54792dee35c0a51289f4afe351bcdf329b21c623c18b46e39abc8b5597c191b3d9749b3fc70d33d8862342a23028927c6c0bc48619f97a1f94bb27f619791fa1f2433dfb409b7e21cc61b39007b29fa855d4e6360eab6c24a7ff5b632123de075cbc0a714eed51998ded41e9422a37d8ebb7de441b2e4fb44b2a54ff980af31770143b06f70f62f7e56a2bb46cd60efcbc80e3b47a9895d7fd05c8ef17128df2d34e59957aa64caff5e2e9f81da535b3756b9f9c67cb6e006028861532a13d5a0619a8dc89f41d098acf955d8defb72bbbf144216615dd789da4d9b5cc4634fda9437c038b11b2e6dca9e243d7d20b5c55b79a9bd570420092aac99d34b8d48355eee83d30938713b3e51a91d7d9dbc8da34eb20c0fc74285e22a9216126f17ed41f5f9a4da0020c8580e78fc40df1abd71ce8640332fea88fd56cb721ac9c110f03582601d8466d8b96848f2a29dec39e8069083fbe2ede94556611580be83afb04d38e186ff31138fb8d19bdf276acb2c46625895e5a12df5579ae233fc51e590e6ea5e0b9648d8d09b6bab78b2b2bdab6f12e2f60ab5f965325fa765e7c76d5daca69187d47634b0e4cb7e3ec1b3f3210d50820fd1bc374ef5eeed58604fdee0d2d9639eac42693c45db66069e261cf4ba1fda8a3c64968bb1cce3305579a47e772e204cc2a098f37c7a3627eaf9006321d9478d7bf7c34294dfa48711b27fa9e8f82d5014ca93043c4b213150ef15db7d1e3ae0825ccf2ea310022e64cfef117d3f06decd5838ee5134bfcecca42d272b2ed2989243956d890532f83aa362175b66fe5a92196215e86e7fb5e5586cc0637860a9fdf6620a4313511a9d8234ccc6e9ec8e4c0b8d34448b7ce374e735cb12895096f538dcdb45114eb5fa640215e043d22bd26e0361207b9d6c5bc211a1d94789f5ad8f938b50fc023c73d2d6f18b231b9ad9277c159f32dbd0606d25bcc00d91484a1ef6296617debb1e377eb3c9213e5729699b0b6c8a1090d5ef0b5bc5148b489af1f50f8c3e5c163816285fa5298fd1babbbb3946f79944202042b2b9bed7a9a94170f5826eeb5f06172de6fd7883ac577a56f2e215baf7e3480838a2ae75e4301bcd1c6590763507f050af6945be7bb11a08c9837ceffea01f8f035393a164b557338589aef9231da63864e864dfedc7000d3392c68353ad00ffdbc018bd037a9c430fafbbba0dfd1ab65b443681981a3835b4b36191efd72a25837ed3f9b4d0d2eeb7c75a9eecfa62292bc4b76450b6be91eb5342512dcfb7d6d09b217602165a6c592d9296662e6bb347243a650d5b8549fcd3439e9f29adbadc810e1ffe88c36cd377b5b39a53101d72f4a29490795dadaefa01f60526ea64c51521b624f8565ef2a64fbd0ce2bb80f2452320219073c2907a38b70ec9f6c2987188209a87b421ed99ee5d810b8e7eef594b46ab20ddf155c000acad12f9393b367f8755698ec94be0d06d1b47c129db12064d21279a5712f8cc96155c23e40bcf43cffbe047a5b99567ad4477459e073273df63044e4aafffbfd5e41c1e09593d30f15ae58b42a212364e95052da9e7d4ed68d2cd0ea1805ad0ed0afd13f633797e1604f4e967d8c4b58ff5bec63ba2c285b1c70c09c03fec86286a9027895559974ff7934b2b1af0863a8cd032ce31379a7b091c797054c8ad477bbe9a2c16bf84e36204bd908d10245d3b215d7981c66e9c6c0915f7b05ff498278289dc30fc443889c95538f2bf48b6f06929ff4408e84d8993fcb87e6e43bb18cef35c5a39cf19cdb124fe128d7c742ae09fe84dbc8c22f9c103c9c02074bfbdee304a3efdeb9390ca1606576c9fbccae491ad025d75d7b1be049a35d5f160430a531deff09d4ee7131ca9e45154e2cf2b848289355f148ab69b80ecb02eabcd65baf858c60a1d89a57543cd1deb1edcfb4a0507d2c1dc48d53c7d25b8cc2e31de0e664c9649d299ed9b2b0710d106f4fb4ec3607938fac81efcb2ea55b3b330154ec98f3664ea671e408e4aeee5a94611c98b71b9398417f7a17fbee174d9e88dd00d8e49f59df6a660881f1083bb459675f5704c411dfd9b397143eea114346647e0f855c0226d3ef7cdbe0bfde0928aacb5a0e76195ef475a408c34117686a83ff99b667feb63e4ff56e51105a9ea84813b81949fdc7453fa20d1552b1b9ed89b7c695cdb8baabd2dd64176d30e13ce0ca33ee1917c0ced78c5015963a4e3b44856c324139ad0071df7408593fd43fe8a45631310bedf5ad5ac231c0863abc5ed1df41156f99c3ed78919db0eb0b75be3a951a30cb63e6696cb04ceca9831d635853c87591646d79f885ef526e876f307ea7853e36bf93345ad23d3a7e66218e05993a34934da0fc4b6485202f82b75b356fc0315c7efb669ef8e0ac4c9c6651b23c9a2aa946aa2394391f43009de1537b7e27cb2c76b0548e0e3f0fd8eb8598ca96fef634512e7021236f97e96d3faa2eaa37e06882f76fe37b945336871ba13010f373758283a737531126f9e47b876713135e18908dd55531f9358806884b098fa067701e032e38830f6b2673dfb511d43d7f94795bfb4de35350efb919daa3ca083191b4562266b854910530d0cb48d5fac719d2dcdbf9c658340accc365be57e322cde700359e739a09133444bad3bd9813350ba9f0898a98e9bcb9ee8a622a63d369c80546dee38a38b957dc28438e2b15e0ad54a71d55e4f566af2c911f7da15a1cb7e15dd29fe78b67612e79b6a8ff2b8d3eb7690b16677fecf5de56d0b1c06209e6c65f9370d7a29a0c5116a22f58b7ff26aa7205ffc5e2361e7ec7c844d2c4f4bb506304ff1b4f6f289061dec22a8e92b640e9aed67eaadaeab21c4312007686ea76f0548269fef7a793a4685ba48bc4e4fc9ba3157a5ec572c17c605ba26d3d83068667463a24e9e17dd7a21e43c23759d19a32777d10ae6ce84dc4a7204f966858d8c73e93316a1853d524b2401180962a0a2b2a096bf96fb4d064ff3df97d5812c23a5ad6a2d2b304e72dd791d0ea1316b232a3c65bc2f0cdfc81797b50cde0de8764a0e7c9dae9aab8ce40338b9438af81a6e489b486e49c619475cf64c2f12f342b25af14d99697d0e740aead4812653c2014507db613c00048f7be5ec5412c2ffaa8c7427b52b418fbfaf28bc5e050330fe05d8135a77fb97a6a94fa2c5c9092f7e5422469955efd6f4d73197487ffab45423999a590a6a60b0906bdcc33a28c5e24069e2d8245f77c13436cf5724115f9352ea68b6df955d0f2764dd27f1890d4c2687aeca6d63cea8826ced3fdd78494a65613107f7a487ea104781355da02cda20f568dde1706f80c8788d29dd84c446b91d9c885b993e61835b5a4144d616d3c50f35064f72be3785d569a0b3d680423906eb95afe1e66ce3f11fefd315f35421eecdfa2b5efc0cee90fca19dc1c6ab801d782e4c44e72c671d53ffa5b0639fb759ef557bfe5379f3cd9479fcd28fa8369b9e19cfc5628da636c945847f3afca1d63b20ade93bde10af35a7f41b5ba8392740c59ed16435fce6c53cb372f168a2906d901dfb337a58085977103bde8eceaa8c396366e6b10a79fd165e5c23b3ccd910ad40a5d4efa3493fc739cbd92c593e3940be916b94c755d53cbc1e486d0d7c8b2ec84ab7539ba65747ce11e809aa4ae996b7e9e81cd4d1b8a2460ec83bfe5b53bb0d1490a992f972e644f78d93c4cda413ffa6a1908830e73598e2cdebe5a8", 0x1000}}, 0x1006) (async) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r7, &(0x7f0000000540)={0xa, 0x4e22, 0x1, @mcast2, 0x2}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) write(r7, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 5.46646956s ago: executing program 2 (id=277): r0 = socket$isdn(0x22, 0x3, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000002c0)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r2, 0x0, &(0x7f0000d67000/0x4000)=nil, 0x4000, 0xc000000000000000}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f00000004c0)={0xbc, 0x1f, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x125a39}) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='timerslack_ns\x00') write$UHID_CREATE2(r7, &(0x7f0000000600)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x70, 0xffff, 0x2f7, 0x8, 0x6, 0x4, "976c800a445d83b74e1ab13e8e51a18dbee6267b9ac246a8f1a9f499b2d8dd092af8da9b9104c9f69c45681c8109f30af926709f563158a0efdc5756e3830a98b4b22f353575ecf98f49277f2c1d3a41dfbbebead4d28625e6153df0daa7c8ddc27c002195d862920e74091c4e102617"}}, 0x188) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) 5.347759084s ago: executing program 2 (id=278): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x20}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000002980), 0x82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xe}}}, 0x24}}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x1, 0x8000}]}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x30d3, &(0x7f00000000c0)) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.345148478s ago: executing program 2 (id=280): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r4, 0x0, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000100000000058d4040000000860fb00f46d1526bebbfbb27b500e5ba31bc697e01c2f0000285a5130e3f6bf5eba6c38e1bd1ffb3c588b5194c67a24d4a7302d5fa9f7e942100bcdd33077bd129b5d780b63e9ee82aa5aa2513621b10f2782cd768298c56d3b8b971c7397a1e11c3f352ebf2b4c179336ec8637be27b4d7d5811d4cb8e00b511b9d89ca5509a608b0f2d33a1694b1d0420c6e270ebeda3ee57b25937b689709e3213883796fa6e185abf82d7cb4e3ab2ced829c926cfcd56a50158ecbe5916a1b001a9cc500b85c9f024d9e9fb4e57c69320857086af19fa9531d53c5c10bdbbe8b1cf9", @ANYRES32=r12, @ANYBLOB="06009500f0ff0000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000b0000000800030013e8cb700f66aadc2730d6ae6ae7195132f994d3c1c70dcf591bf561f8a3ffeee9c4916c8b585b91d1174e732739ab9ea1d8dc96ec980a2855fa0f04671739d5df952a46999fa7c48a2a4a1627248ea57d967b583d40540435c8193c8c16dd7bd26e2b8b80aeb7038956cc49458f", @ANYRES32=r7, @ANYBLOB="0500080000000000090007004ff5677c1a0000000800090001ac0f00"], 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b", @ANYRES64], 0x38}}, 0x0) 3.946771934s ago: executing program 2 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$inet6(0xa, 0x4, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x583}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) prctl$PR_SET_THP_DISABLE(0x41, 0x3) prctl$PR_SET_THP_DISABLE(0x42, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'rose0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'rose0\x00', 0x400}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 3.784714613s ago: executing program 2 (id=309): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0) (async) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r2, 0x0, r2) (async) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) syz_usb_disconnect(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x100, 0xffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2.607420074s ago: executing program 3 (id=327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080)="66b2966e13ea7cd7a125f433475ce68868420bc97f66694b8a7649051443e5ddb93835b5534b9173249216603a7d94bee921dbfb9b71827ad5ad5f3f1ebabd440298077e4b6cc86cb370420aa9d3cd60ca7577c4c58bcd083fbd6c14f86caf7a763f42a82d85ebc9b90d06cac3f7568b8295e79f2d9dc89a8d997bde992e426fad9108d08463e58b1b390d1e18f30573df443b441488f180d4126c0e12", &(0x7f0000000140)=""/66, 0x4}, 0x20) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000440)={[0x9dd0, 0x4, 0x6, 0x4, 0x3, 0x9, 0x6a16, 0x200a, 0xb, 0xfffffff7, 0x1ff, 0x3, 0x2, 0x7, 0x7f, 0x6, 0x10000, 0x9, 0x4, 0xb87e, 0x3ff, 0xca, 0x80, 0xffff, 0x9, 0x2e, 0xffff, 0xfa, 0x6, 0x4, 0x3dc, 0x4, 0x6, 0x7f, 0x9, 0x3, 0x45e, 0x80, 0x6, 0x1, 0xfffffffd, 0x79f00, 0xada, 0x5, 0x12, 0x0, 0x5, 0x2, 0x5, 0x1, 0x5, 0xaa5, 0x9457, 0x2, 0x8, 0x8, 0x7, 0xd9f4, 0x7, 0x4, 0x5, 0x7183, 0x4, 0xf, 0xffff8000, 0x3, 0x4, 0xae, 0x40000000, 0x9, 0x3, 0x8, 0x40, 0xb, 0x2, 0x2, 0x5, 0x41b0, 0xae7, 0xe, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7f, 0x7, 0xbf, 0x82f8, 0x709, 0x5, 0x0, 0xfffffffb, 0x3, 0x133, 0xfffffeff, 0x8, 0x60000, 0x5, 0x10, 0x0, 0x0, 0x7, 0x10001, 0x0, 0xcd5, 0x7ff, 0x4, 0x838, 0xffff, 0x3, 0x6, 0x9, 0x2f06, 0x2, 0x9, 0xb4, 0x4, 0x5, 0xfffffffd, 0x0, 0x2, 0x2, 0x2, 0x0, 0x2ed0, 0x3, 0x5, 0x0, 0x400, 0x4, 0x4, 0x4, 0x305a, 0x7, 0x5, 0xb43, 0x2, 0x2, 0x200, 0x9, 0x4b573e73, 0x10000, 0xb64, 0x9, 0x8, 0x101, 0x4, 0x401, 0x7, 0x5, 0x5857, 0xfffffffc, 0xfffff000, 0xffffff00, 0x5, 0x7, 0x401, 0x10000, 0x3, 0x916b, 0xfffffffd, 0xfffffffa, 0x0, 0xba4a, 0x8, 0x39d, 0x8, 0x6, 0x2, 0x9, 0x0, 0xc, 0x7, 0x9, 0x0, 0xfffff2a0, 0x9, 0x5, 0x0, 0x6, 0x6, 0x0, 0x35, 0x8, 0x3, 0x3ff, 0x5, 0x8001, 0x0, 0x5, 0x6, 0x4, 0x7, 0x60000, 0x9, 0x6, 0x48e, 0x9, 0x9, 0x7, 0x4, 0x4, 0x3, 0x0, 0x3, 0x1, 0x3, 0xffffffff, 0x5, 0xfffffffd, 0x70000000, 0x5, 0x4, 0x400, 0x40, 0x7, 0x253, 0x8001, 0x94, 0x1, 0x10001, 0x3ff, 0x0, 0x53, 0x2, 0x8, 0x87b1, 0x6a, 0x2, 0x2, 0x8, 0x2, 0xf49, 0x45ec, 0x1b, 0xfff, 0x6, 0x8, 0x7, 0x0, 0x3, 0xbb4, 0xa, 0x805, 0x7, 0x0, 0x5, 0x0, 0x7fff, 0x9, 0x8, 0xfffffff1, 0x7, 0xb3, 0x0, 0x0, 0x200, 0x6, 0x65e, 0x0, 0x7, 0x3, 0x3, 0x2, 0x5, 0xfffff311, 0x5, 0x21e, 0x1, 0x8, 0x7, 0x17, 0x3d5d, 0x1, 0xfffffeff, 0x8, 0x8, 0x16, 0xfff, 0xf3f, 0x1, 0x3, 0x6, 0xc, 0x10, 0x1, 0x9, 0x3, 0x10, 0x4, 0xf2bd, 0x7ff, 0x8000, 0x3, 0xffff0000, 0x84c, 0x9, 0x5, 0x8, 0x5, 0x5, 0x80000000, 0x53, 0x3, 0x9, 0x100, 0x3, 0x1, 0xe00000, 0x32d, 0x3ff, 0x3, 0xffffffea, 0xa, 0x6fcc36fd, 0x4, 0x400, 0x6, 0x2, 0x4, 0x2, 0x100, 0xce3, 0xd66, 0x4, 0x0, 0x5, 0x5b0341d6, 0xfffffff8, 0xffff0000, 0xca000000, 0x3, 0x4, 0x10000, 0xffff, 0x1, 0xfffffffe, 0x7, 0x1, 0x100, 0xd26, 0x8001, 0x7, 0x7, 0x7, 0x4, 0x401, 0x10000, 0xd2e, 0x2, 0x80000000, 0xf5ac, 0x7, 0x8, 0x8001, 0x3, 0xb, 0x800, 0x1, 0x7, 0xfffffff8, 0x205, 0x80000000, 0xfffffffb, 0x676afd53, 0x0, 0x4, 0x6, 0x4, 0xfffffffd, 0x75f1, 0x40, 0x3, 0xbfbf, 0x4, 0x41, 0x6, 0x4, 0xd, 0x7fffffff, 0x80, 0x3, 0x5, 0x3ff, 0x4, 0x9, 0x0, 0x6458e28d, 0x80, 0x1, 0x1, 0x101, 0x3, 0x9, 0x5, 0x7fff, 0x5, 0x3, 0x5, 0x1, 0x497, 0x68fb1070, 0x9, 0x6, 0x1, 0xe2c9, 0x9, 0x0, 0x9, 0x80, 0x80, 0x7, 0x3, 0x7fffffff, 0x7, 0x8, 0x80000001, 0xfff, 0x3, 0x6, 0x0, 0x6, 0x0, 0x80, 0xcc64, 0x3, 0x0, 0x5, 0xfffffffe, 0x4, 0x7e8, 0x40, 0xffffffff, 0x1, 0xda, 0x7, 0x7, 0xffff, 0x400, 0xc, 0xf, 0x2, 0x1, 0xa, 0x7, 0x1, 0x9, 0xb, 0x2, 0x26f3400d, 0x5, 0x8, 0x60000, 0x3, 0x0, 0x0, 0x8001, 0xffff, 0x7f, 0x6, 0xf, 0x9, 0xffffb01e, 0xc5ff, 0x0, 0xfffff5dc, 0xb, 0x8, 0x2, 0xffffaf2a, 0x8, 0x9, 0x8, 0x5, 0x0, 0x10001, 0x7, 0x2, 0xb89, 0x8001, 0x8, 0x3, 0x13, 0x5, 0x8, 0xd1, 0x9, 0x9, 0x6b, 0x5, 0x2, 0x5, 0x7, 0x2, 0x8, 0xff, 0xfffff5bc, 0xffffffff, 0xffffdb8b, 0x1000, 0x33, 0x1, 0x4, 0x140, 0x0, 0x401, 0x10000, 0x593, 0x8, 0xa3, 0x5, 0x100, 0x1ff, 0x431, 0x1, 0x5, 0x3, 0x3, 0x0, 0x1, 0x4, 0xdd27, 0xc, 0xff, 0x0, 0x7fff, 0x8, 0x400, 0x0, 0xd689, 0x9, 0x8, 0x2772, 0x2, 0x100, 0x2, 0x85, 0x2, 0x6, 0x0, 0x9, 0xfff, 0x80000001, 0x2, 0x80, 0x440, 0x180, 0x81, 0x1, 0x3, 0x829, 0x4, 0x0, 0x2, 0x10000, 0x0, 0x0, 0xf, 0x0, 0x624, 0x6, 0x8000, 0x0, 0x4, 0x0, 0x1ef2c75d, 0x1, 0x2, 0x0, 0x9, 0xf28, 0x3, 0x6adf7de0, 0x10000, 0xf, 0x49ea, 0x8, 0xf84, 0x1, 0xe84b, 0x3, 0x7, 0xc, 0xc3, 0x2, 0x101, 0x6, 0x101, 0x8, 0x1, 0x0, 0x80000001, 0x9, 0x4, 0x5, 0xf4, 0x1, 0x7fff, 0x407, 0x7, 0x4, 0x30, 0x3, 0x1, 0x3c, 0x6, 0xc72, 0x3, 0x2, 0x3, 0xffff8000, 0x2, 0x3, 0x6, 0x3, 0x4, 0x7, 0x1, 0x7, 0xe4fd, 0x0, 0x9, 0x80000000, 0x8a68, 0x2, 0xffff8000, 0x5, 0xa, 0x4, 0x6, 0x9, 0x2, 0x8, 0xf16, 0x1, 0x3, 0xb, 0x3, 0x1, 0x1, 0x8, 0x7, 0xb720, 0x2, 0x80000001, 0x2729, 0xd3e3, 0x3, 0x1, 0x6, 0x4, 0xeec, 0x54c0000, 0xbf2498d3, 0x9, 0x5, 0x7ff, 0x7075, 0x10001, 0x4, 0x80000001, 0xf, 0x6, 0x1, 0x0, 0xb571, 0x5, 0x3, 0x7, 0x9, 0x9d, 0xf9, 0x4, 0xffffffff, 0x9, 0x7, 0x2f0e, 0x63, 0x7, 0x6, 0x10001, 0x8, 0x80000000, 0xfffeffff, 0x2, 0x2, 0x0, 0x40, 0xf6, 0x5, 0x4, 0x1, 0x0, 0x6cc7, 0x1, 0xfff, 0x5, 0x1, 0x60000000, 0x0, 0x0, 0x3, 0x1, 0x40000000, 0x7, 0x8000, 0x10001, 0xf9a, 0x7, 0xd96, 0x8, 0xf, 0x100, 0x6, 0x8, 0x8, 0x0, 0x4, 0xfa, 0x2, 0x71, 0x3, 0x1, 0xe, 0x0, 0x0, 0x9, 0x8, 0x5, 0x2, 0x6, 0x1abb, 0x4, 0x1, 0x6640, 0x7, 0x0, 0xe, 0x2, 0x1000, 0xfffffffa, 0x9, 0x0, 0x8001, 0xe, 0x0, 0x1, 0x9, 0x40, 0x0, 0x8, 0x200, 0x1, 0x6, 0x1ff, 0x4007, 0xf, 0x9, 0x9, 0x8001, 0x1, 0x3, 0x6, 0x4, 0x6, 0x6, 0xb, 0xa6cb, 0x8, 0x4, 0x8, 0x6, 0x6, 0xffffffff, 0x97, 0xfffffff7, 0x8001, 0x6, 0x1ff, 0x1, 0x2, 0x9, 0x2, 0x0, 0xffff, 0x2, 0x10, 0x3, 0x8000, 0x60, 0x215, 0x7a74, 0x1, 0xb1b, 0xfffffff8, 0x1, 0x9, 0x9, 0x10001, 0x9, 0x870, 0x80000000, 0x5, 0x9, 0x0, 0x401, 0x6, 0x2, 0x4, 0xe, 0x9, 0x7, 0xfffffffc, 0x2, 0x4dde4532, 0x3, 0x6, 0x1, 0x10001, 0x7, 0x4, 0x4, 0x4, 0x2, 0x6, 0x3782, 0xb, 0x392, 0x2, 0x7fff, 0xff, 0x3, 0x80008, 0xc, 0x216, 0xffffbe3f, 0x8a5, 0x4, 0x2, 0x774, 0x2, 0x3, 0x5, 0x4b3e, 0x5, 0xeca, 0x9, 0xd, 0x10e2, 0x0, 0x8, 0xc, 0x174, 0x1, 0x7497, 0x6, 0x3, 0x2, 0x9, 0xf, 0x1, 0x7, 0xd0d, 0x1, 0x7, 0xf, 0x3, 0x10, 0x2b89, 0x2, 0x1a04, 0x4, 0x9c, 0x4, 0xff, 0x69, 0x7, 0x0, 0x7fffffff, 0x2, 0x9, 0x2, 0x8, 0x66c4, 0x7ff, 0x7, 0x6, 0x100, 0x6, 0x101, 0x80000, 0x9c18, 0x7, 0x1, 0x3, 0x7ff, 0x3, 0x26b1, 0x45, 0x9, 0x76e, 0x8a21, 0x9, 0x4, 0x8001, 0x0, 0x6, 0x2, 0x6, 0x9, 0x2, 0xd, 0x33ac, 0x4, 0x848, 0x6, 0x7, 0x3, 0x1, 0x9afd, 0x4, 0x7fff, 0x1, 0x1, 0xc8c, 0x5, 0x424, 0x6, 0x1, 0x1, 0x7, 0xfffffffd, 0x87, 0x8, 0x52ba, 0x9, 0x1, 0xfffffffa, 0x200, 0x8e, 0x6, 0x7976e372, 0x93, 0x10, 0x8, 0x2, 0xfff, 0x0, 0x3, 0x0, 0x3ff, 0x2, 0x9, 0xfff, 0x8561, 0x8000, 0x9, 0xe2b2, 0xc3b, 0x1, 0x3, 0x9, 0xc, 0x5, 0xa, 0x3, 0x6, 0x1, 0x4c, 0x8, 0x8, 0x3ff, 0xc, 0x0, 0x4, 0x6, 0x1, 0x3, 0x4, 0x40, 0x8dd, 0x2, 0x7, 0x2, 0x81, 0xec96, 0x1000, 0x8000, 0x4, 0xfffffffa, 0x73ab6a07, 0x86, 0x80000000, 0x81, 0x80, 0xf7, 0x69c7, 0xd, 0x873, 0x9, 0x8e9, 0x8, 0x100, 0x7ff, 0x1, 0x3, 0x200, 0x800, 0x6, 0x3ff, 0x4, 0x3, 0x6, 0x1387, 0xfffffff8, 0xa, 0x7bf8, 0x0, 0xe, 0x1000, 0x4, 0x6]}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) poll(&(0x7f0000000040)=[{r10, 0x3}], 0x1, 0x9) write$FUSE_INIT(r9, &(0x7f0000000440)={0xffffffffffffff45, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0xfff) listen(r5, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.691907255s ago: executing program 3 (id=337): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x60) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x14, &(0x7f0000000580)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x72}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) 1.577376945s ago: executing program 3 (id=339): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 1.486329726s ago: executing program 3 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) read$FUSE(r3, &(0x7f00000048c0)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0a0009000180c2000000000008000b0000000000"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000840)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x20c, 0x0, 0x493cf8153394fa98, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffeb5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x14}, 0x8881) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r11, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0x26, 0x4, 0x2, 0x6, 0xc4, 0x67, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @empty, {[@generic={0x82, 0x10, "35cae874a177a58b2c2493f74e34"}, @ssrr={0x89, 0x23, 0xbd, [@rand_addr=0x64010100, @local, @empty, @multicast2, @multicast2, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}]}, @generic={0x89, 0xc, "2369bbd90ac3979d7b46"}, @lsrr={0x83, 0x2b, 0x5f, [@private=0xa010102, @empty, @rand_addr=0x64010100, @multicast2, @multicast2, @multicast1, @broadcast, @local, @multicast2, @local]}, @lsrr={0x83, 0x17, 0x64, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @broadcast]}]}}, @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xa, 0x3, 0x2, 0x3, 0x0, 0x3, 0x1, 0x0, 0x2, 0x4, 0x800, 0x2, 0x4e21, 0x4e24}, 0x1, 0x2}, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 1.396581451s ago: executing program 0 (id=345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newtclass={0x88, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0x5, 0x9}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xfffffe1b, 0x3, 0x932}}]}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xd}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x88}}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0x7}}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=@newtclass={0xca0, 0x28, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfffa, 0x7}, {0xfff2, 0xb}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0xc2c, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x7, 0x6, 0x66, 0x9, 0x21, 0xffffffff, 0x80000001, 0x5, 0x6, 0x0, 0xff, 0x8, 0x1, 0x6, 0x7bd, 0x5, 0x3, 0xd3, 0x0, 0x7, 0x71e7, 0x80000000, 0xff, 0x3, 0x1, 0x6, 0x3, 0x6, 0x8, 0x1, 0x3ea, 0x1, 0x9, 0x6, 0x3, 0x7af, 0x10, 0xffffffff, 0x1, 0x2, 0xe9, 0x7, 0x5, 0x49, 0x4, 0x134, 0x8001, 0x5, 0xffff7fff, 0x4fa, 0x0, 0x7, 0x6, 0x800, 0x3, 0x0, 0x9, 0x2, 0x10001, 0x8000, 0x2, 0xdb5, 0x2, 0x1ff, 0xffffffff, 0x51, 0x1ff, 0xfebca9b, 0xffffffff, 0xa, 0x3, 0x80000000, 0x8, 0x5, 0x10001, 0x5, 0x10001, 0x10, 0x7, 0x3, 0x8, 0x6, 0x6, 0xfffffffd, 0x4, 0x4, 0x128, 0x0, 0x1c, 0xffffff80, 0x8, 0x8d8, 0x2, 0x3, 0x101, 0x12, 0x8ed0, 0x55, 0x2, 0x74dfa77f, 0x6e5, 0x7, 0x200, 0x7, 0xffa8, 0x5, 0x1, 0xff, 0x3, 0x7, 0x4, 0x6, 0x4, 0x7, 0x3, 0x1, 0x7, 0x9, 0x4, 0x4, 0x1, 0x850, 0x4, 0x2, 0x800, 0x2, 0x0, 0x7ff, 0x6, 0x6, 0xffffff7e, 0x8, 0x0, 0x4, 0x4, 0x415b, 0x5, 0xb2, 0x834, 0x2, 0x10, 0x9, 0x6, 0x7, 0x4a7b6381, 0x3, 0x7, 0x1, 0x7fff, 0x6, 0x2, 0x80, 0x200, 0x1, 0x401, 0x1, 0x3, 0x401, 0x9e, 0x40, 0x2, 0x0, 0x4, 0x5, 0x3, 0x1000, 0x3, 0x8000, 0xb5, 0x0, 0x0, 0x7, 0x2, 0x5, 0x8, 0x27d2, 0x7, 0xe, 0x7, 0x1, 0x3, 0x6, 0x6, 0x487, 0xd, 0x6f5, 0x7, 0x7, 0x8e3a, 0xa7f1, 0x8, 0xd34, 0x0, 0xb, 0x8, 0x8001, 0x5b, 0x1, 0x9, 0xfff, 0x8, 0x5, 0xd, 0x5, 0xf, 0x0, 0x7, 0x7, 0x0, 0x6, 0x7, 0x1, 0x8, 0x5, 0x80000001, 0x5, 0x9, 0x6cce, 0x101, 0x0, 0x6, 0x8, 0x4, 0x4, 0x7, 0x2, 0xc, 0x4, 0x1000, 0x9, 0x81, 0x9f35, 0x7, 0x5, 0x3, 0x5, 0x6, 0x3, 0xe, 0x2c200000, 0x0, 0x9, 0x6, 0x3, 0x1e, 0x2, 0x8, 0x8001, 0x4a, 0x3, 0x3, 0xffffffff, 0x8000, 0x9, 0x3, 0x5]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x4, 0x7e26b88c, 0xe, 0x0, 0x9, 0xea0a, 0x8, 0x9, 0x6, 0x2, 0x2, 0x4, 0xcc97, 0x0, 0x100, 0x0, 0x141770e8, 0x7, 0x7, 0x5, 0x9, 0x3, 0x5, 0x4, 0x5, 0x2, 0x0, 0x1ff, 0x1, 0x81, 0x2, 0x9, 0x6, 0xfffffffa, 0x3, 0x8, 0xd, 0x8, 0x3, 0x2, 0x3, 0x9, 0x400000, 0x8, 0xb, 0x4, 0x9, 0x7, 0x4, 0xc311, 0x9, 0x2, 0x2, 0x1, 0x0, 0x5, 0x7, 0x800, 0x6, 0x6, 0x2, 0x39, 0x7, 0x9, 0x1, 0x101, 0x3, 0x7fff, 0x0, 0x8000, 0x8, 0xffff8000, 0x3, 0x6, 0x1, 0x7, 0x2, 0x4, 0xe, 0x7, 0x0, 0x1, 0x8001, 0x5, 0xffffffff, 0x2, 0x3, 0x7353, 0xfffffff8, 0x1, 0x70, 0x3, 0x4, 0x7, 0x2, 0x4, 0x80000000, 0x5, 0x54f0, 0x4, 0x0, 0x8, 0x2040, 0x8, 0x200, 0xfffffffb, 0x2, 0x2, 0xffffff7f, 0xe, 0x9, 0x5, 0x2f5, 0x0, 0x24, 0x1ff, 0xfff, 0x6, 0x4, 0x3, 0x6, 0x7, 0x1ff, 0x5d4, 0x0, 0x2e, 0x101, 0x80000000, 0x3, 0x4, 0x8, 0x6, 0x7, 0x1, 0x8, 0x5, 0xd556, 0x9, 0x9, 0x7, 0x7, 0x3b, 0x7, 0x2, 0x5, 0x200, 0x0, 0x3, 0x0, 0x29cc, 0x6, 0xb96, 0x9, 0xe8, 0x4, 0x6, 0x8, 0x7f9941c5, 0x1b, 0x2, 0x8, 0x5, 0x6, 0x10001, 0x1, 0xe, 0xffffffff, 0x5, 0x1, 0x40, 0x5, 0x2, 0x4, 0x5, 0xfffffc00, 0x3, 0x5, 0x1, 0x1000, 0x80, 0x6, 0x10000, 0x8, 0xfffffffe, 0x6, 0x6, 0x3, 0x1, 0x0, 0x40, 0x8, 0xe747, 0xe3, 0xe8, 0x7, 0x8, 0xffe00000, 0x2, 0x7, 0x9, 0x7, 0x4, 0xc036, 0x6, 0xfffffff8, 0x3665, 0x10001, 0x180000, 0x7, 0x10001, 0x5, 0x1ff, 0xfffffffd, 0x2, 0x4, 0x8, 0xc0000, 0x3, 0x6, 0x7ff, 0x907, 0x9, 0x3, 0x9c1, 0x4, 0x6, 0x1, 0x7, 0x5, 0xc3de, 0x3, 0x5, 0xc9da, 0x8, 0x5, 0x2, 0xfff, 0x7f, 0x100, 0x80, 0xfffffff8, 0x4, 0x80, 0xfffffffa, 0xd376, 0xffffffff, 0x5, 0x10, 0xffff5925, 0x5, 0xd, 0x9, 0x3, 0x2, 0x3a]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}, @TCA_HTB_RTAB={0x404, 0x4, [0x7, 0xa3, 0x9, 0xfffffffc, 0xfffffffc, 0x6, 0x82, 0x17, 0x9, 0xbfe, 0x57a1, 0x30ae, 0xfffffffa, 0x7fff, 0x8, 0x7f, 0x9, 0xffff8015, 0x5, 0x3ff, 0x8, 0x5, 0x8000, 0x6, 0x10, 0x7, 0x7, 0x2, 0x0, 0x4, 0x6, 0x900, 0x9, 0x4, 0x4, 0x7, 0x7d8d22bf, 0x4, 0x1, 0x5, 0x3, 0xe9f, 0x0, 0x7, 0x7, 0x3, 0x5, 0x9, 0x7, 0xf58c, 0xf1eb, 0x7, 0xfffffff9, 0xc, 0xb7, 0xb, 0x2, 0x5, 0x0, 0x81, 0x8, 0x6, 0x1, 0x984, 0x12b, 0x5, 0xfff, 0x4, 0x8, 0xb, 0x8, 0xdcda, 0x36b, 0x5, 0x0, 0x6, 0x0, 0x7, 0x10001, 0xadae, 0x80000001, 0x9, 0x8, 0xb, 0x3, 0x10000, 0xd, 0x41d, 0x1, 0x80000001, 0x4, 0x1, 0x9, 0x2, 0x2, 0x39, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x1ff, 0x9d, 0x0, 0x6, 0x1, 0x5, 0x6, 0x80000000, 0x2, 0x7, 0x1, 0x9, 0xffffffa1, 0x9, 0xfff, 0x2, 0xffffffcf, 0x2, 0x9, 0x0, 0x7, 0x2, 0x5590, 0x4, 0x80000001, 0x10001, 0xfffffffb, 0x40c0, 0x10, 0x4, 0x27c, 0x8, 0x1c1b, 0x2, 0x9, 0x2, 0x894, 0x7f, 0x4, 0x8, 0x24, 0x7, 0x7, 0x101, 0x728, 0x5, 0x9, 0xe, 0x5, 0x7, 0x10001, 0xffff, 0x7, 0x10000, 0xe, 0xf09, 0x5, 0x10000, 0x2, 0x2, 0x9b, 0xecd, 0x2, 0xd162, 0x4, 0x5, 0x1, 0x5, 0x7f, 0x2, 0x8000, 0x81, 0x4, 0x6, 0x1ff, 0x8, 0xb4, 0x79a30, 0x6, 0x4, 0x1, 0x0, 0x0, 0xa80d, 0x6, 0x2, 0xe, 0xfffff049, 0x8, 0xd6b, 0x5, 0x3, 0x41bf, 0x3, 0x9, 0x1, 0x1, 0x9, 0x9, 0x598, 0xa34c, 0x7ff, 0x6, 0x100, 0xb3f1, 0x2, 0x2bd, 0x5, 0x100, 0x8a, 0x8, 0x3, 0x5, 0x2, 0x1, 0x9, 0x48000, 0x1, 0x2a2, 0x6, 0xb76, 0x7, 0x0, 0x6, 0x3ff, 0x0, 0x3, 0x1, 0x4df1, 0x0, 0x7f, 0x4934, 0x9, 0x4, 0x8, 0x1, 0x792, 0xfffff699, 0xd, 0x1, 0x1fffe00, 0xfffffff9, 0x4, 0xfffffffd, 0x3, 0x25f, 0x1, 0x6, 0x5, 0x7, 0x7, 0x4, 0x7, 0x8]}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0xca0}}, 0x8000) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.317758625s ago: executing program 0 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000080)="32312dd587d3be66dbddc843a630a087943bf0515b9d4dd467a8dfb5ee4ce6842c118ade9e942ed8efc8650bd1914fb2857bdce5d73736edf85ce62dddb952563a0750c43f7b37a5890f3ab2a01f5fdc537a4553553924733ad1966b1310a30ab4a61f24c23943f89129c7d4d38768593cbfb72062398162d7d5e1c22ac1b887a55d5cbe16ffe0e2c5945b93aee5dad47d2e0b194d9fa4836abb5104f6b45c3fd9098c7c20d1506979ff822a5332b16d369ca2955f3d7b3e69bc8a6b6202b8e489a770d7556ce90c3398394b548e2a6e4f164a1e63cf2383ce433ed13f1ca193e69e8430d5084a906b0c02", 0xeb}, {&(0x7f0000000240)="4d9063d7d9fc5a3e2984e8b8ad078f42b6e5d7c480aca13172651ed065d39554a76f9c2004c2758c957f9bda13083e80d86c53d7ebc923ce6855c93a55786064a3b09a7091d2afdeabef9c610c01aca5d1e57a3a4196c52ade767a0206e0a8eb9740e7f57b6a748e53854717fcbbdd7d1b084e04cbac0f5de92558845288f91e6a5458772591ffbc252b48934729995a78e975838230cb30aca33b447d8bc051d8c766b855f469b7a4102266", 0xac}, {&(0x7f00000003c0)="c92925020ea851899f722ea783add709e49f0e9449140ee0e6b48b30c54a118d345c2d2857823502f9244501826f2b3736a4d5a800e5128b669545fd3df281a814d3bc798ac20d97322bde6c318b31869aa69903b7f619fae9f6f830a8b55b8ccaaaac8d78a31d", 0x67}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000001c0)="cdd21128c50b9ffcb5cf5e47e633074c9ab9bbad00cb0a723bc09e894d74e5ef0c3722b798", 0x25}, {&(0x7f0000000440)="09d365c68e485b3d0c8a020439f9ef7059b3b5233f696be0adc1beaf25af966b0725e81490130d21bdc319ff5473e30e67cc76ce57d332e734f4353296c340b920366ec241386a97802cf03315b19d021f971821398e11754be6bd6fcafe0d75f80b343caca20ae472a0d76e3c97c6b7ed234475fc39a3c9bea9c559a646aa1d811fcd816c7866916d29321a96efe73709ab32fa99eef0fc", 0x98}, {&(0x7f0000000500)="d98d4b8e3bfd1c32e0d3e0483e240d98525d6647126b4e854b0816c4ce6cf516e982b1ab73877e0222f5a26cc98178e9f3831d4bc4c7c3f233e338c87a7058dffb6b4d1704c69ff4ecf3e57b6c3505a6809577adc5239dc4e243122afa395b97e56dee190804a4637cdc27a62a7c91578bd745b5ece5d399c15d0996b524dec964aa6492b5351c89171a19b48c8997a29d6b7212ba8ca9f01e4fd52002c5e1d0d307ce09e1b7f403119b56aceef67fe5cb1f5152d92223b2ebca5daf42ba2cad266b9628e894e28f9b6735abbb53968519fc6772e0d85700069a903e894dd49207d2a542939bde3d3c219896b02dc3defe83b220ee0380983e6cc8988b768e", 0xff}], 0x8, &(0x7f0000002740)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x729}}], 0x90}, 0xc002) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x6, 0x1010c0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x34, 0x1c, 0x64, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @private=0xa010100}, @info_reply={0x10, 0x0, 0x0, 0x5, 0x5}}}}}, 0x0) 1.314742776s ago: executing program 0 (id=347): r0 = shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, 0xffffffffffffffff, 0x4fca1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r0, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x80}}, 0xc0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r8) r9 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r9, &(0x7f0000000180)={0x2, 0xce20, @broadcast}, 0x10) listen(r9, 0x3) r10 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x98, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x58}, {0x0, "d1a1"}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r11 = socket$inet(0x2, 0x80002, 0x94) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r11, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r11, 0x3) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3a0000050000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005e0000009500000000000000184000000a00000000ab1e90147760000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900004003000000cffd56000007020000000000e256c98a1622070263513175fc023aa9b6771d47b8b79c892bbdc3fe3e8c5639718eac27ad0de52d1f7e2b2ae425a9cc504428bc90d49e54c4e85ad8d7459660ede66a7582670e24c1f793c981f057c0fa171989bd13458a4ed584b34449bebc115b514e00eb7c6971a4f48a92a8c29e72f463fec9fbf786fbde190d429d94f5d2e3902b469659ef55ce17a63799525cb4b6ad017398ddf11ae83f46ab844e3cfe0b8903f6556a0ede011b65000f70cbfa27558fb408150000000000000000000000000000000000012a", @ANYBLOB="8132f91c98d292be9ec032919cb733dbe9d65d6a75c976a16178de9a48f4b8d8250195e2de0b252c06b33aea7ed5758817e761a5c29bb16b376543935630d327d78830272e2d4020fbd6359c462cc511c2c998af28dd06dcbbec7b106b098530d36236bbd12f22a6190376867ebd4b77e9ba583eae2372230cc21fc4d57356ada33e346e88530657c8aac2c022a39640dfbdb08bc674e014c7ddfd6247062cbf1959c18402d94f4324ef1ec551656ff0e7f57e22e641ca92", @ANYBLOB='\x00'/20, @ANYRESDEC=r11, @ANYRES32, @ANYRES16, @ANYRES16=r7], 0x50) 1.186846547s ago: executing program 0 (id=350): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x20}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000002980), 0x82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xe}}}, 0x24}}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x4c}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x30d3, &(0x7f00000000c0)) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.1360617s ago: executing program 0 (id=353): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000d40)={0x0, 'nr0\x00', 0x4}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x8) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/9, 0x9}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x10002, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x572d9ecb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ac1414aa0000000000000000000000000000fffc000300000a0000e0ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) 1.057717771s ago: executing program 0 (id=354): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000200)=0x2, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) lseek(r3, 0x0, 0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000440), 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3d000100", @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20040040) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 987.443969ms ago: executing program 1 (id=357): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000010c0)=0x6, 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x40802) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000011c0)=0x400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x9) ppoll(&(0x7f0000000a40)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000001100)={'system_u:object_r:checkpolicy_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x8}, 0x4c) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) (async) socket$kcm(0xa, 0x2, 0x73) (async) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000010c0)=0x6, 0x4) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x40802) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000011c0)=0x400) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x9) (async) ppoll(&(0x7f0000000a40)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$selinux_access(r4, &(0x7f0000001100)={'system_u:object_r:checkpolicy_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x8}, 0x4c) (async) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 937.722701ms ago: executing program 1 (id=358): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000000063000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) r5 = syz_io_uring_setup(0x2955, &(0x7f0000000400)={0x0, 0xfffffffe, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r8 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r8, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffffff4d) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000000000000000000000000000000000002b7d6fecfe786c6d687b322b8aadf01b31fbbe2e37785ee31e8857e770", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}}, 0x0) 877.655143ms ago: executing program 1 (id=359): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r3, &(0x7f0000001f00)=""/4111, 0x100f) getdents64(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r1, 0x4, 0x6, 0x7, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x10, 0x2, 0xe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', r1, 0x2f, 0x0, 0x24, 0x5, 0x40, @mcast2, @local, 0x8, 0x8, 0x8, 0x4}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@remote, @multicast1, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x214, r4, 0x24, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x800}, 0x800) 805.134581ms ago: executing program 3 (id=360): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/190, 0xbe, 0x0, 0x15}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x5}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 804.248194ms ago: executing program 1 (id=361): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x20}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000002980), 0x82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xe}}}, 0x24}}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x4c}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x30d3, &(0x7f00000000c0)) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 753.165µs ago: executing program 1 (id=362): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x21, 0x2}) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 515.007µs ago: executing program 1 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0001"], 0x24}}, 0x0) futex(&(0x7f0000000080)=0x2, 0x9, 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)=0x1, 0x0) 0s ago: executing program 3 (id=364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@get={0x1, &(0x7f0000000040)=""/125, 0xd24d}) kernel console output (not intermixed with test programs): [ 38.273597][ T39] audit: type=1400 audit(1732781152.298:80): avc: denied { write } for pid=5930 comm="sh" path="pipe:[3604]" dev="pipefs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.281678][ T39] audit: type=1400 audit(1732781152.298:81): avc: denied { rlimitinh } for pid=5930 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.288459][ T39] audit: type=1400 audit(1732781152.298:82): avc: denied { siginh } for pid=5930 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.341225][ T39] audit: type=1400 audit(1732781153.378:83): avc: denied { read } for pid=5353 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.347826][ T39] audit: type=1400 audit(1732781153.378:84): avc: denied { append } for pid=5353 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.355044][ T39] audit: type=1400 audit(1732781153.378:85): avc: denied { open } for pid=5353 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.362879][ T39] audit: type=1400 audit(1732781153.378:86): avc: denied { getattr } for pid=5353 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:37169' (ED25519) to the list of known hosts. [ 39.638081][ T39] audit: type=1400 audit(1732781153.668:87): avc: denied { name_bind } for pid=5939 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.495970][ T5941] cgroup: Unknown subsys name 'net' [ 41.724061][ T5941] cgroup: Unknown subsys name 'cpuset' [ 41.727756][ T5941] cgroup: Unknown subsys name 'rlimit' [ 41.901071][ T5945] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.745439][ T5941] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.342819][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 45.342830][ T39] audit: type=1400 audit(1732781159.368:105): avc: denied { execmem } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.502958][ T39] audit: type=1400 audit(1732781159.538:106): avc: denied { create } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.507675][ T39] audit: type=1400 audit(1732781159.538:107): avc: denied { read write } for pid=5955 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.515000][ T39] audit: type=1400 audit(1732781159.538:108): avc: denied { open } for pid=5955 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.521260][ T39] audit: type=1400 audit(1732781159.538:109): avc: denied { ioctl } for pid=5955 comm="syz-executor" path="socket:[7273]" dev="sockfs" ino=7273 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.541900][ T5962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.542333][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.546843][ T5969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.547978][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.550427][ T5969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.553161][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.554077][ T5969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.555963][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.558778][ T5969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.560706][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.562349][ T5969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.562823][ T5966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.563831][ T5971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.564188][ T5971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.564626][ T5971] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.564973][ T5959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.565166][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.568077][ T5969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.569091][ T5971] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.571313][ T5969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.572722][ T5971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.578292][ T39] audit: type=1400 audit(1732781159.608:110): avc: denied { read } for pid=5955 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.592090][ T5966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.593143][ T39] audit: type=1400 audit(1732781159.608:111): avc: denied { open } for pid=5955 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.594938][ T5971] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.600627][ T39] audit: type=1400 audit(1732781159.608:112): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.602886][ T5971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.713181][ T39] audit: type=1400 audit(1732781159.748:113): avc: denied { module_request } for pid=5955 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.787273][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 45.806450][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 45.920374][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 45.925936][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 45.968195][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.970988][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.973650][ T5956] bridge_slave_0: entered allmulticast mode [ 45.976526][ T5956] bridge_slave_0: entered promiscuous mode [ 46.035283][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.037851][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.040557][ T5956] bridge_slave_1: entered allmulticast mode [ 46.043425][ T5956] bridge_slave_1: entered promiscuous mode [ 46.064988][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.067592][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.070466][ T5955] bridge_slave_0: entered allmulticast mode [ 46.073578][ T5955] bridge_slave_0: entered promiscuous mode [ 46.108124][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.110093][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.112507][ T5955] bridge_slave_1: entered allmulticast mode [ 46.115249][ T5955] bridge_slave_1: entered promiscuous mode [ 46.157115][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.184155][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.186595][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.189068][ T5964] bridge_slave_0: entered allmulticast mode [ 46.191702][ T5964] bridge_slave_0: entered promiscuous mode [ 46.206247][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.208797][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.212748][ T5967] bridge_slave_0: entered allmulticast mode [ 46.215616][ T5967] bridge_slave_0: entered promiscuous mode [ 46.221194][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.224284][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.226656][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.229091][ T5964] bridge_slave_1: entered allmulticast mode [ 46.231707][ T5964] bridge_slave_1: entered promiscuous mode [ 46.235767][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.239151][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.241798][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.244209][ T5967] bridge_slave_1: entered allmulticast mode [ 46.246666][ T5967] bridge_slave_1: entered promiscuous mode [ 46.288854][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.319169][ T5956] team0: Port device team_slave_0 added [ 46.347308][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.352247][ T5956] team0: Port device team_slave_1 added [ 46.355513][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.367676][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.381444][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.386135][ T5955] team0: Port device team_slave_0 added [ 46.425782][ T5955] team0: Port device team_slave_1 added [ 46.438233][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.440888][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.450555][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.479302][ T5967] team0: Port device team_slave_0 added [ 46.482161][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.484595][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.492417][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.497700][ T5964] team0: Port device team_slave_0 added [ 46.514551][ T5967] team0: Port device team_slave_1 added [ 46.532365][ T5964] team0: Port device team_slave_1 added [ 46.534904][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.537385][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.546544][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.569207][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.571770][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.580949][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.596794][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.599149][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.606755][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.621887][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.624523][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.634916][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.648181][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.650627][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.658922][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.666457][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.668833][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.679373][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.688369][ T5956] hsr_slave_0: entered promiscuous mode [ 46.690511][ T5956] hsr_slave_1: entered promiscuous mode [ 46.719527][ T5955] hsr_slave_0: entered promiscuous mode [ 46.721797][ T5955] hsr_slave_1: entered promiscuous mode [ 46.724494][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.727531][ T5955] Cannot create hsr debugfs directory [ 46.751304][ T5967] hsr_slave_0: entered promiscuous mode [ 46.754063][ T5967] hsr_slave_1: entered promiscuous mode [ 46.756561][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.759184][ T5967] Cannot create hsr debugfs directory [ 46.867419][ T5964] hsr_slave_0: entered promiscuous mode [ 46.869471][ T5964] hsr_slave_1: entered promiscuous mode [ 46.871478][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.873499][ T5964] Cannot create hsr debugfs directory [ 47.061267][ T5956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.070620][ T5956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.074193][ T5956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.082266][ T5956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.097323][ T5955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.104173][ T5955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.108136][ T5955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.117667][ T5955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.136693][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.140164][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.144143][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.150294][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.183968][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.191144][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.199349][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.205106][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.251591][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.275211][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.289021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.291146][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.295623][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.303328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.305225][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.323851][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.334825][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.349139][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.351864][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.361976][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.366869][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.369457][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.382174][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.384096][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.391631][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.400194][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.402554][ T39] audit: type=1400 audit(1732781161.438:114): avc: denied { sys_module } for pid=5956 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.402810][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.428388][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.440259][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.442468][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.454272][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.456602][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.487211][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.525399][ T5956] veth0_vlan: entered promiscuous mode [ 47.533444][ T5956] veth1_vlan: entered promiscuous mode [ 47.544803][ T5956] veth0_macvtap: entered promiscuous mode [ 47.548605][ T5956] veth1_macvtap: entered promiscuous mode [ 47.559949][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.564016][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.571581][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.577118][ T5956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.579533][ T5956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.582968][ T5956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.585474][ T5956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.620373][ T5971] Bluetooth: hci1: command tx timeout [ 47.620528][ T5963] Bluetooth: hci2: command tx timeout [ 47.622362][ T5971] Bluetooth: hci3: command tx timeout [ 47.623979][ T5963] Bluetooth: hci0: command tx timeout [ 47.628259][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.645660][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.647863][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.654484][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.660288][ T5964] veth0_vlan: entered promiscuous mode [ 47.668446][ T5964] veth1_vlan: entered promiscuous mode [ 47.685071][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.687835][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.693216][ T5955] veth0_vlan: entered promiscuous mode [ 47.703819][ T5955] veth1_vlan: entered promiscuous mode [ 47.706909][ T5964] veth0_macvtap: entered promiscuous mode [ 47.717635][ T5967] veth0_vlan: entered promiscuous mode [ 47.722592][ T5964] veth1_macvtap: entered promiscuous mode [ 47.723492][ T5956] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.734504][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.738236][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.743652][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.749109][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.753228][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.757396][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.760723][ T5967] veth1_vlan: entered promiscuous mode [ 47.766612][ T5955] veth0_macvtap: entered promiscuous mode [ 47.771450][ T5964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.774563][ T5964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.777739][ T5964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.781908][ T5964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.787306][ T5955] veth1_macvtap: entered promiscuous mode [ 47.799615][ T6018] Zero length message leads to an empty skb [ 47.807378][ T5838] IPVS: starting estimator thread 0... [ 47.810237][ T5967] veth0_macvtap: entered promiscuous mode [ 47.813166][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.816054][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.818986][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.825106][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.832226][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.848900][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.851854][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.854415][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.857378][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.862657][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.865688][ T5967] veth1_macvtap: entered promiscuous mode [ 47.872076][ T6021] netlink: 'syz.1.5': attribute type 15 has an invalid length. [ 47.877960][ T5955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.882514][ T5955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.884959][ T5955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.887397][ T5955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.890219][ T6019] IPVS: using max 25 ests per chain, 60000 per kthread [ 47.911162][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.914912][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.918362][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.923357][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.926928][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.931555][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.936068][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.947784][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.952499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.960128][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.963371][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.966106][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.968974][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.971717][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.974396][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.978551][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.994842][ T5967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.997811][ T5967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.001197][ T5967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.004164][ T5967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.018591][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.021954][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.023450][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.028943][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.064255][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'. [ 48.068884][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.072379][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.097044][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.105700][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.134010][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.136854][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.395169][ T6058] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 48.405022][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.407683][ T6058] team0: Port device batadv0 added [ 48.479312][ T6061] ======================================================= [ 48.479312][ T6061] WARNING: The mand mount option has been deprecated and [ 48.479312][ T6061] and is ignored by this kernel. Remove the mand [ 48.479312][ T6061] option from the mount to silence this warning. [ 48.479312][ T6061] ======================================================= [ 48.549635][ T6075] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 48.554087][ T6076] netlink: 'syz.3.19': attribute type 39 has an invalid length. [ 49.203582][ T6121] netlink: 'syz.0.33': attribute type 5 has an invalid length. [ 49.292293][ T5963] Bluetooth: hci2: Malformed HCI Event [ 49.700582][ T5962] Bluetooth: hci0: command tx timeout [ 49.701225][ T5971] Bluetooth: hci3: command tx timeout [ 49.702034][ T5966] Bluetooth: hci2: command tx timeout [ 49.702077][ T5969] Bluetooth: hci1: command tx timeout [ 50.365001][ T39] kauditd_printk_skb: 104 callbacks suppressed [ 50.365012][ T39] audit: type=1400 audit(1732781164.398:219): avc: denied { ioctl } for pid=6160 comm="syz.2.44" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.374374][ T39] audit: type=1400 audit(1732781164.398:220): avc: denied { set_context_mgr } for pid=6160 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 50.430231][ T6163] mmap: syz.2.45 (6163) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.434665][ T6163] binder_alloc: binder_alloc_mmap_handler: 6162 20ffc000-20ffd000 already mapped failed -16 [ 50.460078][ T39] audit: type=1400 audit(1732781164.488:221): avc: denied { setopt } for pid=6165 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.466130][ T39] audit: type=1400 audit(1732781164.498:222): avc: denied { mounton } for pid=6165 comm="syz.0.46" path="/19/file0" dev="proc" ino=4026533442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 50.473953][ T39] audit: type=1400 audit(1732781164.498:223): avc: denied { read write } for pid=6165 comm="syz.0.46" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.482611][ T39] audit: type=1400 audit(1732781164.498:224): avc: denied { open } for pid=6165 comm="syz.0.46" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.492379][ T39] audit: type=1400 audit(1732781164.518:225): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.554164][ T39] audit: type=1400 audit(1732781164.588:226): avc: denied { create } for pid=6176 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.561252][ T39] audit: type=1400 audit(1732781164.588:227): avc: denied { ioctl } for pid=6176 comm="syz.2.49" path="socket:[10343]" dev="sockfs" ino=10343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.643814][ T6185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51'. [ 50.698103][ T39] audit: type=1400 audit(1732781164.728:228): avc: denied { ioctl } for pid=6184 comm="syz.2.51" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9111 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.885548][ T6185] overlayfs: statfs failed on './file0' [ 51.108678][ T6199] binder: Binderfs stats mode cannot be changed during a remount [ 51.113502][ T6200] binder: Binderfs stats mode cannot be changed during a remount [ 51.262325][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 51.505704][ T6222] netlink: 'syz.2.63': attribute type 15 has an invalid length. [ 51.523427][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 51.556473][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 51.617996][ T6228] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.780046][ T5966] Bluetooth: hci2: command tx timeout [ 51.780175][ T5971] Bluetooth: hci0: command tx timeout [ 51.781993][ T5966] Bluetooth: hci3: command 0x040f tx timeout [ 51.784130][ T5962] Bluetooth: hci1: command tx timeout [ 51.862173][ T6245] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 51.896361][ T6251] netlink: 'syz.0.73': attribute type 15 has an invalid length. [ 51.913093][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 52.074432][ T5962] Bluetooth: hci3: unexpected event for opcode 0x041b [ 52.079139][ T6272] netlink: 'syz.0.80': attribute type 21 has an invalid length. [ 52.082402][ T6272] netlink: 'syz.0.80': attribute type 6 has an invalid length. [ 52.085094][ T6272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.80'. [ 52.104663][ T6271] netlink: 'syz.2.79': attribute type 11 has an invalid length. [ 52.149481][ T6277] netlink: 52 bytes leftover after parsing attributes in process `syz.1.81'. [ 52.617210][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 52.619565][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 53.360925][ T6351] __nla_validate_parse: 1 callbacks suppressed [ 53.360941][ T6351] netlink: 732 bytes leftover after parsing attributes in process `syz.2.101'. [ 53.366405][ T6351] netlink: 732 bytes leftover after parsing attributes in process `syz.2.101'. [ 53.603504][ T6359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.859895][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.862082][ T5962] Bluetooth: hci1: command tx timeout [ 53.863004][ T5963] Bluetooth: hci0: command tx timeout [ 53.863566][ T5962] Bluetooth: hci2: command tx timeout [ 54.009815][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 54.013889][ T35] usb 5-1: config 0 has no interfaces? [ 54.015370][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 54.017816][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.022163][ T35] usb 5-1: config 0 descriptor?? [ 54.222847][ T6366] validate_nla: 1 callbacks suppressed [ 54.222861][ T6366] netlink: 'syz.1.108': attribute type 15 has an invalid length. [ 54.432717][ T6359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.439138][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.444128][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.464839][ T6229] usb 5-1: USB disconnect, device number 2 [ 54.552719][ T6375] netlink: 68 bytes leftover after parsing attributes in process `syz.0.109'. [ 54.555077][ T6375] netlink: 68 bytes leftover after parsing attributes in process `syz.0.109'. [ 54.752623][ T6378] tmpfs: Bad value for 'mpol' [ 55.008491][ T6388] IPVS: length: 199 != 24 [ 55.087562][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 55.093405][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.097235][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.177992][ T6400] FAULT_INJECTION: forcing a failure. [ 55.177992][ T6400] name failslab, interval 1, probability 0, space 0, times 1 [ 55.188321][ T6400] CPU: 2 UID: 0 PID: 6400 Comm: syz.1.116 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 55.191344][ T6400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.194218][ T6400] Call Trace: [ 55.195180][ T6400] [ 55.195977][ T6400] dump_stack_lvl+0x16c/0x1f0 [ 55.197243][ T6400] should_fail_ex+0x497/0x5b0 [ 55.198509][ T6400] ? fs_reclaim_acquire+0xae/0x150 [ 55.199869][ T6400] should_failslab+0xc2/0x120 [ 55.201138][ T6400] __kmalloc_noprof+0xcb/0x510 [ 55.202486][ T6400] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 55.203967][ T6400] tomoyo_realpath_from_path+0xb9/0x720 [ 55.205459][ T6400] ? tomoyo_path_number_perm+0x235/0x590 [ 55.206948][ T6400] ? tomoyo_path_number_perm+0x235/0x590 [ 55.208437][ T6400] tomoyo_path_number_perm+0x248/0x590 [ 55.209889][ T6400] ? tomoyo_path_number_perm+0x235/0x590 [ 55.211371][ T6400] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 55.212939][ T6400] ? __pfx_lock_release+0x10/0x10 [ 55.214282][ T6400] ? trace_lock_acquire+0x146/0x1e0 [ 55.215659][ T6400] ? lock_acquire+0x2f/0xb0 [ 55.216876][ T6400] ? __fget_files+0x40/0x3a0 [ 55.218150][ T6400] ? __fget_files+0x206/0x3a0 [ 55.219428][ T6400] security_file_ioctl+0x9b/0x240 [ 55.220818][ T6400] __x64_sys_ioctl+0xb7/0x200 [ 55.222213][ T6400] do_syscall_64+0xcd/0x250 [ 55.223461][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.225094][ T6400] RIP: 0033:0x7f41dbd80809 [ 55.226320][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.231579][ T6400] RSP: 002b:00007f41dcb64058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.233839][ T6400] RAX: ffffffffffffffda RBX: 00007f41dbf45fa0 RCX: 00007f41dbd80809 [ 55.235924][ T6400] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 55.237988][ T6400] RBP: 00007f41dcb640a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.240086][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.242191][ T6400] R13: 0000000000000000 R14: 00007f41dbf45fa0 R15: 00007ffc86f90978 [ 55.244313][ T6400] [ 55.245286][ C2] vkms_vblank_simulate: vblank timer overrun [ 55.247131][ T6400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.488344][ T6425] netlink: 'syz.3.124': attribute type 15 has an invalid length. [ 55.492337][ T39] kauditd_printk_skb: 69 callbacks suppressed [ 55.492349][ T39] audit: type=1400 audit(1732781169.528:298): avc: denied { create } for pid=6424 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.500601][ T39] audit: type=1400 audit(1732781169.538:299): avc: denied { read } for pid=6424 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.554554][ T39] audit: type=1400 audit(1732781169.588:300): avc: denied { create } for pid=6430 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.555023][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 55.563958][ T39] audit: type=1400 audit(1732781169.588:301): avc: denied { getopt } for pid=6430 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.573211][ T39] audit: type=1400 audit(1732781169.588:302): avc: denied { ioctl } for pid=6430 comm="syz.3.127" path="socket:[10189]" dev="sockfs" ino=10189 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.582098][ T39] audit: type=1400 audit(1732781169.588:303): avc: denied { write } for pid=6430 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.604928][ T6428] FAULT_INJECTION: forcing a failure. [ 55.604928][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 55.608277][ T6428] CPU: 2 UID: 0 PID: 6428 Comm: syz.0.126 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 55.611009][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.613842][ T6428] Call Trace: [ 55.614729][ T6428] [ 55.615512][ T6428] dump_stack_lvl+0x16c/0x1f0 [ 55.616779][ T6428] should_fail_ex+0x497/0x5b0 [ 55.617982][ T6428] ? fs_reclaim_acquire+0xae/0x150 [ 55.619309][ T6428] should_failslab+0xc2/0x120 [ 55.620554][ T6428] __kmalloc_noprof+0xcb/0x510 [ 55.621813][ T6428] ? rcu_is_watching+0x12/0xc0 [ 55.623078][ T6428] tomoyo_encode2+0x100/0x3e0 [ 55.624315][ T6428] tomoyo_encode+0x29/0x50 [ 55.625502][ T6428] tomoyo_realpath_from_path+0x19d/0x720 [ 55.626964][ T6428] ? tomoyo_path_number_perm+0x235/0x590 [ 55.628433][ T6428] tomoyo_path_number_perm+0x248/0x590 [ 55.629885][ T6428] ? tomoyo_path_number_perm+0x235/0x590 [ 55.631618][ T6428] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 55.633411][ T6428] ? __pfx_lock_release+0x10/0x10 [ 55.634814][ T6428] ? trace_lock_acquire+0x146/0x1e0 [ 55.636267][ T6428] ? lock_acquire+0x2f/0xb0 [ 55.637543][ T6428] ? __fget_files+0x40/0x3a0 [ 55.638918][ T6428] ? __fget_files+0x206/0x3a0 [ 55.640404][ T6428] security_file_ioctl+0x9b/0x240 [ 55.641799][ T6428] __x64_sys_ioctl+0xb7/0x200 [ 55.643075][ T6428] do_syscall_64+0xcd/0x250 [ 55.644326][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.645945][ T6428] RIP: 0033:0x7feebbd80809 [ 55.647159][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.652443][ T6428] RSP: 002b:00007feebcbac058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.654808][ T6428] RAX: ffffffffffffffda RBX: 00007feebbf45fa0 RCX: 00007feebbd80809 [ 55.656938][ T6428] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 55.659137][ T6428] RBP: 00007feebcbac0a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.661398][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.663927][ T6428] R13: 0000000000000000 R14: 00007feebbf45fa0 R15: 00007ffc60830588 [ 55.666114][ T6428] [ 55.667018][ C2] vkms_vblank_simulate: vblank timer overrun [ 55.671394][ T6428] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.800215][ T5999] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 55.841484][ T39] audit: type=1400 audit(1732781169.878:304): avc: denied { read write } for pid=6443 comm="syz.0.131" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 55.849509][ T39] audit: type=1400 audit(1732781169.878:305): avc: denied { open } for pid=6443 comm="syz.0.131" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 55.882566][ T39] audit: type=1400 audit(1732781169.918:306): avc: denied { create } for pid=6447 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.888529][ T39] audit: type=1400 audit(1732781169.918:307): avc: denied { connect } for pid=6447 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.973049][ T5999] usb 8-1: not running at top speed; connect to a high speed hub [ 55.976833][ T5999] usb 8-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 55.977446][ T6452] Process accounting resumed [ 55.980822][ T5999] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.987509][ T5999] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.990805][ T5999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.993666][ T5999] usb 8-1: Product: syz [ 55.995124][ T5999] usb 8-1: Manufacturer: syz [ 55.996891][ T5999] usb 8-1: SerialNumber: syz [ 56.012727][ T6454] cgroup: No subsys list or none specified [ 56.013237][ T6452] Process accounting resumed [ 56.040074][ T6456] netlink: 'syz.0.135': attribute type 15 has an invalid length. [ 56.412876][ T5999] usb 8-1: 0:2 : does not exist [ 56.424364][ T5999] usb 8-1: USB disconnect, device number 2 [ 56.612052][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 56.633769][ T6471] FAULT_INJECTION: forcing a failure. [ 56.633769][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 56.637637][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.2.138 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 56.640593][ T6471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.643463][ T6471] Call Trace: [ 56.644374][ T6471] [ 56.645206][ T6471] dump_stack_lvl+0x16c/0x1f0 [ 56.646580][ T6471] should_fail_ex+0x497/0x5b0 [ 56.647870][ T6471] ? fs_reclaim_acquire+0xae/0x150 [ 56.649269][ T6471] should_failslab+0xc2/0x120 [ 56.650867][ T6471] __kmalloc_node_noprof+0xd1/0x510 [ 56.652628][ T6471] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 56.654303][ T6471] ? __pfx_mark_lock+0x10/0x10 [ 56.655954][ T6471] __kvmalloc_node_noprof+0xad/0x1a0 [ 56.657454][ T6471] __kvm_mmu_topup_memory_cache+0x451/0x600 [ 56.659098][ T6471] ? vcpu_run+0x1aab/0x4f50 [ 56.660354][ T6471] mmu_topup_memory_caches+0x22/0xd0 [ 56.662027][ T6471] kvm_mmu_load+0xda/0x21f0 [ 56.663353][ T6471] ? mark_held_locks+0x9f/0xe0 [ 56.664682][ T6471] ? kvm_apic_has_interrupt+0xb6/0x190 [ 56.666312][ T6471] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 56.668015][ T6471] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 56.669537][ T6471] ? __pfx_kvm_mmu_load+0x10/0x10 [ 56.671419][ T6471] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 56.673389][ T6471] ? kvm_check_and_inject_events+0x725/0x12e0 [ 56.675037][ T6471] ? record_steal_time+0x51/0xbe0 [ 56.676580][ T6471] vcpu_run+0x33a4/0x4f50 [ 56.677790][ T6471] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 56.679313][ T6471] ? __pfx_vcpu_run+0x10/0x10 [ 56.680705][ T6471] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 56.682313][ T6471] ? rcu_is_watching+0x12/0xc0 [ 56.683688][ T6471] ? trace_lock_acquire+0x146/0x1e0 [ 56.685130][ T6471] ? __local_bh_enable_ip+0xa4/0x120 [ 56.686673][ T6471] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.688115][ T6471] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 56.689700][ T6471] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 56.691359][ T6471] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 56.692886][ T6471] kvm_vcpu_ioctl+0x6c7/0x1520 [ 56.694235][ T6471] ? do_vfs_ioctl+0x513/0x1990 [ 56.695598][ T6471] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.697096][ T6471] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 56.698983][ T6471] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.701253][ T6471] ? __pfx_lock_release+0x10/0x10 [ 56.703099][ T6471] ? selinux_file_ioctl+0x180/0x270 [ 56.704888][ T6471] ? selinux_file_ioctl+0xb4/0x270 [ 56.706376][ T6471] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.707841][ T6471] __x64_sys_ioctl+0x190/0x200 [ 56.709357][ T6471] do_syscall_64+0xcd/0x250 [ 56.710697][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.712328][ T6471] RIP: 0033:0x7fdbc5180809 [ 56.713597][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.718883][ T6471] RSP: 002b:00007fdbc605a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.721617][ T6471] RAX: ffffffffffffffda RBX: 00007fdbc5345fa0 RCX: 00007fdbc5180809 [ 56.724053][ T6471] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 56.726239][ T6471] RBP: 00007fdbc605a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.728416][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.730603][ T6471] R13: 0000000000000000 R14: 00007fdbc5345fa0 R15: 00007fff8ad910e8 [ 56.732972][ T6471] [ 56.946799][ T6484] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 56.949039][ T6484] netlink: 224 bytes leftover after parsing attributes in process `syz.0.143'. [ 57.049464][ T57] libceph: connect (1)[c::]:6789 error -101 [ 57.055372][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 57.146411][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 57.149108][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 57.151702][ T6497] netlink: 'syz.2.145': attribute type 18 has an invalid length. [ 57.203924][ T6504] FAULT_INJECTION: forcing a failure. [ 57.203924][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 57.207382][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.3.147 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 57.210109][ T6504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.212962][ T6504] Call Trace: [ 57.213874][ T6504] [ 57.214674][ T6504] dump_stack_lvl+0x16c/0x1f0 [ 57.215936][ T6504] should_fail_ex+0x497/0x5b0 [ 57.217221][ T6504] ? fs_reclaim_acquire+0xae/0x150 [ 57.218588][ T6504] should_failslab+0xc2/0x120 [ 57.219861][ T6504] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 57.221430][ T6504] ? __pfx_mark_lock+0x10/0x10 [ 57.222795][ T6504] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 57.224493][ T6504] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 57.226159][ T6504] mmu_topup_memory_caches+0x22/0xd0 [ 57.227572][ T6504] kvm_mmu_load+0xda/0x21f0 [ 57.228829][ T6504] ? mark_held_locks+0x9f/0xe0 [ 57.230132][ T6504] ? kvm_apic_has_interrupt+0xb6/0x190 [ 57.231611][ T6504] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 57.233206][ T6504] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 57.234712][ T6504] ? __pfx_kvm_mmu_load+0x10/0x10 [ 57.236060][ T6504] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 57.237645][ T6504] ? kvm_check_and_inject_events+0x725/0x12e0 [ 57.239264][ T6504] ? record_steal_time+0x51/0xbe0 [ 57.240640][ T6504] vcpu_run+0x33a4/0x4f50 [ 57.241802][ T6504] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 57.243279][ T6504] ? __pfx_vcpu_run+0x10/0x10 [ 57.244567][ T6504] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.246066][ T6504] ? rcu_is_watching+0x12/0xc0 [ 57.247356][ T6504] ? trace_lock_acquire+0x146/0x1e0 [ 57.248757][ T6504] ? __local_bh_enable_ip+0xa4/0x120 [ 57.250176][ T6504] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.251593][ T6504] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 57.253124][ T6504] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 57.254648][ T6504] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 57.256120][ T6504] kvm_vcpu_ioctl+0x6c7/0x1520 [ 57.257407][ T6504] ? do_vfs_ioctl+0x513/0x1990 [ 57.258700][ T6504] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 57.260090][ T6504] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 57.261847][ T6504] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 57.263656][ T6504] ? __pfx_lock_release+0x10/0x10 [ 57.265024][ T6504] ? selinux_file_ioctl+0x180/0x270 [ 57.266417][ T6504] ? selinux_file_ioctl+0xb4/0x270 [ 57.267787][ T6504] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 57.269194][ T6504] __x64_sys_ioctl+0x190/0x200 [ 57.270569][ T6504] do_syscall_64+0xcd/0x250 [ 57.271805][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.273400][ T6504] RIP: 0033:0x7fb051180809 [ 57.274613][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.279699][ T6504] RSP: 002b:00007fb051fd7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.281974][ T6504] RAX: ffffffffffffffda RBX: 00007fb051345fa0 RCX: 00007fb051180809 [ 57.284067][ T6504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 57.286190][ T6504] RBP: 00007fb051fd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.288287][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.290406][ T6504] R13: 0000000000000000 R14: 00007fb051345fa0 R15: 00007ffdb14f5ab8 [ 57.292527][ T6504] [ 57.323082][ T57] libceph: connect (1)[c::]:6789 error -101 [ 57.324774][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 57.349121][ T6507] kvm: emulating exchange as write [ 57.384905][ T6510] netlink: 'syz.3.149': attribute type 15 has an invalid length. [ 57.493031][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 57.831057][ T57] libceph: connect (1)[c::]:6789 error -101 [ 57.832773][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 57.865809][ T6493] ceph: No mds server is up or the cluster is laggy [ 58.020038][ T5966] Bluetooth: hci4: command 0xfc11 tx timeout [ 58.020104][ T5963] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 58.087394][ T6523] ata3.00: invalid multi_count 1 ignored [ 58.168210][ T6529] devtmpfs: Cannot enable quota on remount [ 58.357779][ T6544] lo speed is unknown, defaulting to 1000 [ 58.362329][ T6544] lo speed is unknown, defaulting to 1000 [ 58.364487][ T6544] lo speed is unknown, defaulting to 1000 [ 58.404982][ T6544] infiniband syz0: set active [ 58.405247][ T6546] loop7: detected capacity change from 0 to 16384 [ 58.407237][ T71] lo speed is unknown, defaulting to 1000 [ 58.408974][ T6544] infiniband syz0: added lo [ 58.417890][ T6546] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 58.420650][ T6546] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 58.434681][ T6544] RDS/IB: syz0: added [ 58.436683][ T6544] smc: adding ib device syz0 with port count 1 [ 58.439114][ T6544] smc: ib device syz0 port 1 has pnetid [ 58.443019][ T9] lo speed is unknown, defaulting to 1000 [ 58.445281][ T6544] lo speed is unknown, defaulting to 1000 [ 58.487873][ T6544] lo speed is unknown, defaulting to 1000 [ 58.527672][ T6544] lo speed is unknown, defaulting to 1000 [ 58.574590][ T6544] lo speed is unknown, defaulting to 1000 [ 58.683922][ T6551] __nla_validate_parse: 2 callbacks suppressed [ 58.683932][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.160'. [ 58.687942][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.160'. [ 58.690877][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.160'. [ 58.693283][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.160'. [ 58.696468][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.160'. [ 58.700451][ T6551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.722421][ T6555] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.018932][ T6557] ntfs3(sr0): Primary boot signature is not NTFS. [ 59.021662][ T6557] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 59.143686][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 59.146600][ T6561] syz.2.163 uses obsolete (PF_INET,SOCK_PACKET) [ 59.256864][ T6571] netlink: 'syz.2.166': attribute type 15 has an invalid length. [ 59.283362][ T6567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.165'. [ 59.337404][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 59.584106][ T6599] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 59.619766][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 59.695783][ T6610] overlayfs: missing 'lowerdir' [ 59.700832][ T5963] Bluetooth: hci2: command tx timeout [ 59.730708][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 59.775041][ T6618] Bluetooth: MGMT ver 1.23 [ 60.290475][ T5999] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.430205][ T5999] usb 6-1: device descriptor read/64, error -71 [ 60.446741][ T6667] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 60.499987][ T71] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.564060][ T6670] netlink: 'syz.0.197': attribute type 15 has an invalid length. [ 60.577585][ T39] kauditd_printk_skb: 44 callbacks suppressed [ 60.577599][ T39] audit: type=1400 audit(1732781174.667:352): avc: denied { mount } for pid=6671 comm="syz.2.198" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.601847][ T39] audit: type=1400 audit(1732781174.697:353): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.644906][ T39] audit: type=1400 audit(1732781174.737:354): avc: denied { write } for pid=6678 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.652037][ T39] audit: type=1400 audit(1732781174.747:355): avc: denied { read } for pid=6678 comm="syz.2.200" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.658409][ T39] audit: type=1400 audit(1732781174.747:356): avc: denied { open } for pid=6678 comm="syz.2.200" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.666390][ T39] audit: type=1400 audit(1732781174.747:357): avc: denied { ioctl } for pid=6678 comm="syz.2.200" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.670200][ T71] usb 8-1: Using ep0 maxpacket: 8 [ 60.673729][ T39] audit: type=1400 audit(1732781174.767:358): avc: denied { rename } for pid=5353 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.676221][ T71] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 60.681805][ T5999] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.684477][ T71] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 60.687752][ T39] audit: type=1400 audit(1732781174.767:359): avc: denied { unlink } for pid=5353 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.689308][ T71] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 60.696389][ T39] audit: type=1400 audit(1732781174.767:360): avc: denied { create } for pid=5353 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.698989][ T71] usb 8-1: config 250 has no interface number 0 [ 60.708249][ T71] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 60.713104][ T71] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 60.716441][ T71] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.720147][ T71] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.723774][ T71] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 60.728425][ T71] usb 8-1: config 250 interface 228 has no altsetting 0 [ 60.732624][ T71] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 60.735798][ T71] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 60.738708][ T71] usb 8-1: Product: syz [ 60.740663][ T71] usb 8-1: SerialNumber: syz [ 60.743059][ T6685] input: syz0 as /devices/virtual/input/input6 [ 60.752502][ T39] audit: type=1400 audit(1732781174.847:361): avc: denied { read } for pid=5356 comm="acpid" name="event4" dev="devtmpfs" ino=2794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.763608][ T71] hub 8-1:250.228: bad descriptor, ignoring hub [ 60.766563][ T71] hub 8-1:250.228: probe with driver hub failed with error -5 [ 60.823690][ T5999] usb 6-1: device descriptor read/64, error -71 [ 60.930088][ T5999] usb usb6-port1: attempt power cycle [ 60.967384][ T71] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 61.289889][ T5999] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.310601][ T5999] usb 6-1: device descriptor read/8, error -71 [ 61.432158][ T6705] netlink: 'syz.2.208': attribute type 15 has an invalid length. [ 61.510600][ T6710] netlink: 'syz.2.210': attribute type 178 has an invalid length. [ 61.560200][ T5999] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.580224][ T5999] usb 6-1: device descriptor read/8, error -71 [ 61.585246][ T6661] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 61.589058][ T6661] usb 8-1: device reset changed ep0 maxpacket size! [ 61.594424][ T71] usb 8-1: USB disconnect, device number 3 [ 61.597746][ T71] usblp0: removed [ 61.670113][ T6716] overlayfs: failed to resolve './file0': -2 [ 61.677180][ T6717] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 61.690189][ T5999] usb usb6-port1: unable to enumerate USB device [ 61.729841][ T71] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.982814][ T6736] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 61.996949][ T6736] team0: Failed to send options change via netlink (err -105) [ 61.999848][ T6736] team0: Port device netdevsim0 added [ 62.004797][ T6736] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 62.007498][ T6736] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 62.013657][ T6736] team0: Failed to send options change via netlink (err -105) [ 62.015689][ T6736] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 62.018220][ T6736] team0: Port device netdevsim0 removed [ 62.019949][ T6736] bond0: (slave netdevsim0): no link monitoring support [ 62.022449][ T6736] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 62.029171][ T6736] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 62.383693][ T6764] syz.2.226: attempt to access beyond end of device [ 62.383693][ T6764] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 62.388197][ T6764] (syz.2.226,6764,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 62.391734][ T6764] (syz.2.226,6764,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 62.394302][ T6764] (syz.2.226,6764,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 62.400490][ T6764] (syz.2.226,6764,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 62.410785][ T71] usb 8-1: unable to get BOS descriptor or descriptor too short [ 62.413068][ T71] usb 8-1: no configurations [ 62.414300][ T71] usb 8-1: can't read configurations, error -22 [ 62.550293][ T6782] capability: warning: `syz.0.232' uses deprecated v2 capabilities in a way that may be insecure [ 62.732762][ T6798] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 63.077725][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.079975][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.081925][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.083819][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.085733][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.087610][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.089539][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.091533][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.093477][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.095368][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.097243][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.099123][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.101233][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.103152][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.105073][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.106971][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.109490][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.111808][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.113751][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.115675][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.117655][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.119610][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.121843][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.123759][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.125687][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.127598][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.129566][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.131808][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.133936][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.135861][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.137795][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.139645][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.145109][ T5999] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 63.410555][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 63.541833][ T5838] usb 6-1: device descriptor read/64, error -71 [ 63.790025][ T5838] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 63.930001][ T5838] usb 6-1: device descriptor read/64, error -71 [ 64.042018][ T5838] usb usb6-port1: attempt power cycle [ 64.399972][ T5838] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 64.420587][ T5838] usb 6-1: device descriptor read/8, error -71 [ 64.669853][ T5838] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 64.700360][ T5838] usb 6-1: device descriptor read/8, error -71 [ 64.810032][ T5838] usb usb6-port1: unable to enumerate USB device [ 64.965016][ T6886] tmpfs: Bad value for 'mpol' [ 65.239865][ T5999] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.362889][ T6900] netlink: 'syz.2.264': attribute type 15 has an invalid length. [ 65.395267][ T5999] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 65.402118][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.404962][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.407859][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.410469][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.412752][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.415561][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.418794][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.421811][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.425116][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.428706][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.431301][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.434001][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.436362][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.438842][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.441693][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.444039][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.446368][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.449276][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.451747][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.453966][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.456653][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.458932][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.461230][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.463899][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.467300][ T5999] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 65.469626][ T5999] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 65.471825][ T5999] usb 5-1: Product: syz [ 65.472892][ T5999] usb 5-1: Manufacturer: syz [ 65.474076][ T5999] usb 5-1: SerialNumber: syz [ 65.476294][ T5999] usb 5-1: config 0 descriptor?? [ 65.482476][ T5999] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 65.684528][ T6893] __nla_validate_parse: 8 callbacks suppressed [ 65.684538][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 65.689268][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 65.689282][ T39] audit: type=1400 audit(1732781179.777:413): avc: denied { read write } for pid=6892 comm="syz.0.262" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.691027][ T6893] loop6: detected capacity change from 0 to 524287999 [ 65.697417][ T39] audit: type=1400 audit(1732781179.777:414): avc: denied { open } for pid=6892 comm="syz.0.262" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.744318][ T5999] usb 5-1: USB disconnect, device number 3 [ 65.753374][ T5999] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 65.764983][ C3] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 65.768930][ C3] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.772158][ C3] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 65.774885][ C3] I/O error, dev loop6, sector 524287745 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.778009][ C3] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 65.780814][ C3] I/O error, dev loop6, sector 524287746 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.783904][ C3] Buffer I/O error on dev loop6, logical block 524287746, async page read [ 65.786616][ C3] I/O error, dev loop6, sector 524287747 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.789708][ C3] Buffer I/O error on dev loop6, logical block 524287747, async page read [ 65.792563][ C3] I/O error, dev loop6, sector 524287748 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.795661][ C3] Buffer I/O error on dev loop6, logical block 524287748, async page read [ 65.798193][ C3] I/O error, dev loop6, sector 524287749 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.800981][ C3] Buffer I/O error on dev loop6, logical block 524287749, async page read [ 65.803189][ C3] I/O error, dev loop6, sector 524287750 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.806094][ C3] Buffer I/O error on dev loop6, logical block 524287750, async page read [ 65.808810][ C3] I/O error, dev loop6, sector 524287751 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.812031][ C3] Buffer I/O error on dev loop6, logical block 524287751, async page read [ 66.125369][ T39] audit: type=1400 audit(1732781180.217:415): avc: denied { lock } for pid=6906 comm="syz.3.267" path="socket:[15814]" dev="sockfs" ino=15814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.155624][ T6912] overlay: Unknown parameter 'appraise' [ 66.192013][ T39] audit: type=1400 audit(1732781180.287:416): avc: denied { read } for pid=6913 comm="syz.3.269" path="socket:[13852]" dev="sockfs" ino=13852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.246437][ T39] audit: type=1400 audit(1732781180.337:417): avc: denied { watch_mount } for pid=6913 comm="syz.3.269" path="/62" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.364382][ T39] audit: type=1400 audit(1732781180.457:418): avc: denied { append } for pid=6931 comm="syz.2.275" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.493506][ T6949] netlink: 'syz.2.278': attribute type 15 has an invalid length. [ 66.789894][ T5838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.809850][ T57] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.939986][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 66.943252][ T5838] usb 7-1: config 0 has no interfaces? [ 66.945102][ T5838] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 66.948098][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.952372][ T5838] usb 7-1: config 0 descriptor?? [ 66.961328][ T57] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 66.964193][ T57] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 66.967506][ T57] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.970840][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 66.974426][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 66.979295][ T57] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.982360][ T57] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.984750][ T57] usb 5-1: Product: syz [ 66.986135][ T57] usb 5-1: Manufacturer: syz [ 66.991293][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 66.993119][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 66.997052][ T57] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 66.999002][ T57] cdc_wdm 5-1:1.0: Unknown control protocol [ 67.035331][ T39] audit: type=1400 audit(1732781181.127:419): avc: denied { create } for pid=6956 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.049801][ T39] audit: type=1400 audit(1732781181.127:420): avc: denied { write } for pid=6956 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.056269][ T39] audit: type=1400 audit(1732781181.127:421): avc: denied { read } for pid=6956 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.068966][ T39] audit: type=1400 audit(1732781181.157:422): avc: denied { write } for pid=6959 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.115766][ T6966] overlayfs: missing 'workdir' [ 67.159606][ T25] usb 7-1: USB disconnect, device number 2 [ 67.214016][ T6955] overlayfs: failed to resolve './file1': -2 [ 67.215276][ T6972] netlink: 'syz.1.288': attribute type 15 has an invalid length. [ 67.273148][ T5998] usb 5-1: USB disconnect, device number 4 [ 67.275558][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 67.277836][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 67.279993][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 67.333274][ T6987] geneve2: entered promiscuous mode [ 67.334754][ T6987] geneve2: entered allmulticast mode [ 67.363720][ T6953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 67.442073][ T6994] x_tables: ip_tables: CT target: only valid in raw table, not [ 67.470884][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 67.475956][ T6999] macsec0: entered promiscuous mode [ 67.522537][ T7005] lo speed is unknown, defaulting to 1000 [ 67.689654][ T7015] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.743598][ T7015] input: syz0 as /devices/virtual/input/input8 [ 67.759027][ T7015] overlayfs: failed to resolve './file0': -2 [ 67.865036][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.079629][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.083696][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.094145][ T5966] Bluetooth: hci4: sending frame failed (-49) [ 68.096387][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 68.193784][ T7067] netlink: 108 bytes leftover after parsing attributes in process `syz.3.313'. [ 68.197296][ T7067] netlink: 108 bytes leftover after parsing attributes in process `syz.3.313'. [ 68.320160][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.331411][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 68.367856][ T7084] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.382358][ T7084] netlink: 'syz.3.318': attribute type 3 has an invalid length. [ 68.434326][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.438184][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.440550][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.442756][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.444915][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.446885][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.449227][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.449861][ T25] usb 7-1: device descriptor read/64, error -71 [ 68.451627][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.453810][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.455465][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460799][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460815][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460826][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460838][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460850][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460861][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460873][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460885][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460896][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460908][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460920][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460931][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460943][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460955][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460966][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460978][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.460989][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.461001][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.461013][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.461024][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.461036][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.461047][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.461059][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.461071][ T5998] hid-generic 0000:80000080:0000.0003: unknown main item tag 0x0 [ 68.462050][ T5998] hid-generic 0000:80000080:0000.0003: hidraw1: HID v0.b2 Device [syz0] on syz1 [ 68.709854][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.759843][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.851469][ T25] usb 7-1: device descriptor read/64, error -71 [ 68.852350][ T7103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.921325][ T35] usb 5-1: config 0 has no interfaces? [ 68.923349][ T35] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 68.926651][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.931008][ T35] usb 5-1: config 0 descriptor?? [ 68.960067][ T25] usb usb7-port1: attempt power cycle [ 69.142003][ T57] usb 5-1: USB disconnect, device number 5 [ 69.319826][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.340757][ T25] usb 7-1: device descriptor read/8, error -71 [ 69.393661][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 69.412392][ T7121] QAT: Stopping all acceleration devices. [ 69.600869][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.622319][ T25] usb 7-1: device descriptor read/8, error -71 [ 69.662936][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 69.666555][ T7131] netlink: 'syz.1.330': attribute type 13 has an invalid length. [ 69.679280][ T7131] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.682664][ T7131] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.685593][ T7131] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.689132][ T7131] vxlan0: entered promiscuous mode [ 69.718214][ T71] IPVS: starting estimator thread 0... [ 69.732321][ T25] usb usb7-port1: unable to enumerate USB device [ 69.804637][ T7135] overlay: filesystem on ./bus not supported as upperdir [ 69.820063][ T7136] IPVS: using max 21 ests per chain, 50400 per kthread [ 69.928029][ T7139] netlink: 'syz.0.333': attribute type 2 has an invalid length. [ 70.020367][ T7146] overlay: ./file0 is not a directory [ 70.276544][ T7157] gre1: entered promiscuous mode [ 70.279161][ T7157] team0: Device gre1 is of different type [ 70.350402][ T7161] netlink: 'syz.0.341': attribute type 15 has an invalid length. [ 70.411806][ T7165] tap0: tun_chr_ioctl cmd 1074025677 [ 70.413385][ T7165] tap0: linktype set to 805 [ 70.478914][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 70.569317][ T7174] netlink: 72 bytes leftover after parsing attributes in process `syz.0.347'. [ 70.698942][ T7188] netlink: 'syz.0.350': attribute type 15 has an invalid length. [ 70.815134][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 70.815146][ T39] audit: type=1400 audit(1732781184.907:460): avc: denied { write } for pid=7200 comm="syz.1.356" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.816311][ T5963] Bluetooth: Unexpected continuation frame (len 16) [ 70.850305][ T39] audit: type=1400 audit(1732781184.947:461): avc: denied { setattr } for pid=7203 comm="syz.1.357" path="socket:[16259]" dev="sockfs" ino=16259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.865086][ T39] audit: type=1400 audit(1732781184.957:462): avc: denied { compute_member } for pid=7203 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.876258][ T7196] xt_hashlimit: size too large, truncated to 1048576 [ 70.915571][ T7209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7209 comm=syz.1.358 [ 70.918887][ T7209] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 70.921726][ T7209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7209 comm=syz.1.358 [ 71.055312][ T7218] netlink: 'syz.1.361': attribute type 15 has an invalid length. [ 71.065469][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.108318][ T7219] batman_adv: batadv0: Adding interface: gretap1 [ 71.112069][ T7219] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.119011][ T7219] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 71.149813][ T39] audit: type=1400 audit(1732781185.227:463): avc: denied { getopt } for pid=7220 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.228253][ T7223] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 83.943942][ T39] audit: type=1400 audit(1732781198.037:464): avc: denied { execute } for pid=7230 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.949605][ T39] audit: type=1400 audit(1732781198.037:465): avc: denied { execute_no_trans } for pid=7230 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.054338][ T5966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.058378][ T5966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.061837][ T5966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.065006][ T5966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.067868][ T5966] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.071119][ T5966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.076767][ T39] audit: type=1400 audit(1732781198.167:466): avc: denied { mounton } for pid=7231 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.099843][ T5963] Bluetooth: hci5: command tx timeout [ 86.106160][ T5966] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.109447][ T5966] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.111875][ T5966] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.115832][ T5966] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.118668][ T5966] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.120965][ T5966] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.006744][ T1416] ================================================================== [ 87.008837][ T1416] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 87.010762][ T1416] Read of size 1 at addr ffff88802a3cd490 by task aoe_tx0/1416 [ 87.013694][ T1416] [ 87.014919][ T1416] CPU: 1 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 87.017492][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.020231][ T1416] Call Trace: [ 87.021115][ T1416] [ 87.021867][ T1416] dump_stack_lvl+0x116/0x1f0 [ 87.023097][ T1416] print_report+0xc3/0x620 [ 87.024252][ T1416] ? __virt_addr_valid+0x5e/0x590 [ 87.025570][ T1416] ? __phys_addr+0xc6/0x150 [ 87.026757][ T1416] kasan_report+0xd9/0x110 [ 87.027926][ T1416] ? handle_tx+0x5dc/0x630 [ 87.029111][ T1416] ? handle_tx+0x5dc/0x630 [ 87.030277][ T1416] handle_tx+0x5dc/0x630 [ 87.031401][ T1416] dev_hard_start_xmit+0x9a/0x7b0 [ 87.032726][ T1416] __dev_queue_xmit+0x7f0/0x43e0 [ 87.034018][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 87.035408][ T1416] ? __pfx___lock_acquire+0x10/0x10 [ 87.036802][ T1416] ? lock_acquire.part.0+0x11b/0x380 [ 87.038183][ T1416] ? find_held_lock+0x2d/0x110 [ 87.039431][ T1416] ? find_held_lock+0x2d/0x110 [ 87.040717][ T1416] tx+0xcc/0x190 [ 87.041668][ T1416] ? __pfx_tx+0x10/0x10 [ 87.042767][ T1416] kthread+0x1e7/0x3c0 [ 87.043830][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.045059][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 87.046566][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.047919][ T1416] ? __kthread_parkme+0x148/0x220 [ 87.049232][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.050443][ T1416] kthread+0x2c1/0x3a0 [ 87.051529][ T1416] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.052893][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.054125][ T1416] ret_from_fork+0x45/0x80 [ 87.055291][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.056502][ T1416] ret_from_fork_asm+0x1a/0x30 [ 87.057756][ T1416] [ 87.058569][ T1416] [ 87.059193][ T1416] Allocated by task 6277: [ 87.060321][ T1416] kasan_save_stack+0x33/0x60 [ 87.061567][ T1416] kasan_save_track+0x14/0x30 [ 87.062790][ T1416] __kasan_kmalloc+0xaa/0xb0 [ 87.063985][ T1416] alloc_tty_struct+0x98/0x8d0 [ 87.065239][ T1416] tty_init_dev.part.0+0x1e/0x660 [ 87.066555][ T1416] tty_open+0xac1/0xf80 [ 87.067630][ T1416] chrdev_open+0x237/0x6a0 [ 87.068805][ T1416] do_dentry_open+0xf59/0x1ea0 [ 87.070048][ T1416] vfs_open+0x82/0x3f0 [ 87.071119][ T1416] path_openat+0x1e6a/0x2d60 [ 87.072320][ T1416] do_filp_open+0x20c/0x470 [ 87.073495][ T1416] do_sys_openat2+0x17a/0x1e0 [ 87.074712][ T1416] __x64_sys_openat+0x175/0x210 [ 87.075972][ T1416] do_syscall_64+0xcd/0x250 [ 87.077161][ T1416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.078696][ T1416] [ 87.079322][ T1416] Freed by task 5998: [ 87.080364][ T1416] kasan_save_stack+0x33/0x60 [ 87.081595][ T1416] kasan_save_track+0x14/0x30 [ 87.082806][ T1416] kasan_save_free_info+0x3b/0x60 [ 87.084122][ T1416] __kasan_slab_free+0x51/0x70 [ 87.085378][ T1416] kfree+0x14f/0x4b0 [ 87.086405][ T1416] process_one_work+0x9c5/0x1ba0 [ 87.087691][ T1416] worker_thread+0x6c8/0xf00 [ 87.088920][ T1416] kthread+0x2c1/0x3a0 [ 87.089993][ T1416] ret_from_fork+0x45/0x80 [ 87.091171][ T1416] ret_from_fork_asm+0x1a/0x30 [ 87.092443][ T1416] [ 87.093076][ T1416] Last potentially related work creation: [ 87.094555][ T1416] kasan_save_stack+0x33/0x60 [ 87.095804][ T1416] __kasan_record_aux_stack+0xba/0xd0 [ 87.097205][ T1416] insert_work+0x36/0x230 [ 87.098333][ T1416] __queue_work+0x97e/0x1080 [ 87.099542][ T1416] queue_work_on+0x11a/0x140 [ 87.100766][ T1416] release_tty+0x4de/0x5d0 [ 87.101932][ T1416] tty_release_struct+0xb7/0xe0 [ 87.103199][ T1416] tty_release+0xe25/0x1410 [ 87.104389][ T1416] __fput+0x3f8/0xb60 [ 87.105426][ T1416] task_work_run+0x14e/0x250 [ 87.106629][ T1416] do_exit+0xadd/0x2d70 [ 87.107716][ T1416] do_group_exit+0xd3/0x2a0 [ 87.108905][ T1416] get_signal+0x24ed/0x26c0 [ 87.110094][ T1416] arch_do_signal_or_restart+0x90/0x7e0 [ 87.111528][ T1416] syscall_exit_to_user_mode+0x150/0x2a0 [ 87.113001][ T1416] do_syscall_64+0xda/0x250 [ 87.114186][ T1416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.115708][ T1416] [ 87.116338][ T1416] The buggy address belongs to the object at ffff88802a3cd000 [ 87.116338][ T1416] which belongs to the cache kmalloc-cg-2k of size 2048 [ 87.119939][ T1416] The buggy address is located 1168 bytes inside of [ 87.119939][ T1416] freed 2048-byte region [ffff88802a3cd000, ffff88802a3cd800) [ 87.123470][ T1416] [ 87.124090][ T1416] The buggy address belongs to the physical page: [ 87.125730][ T1416] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802a3ca000 pfn:0x2a3c8 [ 87.128305][ T1416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.130363][ T5963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.130415][ T1416] memcg:ffff888026a8a381 [ 87.130421][ T1416] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 87.130431][ T1416] page_type: f5(slab) [ 87.134106][ T5963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.135462][ T1416] raw: 00fff00000000040 ffff88801b050140 ffffea0001333400 dead000000000002 [ 87.137364][ T5963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.138387][ T1416] raw: ffff88802a3ca000 0000000000080007 00000001f5000000 ffff888026a8a381 [ 87.142387][ T5963] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.142530][ T1416] head: 00fff00000000040 ffff88801b050140 ffffea0001333400 dead000000000002 [ 87.145534][ T5963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.146921][ T1416] head: ffff88802a3ca000 0000000000080007 00000001f5000000 ffff888026a8a381 [ 87.153852][ T1416] head: 00fff00000000003 ffffea0000a8f201 ffffffffffffffff 0000000000000000 [ 87.155789][ T5963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.155997][ T1416] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 87.160064][ T1416] page dumped because: kasan: bad access detected [ 87.161726][ T1416] page_owner tracks the page as allocated [ 87.163272][ T1416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5955, tgid 5955 (syz-executor), ts 48364865803, free_ts 48353607710 [ 87.168683][ T1416] post_alloc_hook+0x2d1/0x350 [ 87.169939][ T1416] get_page_from_freelist+0xfce/0x2f80 [ 87.171376][ T1416] __alloc_pages_noprof+0x223/0x25a0 [ 87.172762][ T1416] alloc_pages_mpol_noprof+0x2c9/0x610 [ 87.174133][ T1416] new_slab+0x2c9/0x410 [ 87.175179][ T1416] ___slab_alloc+0xdac/0x1870 [ 87.176378][ T1416] __slab_alloc.constprop.0+0x56/0xb0 [ 87.177724][ T1416] __kmalloc_node_noprof+0x2f0/0x510 [ 87.179052][ T1416] __kvmalloc_node_noprof+0xad/0x1a0 [ 87.180377][ T1416] alloc_fdtable+0xee/0x2b0 [ 87.181542][ T1416] dup_fd+0x83b/0xb90 [ 87.182581][ T1416] copy_process+0x25d3/0x8df0 [ 87.183767][ T1416] kernel_clone+0xfd/0x960 [ 87.184888][ T1416] __do_sys_clone+0xba/0x100 [ 87.186059][ T1416] do_syscall_64+0xcd/0x250 [ 87.187245][ T1416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.188810][ T1416] page last free pid 5371 tgid 5371 stack trace: [ 87.189075][ T5963] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 87.190439][ T1416] free_unref_page+0x661/0x1080 [ 87.190455][ T1416] qlist_free_all+0x4e/0x120 [ 87.190465][ T1416] kasan_quarantine_reduce+0x195/0x1e0 [ 87.190475][ T1416] __kasan_slab_alloc+0x69/0x90 [ 87.190485][ T1416] kmem_cache_alloc_noprof+0x226/0x3d0 [ 87.190496][ T1416] getname_flags.part.0+0x4c/0x550 [ 87.190509][ T1416] getname_flags+0x93/0xf0 [ 87.194561][ T5963] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 87.195522][ T1416] do_readlinkat+0xb5/0x390 [ 87.198240][ T5963] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 87.198661][ T1416] __x64_sys_readlink+0x78/0xc0 [ 87.204377][ T5963] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 87.204652][ T1416] do_syscall_64+0xcd/0x250 [ 87.206885][ T5963] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 87.208011][ T1416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.210330][ T5963] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 87.211511][ T1416] [ 87.211515][ T1416] Memory state around the buggy address: [ 87.219946][ T1416] ffff88802a3cd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.222025][ T1416] ffff88802a3cd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.224083][ T1416] >ffff88802a3cd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.226189][ T1416] ^ [ 87.227388][ T1416] ffff88802a3cd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.229451][ T1416] ffff88802a3cd580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.231521][ T1416] ================================================================== [ 87.236478][ T1416] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.238334][ T1416] CPU: 1 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 87.240914][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.243668][ T1416] Call Trace: [ 87.244575][ T1416] [ 87.245355][ T1416] dump_stack_lvl+0x3d/0x1f0 [ 87.246571][ T1416] panic+0x71d/0x800 [ 87.247610][ T1416] ? __pfx_panic+0x10/0x10 [ 87.248795][ T1416] ? check_panic_on_warn+0x1f/0xb0 [ 87.250132][ T1416] check_panic_on_warn+0xab/0xb0 [ 87.251440][ T1416] end_report+0x117/0x180 [ 87.252581][ T1416] kasan_report+0xe9/0x110 [ 87.253744][ T1416] ? handle_tx+0x5dc/0x630 [ 87.254920][ T1416] ? handle_tx+0x5dc/0x630 [ 87.256088][ T1416] handle_tx+0x5dc/0x630 [ 87.257204][ T1416] dev_hard_start_xmit+0x9a/0x7b0 [ 87.258452][ T1416] __dev_queue_xmit+0x7f0/0x43e0 [ 87.259740][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 87.261119][ T1416] ? __pfx___lock_acquire+0x10/0x10 [ 87.262467][ T1416] ? lock_acquire.part.0+0x11b/0x380 [ 87.263840][ T1416] ? find_held_lock+0x2d/0x110 [ 87.265097][ T1416] ? find_held_lock+0x2d/0x110 [ 87.266349][ T1416] tx+0xcc/0x190 [ 87.267292][ T1416] ? __pfx_tx+0x10/0x10 [ 87.268376][ T1416] kthread+0x1e7/0x3c0 [ 87.269439][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.270661][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 87.272180][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.273538][ T1416] ? __kthread_parkme+0x148/0x220 [ 87.274858][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.276064][ T1416] kthread+0x2c1/0x3a0 [ 87.277138][ T1416] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.278486][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.279691][ T1416] ret_from_fork+0x45/0x80 [ 87.280852][ T1416] ? __pfx_kthread+0x10/0x10 [ 87.282068][ T1416] ret_from_fork_asm+0x1a/0x30 [ 87.283324][ T1416] [ 87.284762][ T1416] Kernel Offset: disabled [ 87.285896][ T1416] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:06:41 Registers: info registers vcpu 0 CPU#0 RAX=00000000000e7c87 RBX=0000000000000000 RCX=ffffffff8b2fcbe9 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e4c0 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff9060c290 R15=0000000000000000 RIP=ffffffff8b2fdfcf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055be18086050 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 949212f31cc0f362 d9628ad76081a7f2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 938bf56254c0629b 939ad2db2cffe42c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bca6b570867297d4 0135a3cd8e6c235f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 abe381290151b13c 35639abc9b9e38a5 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b97c1d212e7aba2e 9b63c3f5104b0c92 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 83dc214a3b495d0f 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb4afb29fa422f95 c5fbe2ea9e502ecf ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3220fc3d00000000 3ffa0e58845ce054 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec16826d7655e93d 41ddfe8d2d8a244d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5879fce6b547c37b 5742be78ef8ac0a9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f6d6461737973 3a746f6f723d7478 65746e6f63732034 3239313d6f6e6900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7255676461737373 3074656572377472 6574646563732034 3233313765646300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030202063696e 656e65202d333030 202e303030303a20 3830303030303634 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e30302020000031 3d55632027303030 202e302030303020 3830303030303620 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e556f67637e647f 7855697e6f307855 7e696f606865307e 656578377e726f7e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a3a3a2a696378 6f646f6d276e6362 2a573233333f5e2a 51573b3a3a3b3c3e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85114245 RDI=ffffffff9ab43ba0 RBP=ffffffff9ab43b60 RSP=ffffc90006a5f498 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000005f R14=ffffffff851141e0 R15=0000000000000000 RIP=ffffffff8511426f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c44a0ae CR3=0000000030d28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f867d910d00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558d8affd9 000055558d8af4d0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000033343935 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0400038c030c0400 03880301e6020003 800312040002fc03 0a040002f803049b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000dc0030210 000db00301981000 1490030602000392 030c02000390030a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e4bde04c0808080 10000d8004010800 060144c40008000d e0030010000dd003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003a00300080003 9803000800039003 0008000388030008 0006100020100006 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100008808080 80808082be10000b 80040100000e0806 080135aa03800401 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3a6080004010b86 0000000000000000 0000000001ffffff ffffffffffe70803 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b80301080003b003 00080003a0030008 0003980300080003 9003000800038803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000610002010 00060e4bde04c080 808010000d800401 0800060144c40008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff96e88aa8 RBX=0000000000000000 RCX=ffffffff816a86fe RDX=fffffbfff2dd0d99 RSI=0000000000000008 RDI=ffffffff96e86cc0 RBP=0000000000000003 RSP=ffffc90004b0f338 R8 =0000000000000000 R9 =fffffbfff2dd0d98 R10=ffffffff96e86cc7 R11=0000000000000003 R12=0000000000000000 R13=ffff88802932c880 R14=0000000000000021 R15=ffff88802932d3d8 RIP=ffffffff816b2fcd RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8676e00210 CR3=0000000031e4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f867d8085c8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f867d910d00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000033343935 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558d8b3cb0 000055558d8a6e70 000000000000000b 0000000500000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558d8b5650 000055558d8a8080 0000000100000013 0000555500000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003950000000022 0000000000000000 00001822081a8003 1a80041590030608 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0015d00300000023 ff0415c000000000 15b80300080015b0 0303ffffffff0415 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000024 000001ff00000000 ffffffdf0815e003 00080015d8030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080017a000000000 1798032008001790 0303ffffffff0417 800303ff00000027 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 16f0030000000000 0300080016e00300 080016d803000800 16d0030300000026 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0416c00300000000 b80309a3080016b0 0303ffffffff0416 a003100800000025 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108001600000000 0016880300080016 8003000000000000 0000000000000024 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000000 RCX=000000000000004d RDX=00000000002c307d RSI=00007ffa6ce0eb20 RDI=00000000000000bf RBP=00007fffef91d0a8 RSP=00007fffef91cfa0 R8 =000000000000002c R9 =00007ffa6ce0eac0 R10=00000000000000bc R11=0000000000000003 R12=00000000000000bf R13=00007fffef91d108 R14=0000000000008000 R15=0000000000000000 RIP=00007ffa6cd07ebf RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffa6ce0ebd0 CR3=000000002c64c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006a00000006 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000006a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000