last executing test programs: 3m43.784496645s ago: executing program 3 (id=259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000010140)=ANY=[@ANYRES32], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ioperm(0x0, 0x6, 0x10000) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x94800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000880200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r4 = inotify_init() r5 = inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x10) inotify_rm_watch(r4, r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) 3m43.735061185s ago: executing program 3 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x0, r0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{}]}, 0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000500)={r5, 0x6, 0xc, 0x1ca, 0x2, 0x9}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000cc0)={{r2}, "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"}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x30, r8, 0x1, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000001000010000000002000000000000000a04000000120001"], 0x64}}, 0x4004000) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000003c0)={r10, r0, 0xf, 0x9a, &(0x7f0000000140)="72e87eae424f35176bf5fbc1e19facbd5c51158a970e88b90350a5f760aa6748044c12172edffddbd48918d43e4ac23b213fc27e026d20fff6e6414057f18c5dd8fe686a105e074832cf94d7cb31ee79b6407b092321cd3233a1ce6ae3e3529751f7ca9051b3509fa539dc5ce3ef175530534ec9937fceced4f9e0587ae8c6fdd2e2679750415f96dd7563c4355e2fb3d8b4cb6ebc3d4ed3dc1f", 0x7, 0x7, 0x4, 0x0, 0x40, 0x2, 0x6d, 'syz0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 3m43.57334486s ago: executing program 3 (id=263): r0 = syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000500000005"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvfrom(r2, 0x0, 0x0, 0x2020, 0x0, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)="110000", 0x4d}, 0x1, 0x0, 0x0, 0x4000081}, 0x4c0e4) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f00000002c0), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000400)={0x1, r5, r1}) 3m42.655124646s ago: executing program 3 (id=272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f, @void, @value}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008b93910ecdaf035515f7e2561834ef1e63af6b754a4274fd0c771e60", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)) (async) fcntl$lock(r3, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34, 0x5}) (async) fcntl$lock(r3, 0x6, &(0x7f0000000380)={0x2, 0x0, 0x101, 0x80000001}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) (rerun: 32) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) r4 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) execveat(r4, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) (async) mknodat$loop(r6, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m42.594652469s ago: executing program 3 (id=274): r0 = socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000005, 0x4031, 0xffffffffffffffff, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xfffffffffffffffe, 0x4001}, 0xc) bind$qrtr(r0, &(0x7f0000000100)={0x2a, 0x1}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x600881, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='i', 0x1}], 0x1}, 0x805) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3m42.245025217s ago: executing program 3 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) r4 = syz_io_uring_setup(0x1b75, &(0x7f0000007640)={0x0, 0x1fd}, &(0x7f00000076c0), &(0x7f0000007700)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r7, 0x500e, 0x0) (async) write$binfmt_script(r7, &(0x7f00000001c0)={'#! ', '', [], 0xa, "2076018a27b01988ebc49e10e32f8f1b1f84f83d776821315f2aaa6738d8ad5c2d16d73b358ead1bf3148e2cdc0159dd5c05f9473a3b8f074a74dbcbc84f0d1a211ae3958ea211eaec0f468c2128c5ffa18b3ecf"}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b9bd0300000f320f32980fc71f0f20058a19a2f4860000362e0f013766bad004b8e7000000ef36670f22c4", 0x2b}], 0x1, 0x18, 0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000680)={[{0x800, 0x7, 0x4, 0x2, 0x3, 0x8, 0x9, 0x6e, 0x4, 0xff, 0x19, 0xf7, 0x9}, {0x913, 0x0, 0xf, 0xd, 0x3, 0x6e, 0x6, 0x9, 0x1, 0xc0, 0xc9, 0x8, 0xc}, {0x2, 0xfeff, 0xd, 0x4, 0x1, 0x8, 0x9, 0x0, 0x1, 0x9, 0x40, 0x7, 0x7}], 0x2}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0xd40800000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8001, 0x1000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m42.197904082s ago: executing program 32 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) r4 = syz_io_uring_setup(0x1b75, &(0x7f0000007640)={0x0, 0x1fd}, &(0x7f00000076c0), &(0x7f0000007700)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r7, 0x500e, 0x0) (async) write$binfmt_script(r7, &(0x7f00000001c0)={'#! ', '', [], 0xa, "2076018a27b01988ebc49e10e32f8f1b1f84f83d776821315f2aaa6738d8ad5c2d16d73b358ead1bf3148e2cdc0159dd5c05f9473a3b8f074a74dbcbc84f0d1a211ae3958ea211eaec0f468c2128c5ffa18b3ecf"}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b9bd0300000f320f32980fc71f0f20058a19a2f4860000362e0f013766bad004b8e7000000ef36670f22c4", 0x2b}], 0x1, 0x18, 0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000680)={[{0x800, 0x7, 0x4, 0x2, 0x3, 0x8, 0x9, 0x6e, 0x4, 0xff, 0x19, 0xf7, 0x9}, {0x913, 0x0, 0xf, 0xd, 0x3, 0x6e, 0x6, 0x9, 0x1, 0xc0, 0xc9, 0x8, 0xc}, {0x2, 0xfeff, 0xd, 0x4, 0x1, 0x8, 0x9, 0x0, 0x1, 0x9, 0x40, 0x7, 0x7}], 0x2}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0xd40800000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8001, 0x1000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m19.704275442s ago: executing program 0 (id=611): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], 0x0, 0x0, 0x0, 0x0, 0x534}) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x84) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x2}, "28df"}}, 0x5) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x40, r8, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000000)=[0x0], 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000400)={0x202001, r9, r2}) 3m19.554046084s ago: executing program 0 (id=612): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) (async) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002380)=""/165, 0xa5}], 0x1, 0x3, 0x4) 3m19.553712174s ago: executing program 0 (id=613): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gretap0\x00'}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') statx(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x4000, 0x80, &(0x7f0000000600)) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@remote}]}, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff9, 0x4, 0x8}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "1a0b6e8c6211c9db"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x819}, 0x0) 3m19.484418848s ago: executing program 0 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) (async) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48deff00", @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000600650000000000"], 0x28}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) (async) move_mount(r4, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 3m19.422748633s ago: executing program 0 (id=620): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x4, 0x0, 0x800}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001c300000000050027"], 0x44}}, 0x0) 3m19.064847683s ago: executing program 0 (id=626): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) clock_settime(0x0, &(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001000000c000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 3m19.049202482s ago: executing program 33 (id=626): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) clock_settime(0x0, &(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001000000c000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 2m41.879802742s ago: executing program 5 (id=958): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYBLOB="0000000000000000280012800a000100767863616e00000018"], 0x48}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.592612102s ago: executing program 5 (id=962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000002580), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000002800)={0x6, 0x1, 0x0, "833461025a7802000000169916ea42230659496b79b29963084f401a544b75d0"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x40000, {0x7, 0x0, 0x0, r3, 0x10, 0x12}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x800, 0x8, 0x6, 0x1, 0x5, 0xfffffff8}) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0xfffffffe, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) listen(r0, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000000)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m41.273334712s ago: executing program 5 (id=964): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)="f8c21f4bc6399e4abef3caa95c18e756720b0e0d2ca0dfc6a7764ee163ed9b27210966662239d539b0b8979c58453bfe87a23b32e26a", 0x36}], 0x1) (async) r4 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) add_key$fscrypt_v1(0x0, &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "9d0761d830fc1791e9e8c728524965d70b50654753f61d087532f257f5f219ce5c30b584541d03f54901f037e01690bc36637c8b82cad21a71a9b02bcfe778d9"}, 0x48, 0x0) keyctl$clear(0x7, 0x0) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) (async) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80, 0xa3, 0x30}, 0x18) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x2a8, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xc}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x141, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x30}, @device_b, @device_a, @initial, {0x4, 0x5}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0xfffffffffffffffd, @random=0xda3e, 0xa0c0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x2, 0x1}, {0x9}, {0x36, 0x1}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x4, 0xe, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x7, 0xf9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x20}}, [{0xdd, 0xd9, "ef1f1a198a209299ac62ac22354f436609aa2dde0a4807a16162f639e9964faa84494f20d9fb9763a3652ed2a5f84535313fcb1503975f8899fc685692c589577e1a4fcd8144ea6aab7747f8f3a3e1358d335d8e951034cf29107a3610d2bf4ee67c252a7885af6aa0a0019d4e2a7857da8f16904f04a5f14c7c84c4ef93300fa9962895497a296e72c5a5e381bf53274eae3225f937fdd82fedcfe4209f33ceb8d7484f26360113c4da40ba50e7ec77b49b7957aace6afb595e134d711ba914c94385488b3dbe015e5eebebb88ef68cd208fdb87798e445c8"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2e6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x54}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x126, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x69}, @device_a, @broadcast, @initial, {0x9, 0x3}}, 0x2808, 0x6, @random=0x88, @val={0x1, 0x3, [{0x9}, {0x1}, {0x5}]}, @void, [{0xdd, 0x8f, "8ba288120848e49f0834bcfd2ae3fc8f2bbac82c0a55a20aa481ba9a8ac3f66b7688a116a8d620409df6367b1f1ca7a5aeba5dbe55b6474a46cca59867fc31f4c95576ef8b6c9968c906b1c5830f8f98d56dad8ac07c5a24305f8502963690683bfd3d52ade169db422b4dfea4f594b82b072beef987d9b906e10c90b6146def6c5be533325f40fbb61e71f2af48c0"}, {0xdd, 0x6c, "7210819579760bad0508aa3c8a9bdbef43de36abc3f1a82a0ecef277763f5a03cc222d2b0144950cb051c9e1e1fb7629c0d5d9ee37e834e23ab5c906dd6d7fdf9fe4f125d8128748f9914c1d910a0a63e56b17c8d1ecab9839d6bc6ab4957469c407c9591da71e441e735bc2"}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x4090) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d57aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c295122a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e720c9901de2ebb9000000018e3095c4c5c7a156cec37dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e8f0a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9fae997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfd0aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5ea3c88d5480efd8329d9a733d8f9ffffff5f91ae162745f6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bc39c1e91c000b85457917dcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a9c1f2dc7e8542422113285b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b4a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef3b398f0e6bb7a30006000000cba12953d58cff0f65fd31fbd9853fd57b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0091245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689df8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000040000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00122e812a5e37cd52c9eb7336281cb8c6c64c382680fdc8f7eeafce2e993c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710b20f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaaf56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9f30f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c67491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce169117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd803bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfc8c00000000000000afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb56923b0735ab60a539ade786bd6004d0ea3edbd6c49859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3030000000000000059f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee2838903b6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2caa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc131538c6cfc98a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d5b7b29a938f488be7eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cb00000000000000000000f4e1b774d0732ede6385923110ae01da6437a9b7a01b2d8c6afdcf15fd0040393ed3f2d3bf40285c414df6ddaab8e27b4c0028bd945d6e622017b2d96c978859fc2917951c5662b325f7fead9c68f9df5ef9f401a2127dc1d386022cdf8a786b02d0a7a74f7c7564e993772bacf42831528fa72bbb64cbe93d2ce0ff64ec7499e7d4c326d1497916ce58b283ff659db3ef576a74571a2bc325e87a72a3ed27a57efe5d6016193ea3d6c63fb777ca5aec649e977443cbe3603ebf1a3b1f705b6f576fe7a6bfa7f20036821615b808c442658d069434c8fb423dd1e5673b61f867e042172654f48c3aa8464e8f75f93b5660f6449b93a5957198ee5c258f04edd640b77f3a49b01230a2a863d4a8d69ebbd0cffbae7602956090f6681131b7ced5ac86f330282f1e3a435a915a790dd88e2220c7904457576c4e0942ccbd07f1cd9c04645ae4c77bcd2f95b263b7495bd56a99536092c1fc86b32d9e57d1d7627ec3390ffa7d4f229a071639f4d61bf0030b4f9ee0533d8c5ce2e06b98e859df68e9491b1a708c60baa367370b2cd91b56b537425ed74d811ff4e07f53abeb164a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r8, 0x4) (async) sendmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4000800) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$sock(r10, &(0x7f0000003000)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000240)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb}}}}]}, 0x40}}, 0x0) 2m41.144140424s ago: executing program 5 (id=965): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x5501, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x28011, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rpc\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000, 0x10e) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', r4, &(0x7f0000000140)='./file0\x00', 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000002000001000000100000fa6215e1c90fed90ac00000010a85f001a4b000000000000000580000000aaaaaabd0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) read$char_usb(r2, &(0x7f0000000000)=""/178, 0xb2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000180)=0x90000) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0\x00') 2m39.782963981s ago: executing program 5 (id=977): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0xe800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xe5, 0xff, 0x20}) close_range(r1, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(r0) 2m39.28418732s ago: executing program 5 (id=979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa6acf7427c100000000000000000000ff020000003c4b899e0000000000000173009078000000000c79ef1cfb698e35cb7c556097"], 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 2m39.220362064s ago: executing program 34 (id=979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa6acf7427c100000000000000000000ff020000003c4b899e0000000000000173009078000000000c79ef1cfb698e35cb7c556097"], 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 1m39.154143662s ago: executing program 2 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="03030000002a00f285e94e"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x198, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x16b, 0x2a, [@random={0x8, 0x8a, "a69b436df11f4cff2aa3b685ce55075908e54bf1e4bd12fcdba2d6264bcba838a0946171327e91782b015cddafee87e0f033aeedbb59e75273fa8c125d4037f444c8ee5c7e98e77ca0d636fdf30a584e87a5da518114b595aae92e04233912f3a19f021652e8c576bec19be4b9699d86ac5f631a60e77ca8b348e3cbe8008b4cce08b25eaba0a83774cb"}, @tim={0x5, 0x7, {0x0, 0xdb, 0x10, "3ac72b77"}}, @supported_rates={0x1, 0x6, [{0x60}, {0x12}, {0x4, 0x1}, {0x48, 0x1}, {0x3, 0x1}, {0x2, 0x1}]}, @tim={0x5, 0xbb, {0x6, 0x60, 0x48, "8e92749403f37b2f395d6883bdcd11d263465f0ba7f1dcfc9eb5eeb1230b9d2faf38b657a3d4d5ccff2da59edff27fd4a7468165139eeabe052f1d9bf72cf116727e8d9811bb31cf09e911862a3c0010c132b742b27074729782dc6488f5cd0fb2ef7651df851b64fc672e4fc85bfcac107da07a6a4d1d850bdaca70ded3748050584bf29cc728ad550266e3461c36cfa16e25ca444f844f2cb90d6e9caf3d51459aaff793f7389ed8edaafc320b408a8617632e44a3121b"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_id={0x72, 0x6}, @supported_rates]}]}, 0x198}, 0x1, 0x0, 0x0, 0x88004}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x94f6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1m38.995027406s ago: executing program 2 (id=1339): r0 = mq_open(&(0x7f0000000000)='$\x00', 0x40, 0x80, &(0x7f0000000040)={0x7, 0x4, 0x97, 0x7}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0xe, 0x3, 0x80000000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x6, 0x100000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) fcntl$getflags(r1, 0x3) (async) open_by_handle_at(r1, &(0x7f0000000140)=@reiserfs_5={0x14, 0x5, {0xfffffff9, 0x7, 0x7, 0x5, 0x7}}, 0x101000) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0xb7, 0x4, 0x9, 0x2}, {0xffff, 0x4, 0x7f, 0x8}, {0x4, 0x81, 0x7, 0x6}, {0x6, 0x3, 0x8, 0xbb0}, {0x0, 0x1, 0x4, 0x8}, {0xcc1a, 0x6, 0x4, 0x8000}, {0x40, 0x4, 0x0, 0x1000}]}, 0x10) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) (async) sendto$inet(r1, &(0x7f0000000240)="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", 0x1000, 0x4080, &(0x7f0000001240)={0x2, 0x4e21, @broadcast}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20020008}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x128, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004040) mount$nfs(&(0x7f00000014c0)='netdevsim', &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x20000, &(0x7f0000001580)={[{'$\x00'}, {'-$({.#$'}, {')/&'}, {'$\\#'}, {'netdevsim\x00'}, {}, {']'}, {'\x00'}, {'pci\x00'}]}) (async) ftruncate(r0, 0x3b57) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f00000015c0)) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001600), 0x1, 0x0) sendfile(r3, r1, &(0x7f0000001640)=0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x12c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x160}]}]}, 0x12c}}, 0x40010) (async) close(r3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000001880)={0x3, [[0x6, 0x7f4, 0xffffa5c1, 0xffffffff, 0x9, 0x2, 0xfffffff8, 0x100], [0x400, 0x4, 0xb, 0x7ff, 0x174, 0x5, 0x8, 0x3ec], [0x3, 0xe, 0x74, 0xf03, 0xfffffbff, 0x10000, 0xb, 0x6]], '\x00', [{0x800, 0x48b, 0x1, 0x1, 0x1}, {0x80200000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xa, 0x1, 0x0, 0x0, 0x1}, {0xffff, 0x32916deb, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xffffffff, 0x1, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x8, 0x1, 0x0, 0x1}, {0xff, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x5, 0x0, 0x1}, {0x2, 0xe3, 0x0, 0x1}], '\x00', 0x9c}) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000001b00)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r5 = socket$pptp(0x18, 0x1, 0x2) lseek(r5, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x38, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x713f6fe73943a269}, 0x40041) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001c80), 0x4) 1m38.872536114s ago: executing program 2 (id=1340): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x14003, 0x0) close_range(r0, r1, 0x2) syz_io_uring_setup(0x674d, &(0x7f0000000080)={0x0, 0x82a9, 0x1000, 0x1, 0x1da, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r3}}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000200)="64ded5d5187099225bbdedcf6318dbd0bf2f09d4c6aabb5a5a5106325d77eb231533bfe895a885c8aa874fcbb3242f833c37a50bfc329b8e40bba52d69ea2d949b4ae76387a187c7", 0x0, 0x48) r4 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000002c0)={0xb4, 0xcf2, 0x1}, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x228002, 0x102) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x2, @remote, 0x9}}, [0x3, 0x4, 0x80000000, 0x9, 0x9, 0x6, 0x8, 0x8, 0x40, 0x2, 0x0, 0x4b87afc8, 0x80000000, 0x78d, 0x9]}, &(0x7f0000000440)=0x100) r6 = accept4$ax25(r0, &(0x7f00000008c0)={{0x3, @netrom}, [@null, @null, @default, @rose, @default, @remote, @default, @netrom]}, &(0x7f0000000940)=0x48, 0x800) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000a80)=0xe8) sendmsg$unix(r5, &(0x7f0000000b40)={&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)="35ccf344f4a007c259925a7b6c3c5d883c94048a4614d73cd2a3ecd886e200e81e6ce25dc01e8bfd60b6a022a7de3baf3a6347c179eab6a245b93d9618043f9752ea0775f717366db26839807d772e8c3c6d7f26aa7b2cbdf9fb796d3409b18ef81204e49c4efc7caf9597239019893423ac1eb7f336afcbb51ee57230a96178b2364bd1883e20d20e1097f17bf3999351b74a699eaa", 0x96}, {&(0x7f00000005c0)="3e7ac511e35325a6303e51172c8a29cb8b8b25b2b38efb24e218e08e24df73f25ae21f272628ca63d9fa1ef5e27d", 0x2e}, {&(0x7f0000000600)="8199487d9c3a95a65da878e78f82b3a1df21edf8c66bd04d111e203e2922d7ad40f8e18175a4f1505242fcf67dd11738897acc459a2a85ac2da7c0bb306bfa6b2e28ffee4d7b9c0b18fc2c3e7e3a0cbe019bcf3068df9a1ae4dc28f0b2a3b8b77b7b1399c3ea87cc07675d9c480be94e351651476944461226652658c08cbbb55360f1d6f20efa6bc5d73526210a345c2493dbcf7e61e9b358a33cde3a1453a2804218bc587c421d428820d4f407", 0xae}, {&(0x7f00000006c0)="26644bbfb79e0ddab3523e1e125356a5ac180b99caffa78ae9611894b1eddf8a177a6f052813adfec57c27121f083f1eb2", 0x31}, {&(0x7f0000000700)="45e79e7cba12", 0x6}, {&(0x7f0000000740)="21151f5b67cc47e365fe2a5c8252f2a4813523d94eec5af728fafb257fb0e3bdf965166d0b4ace8d36bb6f5d46a198d0b793a4f396da685744cbb14cae6275aa8578c2cb72fe6c0937f8b4536d08ac347de985b899386d5ad33a2b638423cf1b46985768f8f7b07b346845abb9321b1832b150afdf9480507ae4dcbf92c1b787783772e57243e1d3a867721fac163e3fd33b60d204f15d46424e915abe053d99fd0990b0c3876c27dbeeb0ba773ce97b9d8ed790d03858bbf5ee3e9eb7131a0cb83f7a072418a577e9257b02a7abd154be1a04d9059ffbfa1ae6cf", 0xdb}], 0x6, &(0x7f0000000ac0)=[@rights={{0x38, 0x1, 0x1, [r1, r4, r0, r6, r4, r7, r4, r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x70, 0x80}, 0x81) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r10, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x1) pread64(r7, &(0x7f0000000cc0)=""/253, 0xfd, 0x7fffffffffffffff) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000ec0)={0x6, 0x1, &(0x7f0000000dc0)=[0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40), &(0x7f0000000e80)=[0x0, 0x0]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r10, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001000)) write$fb(0xffffffffffffffff, &(0x7f0000001040)="e509b8d05d942a874f8b3772799ea40f140fa8a78a4e093b418993d8b29a5c2846f12f0b36192dd082baab94b61039eede2f8bf604c534477eb4268f9e9c0afbe9f792a4a9d0b56601cb418d0835558e919d3f497bcf8b7331c8ffd4338dee24a187757728a3e8ddb58c709d979d1b4ebe51d4e2317a", 0x76) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x3) syz_io_uring_setup(0x6e17, &(0x7f00000010c0)={0x0, 0xddec, 0x400, 0xfffffff7, 0x318, 0x0, r5}, &(0x7f0000001140), &(0x7f0000001180)=0x0) syz_io_uring_submit(r2, r13, &(0x7f00000011c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xfffff191, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r3}}) fdatasync(r12) 1m38.685626684s ago: executing program 2 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000080, 0x0) chdir(&(0x7f0000000500)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007f8040000f0ffffffb70300000800000018ed419655bbe6ad7800"/92, @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/219, 0xe078}], 0x1}}], 0x2, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) recvmsg(r9, 0x0, 0x0) 1m37.736066074s ago: executing program 2 (id=1347): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x45000, &(0x7f0000000300)={[], [], 0x2f}) syz_create_resource$binfmt(&(0x7f0000000000)='./file0/../file0\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="edae00000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000038005080110001004abee339084eeef16f162471f40000000d0004005b073a8a2d20202e0a00000005000200000000000800030009ac0f"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r3, 0x5, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x5e0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}, @qdisc_kind_options=@q_blackhole={0xe}, @qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x8}, @TCA_CAKE_FWMARK={0x0, 0x12, 0x55e}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_MPU={0x8, 0xe, 0xef}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0xd9f, 0x3, 0x5, 0x3000000, 0x0, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x6, 0x6, 0x7, 0x7fff, 0x2, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0x8000, 0x1]}}, {{0x1c, 0x1, {0xd, 0x6, 0x2, 0x9e, 0x2, 0x2, 0x1, 0x7}}, {0x12, 0x2, [0x4, 0x4, 0x7f, 0x0, 0x2, 0x7ff, 0x3]}}, {{0x1c, 0x1, {0x9, 0x3, 0x8000, 0x6, 0x2, 0x6, 0x1000, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1f, 0x5e, 0x5, 0x7, 0x0, 0x7fff, 0x10000, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0xfffe, 0xb6]}}, {{0x1c, 0x1, {0xd, 0x6, 0x5, 0x7, 0x2, 0x7fffffff, 0x2, 0x4}}, {0xc, 0x2, [0x6, 0x9, 0x0, 0x4997]}}, {{0x1c, 0x1, {0x9, 0x2, 0x4, 0x8, 0x0, 0x0, 0x3, 0x3}}, {0x45, 0x2, [0x9, 0x7, 0x8]}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x5e0}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x370a0, 0x0) 1m37.070161578s ago: executing program 2 (id=1352): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 1m37.070012389s ago: executing program 35 (id=1352): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 1m2.054717227s ago: executing program 6 (id=1508): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x120, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x21}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffff3a}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87fc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x33d3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffe}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x400c085}, 0x4c001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r7, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x40, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x1, 0x4, 0x2, 0x4, 0xa, 0x24, 0x6, 0x60]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x0, 0x8, 0x6, 0x5, 0x4, 0xd, 0x2, 0xd7]}}, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x2}, @NL80211_TXRATE_GI, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x1}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x3, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0xa}, {0x6}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x2}, {}, {0x1, 0x6}, {0x6}]}]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x60, 0x48, 0x5, 0x60, 0x3, 0x30, 0x3, 0x3, 0x6c, 0x4b, 0x24, 0x16, 0xc, 0x36, 0x48, 0xc, 0x18, 0xc, 0x47, 0x1b, 0x62]}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}, @NL80211_TXRATE_GI={0x0, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x4, 0x0, 0x0, 0x9, 0x1, 0x6, 0x0, 0x722]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x4, 0x406, 0x9, 0x4, 0x5, 0x1, 0x0, 0x43]}}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x3, 0xf000, 0x4, 0x4, 0x6, 0x1, 0x2, 0xa316]}}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x4, 0xa9d, 0x1, 0x6e1, 0xff, 0x754, 0x0, 0x401]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0xff8, 0x1, 0x2a1, 0x6, 0x2, 0x3, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x0, 0xc, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88088000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000400)="2665f3440f09652e0f019a000000000f20c035040000000fbc82c044240082000000c744240208000000ff1c24b8010000000fd9c10f00d06467440fc7be01000000c401925ec5f20f1b3166baf80cb8a0c3c182ef66bafc0cedc7442400e2000000c74424020c000000c7442406000000000f011424", 0x76}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10000, 0xc, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 1m1.654334862s ago: executing program 6 (id=1511): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x1}) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x5, 0x80000001, 0xe) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @val={0xc, 0x99, {0xfffffffc, 0x13}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x404c010) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6}) socket$inet(0x2, 0xa, 0x338) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x44c, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3516, 0x46}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_IE={0x8b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @fast_bss_trans={0x37, 0x79, {0x8, 0x1, "9d4996a7022f38b294a5c03cb0ce1684", "a4b52c65ba24929599650d448f8cac535c75babe4a3ed2735d04139a343948a5", "00594c0e5a8fa5303e1dcf9c4be25b2549919b528b9d6ac3ceca80a53984a023", [{0x1, 0x25, "df909afd0ddb91208f470f38570aba55103ab1688e5386ccd0bb77cf8f715d7d937d497f82"}]}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb}, @NL80211_ATTR_IE={0x2c5, 0x2a, [@perr={0x84, 0x123, {0x3, 0x13, [{{0x0, 0x1}, @device_a, 0x7f, @value=@broadcast, 0x7}, {{}, @device_a, 0x1, @void, 0x7}, {{}, @device_a, 0x9, @void, 0x31}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x22}, {{}, @device_a, 0x8, @void, 0x7}, {{}, @broadcast, 0x8, @void, 0x19}, {{}, @device_b, 0x4, @void, 0x3a}, {{}, @broadcast, 0x4, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x3d}, {{}, @device_b, 0x401, @void, 0x24}, {{}, @device_b, 0x7c, @void, 0x1a}, {{}, @broadcast, 0x8, @void, 0x18}, {{0x0, 0x1}, @device_b, 0x80b, @value, 0x2a}, {{0x0, 0x1}, @broadcast, 0x11d, @value=@device_b, 0x3}, {{}, @device_a, 0x6, @void, 0x36}, {{0x0, 0x1}, @device_b, 0x90, @value, 0x13}, {{}, @device_a, 0x81, @void, 0x23}, {{}, @device_b, 0x5, @void, 0x40}, {{0x0, 0x1}, @device_b, 0xd, @value=@broadcast, 0x14}]}}, @random_vendor={0xdd, 0xaa, "1091e608a43e7c509133166cf7ae7924accaf3137644d548cd259db040742343a58ac3cf196b979c002df739346f3753244f68e907f3e068ec5ba3c7734b1281656ea62c717b7a08c8d0d3ae7cde2c11016a2ee08dc91e17e30439234263de8efa5015fe859025f73309062e4ede753c86761372ef807451c11d55ba35c53ba591fb7d4b5a97a5388ff94ac765b42e33965d2729ffdbbdd20ef25d8b4f9e0e57e1a5cb05cd137b398353"}, @dsss={0x3, 0x1, 0xa1}, @random_vendor={0xdd, 0xd3, "7f1555008e3f5bce9ab3dbd01e60c42452b8678f7e585f3334e29391d822e8d936245a4314448d5b99b2646652b87fdb55429e077f01ed9fdba22013e6d2f939ef4331a18041ce1bfe6ba3807341ee074a442f3ca66d2f644a879f15ae9bade92338839992ee5afcd0d0a9b3146f647b04697d31cdf9a80d480500cf25e11ee94784f3a4d6b0be07a861bfad4c719d631a21f92b2458501e413b6171a89a113387cd42cfec4c2d78079656d79a43c0cd924408d2f79b32f5123335e7d5043f01c69eb23d5c1e04907ee8fc4c759e8ef3e2e6af"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @challenge={0x10, 0x1, 0x3b}, @gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0x3a}, @supported_rates={0x1, 0x5, [{0x9, 0x1}, {0x3}, {0x5}, {0xc}, {0x18, 0x1}]}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_IE={0xa6, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @dsss={0x3, 0x1, 0xb}, @random_vendor={0xdd, 0x77, "b54cdbff9b0693cfbb57b566c073727ef3f2c3956a2e4b3ae79733f98a42836cbd723434150dd256800bd050a10a3e54fae7ca3453b71accf11802365e3bd4994b27f8e2aa4573c710ea93fd4f582b86aab56b14629a40584f1f78d80ef4e14bf4c467fdb6701347ada7f5ef813a811ad7c64a93612062"}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @supported_rates={0x1, 0x8, [{0xb, 0x1}, {0x4}, {0x9, 0x1}, {0x0, 0x1}, {0x6}, {}, {0xc, 0x1}, {}]}, @channel_switch={0x25, 0x3, {0x1, 0x24, 0x8}}]}]}, 0x44c}}, 0x80) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000780)={0x1}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000007c0)=0x2, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000800), &(0x7f0000000840)=0x4) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000880)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000008c0)=0x10, 0x80000) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000900)={0x8, 0x9}) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000940), 0xa20241, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000980)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_clone3(&(0x7f0000000d40)={0x63003900, &(0x7f0000000b00), &(0x7f0000000b40)=0x0, &(0x7f0000000b80), {0x23}, &(0x7f0000000bc0)=""/85, 0x55, &(0x7f0000000c40)=""/159, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1, {r8}}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000e00)={{0x7, 0x0, 0x9, 0xf, 'syz0\x00', 0x8000}, 0x5, 0x200, 0x4, r10, 0x5, 0x5, 'syz1\x00', &(0x7f0000000dc0)=['^-\x00', '/dev/ndctl0\x00', '/dev/ndctl0\x00', '@^\'[}%)#\x00', '+{-\\-@[*$-\x00'], 0x2f}) pipe(&(0x7f0000000f40)) mlock2(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write$UHID_CREATE(r8, &(0x7f0000001080)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000f80)=""/221, 0xdd, 0x9, 0x5, 0x4, 0x2, 0x9bf0}}, 0x120) 1m1.486275542s ago: executing program 6 (id=1512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000340)={&(0x7f0000000300), 0x0, 0x54}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000000), &(0x7f0000002e40)=""/4086, 0xff6}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x24ff, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6}) io_uring_enter(r7, 0x5c26, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) nanosleep(0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x32}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x2}) 1m1.314874183s ago: executing program 6 (id=1513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x2, 0x3, 0x20000000000000, 0x800003fffffffff3, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000180)={0x1, 0x0, 0x9, 0x4}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) bind$qrtr(r6, &(0x7f0000000d40)={0x2a, 0x1, 0x4001}, 0xc) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m0.928420922s ago: executing program 6 (id=1515): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r2}, './file0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x2, 0x2) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m0.681189995s ago: executing program 6 (id=1516): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140), 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x10, 0x2}, 0x10) write(r1, &(0x7f0000001fc0)="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", 0xfc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140), 0x4) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x10, 0x2}, 0x10) (async) write(r1, &(0x7f0000001fc0)="fc0000001a000708ab092504090007000aab0700a90100001d60369321000100fe800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026eab4a5780763f072778e82b712e9c060000000140000270400117c22ebc205214a00000000008934d07302ade01720d7d5b3c91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2c2d6a2c82374f6aa2bd9f92ff0ea1ffe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05", 0xfc) (async) 57.10082457s ago: executing program 4 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) dup(r0) (async) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c0001000000c8f405000000000000000afafed301000f83a1d6615ba90d4b249fab66a0220000000006ffffea0d6f0735e25609afd0fb06624a96568ddc7294b816d3b2299b4e7e62be62a6a537ea5e0c7261016fb1cdf611846213bf51d5185c41a2a51ff11a10b857f24bbfad8a01ee1091823daaeaeb6833140a48a712d8dee4ab", @ANYRES32=r5, @ANYBLOB="4000a2000a000200ffffffffffff00000600050001000000"], 0x30}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 49.055072432s ago: executing program 4 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) dup(r0) (async) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c0001000000c8f405000000000000000afafed301000f83a1d6615ba90d4b249fab66a0220000000006ffffea0d6f0735e25609afd0fb06624a96568ddc7294b816d3b2299b4e7e62be62a6a537ea5e0c7261016fb1cdf611846213bf51d5185c41a2a51ff11a10b857f24bbfad8a01ee1091823daaeaeb6833140a48a712d8dee4ab", @ANYRES32=r5, @ANYBLOB="4000a2000a000200ffffffffffff00000600050001000000"], 0x30}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 45.512534003s ago: executing program 36 (id=1516): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140), 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x10, 0x2}, 0x10) write(r1, &(0x7f0000001fc0)="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", 0xfc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140), 0x4) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x10, 0x2}, 0x10) (async) write(r1, &(0x7f0000001fc0)="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", 0xfc) (async) 38.382261779s ago: executing program 4 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) dup(r0) (async) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c0001000000c8f405000000000000000afafed301000f83a1d6615ba90d4b249fab66a0220000000006ffffea0d6f0735e25609afd0fb06624a96568ddc7294b816d3b2299b4e7e62be62a6a537ea5e0c7261016fb1cdf611846213bf51d5185c41a2a51ff11a10b857f24bbfad8a01ee1091823daaeaeb6833140a48a712d8dee4ab", @ANYRES32=r5, @ANYBLOB="4000a2000a000200ffffffffffff00000600050001000000"], 0x30}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 28.387418376s ago: executing program 4 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) dup(r0) (async) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c0001000000c8f405000000000000000afafed301000f83a1d6615ba90d4b249fab66a0220000000006ffffea0d6f0735e25609afd0fb06624a96568ddc7294b816d3b2299b4e7e62be62a6a537ea5e0c7261016fb1cdf611846213bf51d5185c41a2a51ff11a10b857f24bbfad8a01ee1091823daaeaeb6833140a48a712d8dee4ab", @ANYRES32=r5, @ANYBLOB="4000a2000a000200ffffffffffff00000600050001000000"], 0x30}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 17.948834144s ago: executing program 4 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) dup(r0) (async) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c0001000000c8f405000000000000000afafed301000f83a1d6615ba90d4b249fab66a0220000000006ffffea0d6f0735e25609afd0fb06624a96568ddc7294b816d3b2299b4e7e62be62a6a537ea5e0c7261016fb1cdf611846213bf51d5185c41a2a51ff11a10b857f24bbfad8a01ee1091823daaeaeb6833140a48a712d8dee4ab", @ANYRES32=r5, @ANYBLOB="4000a2000a000200ffffffffffff00000600050001000000"], 0x30}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 7.404384908s ago: executing program 4 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) dup(r0) (async) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c0001000000c8f405000000000000000afafed301000f83a1d6615ba90d4b249fab66a0220000000006ffffea0d6f0735e25609afd0fb06624a96568ddc7294b816d3b2299b4e7e62be62a6a537ea5e0c7261016fb1cdf611846213bf51d5185c41a2a51ff11a10b857f24bbfad8a01ee1091823daaeaeb6833140a48a712d8dee4ab", @ANYRES32=r5, @ANYBLOB="4000a2000a000200ffffffffffff00000600050001000000"], 0x30}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)) 4.081173107s ago: executing program 8 (id=1762): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r3}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 3.724423456s ago: executing program 8 (id=1764): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000001d00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000080de0200"/28], 0x48) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0x1b, 0x8f, &(0x7f0000000a40)="84194fe959b581955b3416623d648eda26bdbec7f4ad5dbbf8e80e", &(0x7f0000000a80)=""/143, 0xfffffff9, 0x0, 0x5, 0x52, &(0x7f0000000b40)="2980289eb1", &(0x7f0000000b80)="784ea92e1ad7c2cb0b34ee1a3db7b4e5dd645d1a9ff20b84ea5f231851b8e6c9dce782f652216acd1332748c51ec76567c68de79277d24b8894315e9d70492074b7ea88ef1eca984fa5a9255d94343b59d8a", 0x6, 0x0, 0xd}, 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000140)={0x15}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1b309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r5 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1e000000070000000700000000070400519d34221c008984de475648b111eeecb98e5f170dafe1f71400f56e7a4b504f9bf3be0663037170e12061cb34f207efd3c0", @ANYRES32=r2, @ANYBLOB="0500"/20, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0300000012000000000000000c00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x230, 0x738, 0x438, 0x738, 0x438, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}]}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff2d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) io_uring_enter(r2, 0x2c0a, 0xd3b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) socket$kcm(0x11, 0xa, 0x300) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000700000000000000000095", @ANYBLOB="4ffdfa194a6cbadbed507da7c3f572792bb368546382cd2926800b4bd90b5c8afa7d427f45ecc6ff4d5c0a7df06b8aae7e109c34efd6dd220d2beacdd993d6b6ba0dd310895946b400fabe0f0e3233e6234ff42d332ed2dbdaa50aa9be0d6d51e7b6aa330c2e2e73817fd535c7f40f2e16e09128ecdc035c24bc500740cf703108a4a20d205e4a0536f011583fb1c6f98314c45c", @ANYRES16=r7, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r9}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r10}, 0x10) socket$kcm(0x10, 0x3, 0x10) 2.056451402s ago: executing program 7 (id=1775): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040810) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) write$nci(r1, &(0x7f0000000100)=ANY=[], 0x4) pwritev2(r1, &(0x7f0000000740)=[{&(0x7f0000000180)="9a12b73a1b40e71428efe72ecc7eff8407de4a594c0046f531e0ca4727f6a4b6bd3f8de27950549b6c1cecd238b492", 0xe}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.95240048s ago: executing program 8 (id=1776): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000ffdbdf2502000000000000000700000008000e375ac89c5bb354fa8e42db6ccac9eb7fe191ecca378d145333e63c8be2096fe7496cffda5ecb5373d282d691b7443a2f53e95cae6a9626870cf734f145e124c09b58d3062bf091b56294515aaa4dcd8c8f416291f42b6eb33f7244e3fd9a49d1d003165fe366abb8bc5e49"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ed4d00000000000000003100002008000300", @ANYRES32=r5, @ANYBLOB="0c009900040000000400000008005200", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYRESDEC=0x0], 0x2e) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0fb3162f00760c66360f09ded926f36df30f7fed66b9630300000f320f01c90fc75e00ba430066b84b00000066ef", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0000000000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1808000000000000000000ca0000000000851000000600000018100000", @ANYRES32=r12, @ANYBLOB="0000000000000000790000000000000018000000000000000000000000000000950000000000000005000000000000009500000000000000f9e3d2fb113f53c361c3543f7b67d987480a053481c2c608d406cdeec27156b8d8a304b5632dc50faf46fc7e7d67f830178cf5478f1aba0799450e38e040300200000000000000bec422c2cc5e56be4599b03ba228fe302239966a8910c72235507355f460e1148a8521ade6ce0379a5643fc8f66dd138a02c5418352bcf6694070a1c9aa56c457cb4f97be7a2c0f6ac7e8b3e7e422c0580904e0d657a2f47310d291ea2171daf6c734fa2cf7ec5599cf24cbc1cb463ee40aaf1de8262c1dd3eccd7406fa25fed928e835fb105c7f3925a2afa9eb3283fef94aa33078da4d1e921e54da61ce3e26a"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000600)=""/238, 0x41100, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1.744645879s ago: executing program 7 (id=1777): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0xbff, 0x4, 0x900, 0x9, 0x41d00000, r1}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}}, 0x0) 1.485877589s ago: executing program 7 (id=1778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x80003f68, &(0x7f0000000400)={0x0, 0x36d9, 0x8, 0x7, 0x4396}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$bt_hci(r8, 0x84, 0x76, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x100f) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001040)={0x0, 0x54, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1d8}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r11, 0x402, 0x80000003) fcntl$notify(r10, 0x402, 0x0) socket$unix(0x1, 0x2, 0x0) 1.044306379s ago: executing program 1 (id=1779): mkdir(&(0x7f0000000000)='./file1/file0\x00', 0x118) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xcdeb848458121b71, 0x0, 0x7}}, 0x50) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES16]) 1.04341445s ago: executing program 7 (id=1780): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xfffd}], 0x1) semop(r0, &(0x7f0000000180)=[{}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x3]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x40, 0x7}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa000000e00000011100907800"/42], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x800}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x5}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) 846.058209ms ago: executing program 8 (id=1781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x4}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x44}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x822000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4890}, 0x20000000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'vlan1\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}}) 843.719291ms ago: executing program 1 (id=1782): memfd_create(&(0x7f0000000180)='\'t\x92\x19\xaf\x7f\xe6\xacv\xb3\xa0\x8a?`@{\xf1\xa5T\xe5\xa2\x058Sv\x03\x906\x02\xf9\x03{\xe46\x1e+~\xdex\xa8\x87t<\"B\x8e\'\x05\xeb\xe6\aU\xd8\x1a$\xe2\':\x9f\x01\x85\xcfq\xe6\x04\x81\xa3N\x0f\xb4\x8fc\xbea\x19\x17\xd5\x04\x81\xd2\xde\x1c@\x88\xfd\xa5\xea6Ys\x80\x9a(U\xa2\x17;?7\x0e\x87&\xb0\x9b+\xa3nS\xba\xb3\xa7;\x1at\x9fSCC\x9f\x11[\xb9\xf9T\xb5\xe2\x11\xe9\xef\x10z\x1b,%\xcd\x87\x0f(j\xf8\x1fo\xda\xe6\xea\x04\x05\xc8P\xcd\xba\xb0\x93Sr\xaa\xf4\b%\xf3\xfd\xf5/6n\xa1&]\x88\xbb\x17\x82\xfd\x87\xc1\x14\xde\x83\x9dK\x80\xd3?-F[\xb8\x84\x9e]`\b\x90<\xfa\x13\x06\xc0\xe4\xc1\xcbQy\x95\x02q\xbf\xe3\x03\xe9\xd4\xfa\x85l\x80\xcbq\x9fc4\xeb\x06\x1f\x1b\xb1V]\xf9\xbc\x9b\xceQW#)p\x17/\x81\x96\xb4\xfa\xc4\xc2\xa2\xef\xca\xba\x98+\xd1g\xf5\xadX+\xe0+a\x9f}\x8f\xdc\x92j\x16\x11\xc7\x95$J\x00\x00\x00\x00', 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[], 0x1a3) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r1, 0x8, 0x4) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f00000007c0)=""/77, 0x4d}, {&(0x7f0000000840)=""/81, 0x51}], 0x9) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x694300) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948000000a1a93c5240f45f819e01177d1afa8011992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 644.95179ms ago: executing program 1 (id=1783): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) (rerun: 32) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x8, 0x6}, 0xff, {0x2, 0x1f}, 0x3, 0x0, 0x3}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x4, 0xff}, {0x4, 0x10}, 0x9, 0x2, 0xc}) 612.657124ms ago: executing program 8 (id=1784): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x3c, &(0x7f0000000100)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x6, @empty, 0xffffff54}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={r4, 0xf}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001c300000000050027"], 0x44}}, 0x0) 463.844673ms ago: executing program 1 (id=1785): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000040)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000000)="30800201", 0x4, r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000007c00)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) bind$ax25(r5, &(0x7f0000000000)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @default]}, 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x18) setresuid(0xee01, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)='ufs\x00', 0x0, &(0x7f0000000300)=']\xb7\x97qua') chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee01) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000000040)=0x1, 0xfffffffffffffe61) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="3bf05c4f5989a5ae6f73dafb784912dcd80003c494597b8fa3e7cc62eb29c21e2054c503057c4a4963c6061a09", 0x2d}], 0x1}}], 0x1, 0x4008841) mkdir(0xffffffffffffffff, 0x0) sendto$inet(r6, &(0x7f0000000240)="7f9809", 0x3, 0x8015, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="09032dbd7000fcdbdf250f00000096bd49144ee0e9273c5d11cd941849d74c21f59dd35f483cbdbef1a7d2e65d000000000000"], 0x14}}, 0x40) 461.973872ms ago: executing program 8 (id=1786): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 461.796382ms ago: executing program 7 (id=1787): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c002632", @ANYRES16=r0, @ANYBLOB="6d9327bd7000fcdbdf250100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x95d, 0x0, 0x0, 0x2b}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f00de9a00202b006766c7442400ffac00006766c7442402cb6d67ef6766c744240600000000670f011424baf80c66b8bcdfcc8b66efbafc0c66ed64672ef2ae64660f382b78720f20d86635200000000f22d866b9800000c00f326635008000000f300f07666726f2f2df5800"}], 0x1, 0x9, 0x0, 0x4b) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000040)=0x3b) 265.201502ms ago: executing program 1 (id=1788): r0 = gettid() pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x0, 0x0) r4 = dup(r2) fanotify_mark(r3, 0x1, 0x3, r4, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x560d, 0x10000000000004) writev(r2, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="e5df8670", 0x4}], 0x1) pause() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) tkill(r0, 0x7) 471.252µs ago: executing program 7 (id=1789): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003"], 0x54}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r2, 0x8924, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x40, 0xf2}, 'port1\x00', 0x0, 0x440, 0xa, 0x2, 0x76, 0xf, 0xa, 0x0, 0x6, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) r4 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001580)=""/4110, 0x80000001, 0xfffffffffffffefd}, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, &(0x7f0000000d00)=ANY=[], 0x218}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) pipe(0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, r7, 0x0) mount_setattr(r7, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) waitid$P_PIDFD(0x3, r7, 0x0, 0x40000000, &(0x7f0000000480)) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000180)={0x4, 0x2, 0x7fe, r6, 0x0, &(0x7f0000000140)={0x990a6b, 0x4, '\x00', @value=0x9}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000280)={0x1, 0x0, 0x101, 0x0, {0xb, 0x8, 0x2cb, 0x6}}) 0s ago: executing program 1 (id=1790): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x6d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@private0}, &(0x7f0000000140)=0x14) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) kernel console output (not intermixed with test programs): ss `syz.6.1508'. [ 216.120989][T11691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.132210][T11691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.140778][T11691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.147145][T11691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.326683][T11691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.360180][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.369697][ T5946] Bluetooth: hci1: command tx timeout [ 216.373871][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.375856][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.398084][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.400142][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.429255][T11751] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 217.591437][T11771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=11771 comm=syz.7.1517 [ 217.621072][ T39] kauditd_printk_skb: 668 callbacks suppressed [ 217.621083][ T39] audit: type=1400 audit(1732629345.005:15557): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 217.636194][ T39] audit: type=1400 audit(1732629345.005:15558): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.651181][ T39] audit: type=1400 audit(1732629345.015:15559): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.682531][ T39] audit: type=1400 audit(1732629345.015:15560): avc: denied { append open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.709776][ T39] audit: type=1400 audit(1732629345.015:15561): avc: denied { getattr } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.715861][ T39] audit: type=1400 audit(1732629345.035:15562): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 217.726497][ T39] audit: type=1400 audit(1732629345.045:15563): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.758479][ T39] audit: type=1400 audit(1732629345.045:15564): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.764783][ T39] audit: type=1400 audit(1732629345.045:15565): avc: denied { append open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.781330][ T39] audit: type=1400 audit(1732629345.055:15566): avc: denied { getattr } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.866205][T11691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.461949][ T5946] Bluetooth: hci1: command tx timeout [ 218.533707][T11772] udevd[11772]: setting mode of /dev/gsmtty62 to 020600 failed: No such file or directory [ 218.538092][T11772] udevd[11772]: setting owner of /dev/gsmtty62 to uid=0, gid=0 failed: No such file or directory [ 219.906543][T11691] veth0_vlan: entered promiscuous mode [ 219.928761][T11691] veth1_vlan: entered promiscuous mode [ 219.997246][T11691] veth0_macvtap: entered promiscuous mode [ 220.006100][T11691] veth1_macvtap: entered promiscuous mode [ 220.033461][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.034691][T11808] input: syz1 as /devices/virtual/input/input18 [ 220.036197][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.036206][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.036213][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.036220][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.036226][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.036233][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.036240][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.058372][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.061554][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.065661][T11691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.077905][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.084078][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.086707][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.089627][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.092458][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.095552][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.099179][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.102187][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.104764][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.107874][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.113063][T11691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.124477][T11691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.126865][T11691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.131511][T11691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.136165][T11691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.265390][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.267519][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.322973][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.325000][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.412392][T11811] netlink: 'syz.7.1525': attribute type 39 has an invalid length. [ 220.798404][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.883574][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.052973][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.117080][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.284855][ T75] bridge_slave_1: left allmulticast mode [ 221.286475][ T75] bridge_slave_1: left promiscuous mode [ 221.288065][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.302297][ T75] bridge_slave_0: left allmulticast mode [ 221.304458][ T75] bridge_slave_0: left promiscuous mode [ 221.306616][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.632212][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.635892][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.639107][ T75] bond0 (unregistering): Released all slaves [ 221.955113][ T75] hsr_slave_0: left promiscuous mode [ 221.960731][ T75] hsr_slave_1: left promiscuous mode [ 221.964334][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.966806][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.973572][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.976233][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.017380][ T75] veth1_macvtap: left promiscuous mode [ 222.019735][ T75] veth0_macvtap: left promiscuous mode [ 222.021710][ T75] veth1_vlan: left promiscuous mode [ 222.023544][ T75] veth0_vlan: left promiscuous mode [ 222.098598][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 222.234634][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.240003][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.243386][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.248625][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.256575][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.262842][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.703824][ T39] kauditd_printk_skb: 434 callbacks suppressed [ 222.703835][ T39] audit: type=1400 audit(1732629350.085:16001): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 222.711535][ T39] audit: type=1400 audit(1732629350.085:16002): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 222.717122][ T39] audit: type=1400 audit(1732629350.095:16003): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 222.722818][ T39] audit: type=1400 audit(1732629350.095:16004): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.729160][ T39] audit: type=1400 audit(1732629350.105:16005): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.734986][ T39] audit: type=1400 audit(1732629350.105:16006): avc: denied { append open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.741035][ T39] audit: type=1400 audit(1732629350.105:16007): avc: denied { getattr } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.054837][ T75] team0 (unregistering): Port device team_slave_1 removed [ 223.141694][ T75] team0 (unregistering): Port device team_slave_0 removed [ 223.753444][T11824] syz_tun: entered promiscuous mode [ 223.768363][ T39] audit: type=1400 audit(1732629351.145:16008): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 223.775778][ T39] audit: type=1400 audit(1732629351.145:16009): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.783336][ T39] audit: type=1400 audit(1732629351.145:16010): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.111654][T11827] chnl_net:caif_netlink_parms(): no params data found [ 224.199332][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.201812][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.204269][T11827] bridge_slave_0: entered allmulticast mode [ 224.207070][T11827] bridge_slave_0: entered promiscuous mode [ 224.228991][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.231590][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.234391][T11827] bridge_slave_1: entered allmulticast mode [ 224.237540][T11827] bridge_slave_1: entered promiscuous mode [ 224.248420][ T5949] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 224.332548][T11827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.342057][T11827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.370243][ T5946] Bluetooth: hci1: command tx timeout [ 224.381385][T11827] team0: Port device team_slave_0 added [ 224.386337][T11827] team0: Port device team_slave_1 added [ 224.412021][T11827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.414039][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.422226][T11827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.427962][T11827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.431166][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.438716][T11827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.455469][ T5949] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.458076][ T5949] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.461229][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.473411][T11846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.484312][ T5949] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.539319][T11827] hsr_slave_0: entered promiscuous mode [ 224.542569][T11827] hsr_slave_1: entered promiscuous mode [ 224.713297][ T30] usb 6-1: USB disconnect, device number 27 [ 224.767321][ T8742] udevd[8742]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 224.788098][ T8742] udevd[8742]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 225.196372][T11827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.222429][T11827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.241817][T11827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.247069][T11827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.267171][T11864] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 225.271260][T11864] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 225.278043][T11864] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 225.281704][T11864] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 225.295624][ T8214] Bluetooth: hci4: Frame reassembly failed (-84) [ 225.457272][T11827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.473745][T11867] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 225.476563][T11867] batman_adv: batadv0: Removing interface: team0 [ 225.482524][T11867] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.485058][T11867] bond0: (slave team0): Enslaving as an active interface with an up link [ 225.495436][T11867] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:90fd:23ff:fed5:b9d8 error=-28 [ 225.520695][T11827] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.531042][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.533109][ T8214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.542372][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.544263][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.555823][T11867] infiniband syz1: set active [ 225.557295][T11867] infiniband syz1: added team_slave_0 [ 225.616156][T11867] RDS/IB: syz1: added [ 225.618768][T11867] smc: adding ib device syz1 with port count 1 [ 225.620566][T11867] smc: ib device syz1 port 1 has pnetid [ 226.273303][T11877] syzkaller1: entered promiscuous mode [ 226.274876][T11877] syzkaller1: entered allmulticast mode [ 226.458592][ T5953] Bluetooth: hci1: command tx timeout [ 226.543285][T11827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.328644][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 227.334143][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 227.649384][T11893] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.718333][ T39] kauditd_printk_skb: 381 callbacks suppressed [ 227.718343][ T39] audit: type=1400 audit(1732629355.085:16392): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.733027][ T39] audit: type=1400 audit(1732629355.115:16393): avc: denied { recv } for pid=11892 comm="syz.7.1546" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.756796][ T39] audit: type=1400 audit(1732629355.125:16394): avc: denied { read write } for pid=5948 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.772139][ T39] audit: type=1400 audit(1732629355.135:16396): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.779340][ T39] audit: type=1400 audit(1732629355.135:16397): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.786372][ T39] audit: type=1400 audit(1732629355.135:16398): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.793325][ T39] audit: type=1400 audit(1732629355.145:16399): avc: denied { recv } for pid=11892 comm="syz.7.1546" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.800299][ T39] audit: type=1400 audit(1732629355.145:16400): avc: denied { recv } for pid=11892 comm="syz.7.1546" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.807457][ T39] audit: type=1400 audit(1732629355.145:16401): avc: denied { recv } for pid=5862 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.813966][ T39] audit: type=1400 audit(1732629355.155:16402): avc: denied { recv } for pid=5862 comm="sshd" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.843914][T11827] veth0_vlan: entered promiscuous mode [ 227.866036][T11827] veth1_vlan: entered promiscuous mode [ 227.908346][T11827] veth0_macvtap: entered promiscuous mode [ 227.915930][T11827] veth1_macvtap: entered promiscuous mode [ 227.946305][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.951147][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.953684][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.956385][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.959055][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.963354][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.965907][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.968726][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.971255][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.973937][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.977162][T11827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.986507][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.989306][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.991852][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.994521][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.997118][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.999938][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.002472][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.005147][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.007659][T11827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.010379][T11827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.013453][T11827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.030526][T11827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.033392][T11827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.036377][T11827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.039058][T11827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.124325][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.126462][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.160523][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.162622][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.456240][T11901] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 228.817356][ T7067] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.892824][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1550'. [ 228.926603][ T7067] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.995128][ T7067] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.082031][ T7067] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.229952][ T7067] bridge_slave_1: left allmulticast mode [ 229.232118][ T7067] bridge_slave_1: left promiscuous mode [ 229.234151][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.242575][ T7067] bridge_slave_0: left allmulticast mode [ 229.244074][ T7067] bridge_slave_0: left promiscuous mode [ 229.245599][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.576440][ T7067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.583160][ T7067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.586894][ T7067] bond0 (unregistering): Released all slaves [ 229.956088][ T7067] hsr_slave_0: left promiscuous mode [ 229.957920][ T7067] hsr_slave_1: left promiscuous mode [ 229.967078][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.973407][ T7067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.976800][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.982284][ T7067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.015748][ T7067] veth1_macvtap: left promiscuous mode [ 230.017792][ T7067] veth0_macvtap: left promiscuous mode [ 230.023332][ T7067] veth1_vlan: left promiscuous mode [ 230.025066][ T7067] veth0_vlan: left promiscuous mode [ 230.314371][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.325226][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.329745][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.334766][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.337649][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.339657][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.462321][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 231.182747][T11939] binder: Unknown parameter ' ' [ 231.422846][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1559'. [ 231.467019][ T7067] team0 (unregistering): Port device team_slave_1 removed [ 231.583167][ T7067] team0 (unregistering): Port device team_slave_0 removed [ 232.368585][ T5953] Bluetooth: hci1: command tx timeout [ 232.638916][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.664231][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.669349][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.673722][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.677925][ T5947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.680036][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.724136][T11959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1563'. [ 232.727150][T11959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1563'. [ 232.730615][T11959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1563'. [ 232.734939][ T39] kauditd_printk_skb: 428 callbacks suppressed [ 232.734948][ T39] audit: type=1400 audit(1732629360.115:16830): avc: denied { create } for pid=11957 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.749182][ T39] audit: type=1400 audit(1732629360.115:16831): avc: denied { write } for pid=11957 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.754859][ T39] audit: type=1400 audit(1732629360.115:16832): avc: denied { read } for pid=11957 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.788844][ T39] audit: type=1400 audit(1732629360.125:16833): avc: denied { read } for pid=11957 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.795847][ T39] audit: type=1400 audit(1732629360.155:16834): avc: denied { read } for pid=11957 comm="syz.1.1563" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 232.809353][ T39] audit: type=1400 audit(1732629360.155:16835): avc: denied { read open } for pid=11957 comm="syz.1.1563" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 232.816082][ T39] audit: type=1400 audit(1732629360.155:16836): avc: denied { ioctl } for pid=11957 comm="syz.1.1563" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64ae scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 232.822887][ T39] audit: type=1400 audit(1732629360.155:16837): avc: denied { write } for pid=11957 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.828070][ T39] audit: type=1400 audit(1732629360.165:16838): avc: denied { ioctl } for pid=11957 comm="syz.1.1563" path="socket:[53674]" dev="sockfs" ino=53674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.835211][ T39] audit: type=1400 audit(1732629360.165:16839): avc: denied { write } for pid=11957 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.983523][T11920] chnl_net:caif_netlink_parms(): no params data found [ 233.061928][T11920] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.063856][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.065810][T11920] bridge_slave_0: entered allmulticast mode [ 233.067854][T11920] bridge_slave_0: entered promiscuous mode [ 233.075103][T11920] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.077064][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.079447][T11920] bridge_slave_1: entered allmulticast mode [ 233.081700][T11920] bridge_slave_1: entered promiscuous mode [ 233.114690][T11920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.129591][T11920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.242045][T11920] team0: Port device team_slave_0 added [ 233.247433][T11920] team0: Port device team_slave_1 added [ 233.284745][T11954] chnl_net:caif_netlink_parms(): no params data found [ 233.313273][T11920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.315312][T11920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.324182][T11920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.354384][T11920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.356307][T11920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.366053][T11920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.379494][T11975] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 233.382646][T11974] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 233.437578][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.441554][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.443537][T11954] bridge_slave_0: entered allmulticast mode [ 233.445676][T11954] bridge_slave_0: entered promiscuous mode [ 233.464093][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.466295][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.478442][T11954] bridge_slave_1: entered allmulticast mode [ 233.480773][T11954] bridge_slave_1: entered promiscuous mode [ 233.487195][T11920] hsr_slave_0: entered promiscuous mode [ 233.492757][T11920] hsr_slave_1: entered promiscuous mode [ 233.629731][T11985] loop2: detected capacity change from 0 to 7 [ 233.631668][T11985] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 233.633456][T11985] loop2: partition table partially beyond EOD, truncated [ 233.635548][T11985] loop2: p1 size 276741282 extends beyond EOD, truncated [ 233.641813][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.642762][T11985] loop2: p2 start 579963744 is beyond EOD, truncated [ 233.680506][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.814031][T11954] team0: Port device team_slave_0 added [ 233.819966][ T8639] udevd[8639]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 233.835777][T11954] team0: Port device team_slave_1 added [ 233.907578][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.910333][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.918845][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.928156][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.930448][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.937289][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.137405][T11954] hsr_slave_0: entered promiscuous mode [ 234.140406][T11954] hsr_slave_1: entered promiscuous mode [ 234.143730][T11954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.146000][T11954] Cannot create hsr debugfs directory [ 234.412436][T11954] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 234.423333][T11954] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 234.431869][T11954] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 234.440625][T11954] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 234.449496][ T5953] Bluetooth: hci1: command tx timeout [ 234.515100][T11920] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.540293][T11920] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.545372][T11920] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.551696][T11920] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.704806][T11954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.746266][T11954] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.761454][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.764252][ T8207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.768642][ T5953] Bluetooth: hci0: command tx timeout [ 234.809323][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.811683][ T8207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.864770][T11920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.948088][T11920] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.004708][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.006987][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.019387][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.021817][ T8207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.147618][T12029] netlink: 'syz.1.1579': attribute type 29 has an invalid length. [ 236.152495][T12029] netlink: 'syz.1.1579': attribute type 29 has an invalid length. [ 236.303033][T11920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.362684][T11954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.399777][T12029] netlink: 'syz.1.1579': attribute type 29 has an invalid length. [ 236.409227][T12029] netlink: 'syz.1.1579': attribute type 29 has an invalid length. [ 236.528351][ T5953] Bluetooth: hci1: command tx timeout [ 236.741018][T12034] veth1_vlan: left promiscuous mode [ 236.848621][ T5953] Bluetooth: hci0: command tx timeout [ 237.040802][T12044] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1581'. [ 237.444084][T12053] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.447455][T12053] overlayfs: failed to clone lowerpath [ 237.738431][ T39] kauditd_printk_skb: 708 callbacks suppressed [ 237.738444][ T39] audit: type=1400 audit(1732629365.173:17548): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.747175][ T39] audit: type=1400 audit(1732629365.183:17549): avc: denied { ioctl } for pid=12059 comm="syz.1.1586" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.763238][ T39] audit: type=1400 audit(1732629365.193:17550): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 237.771629][ T39] audit: type=1400 audit(1732629365.193:17551): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.777157][ T39] audit: type=1400 audit(1732629365.203:17552): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.787290][ T39] audit: type=1400 audit(1732629365.203:17553): avc: denied { append open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.795475][ T39] audit: type=1400 audit(1732629365.203:17554): avc: denied { getattr } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.803769][ T39] audit: type=1400 audit(1732629365.243:17555): avc: denied { name_bind } for pid=12063 comm="syz.7.1587" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 237.812244][ T39] audit: type=1400 audit(1732629365.243:17556): avc: denied { node_bind } for pid=12063 comm="syz.7.1587" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 237.815409][T12064] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 237.823580][ T39] audit: type=1400 audit(1732629365.253:17557): avc: denied { ioctl } for pid=12059 comm="syz.1.1586" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.868414][ T831] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 238.042112][ T831] usb 6-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 238.044754][ T831] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.063114][ T831] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.065461][ T831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.067486][ T831] usb 6-1: Product: äŠ [ 238.074709][ T831] usb 6-1: Manufacturer: à°Š [ 238.076374][ T831] usb 6-1: SerialNumber: ᇠ[ 238.193585][T11920] veth0_vlan: entered promiscuous mode [ 238.211943][T11920] veth1_vlan: entered promiscuous mode [ 238.248074][T11954] veth0_vlan: entered promiscuous mode [ 238.260433][T11920] veth0_macvtap: entered promiscuous mode [ 238.265941][T11954] veth1_vlan: entered promiscuous mode [ 238.285279][T11920] veth1_macvtap: entered promiscuous mode [ 238.307724][T12060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.317367][T12060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.345654][T11954] veth0_macvtap: entered promiscuous mode [ 238.355757][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.365389][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.371419][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.378325][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.379868][ T831] usb 6-1: 0:2 : does not exist [ 238.381196][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.385265][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.387810][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.401502][ T831] usb 6-1: USB disconnect, device number 28 [ 238.403799][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.406562][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.417343][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.423861][T11920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.436517][T11954] veth1_macvtap: entered promiscuous mode [ 238.445524][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.448216][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.451210][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.453898][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.456910][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.459717][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.462226][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.464875][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.467714][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.471468][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.475160][T11920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.496621][T11920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.499220][T11920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.501495][T11920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.503891][T11920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.557914][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.567354][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.577457][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.581528][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.584021][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.586858][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.590843][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.593759][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.596434][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.602249][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.604850][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.607507][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.612193][T11954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.617228][ T8741] udevd[8741]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.623425][ T5953] Bluetooth: hci1: command tx timeout [ 238.627865][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.632971][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.636068][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.639137][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.641737][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.644406][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.646946][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.650240][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.653549][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.656660][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.660341][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.663127][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.666360][T11954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.723711][T11954] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.726824][T11954] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.737078][T11954] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.740293][T11954] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.823574][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.825652][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.884423][ T8214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.887238][ T8214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.928465][ T5953] Bluetooth: hci0: command tx timeout [ 238.965970][ T7067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.994795][ T7067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.091563][ T8214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.106018][ T8214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.134758][ T6008] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 239.298560][ T6008] usb 12-1: Using ep0 maxpacket: 8 [ 239.311686][ T6008] usb 12-1: config index 0 descriptor too short (expected 5924, got 36) [ 239.314067][ T6008] usb 12-1: config 250 has an invalid interface number: 228 but max is -1 [ 239.316454][ T6008] usb 12-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 239.322592][ T6008] usb 12-1: config 250 has no interface number 0 [ 239.324275][ T6008] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 239.327639][ T6008] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 239.333421][ T6008] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.336290][ T6008] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 239.339075][ T6008] usb 12-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 239.342891][ T6008] usb 12-1: config 250 interface 228 has no altsetting 0 [ 239.353332][ T6008] usb 12-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 239.355768][ T6008] usb 12-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 239.360371][ T6008] usb 12-1: Product: syz [ 239.361942][ T6008] usb 12-1: SerialNumber: syz [ 239.373084][ T6008] hub 12-1:250.228: bad descriptor, ignoring hub [ 239.375969][ T6008] hub 12-1:250.228: probe with driver hub failed with error -5 [ 239.524475][ T8214] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.617975][ T6008] usblp 12-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 239.622832][ T8214] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.724905][ T8214] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.812774][ T8214] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.060452][ T8214] bridge_slave_1: left allmulticast mode [ 240.062105][ T8214] bridge_slave_1: left promiscuous mode [ 240.063646][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.067467][ T8214] bridge_slave_0: left allmulticast mode [ 240.071761][ T8214] bridge_slave_0: left promiscuous mode [ 240.073821][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.093099][ T35] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 240.105639][ T35] usb 12-1: device reset changed ep0 maxpacket size! [ 240.118224][ T35] usb 12-1: USB disconnect, device number 2 [ 240.126197][ T35] usblp0: removed [ 240.434290][ T35] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 240.441948][ T8214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.446727][ T8214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.454805][ T8214] bond0 (unregistering): Released all slaves [ 240.608584][ T35] usb 12-1: Using ep0 maxpacket: 32 [ 240.617419][ T35] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 42, using maximum allowed: 30 [ 240.621061][ T35] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 42 [ 240.631836][ T35] usb 12-1: New USB device found, idVendor=626c, idProduct=2f45, bcdDevice=4c.88 [ 240.634162][ T35] usb 12-1: New USB device strings: Mfr=158, Product=185, SerialNumber=0 [ 240.636248][ T35] usb 12-1: Product: syz [ 240.637348][ T35] usb 12-1: Manufacturer: syz [ 240.645572][ T35] usb 12-1: config 0 descriptor?? [ 240.791186][ T8214] hsr_slave_0: left promiscuous mode [ 240.792937][ T8214] hsr_slave_1: left promiscuous mode [ 240.794538][ T8214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.796684][ T8214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.800242][ T8214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.802886][ T8214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.836229][ T8214] veth1_macvtap: left promiscuous mode [ 240.838000][ T8214] veth0_macvtap: left promiscuous mode [ 240.841821][ T8214] veth1_vlan: left promiscuous mode [ 240.845505][ T8214] veth0_vlan: left promiscuous mode [ 240.863160][ T35] usb 12-1: USB disconnect, device number 3 [ 241.022997][ T5953] Bluetooth: hci0: command tx timeout [ 241.127154][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.132525][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.136551][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.139315][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.141538][ T5947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.143561][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.281763][T12086] xt_CONNSECMARK: invalid mode: 0 [ 241.286706][T12086] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1592'. [ 241.313063][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1592'. [ 241.573114][T12091] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 241.913324][T12103] netlink: 'syz.1.1595': attribute type 10 has an invalid length. [ 242.339060][ T8214] team0 (unregistering): Port device team_slave_1 removed [ 242.437695][ T8214] team0 (unregistering): Port device team_slave_0 removed [ 243.155797][ T39] kauditd_printk_skb: 443 callbacks suppressed [ 243.155807][ T39] audit: type=1400 audit(1732629370.593:18001): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 243.171449][ T39] audit: type=1400 audit(1732629370.613:18002): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 243.177898][ T39] audit: type=1400 audit(1732629370.613:18003): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 243.189233][ T39] audit: type=1400 audit(1732629370.613:18004): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.194465][ T39] audit: type=1400 audit(1732629370.613:18005): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 243.214657][ T39] audit: type=1400 audit(1732629370.613:18006): avc: denied { append open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 243.237549][ T39] audit: type=1400 audit(1732629370.623:18007): avc: denied { getattr } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 243.245040][ T39] audit: type=1400 audit(1732629370.633:18008): avc: denied { read write } for pid=11544 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.251912][ T5953] Bluetooth: hci1: command tx timeout [ 243.259367][ T39] audit: type=1400 audit(1732629370.633:18009): avc: denied { read write open } for pid=11544 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.265708][ T39] audit: type=1400 audit(1732629370.643:18010): avc: denied { read write } for pid=11954 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.406692][T12111] binder: BINDER_SET_CONTEXT_MGR already set [ 243.414562][T12111] binder: 12109:12111 ioctl 4018620d 20000100 returned -16 [ 243.426990][T12112] binder: BINDER_SET_CONTEXT_MGR already set [ 243.428583][T12112] binder: 12109:12112 ioctl 4018620d 20000040 returned -16 [ 243.432717][T12111] binder_alloc: binder_alloc_mmap_handler: 12109 20ffd000-21000000 already mapped failed -16 [ 243.438198][T12111] binder_alloc: 12109: binder_alloc_buf, no vma [ 243.981227][T12080] chnl_net:caif_netlink_parms(): no params data found [ 244.111386][T12080] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.113304][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.115269][T12080] bridge_slave_0: entered allmulticast mode [ 244.118164][T12080] bridge_slave_0: entered promiscuous mode [ 244.139104][T12080] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.145118][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.158578][T12080] bridge_slave_1: entered allmulticast mode [ 244.161635][T12080] bridge_slave_1: entered promiscuous mode [ 244.284086][T12080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.290725][T12080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.359492][T12080] team0: Port device team_slave_0 added [ 244.382737][T12080] team0: Port device team_slave_1 added [ 244.417914][T12080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.419830][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.426367][T12080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.442667][T12080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.444508][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.455297][T12080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.500689][T12148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.507819][T12080] hsr_slave_0: entered promiscuous mode [ 244.536116][T12080] hsr_slave_1: entered promiscuous mode [ 245.185727][T12080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.201454][T12080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.208031][T12080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.255279][T12080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.338495][ T5953] Bluetooth: hci1: command tx timeout [ 245.432390][T12163] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1608'. [ 245.475112][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.503668][T12080] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.517192][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.519120][ T8207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.535556][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.538149][ T7062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.631363][ T7904] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 245.778540][ T5982] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 245.788476][ T7904] usb 13-1: Using ep0 maxpacket: 16 [ 245.835356][ T7904] usb 13-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 245.838011][ T7904] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.840398][ T7904] usb 13-1: Product: syz [ 245.841608][ T7904] usb 13-1: Manufacturer: syz [ 245.842902][ T7904] usb 13-1: SerialNumber: syz [ 245.866119][ T7904] r8152-cfgselector 13-1: Unknown version 0x0000 [ 245.867941][ T7904] r8152-cfgselector 13-1: config 0 descriptor?? [ 245.929656][ T5982] usb 12-1: Using ep0 maxpacket: 8 [ 245.941304][ T5982] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 245.943553][ T5982] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.946307][ T5982] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.949589][ T5982] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.955264][ T5982] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.962551][ T5982] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.965077][ T5982] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.981143][T12170] Bluetooth: MGMT ver 1.23 [ 246.090577][ T7904] r8152-cfgselector 13-1: Unknown version 0x0000 [ 246.092685][ T7904] r8152-cfgselector 13-1: bad CDC descriptors [ 246.098674][ T7904] r8152-cfgselector 13-1: USB disconnect, device number 2 [ 246.202531][ T5982] usb 12-1: usb_control_msg returned -32 [ 246.204012][ T5982] usbtmc 12-1:16.0: can't read capabilities [ 246.565580][T12181] usbtmc 12-1:16.0: INDICATOR_PULSE returned 0 [ 246.592675][ T8463] usb 12-1: USB disconnect, device number 4 [ 246.797302][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.812688][T12183] netlink: 15 bytes leftover after parsing attributes in process `syz.8.1615'. [ 246.931358][T12185] overlayfs: workdir and upperdir must be separate subtrees [ 247.188679][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.190854][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.206602][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.212440][T12190] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.220141][T12190] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 247.233306][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.255815][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.258796][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.261223][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.263333][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.265455][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.267636][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 247.358785][ T5982] usb 13-1: new low-speed USB device number 3 using dummy_hcd [ 247.418498][ T5953] Bluetooth: hci1: command tx timeout [ 247.477582][T12197] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 247.496382][T12197] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1618'. [ 247.497680][T12200] autofs: Bad value for 'fd' [ 247.527071][ T5982] usb 13-1: config index 0 descriptor too short (expected 1307, got 27) [ 247.529509][ T5982] usb 13-1: config 0 has an invalid interface number: 0 but max is -1 [ 247.531618][ T5982] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 247.534001][ T5982] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 247.536843][ T5982] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 247.544618][ T5982] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 8 [ 247.547443][ T5982] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 247.590215][ T5982] usb 13-1: string descriptor 0 read error: -22 [ 247.591938][ T5982] usb 13-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 247.594238][ T5982] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.600491][ T5982] usb 13-1: config 0 descriptor?? [ 247.605535][T12188] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 247.608947][ T5982] hub 13-1:0.0: bad descriptor, ignoring hub [ 247.610531][ T5982] hub 13-1:0.0: probe with driver hub failed with error -5 [ 247.613319][ T5982] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input19 [ 247.781659][T12206] dlm: no locking on control device [ 247.923833][ T5982] usb 13-1: USB disconnect, device number 3 [ 248.006850][T12211] xt_hashlimit: size too large, truncated to 1048576 [ 248.454443][ T39] kauditd_printk_skb: 859 callbacks suppressed [ 248.454455][ T39] audit: type=1400 audit(1732629375.893:18870): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.456290][T12080] veth0_vlan: entered promiscuous mode [ 248.468734][ T39] audit: type=1400 audit(1732629375.913:18871): avc: denied { recv } for pid=12080 comm="syz-executor" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.481680][ T39] audit: type=1400 audit(1732629375.923:18872): avc: denied { read write } for pid=11954 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.484044][T12080] veth1_vlan: entered promiscuous mode [ 248.498377][ T39] audit: type=1400 audit(1732629375.923:18873): avc: denied { read write open } for pid=11954 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.510855][ T39] audit: type=1400 audit(1732629375.923:18874): avc: denied { ioctl } for pid=11954 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.528408][ T39] audit: type=1400 audit(1732629375.943:18875): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.536641][ T39] audit: type=1400 audit(1732629375.943:18876): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.568373][ T39] audit: type=1400 audit(1732629375.943:18877): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.576910][ T39] audit: type=1400 audit(1732629375.953:18878): avc: denied { recv } for pid=12080 comm="syz-executor" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.593827][T12080] veth0_macvtap: entered promiscuous mode [ 248.598357][ T39] audit: type=1400 audit(1732629375.953:18879): avc: denied { recv } for pid=12080 comm="syz-executor" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.616488][T12080] veth1_macvtap: entered promiscuous mode [ 248.647859][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.650946][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.653725][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.656487][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.660339][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.663099][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.665953][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.675247][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.677887][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.681762][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.684268][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.686935][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.697048][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.713979][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.716876][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.720067][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.722788][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.725406][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.728037][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.731141][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.734561][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.737123][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.740133][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.742746][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.745528][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.748839][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.759663][T12080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.762177][T12080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.764464][T12080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.766747][T12080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.900328][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.903488][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.935296][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.938087][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.444398][ T8214] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.577036][ T8214] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.644913][ T8214] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.722070][ T8214] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.871523][ T8214] bridge_slave_1: left allmulticast mode [ 249.873021][ T8214] bridge_slave_1: left promiscuous mode [ 249.874518][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.886709][ T8214] bridge_slave_0: left allmulticast mode [ 249.888214][ T8214] bridge_slave_0: left promiscuous mode [ 249.898088][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.227183][ T8214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.234193][ T8214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.240192][ T8214] bond0 (unregistering): Released all slaves [ 250.651110][ T8214] hsr_slave_0: left promiscuous mode [ 250.653115][ T8214] hsr_slave_1: left promiscuous mode [ 250.655184][ T8214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.657298][ T8214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.669001][ T8214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.671590][ T8214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.717729][ T8214] veth1_macvtap: left promiscuous mode [ 250.719762][ T8214] veth0_macvtap: left promiscuous mode [ 250.721706][ T8214] veth1_vlan: left promiscuous mode [ 250.723513][ T8214] veth0_vlan: left promiscuous mode [ 251.055928][T12239] overlayfs: failed to resolve './file1': -2 [ 251.073751][T12239] overlayfs: failed to resolve './file1': -2 [ 251.114852][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.123941][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.132258][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.135396][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.137556][ T5947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.139921][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.074437][ T8214] team0 (unregistering): Port device team_slave_1 removed [ 252.176115][ T8214] team0 (unregistering): Port device team_slave_0 removed [ 253.032675][T12241] syzkaller0 speed is unknown, defaulting to 1000 [ 253.127689][T12268] SELinux: policydb version -254141896 does not match my version range 15-33 [ 253.130291][T12268] SELinux: failed to load policy [ 253.141545][T12268] SELinux: security policydb version 18 (MLS) not backwards compatible [ 253.143824][T12268] SELinux: failed to load policy [ 253.168425][ T5953] Bluetooth: hci1: command tx timeout [ 253.470720][ T5953] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 253.475097][ T5953] CPU: 2 UID: 0 PID: 5953 Comm: kworker/u33:4 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 253.477960][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.480994][ T5953] Workqueue: hci0 hci_rx_work [ 253.482436][ T5953] Call Trace: [ 253.483313][ T5953] [ 253.484122][ T5953] dump_stack_lvl+0x16c/0x1f0 [ 253.485399][ T5953] sysfs_warn_dup+0x7f/0xa0 [ 253.486547][ T5953] sysfs_create_dir_ns+0x24d/0x2b0 [ 253.487853][ T5953] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 253.489311][ T5953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 253.491040][ T5953] ? kobject_add_internal+0x12d/0x990 [ 253.492992][ T5953] ? do_raw_spin_unlock+0x172/0x230 [ 253.494715][ T5953] kobject_add_internal+0x2c8/0x990 [ 253.496115][ T5953] kobject_add+0x16f/0x240 [ 253.497288][ T5953] ? __pfx_kobject_add+0x10/0x10 [ 253.498532][ T5953] ? class_to_subsys+0x3e/0x160 [ 253.499761][ T5953] ? do_raw_spin_unlock+0x172/0x230 [ 253.501125][ T5953] ? kobject_put+0xab/0x5a0 [ 253.502282][ T5953] device_add+0x289/0x1a70 [ 253.503440][ T5953] ? __pfx_dev_set_name+0x10/0x10 [ 253.504732][ T5953] ? __pfx_device_add+0x10/0x10 [ 253.506048][ T5953] ? mgmt_send_event_skb+0x2f2/0x460 [ 253.507433][ T5953] hci_conn_add_sysfs+0x17e/0x230 [ 253.508733][ T5953] le_conn_complete_evt+0x1077/0x1d60 [ 253.510107][ T5953] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 253.511920][ T5953] ? __mutex_lock+0x1cc/0xa60 [ 253.513606][ T5953] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 253.515500][ T5953] ? skb_pull_data+0x166/0x210 [ 253.516730][ T5953] hci_le_meta_evt+0x2e2/0x5d0 [ 253.518136][ T5953] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 253.519848][ T5953] hci_event_packet+0x666/0x1180 [ 253.521272][ T5953] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 253.522707][ T5953] ? __pfx_hci_event_packet+0x10/0x10 [ 253.524153][ T5953] ? mark_held_locks+0x9f/0xe0 [ 253.525604][ T5953] ? kcov_remote_start+0x3cf/0x6e0 [ 253.526927][ T5953] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.528361][ T5953] hci_rx_work+0x2c5/0x16b0 [ 253.529708][ T5953] ? process_one_work+0x921/0x1ba0 [ 253.531181][ T5953] process_one_work+0x9c5/0x1ba0 [ 253.532971][ T5953] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 253.534731][ T5953] ? __pfx_process_one_work+0x10/0x10 [ 253.536284][ T5953] ? rcu_is_watching+0x12/0xc0 [ 253.537775][ T5953] ? assign_work+0x1a0/0x250 [ 253.539092][ T5953] worker_thread+0x6c8/0xf00 [ 253.540394][ T5953] ? __pfx_worker_thread+0x10/0x10 [ 253.542140][ T5953] kthread+0x2c1/0x3a0 [ 253.543236][ T5953] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.544725][ T5953] ? __pfx_kthread+0x10/0x10 [ 253.545984][ T5953] ret_from_fork+0x45/0x80 [ 253.547115][ T5953] ? __pfx_kthread+0x10/0x10 [ 253.548391][ T5953] ret_from_fork_asm+0x1a/0x30 [ 253.549974][ T5953] [ 253.554560][ T5953] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 253.558127][ T5953] Bluetooth: hci0: failed to register connection device [ 253.568521][ T39] kauditd_printk_skb: 436 callbacks suppressed [ 253.568532][ T39] audit: type=1400 audit(1732629380.998:19316): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.576469][ T39] audit: type=1400 audit(1732629381.008:19317): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.590818][ T39] audit: type=1400 audit(1732629381.008:19318): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.596968][ T39] audit: type=1400 audit(1732629381.008:19319): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.621250][ T39] audit: type=1400 audit(1732629381.008:19320): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.636609][T12241] chnl_net:caif_netlink_parms(): no params data found [ 253.642972][ T39] audit: type=1400 audit(1732629381.028:19321): avc: denied { recv } for pid=5862 comm="sshd" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.649408][ T39] audit: type=1400 audit(1732629381.028:19322): avc: denied { recv } for pid=11772 comm="udevd" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.657774][ T39] audit: type=1400 audit(1732629381.028:19323): avc: denied { recv } for pid=5862 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=47044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.664086][ T39] audit: type=1400 audit(1732629381.028:19324): avc: denied { recv } for pid=5862 comm="sshd" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.671471][ T39] audit: type=1400 audit(1732629381.048:19325): avc: denied { read write } for pid=11544 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.826564][T12241] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.828749][T12241] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.830597][T12241] bridge_slave_0: entered allmulticast mode [ 253.832833][T12241] bridge_slave_0: entered promiscuous mode [ 253.837910][T12241] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.839774][T12241] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.841519][T12241] bridge_slave_1: entered allmulticast mode [ 253.843399][T12241] bridge_slave_1: entered promiscuous mode [ 253.896349][T12241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.913502][T12241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.045249][T12241] team0: Port device team_slave_0 added [ 254.075507][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 254.088787][T12241] team0: Port device team_slave_1 added [ 254.191442][T12300] virtio-fs: tag < 32 [ 254.191442][T12300] ivsize : 16 [ 254.191442][T12300] chunksize : 16 [ 254.191442][T12300] walksize : 16 [ 254.191442][T12300] statesize : 0 [ 254.191442][T12300] [ 254.191442][T12300] name : pcbc(xeta) [ 254.191442][T12300] driver : pcbc(xeta-generic) [ 254.191442][T12300] module : kernel [ 254.191442][T12300] priority : 0 [ 254.191442][T12300] refcnt : 1 [ 254.191442][T12300] selftest : passed [ 254.191442][T12300] internal : no [ 254.191442][T12300] type : skcipher [ 254.191442][T12300] async : no [ 254.191442][T12300] blocksize : 8 [ 254.191442][T12300] min keysize : 16 [ 254.191442][T12300] max keysize : 16 [ 254.191442][T12300] ivsize : 8 [ 254.191442][T12300] chunksize : 8 [ 254.191442][T12300] walksize : 8 [ 254.191442][T12300] statesize : 0 [ 254.191442][T12300] [ 254.191442][T12300] name : essiv(cbc(aes),sha256) [ 254.191442][T12300] driver : essiv(cbc-aes-aesni,sha256-ni) [ 254.191442][T12300] module : kernel [ 254.191442][T12300] priority : 400 [ 254.191442][T12300] refcnt : 1 [ 254.191442][T12300] selftest : passed [ 254.191442][T12300] internal : no [ 254.191442][T12300] type : skcipher [ 254.191442][T12300] async : yes [ 254.191442][T12300] blocksize : 16 [ 254.191442][T12300] min keysize : 16 [ 254.191442][T12300] max keysize : 32 [ 254.191442][T12300] ivsize : 16 [ 254.191442][T12300] chunksize : 16 [ 254.191442][T12300] walksize : 16 [ 254.191442][T12300] statesize : 0 [ 254.191442][T12300] [ 254.191442][T12300] name : ecb(arc4) [ 254.191442][T12300] driver : ecb(arc4-generic) [ 254.191442][T12300] module : kernel [ 254.191442][T12300] priority : 100 [ 254.191442][T12300] refcnt : 1 [ 254.191442][T12300] selftest : passed [ 254.191442][T12300] internal : no [ 254.194880][T12300] fuse: Unknown parameter '0xffffffffffffffff' [ 254.196428][T12241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.268621][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.276399][T12241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.283810][T12241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.285621][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.293628][T12241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.357093][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 254.374758][T12241] hsr_slave_0: entered promiscuous mode [ 254.418659][T12241] hsr_slave_1: entered promiscuous mode [ 255.103603][T12241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.108929][T12241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.144294][T12241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.155291][T12241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.200305][T12332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.249361][ T5953] Bluetooth: hci1: command tx timeout [ 255.347055][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.396990][T12241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.455200][T12241] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.493259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.495809][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.517090][T12345] tmpfs: Bad value for 'mpol' [ 255.519851][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.522662][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.757926][T12353] hfsplus: unable to find HFS+ superblock [ 256.073965][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'. [ 256.403656][T12373] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 256.521678][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 256.525228][T12373] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 256.527693][T12373] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 256.655094][T12374] sctp: [Deprecated]: syz.7.1662 (pid 12374) Use of int in maxseg socket option. [ 256.655094][T12374] Use struct sctp_assoc_value instead [ 257.011247][T12386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12386 comm=syz.1.1665 [ 257.141764][T12394] rtc_cmos 00:05: Alarms can be up to one day in the future [ 257.144517][T12241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.328362][ T5953] Bluetooth: hci1: command tx timeout [ 257.478846][T12398] delete_channel: no stack [ 257.973999][T12411] bio_check_eod: 2 callbacks suppressed [ 257.974017][T12411] syz.7.1670: attempt to access beyond end of device [ 257.974017][T12411] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 257.982301][T12411] (syz.7.1670,12411,3):ocfs2_get_sector:1769 ERROR: status = -5 [ 257.984287][T12411] (syz.7.1670,12411,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 257.986182][T12411] (syz.7.1670,12411,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 257.990219][T12411] (syz.7.1670,12411,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 258.138382][ T62] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 258.308515][ T62] usb 13-1: Using ep0 maxpacket: 16 [ 258.340675][ T62] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.344268][ T62] usb 13-1: config 0 has no interfaces? [ 258.346210][ T62] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.356867][ T62] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.365209][ T62] usb 13-1: config 0 descriptor?? [ 258.549849][T12431] random: crng reseeded on system resumption [ 258.582527][ T39] kauditd_printk_skb: 805 callbacks suppressed [ 258.582537][ T39] audit: type=1400 audit(1732629386.018:20131): avc: denied { ioctl } for pid=12406 comm="syz.8.1669" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.591416][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1669'. [ 258.598601][ T39] audit: type=1400 audit(1732629386.018:20132): avc: denied { create } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.604295][ T39] audit: type=1400 audit(1732629386.018:20133): avc: denied { create } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.618349][ T39] audit: type=1400 audit(1732629386.018:20134): avc: denied { write } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.623832][ T39] audit: type=1400 audit(1732629386.018:20135): avc: denied { read } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.636207][ T39] audit: type=1400 audit(1732629386.018:20136): avc: denied { read } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.648343][ T39] audit: type=1400 audit(1732629386.038:20137): avc: denied { write } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.653817][ T39] audit: type=1400 audit(1732629386.038:20138): avc: denied { create } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.672096][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1669'. [ 258.678382][ T39] audit: type=1400 audit(1732629386.048:20139): avc: denied { write } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.683564][ T39] audit: type=1400 audit(1732629386.048:20140): avc: denied { read } for pid=12406 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.691139][ T6004] usb 13-1: USB disconnect, device number 4 [ 259.017465][T12241] veth0_vlan: entered promiscuous mode [ 259.035696][T12241] veth1_vlan: entered promiscuous mode [ 259.085695][T12241] veth0_macvtap: entered promiscuous mode [ 259.096160][T12241] veth1_macvtap: entered promiscuous mode [ 259.123711][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.126472][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.129306][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.132523][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.135305][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.137927][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.140472][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.143371][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.145880][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.148583][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.151268][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.154692][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.158390][T12241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.171027][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.174574][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.177086][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.180174][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.183031][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.185679][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.188245][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.191185][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.194477][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.197162][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.199723][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.202610][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.205663][T12241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.217945][T12241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.220495][T12241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.222981][T12241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.225865][T12241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.358400][ T7067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.360556][ T7067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.405096][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.407950][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.410029][ T5953] Bluetooth: hci1: command tx timeout [ 259.737409][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1680'. [ 259.947557][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1681'. [ 259.960055][ T1167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.975253][T12467] SELinux: Context Ü is not valid (left unmapped). [ 259.985935][T12467] autofs: Bad value for 'fd' [ 260.048589][T12469] vivid-000: ================= START STATUS ================= [ 260.050756][T12469] vivid-000: Enable Output Cropping: true grabbed [ 260.052675][T12469] vivid-000: Enable Output Composing: false grabbed [ 260.078435][T12469] vivid-000: Enable Output Scaler: true grabbed [ 260.080437][T12469] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 260.082300][T12469] vivid-000: Transmit Mode: HDMI grabbed [ 260.083783][T12469] vivid-000: Hotplug Present: 0x00000000 [ 260.085267][T12469] vivid-000: RxSense Present: 0x00000000 [ 260.086743][T12469] vivid-000: EDID Present: 0x00000000 [ 260.088164][T12469] vivid-000: ================== END STATUS ================== [ 260.097294][ T1167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.197774][ T1167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.284083][ T1167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.481439][ T1167] bridge_slave_1: left allmulticast mode [ 260.483486][ T1167] bridge_slave_1: left promiscuous mode [ 260.485035][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.493202][ T1167] bridge_slave_0: left allmulticast mode [ 260.495469][ T1167] bridge_slave_0: left promiscuous mode [ 260.497278][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.837753][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.844849][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.849961][ T1167] bond0 (unregistering): Released all slaves [ 261.207707][ T1167] hsr_slave_0: left promiscuous mode [ 261.210006][ T1167] hsr_slave_1: left promiscuous mode [ 261.211998][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.214161][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.216769][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.219120][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.248479][ T1167] veth1_macvtap: left promiscuous mode [ 261.249981][ T1167] veth0_macvtap: left promiscuous mode [ 261.251452][ T1167] veth1_vlan: left promiscuous mode [ 261.252857][ T1167] veth0_vlan: left promiscuous mode [ 261.747605][T12476] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1685'. [ 261.910071][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.914156][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.917654][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.937789][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.940325][ T5947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.942585][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.339334][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 262.476624][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 262.846754][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1689'. [ 263.372102][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.374178][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.411414][T12494] netem: incorrect ge model size [ 263.413009][T12494] netem: change failed [ 263.590203][ T39] kauditd_printk_skb: 397 callbacks suppressed [ 263.590218][ T39] audit: type=1400 audit(1732629391.028:20538): avc: denied { recv } for pid=12499 comm="syz.7.1691" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 263.608404][ T39] audit: type=1400 audit(1732629391.038:20539): avc: denied { name_bind } for pid=12499 comm="syz.7.1691" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 263.615555][ T39] audit: type=1400 audit(1732629391.038:20540): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 263.624142][T12483] syzkaller0 speed is unknown, defaulting to 1000 [ 263.634675][ T39] audit: type=1400 audit(1732629391.048:20541): avc: denied { node_bind } for pid=12499 comm="syz.7.1691" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 263.642389][ T39] audit: type=1400 audit(1732629391.048:20542): avc: denied { read write } for pid=5948 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.653562][ T39] audit: type=1400 audit(1732629391.058:20543): avc: denied { read write open } for pid=5948 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.662088][ T39] audit: type=1400 audit(1732629391.058:20544): avc: denied { ioctl } for pid=5948 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.670716][ T39] audit: type=1400 audit(1732629391.068:20545): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.677921][ T39] audit: type=1400 audit(1732629391.068:20546): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 263.685202][ T39] audit: type=1400 audit(1732629391.068:20547): avc: denied { append open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 263.750793][T12508] tmpfs: Invalid uid '0x00000000ffffffff' [ 263.968455][ T5947] Bluetooth: hci1: command tx timeout [ 264.072977][T12483] chnl_net:caif_netlink_parms(): no params data found [ 264.228045][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.230374][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.232724][T12483] bridge_slave_0: entered allmulticast mode [ 264.235577][T12483] bridge_slave_0: entered promiscuous mode [ 264.243170][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.245443][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.247723][T12483] bridge_slave_1: entered allmulticast mode [ 264.250419][T12483] bridge_slave_1: entered promiscuous mode [ 264.311761][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.318605][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.421624][T12483] team0: Port device team_slave_0 added [ 264.437757][T12483] team0: Port device team_slave_1 added [ 264.787977][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.791015][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.812532][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.820235][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.822382][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.834914][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.956375][T12483] hsr_slave_0: entered promiscuous mode [ 264.963958][T12483] hsr_slave_1: entered promiscuous mode [ 265.341704][T12561] binder: 12560:12561 ioctl c018620c 20000040 returned -22 [ 265.771592][T12483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.779917][T12483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.797487][T12483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.814116][T12483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.931402][T12575] cdrom: dropping to single frame dma [ 266.056864][ T5947] Bluetooth: hci1: command tx timeout [ 266.095596][T12483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.126055][T12483] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.141252][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.143852][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.151792][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.153737][ T7067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.750214][T12604] ip6gre1: entered allmulticast mode [ 266.826885][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.828993][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.079969][T12617] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 267.108116][T12617] netlink: 'syz.7.1722': attribute type 10 has an invalid length. [ 267.119204][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.121086][T12617] bridge0: port 2(bridge_slave_1) entered listening state [ 267.122993][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.124796][T12617] bridge0: port 1(bridge_slave_0) entered listening state [ 267.151569][T12617] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 267.404736][T12624] sctp: [Deprecated]: syz.7.1726 (pid 12624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.404736][T12624] Use struct sctp_sack_info instead [ 267.516842][T12483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.640680][T12634] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 267.703833][T12631] syzkaller0 speed is unknown, defaulting to 1000 [ 267.722178][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1728'. [ 267.740180][T12634] geneve2: entered promiscuous mode [ 267.741589][T12634] geneve2: entered allmulticast mode [ 267.868547][ T35] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 267.986003][T12641] x_tables: duplicate underflow at hook 1 [ 268.088865][T12641] syzkaller0 speed is unknown, defaulting to 1000 [ 268.114610][ T35] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.117951][ T35] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.120606][ T35] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.130111][ T5947] Bluetooth: hci1: command tx timeout [ 268.149909][T12635] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 268.156839][ T35] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.481650][T12660] netlink: 'syz.7.1734': attribute type 9 has an invalid length. [ 268.483713][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1734'. [ 268.559920][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1729'. [ 268.661312][ T39] kauditd_printk_skb: 1192 callbacks suppressed [ 268.661323][ T39] audit: type=1400 audit(1732629396.098:21740): avc: denied { prog_load } for pid=12662 comm="syz.1.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.668197][ T39] audit: type=1400 audit(1732629396.098:21741): avc: denied { bpf } for pid=12662 comm="syz.1.1735" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.708386][ T39] audit: type=1400 audit(1732629396.108:21742): avc: denied { perfmon } for pid=12662 comm="syz.1.1735" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.715108][ T39] audit: type=1400 audit(1732629396.108:21743): avc: denied { perfmon } for pid=12662 comm="syz.1.1735" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.728382][ T39] audit: type=1400 audit(1732629396.108:21744): avc: denied { perfmon } for pid=12662 comm="syz.1.1735" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.735517][ T39] audit: type=1400 audit(1732629396.108:21745): avc: denied { module_request } for pid=12483 comm="syz-executor" kmod="netdev-netdevsim4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 268.758427][ T39] audit: type=1400 audit(1732629396.118:21746): avc: denied { perfmon } for pid=12662 comm="syz.1.1735" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.765719][ T39] audit: type=1400 audit(1732629396.118:21747): avc: denied { bpf } for pid=12662 comm="syz.1.1735" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.776416][ T39] audit: type=1400 audit(1732629396.128:21748): avc: denied { bpf } for pid=12662 comm="syz.1.1735" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.783552][ T39] audit: type=1400 audit(1732629396.128:21749): avc: denied { prog_run } for pid=12662 comm="syz.1.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.786315][T12635] syzkaller0 speed is unknown, defaulting to 1000 [ 268.999583][ T2289] usb 13-1: USB disconnect, device number 5 [ 269.123579][T12655] delete_channel: no stack [ 269.227332][T12483] veth0_vlan: entered promiscuous mode [ 269.254092][T12483] veth1_vlan: entered promiscuous mode [ 269.365522][T12483] veth0_macvtap: entered promiscuous mode [ 269.374844][T12483] veth1_macvtap: entered promiscuous mode [ 269.415259][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.418049][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.421561][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.424490][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.427028][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.430074][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.433106][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.441168][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.443947][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.446803][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.449548][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.452295][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.456464][T12483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.482099][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.494412][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.497008][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.504450][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.507460][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.514111][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.516844][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.538331][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.541633][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.544583][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.547141][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.558324][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.562299][T12483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.605339][T12483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.607671][T12483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.616387][T12483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.618753][T12483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.844572][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.846634][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.885875][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.890579][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.365652][T12708] IPv4: Oversized IP packet from 172.20.20.24 [ 270.368838][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 270.371020][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 270.393895][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 270.432532][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.447723][T12712] gre0: Master is either lo or non-ether device [ 270.534316][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.589908][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.711427][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.901085][ T75] bridge_slave_1: left allmulticast mode [ 270.903107][ T75] bridge_slave_1: left promiscuous mode [ 270.905109][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.908632][ T75] bridge_slave_0: left allmulticast mode [ 270.910230][ T75] bridge_slave_0: left promiscuous mode [ 270.911753][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.255454][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.262244][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.267198][ T75] bond0 (unregistering): Released all slaves [ 271.599027][ T75] hsr_slave_0: left promiscuous mode [ 271.601076][ T75] hsr_slave_1: left promiscuous mode [ 271.602884][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.604897][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.607103][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.609317][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.648181][ T75] veth1_macvtap: left promiscuous mode [ 271.655563][ T75] veth0_macvtap: left promiscuous mode [ 271.657024][ T75] veth1_vlan: left promiscuous mode [ 271.658509][ T75] veth0_vlan: left promiscuous mode [ 272.353545][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.356377][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.372388][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.377257][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.379521][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.381500][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.645739][T12741] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 272.762562][ T75] team0 (unregistering): Port device team_slave_1 removed [ 272.895278][ T75] team0 (unregistering): Port device team_slave_0 removed [ 272.937082][T12749] ufs: You didn't specify the type of your ufs filesystem [ 272.937082][T12749] [ 272.937082][T12749] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 272.937082][T12749] [ 272.937082][T12749] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 272.944993][T12749] ufs: ufstype=old is supported read-only [ 272.966429][T12749] ufs: ufs_fill_super(): bad magic number [ 273.673323][T12757] batman_adv: batadv0: Adding interface: ip6gretap1 [ 273.675133][T12757] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 273.681267][T12757] batman_adv: batadv0: Interface activated: ip6gretap1 [ 273.681495][ T39] kauditd_printk_skb: 1022 callbacks suppressed [ 273.681504][ T39] audit: type=1400 audit(1732629401.118:22772): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=47044 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 273.692489][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.702060][ T39] audit: type=1400 audit(1732629401.118:22773): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 273.707687][ T39] audit: type=1400 audit(1732629401.118:22774): avc: denied { search } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.713842][ T39] audit: type=1400 audit(1732629401.118:22775): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.724526][ T39] audit: type=1400 audit(1732629401.118:22776): avc: denied { append open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.741095][ T39] audit: type=1400 audit(1732629401.138:22777): avc: denied { getattr } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.754876][ T39] audit: type=1400 audit(1732629401.138:22778): avc: denied { recv } for pid=5862 comm="sshd" saddr=10.0.2.2 src=40714 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 273.766402][ T39] audit: type=1400 audit(1732629401.158:22779): avc: denied { read write } for pid=11954 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.777136][ T39] audit: type=1400 audit(1732629401.158:22780): avc: denied { read write open } for pid=11954 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.785853][ T39] audit: type=1400 audit(1732629401.158:22781): avc: denied { ioctl } for pid=11954 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.817274][ T5953] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 273.825683][ T5953] Bluetooth: hci3: Injecting HCI hardware error event [ 273.829649][ T5953] Bluetooth: hci3: hardware error 0x00 [ 273.870160][T12732] syzkaller0 speed is unknown, defaulting to 1000 [ 273.896196][T12759] syz.8.1762[12759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.897030][T12759] syz.8.1762[12759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.904572][T12759] syz.8.1762[12759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.212002][T12732] chnl_net:caif_netlink_parms(): no params data found [ 274.232638][T12768] IPv6: Can't replace route, no match found [ 274.317904][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.320141][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.322060][T12732] bridge_slave_0: entered allmulticast mode [ 274.324056][T12732] bridge_slave_0: entered promiscuous mode [ 274.331242][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.333105][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.334953][T12732] bridge_slave_1: entered allmulticast mode [ 274.337002][T12732] bridge_slave_1: entered promiscuous mode [ 274.363001][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.369386][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.416730][T12732] team0: Port device team_slave_0 added [ 274.421617][T12732] team0: Port device team_slave_1 added [ 274.449037][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.450863][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.451578][ T5947] Bluetooth: hci1: command tx timeout [ 274.457545][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.465824][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.467705][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.474369][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.505605][T12732] hsr_slave_0: entered promiscuous mode [ 274.507554][T12732] hsr_slave_1: entered promiscuous mode [ 274.518405][ T2289] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 274.688478][ T2289] usb 13-1: Using ep0 maxpacket: 8 [ 274.699427][ T2289] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.704203][ T2289] usb 13-1: config 179 has no interface number 0 [ 274.705993][ T2289] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 274.709178][ T2289] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 274.712194][ T2289] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.715281][ T2289] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 274.718397][ T2289] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.721977][ T2289] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.724486][ T2289] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.735644][T12768] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 274.974364][ T2289] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input21 [ 275.008098][T12788] SELinux: policydb string SE does not match my string SE Linux [ 275.010182][T12788] SELinux: failed to load policy [ 275.170236][T12732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.182015][T12732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.191457][T12732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.223716][T12732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.266974][ T6008] usb 13-1: USB disconnect, device number 6 [ 275.267094][ C2] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 275.271202][ C2] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 275.272960][ T6008] xpad 13-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 275.278236][T12798] netlink: 47 bytes leftover after parsing attributes in process `syz.7.1773'. [ 275.431847][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.463249][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.477822][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.480343][ T8207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.488234][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.490974][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.529589][T12803] netlink: 'syz.7.1774': attribute type 4 has an invalid length. [ 275.544829][T12803] netlink: 'syz.7.1774': attribute type 4 has an invalid length. [ 275.841064][T12806] netlink: 'syz.7.1775': attribute type 10 has an invalid length. [ 275.859837][T12806] batman_adv: batadv0: Adding interface: team0 [ 275.861949][T12806] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.878349][T12806] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 275.888430][ T5953] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 275.917093][T12806] netlink: 'syz.7.1775': attribute type 10 has an invalid length. [ 275.928359][T12806] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1775'. [ 275.948928][T12806] team0: entered promiscuous mode [ 275.950268][T12806] team_slave_0: entered promiscuous mode [ 275.951804][T12806] team_slave_1: entered promiscuous mode [ 275.953929][T12806] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.955761][T12806] batman_adv: batadv0: Interface activated: team0 [ 275.957488][T12806] batman_adv: batadv0: Interface deactivated: team0 [ 275.968387][T12806] batman_adv: batadv0: Removing interface: team0 [ 275.970608][T12806] bridge0: port 3(team0) entered blocking state [ 275.972286][T12806] bridge0: port 3(team0) entered disabled state [ 275.973974][T12806] team0: entered allmulticast mode [ 275.975322][T12806] team_slave_0: entered allmulticast mode [ 275.976840][T12806] team_slave_1: entered allmulticast mode [ 275.988558][T12806] bridge0: port 3(team0) entered blocking state [ 275.990287][T12806] bridge0: port 3(team0) entered listening state [ 276.538458][ T5953] Bluetooth: hci1: command tx timeout [ 277.033382][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1780'. [ 277.035698][T12830] netlink: 'syz.7.1780': attribute type 7 has an invalid length. [ 277.037734][T12830] netlink: 'syz.7.1780': attribute type 8 has an invalid length. [ 277.040058][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1780'. [ 277.092129][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.270733][T12843] Mount JFS Failure: -22 [ 277.272064][T12843] jfs_mount failed w/return code = -22 [ 277.279438][T12847] netlink: 'syz.8.1784': attribute type 1 has an invalid length. [ 277.281482][T12847] netlink: 'syz.8.1784': attribute type 2 has an invalid length. [ 277.439797][T12852] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 277.763168][T12860] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 277.957694][ C1] ================================================================== [ 277.959829][ C1] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 277.961914][ C1] Read of size 8 at addr ffff888043a1a5f8 by task syz.7.1789/12865 [ 277.965017][ C1] [ 277.966403][ C1] CPU: 1 UID: 0 PID: 12865 Comm: syz.7.1789 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 277.969210][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.972350][ C1] Call Trace: [ 277.973300][ C1] [ 277.974145][ C1] dump_stack_lvl+0x116/0x1f0 [ 277.975450][ C1] print_report+0xc3/0x620 [ 277.976690][ C1] ? __virt_addr_valid+0x5e/0x590 [ 277.978113][ C1] ? __phys_addr+0xc6/0x150 [ 277.979352][ C1] kasan_report+0xd9/0x110 [ 277.980537][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 277.981924][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 277.983344][ C1] selinux_ip_output+0x1e0/0x1f0 [ 277.984762][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 277.986222][ C1] nf_hook_slow+0xbb/0x200 [ 277.987432][ C1] nf_hook+0x386/0x6d0 [ 277.988548][ C1] ? __pfx_dst_output+0x10/0x10 [ 277.989879][ C1] ? __pfx_nf_hook+0x10/0x10 [ 277.991129][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 277.992778][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 277.994321][ C1] ? __pfx_dst_output+0x10/0x10 [ 277.995644][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 277.996976][ C1] ? do_csum+0x26f/0x2d0 [ 277.998125][ C1] __ip_local_out+0x339/0x640 [ 277.999431][ C1] ? __pfx_dst_output+0x10/0x10 [ 278.000751][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 278.002460][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 278.003956][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 278.005566][ C1] ? process_one_work+0x9c5/0x1ba0 [ 278.006940][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 278.008368][ C1] ? mark_lock+0xb5/0xc60 [ 278.009566][ C1] ? tcp_v4_send_reset+0xd35/0x2f20 [ 278.010913][ C1] tcp_v4_send_reset+0x129b/0x2f20 [ 278.012204][ C1] ? hlock_class+0x4e/0x130 [ 278.013414][ C1] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 278.014867][ C1] ? tcp_parse_options+0x1f5/0x11b0 [ 278.016186][ C1] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 278.017868][ C1] ? __asan_memmove+0x3c/0x60 [ 278.019105][ C1] ? tcp_v4_rcv+0x3715/0x4380 [ 278.020331][ C1] tcp_v4_rcv+0x3715/0x4380 [ 278.021565][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 278.022914][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 278.024443][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.025748][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 278.027054][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 278.028496][ C1] ip_local_deliver_finish+0x316/0x570 [ 278.030021][ C1] ip_local_deliver+0x18e/0x1f0 [ 278.031331][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 278.032810][ C1] ip_rcv+0x2c3/0x5d0 [ 278.033885][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 278.035184][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 278.036821][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 278.038515][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.039799][ C1] ? process_backlog+0x3f1/0x15f0 [ 278.041205][ C1] ? process_backlog+0x3f1/0x15f0 [ 278.042551][ C1] __netif_receive_skb+0x1d/0x160 [ 278.043936][ C1] process_backlog+0x443/0x15f0 [ 278.045369][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 278.046844][ C1] net_rx_action+0xa94/0x1010 [ 278.048115][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 278.049498][ C1] ? __pfx_mark_lock+0x10/0x10 [ 278.050783][ C1] ? sched_ttwu_pending+0x2e9/0x560 [ 278.052177][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 278.053653][ C1] ? sched_clock+0x38/0x60 [ 278.054894][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 278.056210][ C1] ? mark_held_locks+0x9f/0xe0 [ 278.057501][ C1] handle_softirqs+0x213/0x8f0 [ 278.058789][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 278.060236][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 278.061713][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 278.063106][ C1] do_softirq+0xb2/0xf0 [ 278.064307][ C1] [ 278.065143][ C1] [ 278.065965][ C1] __local_bh_enable_ip+0x100/0x120 [ 278.067376][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 278.068784][ C1] __dev_queue_xmit+0x8b0/0x43e0 [ 278.070123][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 278.071535][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 278.073001][ C1] ? hlock_class+0x4e/0x130 [ 278.074302][ C1] ? mark_lock+0xb5/0xc60 [ 278.075496][ C1] ? selinux_ip_postroute+0x73b/0xde0 [ 278.076953][ C1] ? __pfx_mark_lock+0x10/0x10 [ 278.078301][ C1] ? find_held_lock+0x2d/0x110 [ 278.079597][ C1] ? __ip_finish_output+0x49e/0x950 [ 278.081000][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.082347][ C1] ? mark_held_locks+0x9f/0xe0 [ 278.083696][ C1] ip_finish_output2+0xc6c/0x2150 [ 278.085183][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 278.086661][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 278.087958][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 278.089371][ C1] __ip_finish_output+0x49e/0x950 [ 278.090767][ C1] ip_finish_output+0x35/0x380 [ 278.092056][ C1] ip_output+0x13b/0x2a0 [ 278.093224][ C1] ? __pfx_ip_output+0x10/0x10 [ 278.094565][ C1] ip_local_out+0x33e/0x4a0 [ 278.095803][ C1] __ip_queue_xmit+0x777/0x1970 [ 278.097127][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 278.098526][ C1] __tcp_transmit_skb+0x2b39/0x3df0 [ 278.099931][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 278.101419][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.102754][ C1] ? ktime_get+0x206/0x300 [ 278.103999][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.105503][ C1] tcp_write_xmit+0x12b1/0x8560 [ 278.106828][ C1] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 278.108298][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 278.109737][ C1] tcp_push+0x221/0x6f0 [ 278.110795][ C1] mptcp_push_release.isra.0+0xa8/0xe0 [ 278.112197][ C1] __mptcp_push_pending+0x400/0x560 [ 278.113502][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 278.115006][ C1] ? __virt_addr_valid+0x5e/0x590 [ 278.116309][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 278.117865][ C1] ? __phys_addr_symbol+0x30/0x80 [ 278.119164][ C1] ? __check_object_size+0x488/0x710 [ 278.120532][ C1] mptcp_sendmsg+0x1960/0x1f20 [ 278.121750][ C1] ? selinux_socket_post_create+0x781/0x7f0 [ 278.123282][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 278.124886][ C1] ? __might_fault+0xe3/0x190 [ 278.126155][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 278.127498][ C1] inet_sendmsg+0x119/0x140 [ 278.128707][ C1] ____sys_sendmsg+0x98c/0xc90 [ 278.130002][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.131365][ C1] ___sys_sendmsg+0x135/0x1e0 [ 278.132611][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.133994][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.135346][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 278.136706][ C1] ? __fget_files+0x206/0x3a0 [ 278.137994][ C1] __sys_sendmsg+0x16e/0x220 [ 278.139229][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.140588][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 278.141889][ C1] do_syscall_64+0xcd/0x250 [ 278.143094][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.144752][ C1] RIP: 0033:0x7fa05df7e919 [ 278.145935][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.150963][ C1] RSP: 002b:00007fa05ed60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.153171][ C1] RAX: ffffffffffffffda RBX: 00007fa05e135fa0 RCX: 00007fa05df7e919 [ 278.155579][ C1] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 278.157671][ C1] RBP: 00007fa05dff197e R08: 0000000000000000 R09: 0000000000000000 [ 278.159754][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.161835][ C1] R13: 0000000000000000 R14: 00007fa05e135fa0 R15: 00007ffefeb0d818 [ 278.163878][ C1] [ 278.164756][ C1] [ 278.165456][ C1] The buggy address belongs to the object at ffff888043a1a580 [ 278.165456][ C1] which belongs to the cache tw_sock_TCPv6 of size 288 [ 278.169251][ C1] The buggy address is located 120 bytes inside of [ 278.169251][ C1] allocated 288-byte region [ffff888043a1a580, ffff888043a1a6a0) [ 278.172962][ C1] [ 278.173640][ C1] The buggy address belongs to the physical page: [ 278.175438][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888043a1a000 pfn:0x43a1a [ 278.178268][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 278.181096][ C1] memcg:ffff888023b2fd01 [ 278.182533][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 278.185084][ C1] page_type: f5(slab) [ 278.186369][ C1] raw: 00fff00000000040 ffff88810009de00 dead000000000122 0000000000000000 [ 278.188806][ C1] raw: ffff888043a1a000 0000000080170016 00000001f5000000 ffff888023b2fd01 [ 278.191111][ C1] head: 00fff00000000040 ffff88810009de00 dead000000000122 0000000000000000 [ 278.193610][ C1] head: ffff888043a1a000 0000000080170016 00000001f5000000 ffff888023b2fd01 [ 278.195978][ C1] head: 00fff00000000001 ffffea00010e8681 ffffffffffffffff 0000000000000000 [ 278.198272][ C1] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 278.200568][ C1] page dumped because: kasan: bad access detected [ 278.202312][ C1] page_owner tracks the page as allocated [ 278.203806][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7508, tgid 7508 (syz.4.380), ts 62631643278, free_ts 62554760654 [ 278.208949][ C1] post_alloc_hook+0x2d1/0x350 [ 278.210226][ C1] get_page_from_freelist+0xfce/0x2f80 [ 278.211662][ C1] __alloc_pages_noprof+0x223/0x25a0 [ 278.213095][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 278.214616][ C1] new_slab+0x2c9/0x410 [ 278.215743][ C1] ___slab_alloc+0xdac/0x1870 [ 278.217050][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 278.218485][ C1] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 278.219936][ C1] inet_twsk_alloc+0x120/0x970 [ 278.221234][ C1] tcp_time_wait+0x5f/0xe10 [ 278.222444][ C1] tcp_fin+0x418/0x500 [ 278.223542][ C1] tcp_data_queue+0x1d61/0x4d80 [ 278.224873][ C1] tcp_rcv_state_process+0xf6f/0x4c40 [ 278.226359][ C1] tcp_v4_do_rcv+0x1ad/0xa90 [ 278.227635][ C1] tcp_v4_rcv+0x33a0/0x4380 [ 278.228876][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 278.230331][ C1] page last free pid 7500 tgid 7499 stack trace: [ 278.232013][ C1] free_unref_page+0x661/0x1080 [ 278.233363][ C1] __mmdrop+0xd5/0x460 [ 278.234541][ C1] finish_task_switch.isra.0+0x7af/0xcc0 [ 278.236022][ C1] __schedule+0xe60/0x5ad0 [ 278.237266][ C1] preempt_schedule_irq+0x51/0x90 [ 278.238613][ C1] irqentry_exit+0x36/0x90 [ 278.239830][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 278.241306][ C1] [ 278.241932][ C1] Memory state around the buggy address: [ 278.243431][ C1] ffff888043a1a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.245590][ C1] ffff888043a1a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.247720][ C1] >ffff888043a1a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.249850][ C1] ^ [ 278.251905][ C1] ffff888043a1a600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.254041][ C1] ffff888043a1a680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.256149][ C1] ================================================================== [ 278.258521][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 278.260439][ C1] CPU: 1 UID: 0 PID: 12865 Comm: syz.7.1789 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 278.263170][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.266208][ C1] Call Trace: [ 278.267125][ C1] [ 278.267911][ C1] dump_stack_lvl+0x3d/0x1f0 [ 278.269170][ C1] panic+0x71d/0x800 [ 278.270226][ C1] ? mark_held_locks+0x9f/0xe0 [ 278.271497][ C1] ? __pfx_panic+0x10/0x10 [ 278.272696][ C1] ? irqentry_exit+0x3b/0x90 [ 278.273937][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.275359][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 278.276756][ C1] check_panic_on_warn+0xab/0xb0 [ 278.278063][ C1] end_report+0x117/0x180 [ 278.279211][ C1] kasan_report+0xe9/0x110 [ 278.280410][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 278.281800][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 278.283146][ C1] selinux_ip_output+0x1e0/0x1f0 [ 278.284604][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 278.286183][ C1] nf_hook_slow+0xbb/0x200 [ 278.287427][ C1] nf_hook+0x386/0x6d0 [ 278.288521][ C1] ? __pfx_dst_output+0x10/0x10 [ 278.289848][ C1] ? __pfx_nf_hook+0x10/0x10 [ 278.291075][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 278.292611][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 278.294129][ C1] ? __pfx_dst_output+0x10/0x10 [ 278.295557][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 278.296894][ C1] ? do_csum+0x26f/0x2d0 [ 278.298045][ C1] __ip_local_out+0x339/0x640 [ 278.299293][ C1] ? __pfx_dst_output+0x10/0x10 [ 278.300581][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 278.302014][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 278.303434][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 278.305059][ C1] ? process_one_work+0x9c5/0x1ba0 [ 278.306320][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 278.307743][ C1] ? mark_lock+0xb5/0xc60 [ 278.308882][ C1] ? tcp_v4_send_reset+0xd35/0x2f20 [ 278.310444][ C1] tcp_v4_send_reset+0x129b/0x2f20 [ 278.311821][ C1] ? hlock_class+0x4e/0x130 [ 278.313043][ C1] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 278.314549][ C1] ? tcp_parse_options+0x1f5/0x11b0 [ 278.315947][ C1] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 278.317661][ C1] ? __asan_memmove+0x3c/0x60 [ 278.318917][ C1] ? tcp_v4_rcv+0x3715/0x4380 [ 278.320168][ C1] tcp_v4_rcv+0x3715/0x4380 [ 278.321402][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 278.322693][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 278.324198][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.325538][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 278.326833][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 278.328321][ C1] ip_local_deliver_finish+0x316/0x570 [ 278.329770][ C1] ip_local_deliver+0x18e/0x1f0 [ 278.331096][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 278.332504][ C1] ip_rcv+0x2c3/0x5d0 [ 278.333584][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 278.334782][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 278.336346][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 278.338166][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.339442][ C1] ? process_backlog+0x3f1/0x15f0 [ 278.340766][ C1] ? process_backlog+0x3f1/0x15f0 [ 278.342123][ C1] __netif_receive_skb+0x1d/0x160 [ 278.343475][ C1] process_backlog+0x443/0x15f0 [ 278.344827][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 278.346240][ C1] net_rx_action+0xa94/0x1010 [ 278.347536][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 278.348928][ C1] ? __pfx_mark_lock+0x10/0x10 [ 278.350193][ C1] ? sched_ttwu_pending+0x2e9/0x560 [ 278.351561][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 278.352939][ C1] ? sched_clock+0x38/0x60 [ 278.354196][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 278.355525][ C1] ? mark_held_locks+0x9f/0xe0 [ 278.356806][ C1] handle_softirqs+0x213/0x8f0 [ 278.358123][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 278.359524][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 278.360961][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 278.362284][ C1] do_softirq+0xb2/0xf0 [ 278.363352][ C1] [ 278.364131][ C1] [ 278.364943][ C1] __local_bh_enable_ip+0x100/0x120 [ 278.366317][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 278.367730][ C1] __dev_queue_xmit+0x8b0/0x43e0 [ 278.369100][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 278.370432][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 278.371840][ C1] ? hlock_class+0x4e/0x130 [ 278.373090][ C1] ? mark_lock+0xb5/0xc60 [ 278.374322][ C1] ? selinux_ip_postroute+0x73b/0xde0 [ 278.375937][ C1] ? __pfx_mark_lock+0x10/0x10 [ 278.377256][ C1] ? find_held_lock+0x2d/0x110 [ 278.378604][ C1] ? __ip_finish_output+0x49e/0x950 [ 278.379982][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.381368][ C1] ? mark_held_locks+0x9f/0xe0 [ 278.382647][ C1] ip_finish_output2+0xc6c/0x2150 [ 278.384020][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 278.385509][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 278.387163][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 278.389033][ C1] __ip_finish_output+0x49e/0x950 [ 278.390867][ C1] ip_finish_output+0x35/0x380 [ 278.392610][ C1] ip_output+0x13b/0x2a0 [ 278.394151][ C1] ? __pfx_ip_output+0x10/0x10 [ 278.395910][ C1] ip_local_out+0x33e/0x4a0 [ 278.397613][ C1] __ip_queue_xmit+0x777/0x1970 [ 278.399382][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 278.401238][ C1] __tcp_transmit_skb+0x2b39/0x3df0 [ 278.403095][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 278.405070][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.406862][ C1] ? ktime_get+0x206/0x300 [ 278.408144][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.409561][ C1] tcp_write_xmit+0x12b1/0x8560 [ 278.410857][ C1] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 278.412462][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 278.413938][ C1] tcp_push+0x221/0x6f0 [ 278.415078][ C1] mptcp_push_release.isra.0+0xa8/0xe0 [ 278.416552][ C1] __mptcp_push_pending+0x400/0x560 [ 278.417978][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 278.419516][ C1] ? __virt_addr_valid+0x5e/0x590 [ 278.420891][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 278.422501][ C1] ? __phys_addr_symbol+0x30/0x80 [ 278.423837][ C1] ? __check_object_size+0x488/0x710 [ 278.425312][ C1] mptcp_sendmsg+0x1960/0x1f20 [ 278.426580][ C1] ? selinux_socket_post_create+0x781/0x7f0 [ 278.428168][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 278.429593][ C1] ? __might_fault+0xe3/0x190 [ 278.430867][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 278.432304][ C1] inet_sendmsg+0x119/0x140 [ 278.433846][ C1] ____sys_sendmsg+0x98c/0xc90 [ 278.435616][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.437522][ C1] ___sys_sendmsg+0x135/0x1e0 [ 278.439212][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.441087][ C1] ? __pfx_lock_release+0x10/0x10 [ 278.442862][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 278.444787][ C1] ? __fget_files+0x206/0x3a0 [ 278.446501][ C1] __sys_sendmsg+0x16e/0x220 [ 278.448178][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.450001][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 278.451786][ C1] do_syscall_64+0xcd/0x250 [ 278.453445][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.455578][ C1] RIP: 0033:0x7fa05df7e919 [ 278.457198][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.463740][ C1] RSP: 002b:00007fa05ed60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.466104][ C1] RAX: ffffffffffffffda RBX: 00007fa05e135fa0 RCX: 00007fa05df7e919 [ 278.468315][ C1] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 278.470398][ C1] RBP: 00007fa05dff197e R08: 0000000000000000 R09: 0000000000000000 [ 278.472459][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.474633][ C1] R13: 0000000000000000 R14: 00007fa05e135fa0 R15: 00007ffefeb0d818 [ 278.476720][ C1] [ 278.478084][ C1] Kernel Offset: disabled [ 278.479247][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:56:45 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000002 RDX=1ffffffff1c37751 RSI=1ffff920008f7eb3 RDI=ffffffff8e1bba88 RBP=0000000000000000 RSP=ffffc900047bf508 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90608e17 R11=0000000000000001 R12=ffffffff8e1bba80 R13=ffff888026c90000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff816b3697 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3b75bfad58 CR3=0000000062422000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e9f281b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e9f2828 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e9f2822 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e9f2836 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e9f28bc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e9f299a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4eb0d488 00007fae4eb0d480 00007fae4eb0d478 00007fae4eb0d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4f66d100 00007fae4eb0d440 00007fae4eb00004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4eb0d498 00007fae4eb0d490 00007fae4eb0d488 00007fae4eb0d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85106065 RDI=ffffffff9ab3da20 RBP=ffffffff9ab3d9e0 RSP=ffffc900006afd00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000037 R14=ffffffff85106000 R15=0000000000000000 RIP=ffffffff8510608f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa05ed606c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa05ed5ff98 CR3=000000005e112000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000004 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffc90004487588 RCX=ffffc90004488000 RDX=ffffc90004487c01 RSI=ffffc90004487c60 RDI=ffffc90004487588 RBP=ffffc90004487c60 RSP=ffffc900044874d8 R8 =ffffffff91034008 R9 =ffffffff91033fd6 R10=ffffc90004487588 R11=0000000000010bb2 R12=0000000000000008 R13=ffffc90004487598 R14=ffffc90004487590 R15=ffffc90004480000 RIP=ffffffff813dfe71 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1adfdda280 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557dac3808 CR3=0000000059258000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000002 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffead9e5fa0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19694645585e4445 4905194e584b4905 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e445f4559051a04 1b101b071c051b07 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727265006d25203a 7d73257b52545441 20676e6974697277 20726f7272650065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e5e490041090c16 515f095752545441 0c4b424558455e5b 0c5e435e5e490049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7eb10b4bfb0e995b 00005588454065ff 0000000000000151 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000312e6463685f 796d6d0000003073 6a2f31327475706e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558d1d933a20 0000558d1d937390 0000558d1d995300 0000558d1d9348f0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303a2433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000033494d RBX=0000000000000003 RCX=ffffffff8b2ecd99 RDX=0000000000000000 RSI=ffffffff8b6cdee0 RDI=ffffffff8bd1d600 RBP=ffffed1003ad2488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d692440 R14=ffffffff90608e10 R15=0000000000000000 RIP=ffffffff8b2ee17f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001040 CR3=000000002943a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2f88ac70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b74df281b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b74df2828 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b74df2822 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b74df2836 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b74df28bc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b74df299a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000