last executing test programs: 1m20.011604492s ago: executing program 3 (id=397): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40003}, 0x44000) r4 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x2, 0x6, 0x8003004, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x9000) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4801) r6 = socket$netlink(0x10, 0x3, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, {0x3, 0x101, 0x4, 0xa2c}}) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000000c0)=0x3, 0x4) syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x10401) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000400)='(\x00', 0x2, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(r8, 0x9) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) 1m19.911871251s ago: executing program 3 (id=400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007c9"], 0x0, 0x52, 0x0, 0x1}, 0x28) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r1, 0x80000, 0x3) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000540)=@xdp, 0x80, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/195, 0xc3}], 0x3}, 0x464a}, {{&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000008c0)=""/192, 0xc0}, {&(0x7f0000000980)=""/231, 0xe7}, {&(0x7f0000000a80)=""/204, 0xcc}, {&(0x7f0000000b80)=""/139, 0x8b}, {&(0x7f0000000c40)=""/87, 0x57}, {&(0x7f0000000cc0)=""/74, 0x4a}, {&(0x7f0000000d40)=""/73, 0x49}, {&(0x7f0000000dc0)=""/111, 0x6f}, {&(0x7f0000000e40)=""/12, 0xc}], 0x9, &(0x7f0000000f40)=""/133, 0x85}, 0x1}, {{&(0x7f0000001000)=@isdn, 0x80, &(0x7f0000001440)=[{&(0x7f0000001080)=""/162, 0xa2}, {&(0x7f0000001140)=""/197, 0xc5}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/230, 0xe6}, {&(0x7f0000001400)=""/42, 0x2a}], 0x5, &(0x7f00000014c0)=""/208, 0xd0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000015c0)=""/247, 0xf7}, {&(0x7f00000016c0)=""/50, 0x32}, {&(0x7f0000001700)=""/116, 0x74}, {&(0x7f0000001780)=""/149, 0x95}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/123, 0x7b}, {&(0x7f0000001900)=""/66, 0x42}, {&(0x7f0000001980)=""/134, 0x86}, {&(0x7f0000001a40)=""/38, 0x26}], 0x9, &(0x7f0000001b40)=""/62, 0x3e}, 0x1}], 0x4, 0x40004020, &(0x7f0000001c80)={0x77359400}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mmap$usbfs(&(0x7f0000229000/0x2000)=nil, 0x2000, 0x100000d, 0x110, r4, 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x980903, 0x4}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "000000200100", "376a30a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e580c", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) process_madvise(r4, &(0x7f0000000300)=[{&(0x7f0000000440)="05d6cd630ea3326a00790435b234ca4dcd2e84c006016236dbed4f8bafcf9ef522bef4f71105e2c5c0871733f62cd73da481a4bd80a1f673b1bfedc0ccf5016054f64159db4eaaeb90fc1e32abf2d1f143309147800a377d2b2183ba8c43624cd337b660c15e638739bb64523ad55825e8750e6e721b11a7c1c30bdafcf59293fa30b52e099adf67003fc5acb020ed6b09a2d83c58636bb8854d2f511348cc89d0418db1d66f909d4e1f70b7bcdcbf549ff0d723ea817980bf589f2373d5b1d587dcb00b765bf86183f676b6ae7c6f9bd66292955345b65a7d2b28cf897f3b17eb0a84129b58aabcfe328bd47192e2feb7", 0xf1}], 0x1, 0xf, 0x0) 1m19.773254767s ago: executing program 3 (id=406): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xc4, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m19.770714032s ago: executing program 3 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000240)="f7293eda8d516e660f164fd5baf80c66b838833b8466efbafc0cedb809010f00d87c000f01d10f20c06635000000200f22c0660fae38b8a3008ee8", 0x3b}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x7ff, 0x800000000000008, 0x9, 0x7fffffff, 0x6, 0x5, 0x1, 0xb608, 0x6, 0x2, 0xfffffffffffffe01, 0x7fffffffffffffff, 0xc6b, 0x3, 0x42, 0x101], 0x0, 0x1000}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m19.611953844s ago: executing program 3 (id=412): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) fsetxattr$security_capability(r0, &(0x7f0000001cc0), &(0x7f0000000140)=@v2={0x2000000, [{0x101, 0x7}, {0x100005, 0x20000003}]}, 0x14, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001d80)={0x2, 0x4}, 0x2) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x80010, r0, 0x82000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r2 = syz_open_dev$swradio(&(0x7f0000003200), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000000)={0x20000009, "fe1814002189dec0bfffff0800000000000200", 0x5, 0x1000, 0x9, 0x80, 0x4, 0x3, 0xfffefffb, 0x8}) openat$null(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r3) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x9, 0x4}, 0x14}, 0x1, 0xa6, 0x0, 0x48890}, 0x8000) 1m18.760701308s ago: executing program 3 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82", 0x2}, {&(0x7f00000005c0)="f422", 0x2}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) 1m3.751536545s ago: executing program 32 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82", 0x2}, {&(0x7f00000005c0)="f422", 0x2}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) 39.201309726s ago: executing program 0 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000000)="15046a87e04d7dbe527c64413845988bc03b6b54bef7e292b3652b92359f0628666900094c32ab979215d55b81f0f648f2af231e4bfd74") sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x3c}}, 0x0) 39.069264185s ago: executing program 0 (id=1030): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0198000003130000240012800900010069706970"], 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8c4000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="601661c4ad13"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x54a8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x787}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4000051) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r7 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 37.97771763s ago: executing program 0 (id=1041): getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020}, 0x2020) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4d, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_getvlan={0x0, 0x72, 0x200, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000020}, 0x1) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020}, 0x2020) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4d, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_getvlan={0x0, 0x72, 0x200, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000020}, 0x1) (async) 37.893999009s ago: executing program 0 (id=1044): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d000000000008000600090000000800080009000000ccbb577cb1fb0df1471bb61ddebad7dc0a6623d1ef4d56c38e137f98bbf87f8a434d02016395eb4f4d23d053884124d6cd79484537ae4fdb8bb878614a857770346264e22f8284a0ffe4739b9a033d44020c537aa121e4f2837eee136372117ed74709972a086d51737d0a66aa"], 0x48}, 0x1, 0x0, 0x0, 0x40005}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000d73000/0x4000)=nil], 0x0, &(0x7f00000003c0), 0x2) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 37.812836347s ago: executing program 0 (id=1047): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x4}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x4}, 0x18) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) (async) 37.541774006s ago: executing program 0 (id=1052): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) close(r0) 37.462357098s ago: executing program 33 (id=1052): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) close(r0) 28.998087408s ago: executing program 2 (id=1152): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x92000000000000f5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000002010040"]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="b805000000b90001c0fe0f01c13e0f79a8fb7f0000c46225a9fbc423656858883f66baf80cb8c6db7986ef66bafc0c66ed400f35b9800000c00f3235010000000f30f3470fc733c441fa532e66b8f7000f00d8", 0x53}], 0x1, 0x59, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28.790322496s ago: executing program 2 (id=1158): r0 = socket$inet6(0xa, 0x3, 0x2f) r1 = memfd_create(&(0x7f0000000280)='#,\x91\'\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r0, 0xe4, 0x5, 0x2, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913a, 0x0, 0x8, 0xf42, 0xfffffffffffffff7}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x2b}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="3c00db000000008b"], 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200080000000002, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x2, "7e0efe3287fda55aab2500000000b482b200", 0x30313953}) close(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x800, 0x2) 28.790080242s ago: executing program 2 (id=1159): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x40001) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000085", @ANYRESHEX=0x0]) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r6 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r6, &(0x7f0000001600)=ANY=[@ANYBLOB="0000000300"], 0x11d1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f00000000c0)=0x8, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 28.718966335s ago: executing program 2 (id=1161): mkdir(&(0x7f0000000080)='./file1\x00', 0xb) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x3000016, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r2, 0x0, 0x0, 0x1001f0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x8000a0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x3000016, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000080)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) (async) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) (async) fallocate(r2, 0x0, 0x0, 0x1001f0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x8000a0, 0x0) (async) 28.670667409s ago: executing program 2 (id=1163): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) close_range(r2, r3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES64=r1], 0x84}}, 0x24000094) 28.470568224s ago: executing program 2 (id=1165): bpf$MAP_CREATE(0x0, 0x0, 0x50) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@code={0xa, 0x7e, {"67440f01b500080000f3400f2b1a470f01f866b840000f00d866baf80cb83c536d8bef66bafc0cb84b260000efc744240000000000c74424029c5c0000c7442406000000000f01142466baf80cb88cde7287ef66bafc0c66ed470f1a29c4811b5c974e1e000041d3bd00300000"}}, @rdmsr={0x32, 0x18, {0xa14}}, @out_dx={0xaa, 0x28, {0xd34, 0x1, 0x2}}, @out_dx={0xaa, 0x28, {0x4662, 0x2, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x2a7, 0xdfc3}}], 0x106}) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket(0x15, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe0}, {0x8, 0x9}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008093) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28.41780855s ago: executing program 34 (id=1165): bpf$MAP_CREATE(0x0, 0x0, 0x50) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@code={0xa, 0x7e, {"67440f01b500080000f3400f2b1a470f01f866b840000f00d866baf80cb83c536d8bef66bafc0cb84b260000efc744240000000000c74424029c5c0000c7442406000000000f01142466baf80cb88cde7287ef66bafc0c66ed470f1a29c4811b5c974e1e000041d3bd00300000"}}, @rdmsr={0x32, 0x18, {0xa14}}, @out_dx={0xaa, 0x28, {0xd34, 0x1, 0x2}}, @out_dx={0xaa, 0x28, {0x4662, 0x2, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x2a7, 0xdfc3}}], 0x106}) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket(0x15, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe0}, {0x8, 0x9}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008093) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.609781772s ago: executing program 6 (id=1313): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xc4, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 15.60959204s ago: executing program 6 (id=1314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4810) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) 15.480800695s ago: executing program 6 (id=1316): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x2100) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x18, 0x9, 0x12, 0x1a, 0xa, 0x800, 0x3, 0x11a}) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = memfd_secret(0x80000) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000080)={0x6d, "66711737caeac0a7fae10c4c28c714587caa5cbf8b8cd0179727c75d6a069dcdcc84112513cfe618b8612456b81ad4d849a476f586266ae1bb5cedaa1cf7778871eacbb92d88d1507e80a9381210b7fbb5017d89f0aeb8931481280b7a9e1c9c5bb79158aa576d8c22b87c7df57a5e130d2996939a58c889c8803e4a3c2e5ef0"}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0xb, 0x22, 0x0, 0x11, 0x9, 0x4, 0x2, 0x36, 0x1}}) r2 = socket(0xa, 0x3, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x5, 0x4e23, 0x7, 0xa, 0x20, 0x80, 0x33, 0x0, r4}, {0x2, 0x7, 0x8, 0x9, 0x1, 0x1ffe, 0x5, 0xe}, {0x2, 0x2, 0x4, 0x5}, 0x4, 0x6e6bb6, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d6, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x2, 0x2, 0x1, 0x0, 0x3816, 0xfffff82f}}, 0xe8) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000002c0)={0xfff, 0x7f, 0xffff, 0x7ff, 0x1, 0x9, 0x3}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000540)={0x0, 0x0, {0x3a, 0xc, 0x3, 0xa, 0xb, 0xe6, 0x1, 0x8a, 0x1}}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@deltaction={0x124, 0x31, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xed4a}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9af}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfc0}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004000}, 0x48000) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r6 = accept$phonet_pipe(r1, &(0x7f00000007c0), &(0x7f0000000800)=0x10) ppoll(&(0x7f0000000840)=[{r2, 0x2200}, {r2}, {r5, 0x8020}, {r6}], 0x4, &(0x7f0000000880), &(0x7f00000008c0)={[0x7]}, 0x8) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000900)='/dev/comedi3\x00', 0x600000, 0x0) ioctl$COMEDI_BUFCONFIG(r7, 0x8020640d, &(0x7f0000000940)={0xffffffe3, 0x200, 0x9, 0x1ff}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000980)=0x1, 0x4) close_range(r2, r6, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000009c0)={0x1, 0xfffffffffffffffe}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept$packet(r3, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000a80)=0xa) ioctl$COMEDI_SETWSUBD(r3, 0x6411) close_range(0xffffffffffffffff, r6, 0x0) ftruncate(r7, 0x4) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000b00)={0x1060, 0x1, 0x5, 0x101, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x0, 0x3}, 0x5, 0x1, 0xff43, 0xa0, 0x27, 'syz0\x00', "b0b09a4fa271929493997726cb9796c336a2ca9d2f737189db7f38e3c40531d4", "649d7ff6ef01bbf84b4edabf2fa5071ace590c8b1480e605babf6cf2f9f5bff3", [{0x5c, 0x7, {0x1, 0x8}}, {0xfecd, 0x6, {0x0, 0x11d6}}, {0xd, 0x6, {0x2, 0x200}}, {0x1, 0xfffa, {0x3, 0x7c30b4ee}}, {0x2, 0x0, {0x1, 0x4}}, {0x4, 0x1, {0x3, 0xfffffff9}}, {0x0, 0x5}, {0x4, 0xc747, {0x1, 0x8}}, {0xf800, 0xfff, {0x0, 0x5}}, {0xb46, 0x3, {0x0, 0x6}}, {0x400, 0x7, {0x3}}, {0x2, 0x0, {0x3, 0xffff}}, {0x6, 0xfff7, {0x6bb19c3ec0f17cd6, 0xd}}, {0x1f2c, 0x3, {0x1, 0x2}}, {0x2, 0x1, {0x2, 0xd0}}, {0x401, 0x3, {0x3, 0x9}}, {0x101, 0x1, {0x1, 0x9}}, {0x3ff, 0x1, {0x1}}, {0x6, 0x5114, {0x1, 0x3ff}}, {0xff7f, 0x7, {0x0, 0xfff}}, {0x36, 0x8, {0x1, 0x101}}, {0xd3, 0x7556, {0x3, 0xcfd}}, {0x1000, 0x6, {0x3, 0xc78d}}, {0x2, 0xd, {0x2a27b0166112e769, 0x5}}, {0x4, 0xfe99, {0x1, 0x5}}, {0xff7f, 0x401, {0x1, 0x6}}, {0xfff, 0x9, {0x0, 0x6}}, {0x101, 0x659b, {0x3, 0x400}}, {0x2, 0x10, {0x1, 0x9}}, {0x80, 0x800, {0x2, 0x872}}, {0x5, 0xe, {0x2, 0x7}}, {0x0, 0x8, {0x2, 0x7}}, {0x0, 0x10, {0x3, 0x5}}, {0x0, 0x1f97, {0x1, 0x259e}}, {0x5, 0x7, {0x0, 0x40}}, {0x5, 0xfffb, {0x0, 0xfffffff7}}, {0xfffe, 0x0, {0x0, 0xd}}, {0x0, 0x9, {0x0, 0x6}}, {0x329, 0x0, {0x3, 0x8}}, {0x6, 0x4148, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x0, 0x3, 0x1, 0xaf5, 0x1d, 'syz1\x00', "05a98ac0be7e981df4c6581c9f835829608e407fcef06074ee36264068b0ff27", "1658d7a4389e7786d5a4db0e225fbeb168d30bea19cbc0411991231cbf7cf7fa", [{0x3, 0x8000, {0x2, 0x8}}, {0x8, 0x2, {0x2, 0xab53000}}, {0x7ff, 0x7, {0x3, 0x83}}, {0x15, 0x0, {0x0, 0x4}}, {0x400, 0x2, {0xaeea741049b44504, 0x7}}, {0x6, 0x3, {0x2, 0x1}}, {0x5f87, 0x2, {0x0, 0xfff}}, {0x0, 0xe00, {0x1, 0x2}}, {0x401, 0x3, {0x0, 0x401}}, {0x0, 0xfff8, {0x1, 0xfffffffd}}, {0x3, 0x2, {0x2, 0x4}}, {0x7, 0x5, {0x1, 0x8}}, {0x7, 0x200, {0x2, 0x100}}, {0x1, 0x610e, {0x3, 0x8}}, {0x10, 0x3ff, {0x2, 0x1}}, {0x1, 0x2, {0x1, 0x5}}, {0xf000, 0x0, {0x3, 0xffff}}, {0x0, 0xa66, {0x3, 0x3912}}, {0x0, 0xf000, {0x2, 0xf33e}}, {0x400, 0x7ff, {0x1, 0x1c}}, {0x0, 0xfff8, {0x3, 0x8}}, {0x2, 0x1ff, {0x1, 0x5}}, {0x800, 0x2, {0x0, 0x9}}, {0xfffd, 0x6, {0x1}}, {0x4, 0x1, {0x0, 0x5}}, {0x1a, 0x5, {0x3, 0xfffffff8}}, {0x2, 0x400, {0x1, 0x10001}}, {0x80, 0x7, {0x0, 0xac7}}, {0x4, 0x1, {0x2}}, {0xc33, 0x8, {0x3, 0x9}}, {0x0, 0xc, {0x0, 0x10000}}, {0xfff7, 0xf, {0x0, 0x3}}, {0x8000, 0x2, {0x3, 0x18}}, {0x400, 0xfff, {0x2, 0x5}}, {0x2, 0xfff9, {0x3, 0x5}}, {0xb, 0xa013, {0x3, 0x4}}, {0x6, 0x0, {0x0, 0x9}}, {0xfffe, 0x720, {0x3, 0x80000001}}, {0x0, 0x0, {0x2, 0xffff}}, {0x5, 0x6, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{}, 0x9, 0x1, 0x5, 0xe4f1, 0x1b, 'syz0\x00', "9dd097a6fbc06310750482545379a44f86582d8c5cc8657d623ad0b2e0d069a8", "59871129457ce93b0a9cb8fbcc2565dfc871a77c51be3b6319bf23d25040a7b7", [{0x2, 0x1, {0x3, 0x7}}, {0x7f, 0x0, {0x3, 0x1}}, {0x7, 0x7fff, {0x2, 0x80}}, {0x4, 0x5, {0x1, 0xfffff001}}, {0xf50, 0x5, {0x2, 0xa475}}, {0x6a46, 0x9, {0x1, 0x370}}, {0x3, 0x3, {0x3, 0x5}}, {0x4, 0x8b2, {0x1, 0x2}}, {0x1, 0xfffc, {0x1, 0x5}}, {0x0, 0x400, {0x1, 0x29}}, {0x6, 0x200, {0x3, 0x6}}, {0x9e, 0xfff, {0x3, 0x6da}}, {0x9, 0x7af, {0x0, 0x8}}, {0x6, 0x3, {0xaf3695476119840f, 0x7}}, {0x7, 0x4, {0x2, 0x9e6c}}, {0x2, 0x9, {0x3, 0x6}}, {0x6, 0x832d, {0x2, 0x7c8a}}, {0x1d3, 0x4, {0x1, 0x8}}, {0x400, 0x5, {0x0, 0xffff}}, {0x7, 0x6, {0x1, 0xfffffffe}}, {0x6, 0x3, {0x3, 0x3}}, {0x7, 0x5, {0x1}}, {0x9, 0x4, {0x2, 0x1ff}}, {0xcbf, 0x2, {0x0, 0x4}}, {0x9, 0xb, {0x0, 0x7ff}}, {0x8, 0x2, {0x2, 0x4}}, {0x1, 0xfff7, {0x1, 0x401}}, {0xdd, 0x8, {0x0, 0x7}}, {0x8cae, 0x4, {0x2, 0xa}}, {0x2, 0x1, {0x2, 0x800}}, {0x3, 0x3, {0x3, 0x5}}, {0x8, 0x4, {0x3}}, {0x81, 0x7601, {0x3, 0x9}}, {0x1, 0x7, {0x0, 0x50}}, {0x6, 0xd736, {0x0, 0x2}}, {0xf, 0x4c5, {0x0, 0xb4}}, {0x767, 0x5, {0x2, 0x6}}, {0x2, 0x6, {0x1, 0xf}}, {0x8, 0x6, {0x0, 0x2}}, {0x4, 0x1, {0x3, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x3, 0x3eb}, 0x3, 0x8, 0x8, 0x4, 0x1c, 'syz0\x00', "1f7bf0dfa3fdcf96c829565aa22e870450ba50413c19d38591258e07fa1a86df", "ffb49b26c278b5f785c9dbffba7cc8d0d6710dba98e1929914d514cbd9b8a057", [{0x8, 0x400, {0x3, 0x97}}, {0x8001, 0xae2f, {0x0, 0x7}}, {0x6d, 0x5, {0x0, 0x86}}, {0x28, 0x0, {0x1, 0x10001}}, {0x0, 0x2, {0x0, 0xc7e}}, {0x3, 0x4, {0x2, 0xfffffffb}}, {0xd2dc, 0x9, {0x1, 0x2}}, {0x3, 0x2, {0x2, 0x100}}, {0x1ff, 0x8, {0x1, 0x1}}, {0x5, 0x5, {0x1, 0x3}}, {0x36f, 0x3, {0x3, 0xffff824b}}, {0x1, 0x51, {0x3, 0x5}}, {0x9, 0x513e, {0x2, 0xfffffffd}}, {0x44f, 0x1000, {0x2, 0xfffffffc}}, {0x401, 0xd, {0x2, 0xc}}, {0x57, 0xb, {0x0, 0x9}}, {0x8, 0xbe, {0x0, 0x1}}, {0xa, 0x6, {0x3, 0x5e}}, {0x3, 0x4, {0x1, 0x8}}, {0x0, 0x0, {0x3, 0x2}}, {0xfffe, 0x3, {0x2, 0xa81}}, {0x8, 0x4, {0x0, 0x2}}, {0xfffa, 0x6, {0x0, 0x8}}, {0x5, 0x0, {0x2, 0xffffffff}}, {0x675, 0x0, {0x2, 0x3}}, {0x0, 0x1bea, {0x1, 0x4}}, {0x8eb, 0x3, {0x2, 0x6}}, {0xff, 0x6cdc, {0x2, 0x6}}, {0x8000, 0xc, {0x3, 0x9}}, {0xa272, 0x426, {0x0, 0x7}}, {0x9, 0x8, {0x1, 0x3}}, {0x0, 0x7, {0x1, 0x400}}, {0x7ff, 0x0, {0x1, 0x3}}, {0x5, 0x9, {0x1, 0x9}}, {0x9, 0xe9a5, {0x2, 0x4}}, {0x7}, {0x81, 0x1, {0x1, 0xc783}}, {0xd2e, 0xf5, {0x1, 0x2}}, {0x9, 0xc161, {0x1}}, {0x0, 0x5, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x1, 0x7, 0xb, 0x8000, 0x13, 'syz0\x00', "53fe394f3b4af5e184f58b009538b867adc5ee3608b9b3b5c2ec00ae452a9dc9", "fbf5615efb0b5e7c1527581cd763ef3243e7adbda7fc9c9bbde1fc5099673b95", [{0x0, 0xf, {0x3, 0x80}}, {0x7, 0x4, {0x2, 0x3}}, {0xfff, 0xd, {0x3}}, {0x1000, 0xe0, {0x3, 0x4}}, {0xe6, 0x4, {0x1, 0x10001}}, {0x40, 0x400, {0x1, 0x400}}, {0x1f03, 0x9, {0x3}}, {0x0, 0xfffc, {0x0, 0xcea0}}, {0x6b, 0x1, {0x2, 0x1}}, {0x8, 0x9, {0x1, 0xf}}, {0x9, 0x4, {0x2, 0x3}}, {0x100, 0x200, {0x3, 0x7}}, {0xa8, 0xff05, {0x0, 0x3}}, {0x2, 0x6, {0x1, 0x1}}, {0x3, 0xc9}, {0x8, 0x3, {0x0, 0xffffff7f}}, {0xa7, 0xa, {0x0, 0x4}}, {0x4, 0x7, {0x1, 0x760000}}, {0x5, 0x0, {0x0, 0x7}}, {0x5, 0x6, {0x3, 0x94}}, {0x8, 0x0, {0x3, 0x7}}, {0xa09, 0x3, {0x0, 0x464}}, {0x800, 0x4, {0x2}}, {0x86b, 0x2, {0x3, 0x400}}, {0x5, 0x1, {0x1, 0x5}}, {0x5, 0xcc6, {0x3, 0x7fffffff}}, {0x74f9, 0x9, {0x1, 0x80000000}}, {0x7fff, 0x10, {0x3, 0x8001}}, {0x0, 0x3, {0x1, 0x2}}, {0xd, 0x1c9, {0x2, 0x6}}, {0x4, 0xd, {0x3, 0x4800000}}, {0x0, 0x2, {0x2, 0x8}}, {0x7, 0x2}, {0x400, 0x1, {0x0, 0x80000000}}, {0x9, 0x9c5, {0x0, 0x9}}, {0x8, 0xc68e, {0x2, 0x8}}, {0x62, 0x1, {0x2}}, {0xb, 0x0, {0x3, 0x8}}, {0x841a, 0x101, {0x3, 0x1}}, {0x1, 0x2, {0x1, 0x8001}}]}}}, {{0x254, 0x1, {{0x3, 0x8ae}, 0x39, 0xfa, 0x7, 0x9, 0xf, 'syz0\x00', "2c343ab07c14fdd829918a913bbacdc24d3a50b9011fe3b5f4e81eba8c864485", "946abd8847f8c76f4c279a3ae1907bee427cd17918504dfc37a89ad0145aaed9", [{0x3, 0xf, {0x0, 0x7}}, {0x3, 0x61d, {0x0, 0x4000}}, {0x2, 0x2, {0x3, 0xffffffff}}, {0x8, 0x200, {0x0, 0x7fff}}, {0x1, 0x6, {0x3, 0x1}}, {0x5, 0x34, {0x0, 0xbd4}}, {0xfffa, 0x19e7, {0x0, 0xf87}}, {0x6, 0x200, {0x1, 0xffffffff}}, {0x2, 0x9, {0x1, 0x2}}, {0x4, 0xc, {0x2, 0x401}}, {0x1, 0x200, {0x2, 0x2}}, {0x0, 0x42, {0x1, 0x2}}, {0x4, 0x4, {0x1, 0x6}}, {0x8, 0xe164, {0x3, 0x40}}, {0x5, 0xd740, {0x1, 0x6}}, {0x1, 0x9, {0x3, 0x7}}, {0x0, 0x2, {0x2, 0xfe}}, {0x1ff, 0x1, {0x0, 0xc9b46410}}, {0x7, 0x8, {0x3, 0x8}}, {0x0, 0x1, {0x3, 0x3}}, {0x8, 0x4, {0x3, 0x5}}, {0x6, 0x0, {0x1, 0x6}}, {0x81, 0x9, {0x1, 0x7}}, {0x3, 0x1, {0x1, 0x1b04}}, {0x5, 0x40, {0x2, 0x99}}, {0x9, 0x7, {0x3, 0x9}}, {0x3, 0x9, {0x0, 0xd8}}, {0x3, 0x5, {0x1, 0xfe1a}}, {0x3, 0x8001, {0x1, 0x6}}, {0x0, 0xa, {0x1, 0x1000}}, {0xff, 0x6, {0x0, 0x3}}, {0x2, 0x41, {0x0, 0x2}}, {0xede, 0x0, {0x0, 0x1}}, {0x0, 0x1, {0x0, 0xa7e9}}, {0x6, 0x1605, {0x3, 0x8}}, {0x3, 0x7, {0x2, 0x8}}, {0x7, 0x7, {0x0, 0x8}}, {0x7, 0x2, {0x3, 0x10001}}, {0x8000, 0x1, {0x2}}, {0x8, 0x8, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x6, 0x2, 0x8000, 0x0, 0x15, 'syz1\x00', "5bd81c9421c2c2894928b6dcdf29115e5b1e67511e3bfa795bc394c297bcfa24", "bbe125097669d1406f57635a93a301b5422be49dbba15c7d73a4639959f227a9", [{0x0, 0xde, {0x3, 0x2}}, {0x40, 0x9, {0x0, 0x824}}, {0x1, 0x5, {0x0, 0x400}}, {0x8, 0x7, {0x2, 0x400}}, {0x2, 0xe, {0x3, 0x4}}, {0xfffd, 0x8, {0x0, 0x1ff}}, {0xfff7, 0x7, {0x0, 0xd}}, {0x5, 0x0, {0x3, 0x6}}, {0x8, 0x6169, {0x3, 0x5}}, {0xc, 0x4, {0x3, 0x8}}, {0x4, 0x3}, {0x4, 0x2, {0x1, 0x1c000}}, {0x7, 0x4, {0x0, 0x9}}, {0xf574, 0x5, {0x2, 0x200}}, {0xd4, 0x9, {0x1, 0x4}}, {0x0, 0x5, {0x2, 0x3}}, {0xf800, 0x6, {0x1}}, {0xff64, 0xf801, {0x1, 0x4}}, {0x7, 0xa054, {0x1, 0x9}}, {0x8, 0x9, {0x2, 0x1}}, {0x7, 0xfff, {0x3, 0x200}}, {0x1, 0x5a96, {0x0, 0x9}}, {0x8, 0x3, {0x3, 0x3ff}}, {0x100, 0x1, {0x1, 0xf}}, {0x148, 0x3, {0x1, 0x70}}, {0xfffc, 0xe4, {0x1, 0x1}}, {0x9, 0x1, {0x3, 0xe}}, {0x8, 0xc1, {0x2, 0xf90}}, {0x5, 0x1, {0x3, 0x200}}, {0x1, 0xad02, {0x3, 0x40}}, {0xa8f, 0x8001, {0x3, 0x9}}, {0xfff, 0xc, {0x0, 0x5}}, {0x1f29, 0x5, {0x2, 0x2}}, {0xfc00, 0x3, {0x2, 0xffffffff}}, {0x3, 0x2, {0x1, 0x1ff}}, {0xa, 0x2, {0x1, 0xffff}}, {0x8, 0x7, {0x2}}, {0x0, 0x0, {0x2, 0x5}}, {0x3, 0x8, {0x3, 0x7fff}}, {0xa, 0xff, {0x2, 0x4}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4045}, 0x10) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000001c00)={{r7}, 0x1b, 0x3}) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000001c40)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @rose={'rose', 0x0}, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 15.43136898s ago: executing program 6 (id=1319): bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) (async) socket(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x100}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xa48}]}, 0x3c}}, 0x0) (async) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000019040)=""/102363, &(0x7f0000000000)=0x18fdb) 15.430264907s ago: executing program 6 (id=1322): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) listen(r1, 0x90004) r2 = socket(0x11, 0x2, 0xffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$BTRFS_IOC_ADD_DEV(r3, 0xb701, 0x0) getsockopt$inet_opts(r2, 0x0, 0x5, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000340)={0xda, 0x0, 0x1}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000880)=ANY=[@ANYRES16], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf25130000002c00038008000300ff7f8000080003000100000008000100820100000800030001000000080001000400000080000280240003800800020013000000080001006400000008000200020000000800010009000000080001000600000008000200ffff0000080001000300000004000400080002006605000034000380080002200004000008000100feffffff08000200ffffff7f080002000400000008000100020000000800010003000000380005801c000280080004001b000000080001001100000008000300030000000c00028008000100130000000c0002800800040000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000400000014000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 14.460250659s ago: executing program 6 (id=1336): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10012, r2, 0x4000) 1.59953153s ago: executing program 1 (id=1550): r0 = socket(0x2b, 0x80801, 0x1) (async) r1 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x48000) r2 = socket(0x2a, 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x10, 0x5, 0xffff56ce, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x7800, 0x40, 0x8, 0x8}}) 1.501259231s ago: executing program 1 (id=1551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8c4000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="601661c4ad13"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x54a8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x787}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4000051) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.49979138s ago: executing program 1 (id=1552): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x901891cbff212725, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8cc201) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x28, 0x69, &(0x7f0000000140)="cf452ad14205aaa98b4fbba93932650ada977409fd4ff2a4f0b46f0417d719502147b83597792bff", &(0x7f0000000180)=""/105, 0x800, 0x0, 0xf4, 0x45, &(0x7f0000000200)="2ed24f9815d15948d7651f909e1ce8fbf4f5181112a67736e951e2e6ec99e52d5d6ef3a1d40d71ee4222108f5b8e087faee75882a5bdf4c94949f26ece1bbe57e0a0ef8c6464793014e46b902d02b90441aea24bf0ced186fecebbd13c3dc42093ad9b300cacf05a2e07994904769c71603f16484c996059ac4d674bd9329d2f71b6d95d05fb4f7fe3c342de8b86a3848b29b196815ca25dfb6ba2882109e77832096d945a5160ec073121a924819dfdfd5a5b535527295f54cdae7a4444ff7bb86f8513ebd922b18c6adc81e2b8c729305c25a3a996a3be188b2c974c8d28df3fd100a601851dce62e9797a9b26cd77b6bcd62b", &(0x7f0000000400)="293e332d4461c41470f78ba27cfa8471920ba76d2ec4b1fa85827f0553c781cc504b11360048068f17657d388cb48bb609ca1e0271979c9e6ddbd97eca89a3c15043d1034a", 0x4, 0x0, 0x200}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%pB \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000004000000049906000500000095000000000000007c7e6bf198ac09f28ce94b9cceff33d738006eb283a60a5bf27c69dfcbcec368f5b68ef53a1501d136d9f93f2195fa673db8c7a9793adb8e8873c071364f890b94546f8065305d64c83db21dc17a661f8c298f8061d516"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 1.431105688s ago: executing program 5 (id=1554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4, &(0x7f0000000100)=[@cr4={0x1, 0x40000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000004c0)="430f01d1b9800000c00f3235000100000f30440f21390f005f004381d100000000670f01c8c40108c22d7d30d9ae06663ef4656736410f0d9b6f0b00002e3ef2400f38f09d0d000000", 0x49}], 0x1, 0x27, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0xe4d, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x27, 0xffffffff, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001d5000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) r7 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c96325017a449620148b6f72ca6ae2a44829bfa79ec13499f8be3977d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x1}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r7, &(0x7f00000003c0)=""/146, 0x92) syz_clone(0x8021000, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.351247812s ago: executing program 5 (id=1555): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800068008000200080000003e"], 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r4, 0x3}, &(0x7f0000000340)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt(r3, 0xfffffeff, 0x3ff, &(0x7f0000000440)="29c0e5f89e678e9d50e1fd7b46f708adbade47118b4102baef58a7e4e9cdc10747c667b7eee1eedaecaf2b7332c80c452584cab8179899857f3a55907e8d2887adf43d3320827f0bfca4ec36d9ed354aa3c35375e4eb5799dfe8fdb92da88f11e81089bbd7932dfbfab4168066d92c0ee09cfced2b1611", 0x77) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x7, 0x529901) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00', 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000100)) keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './cgroup/../file0\x00'}) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="000000000000000022385ba988a8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.151189656s ago: executing program 5 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x21}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x21}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x8, 0x210140) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f00000002c0)={0x8, 0x100, 0x2}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0xfffffbdc, 0xfffffff9, 0x1000, 0x3}) pipe2$9p(&(0x7f0000000380), 0x4000) (async) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RAUTH(r5, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x10, 0x4}}, 0x14) sendmsg$rds(r3, &(0x7f00000009c0)={&(0x7f0000000400)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/176, 0xb0}], 0x2, &(0x7f0000000840)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x7}, &(0x7f00000005c0)=0x7, &(0x7f0000000600)=0xf8, 0xffffffffffffffff, 0x36a, 0x0, 0x0, 0x2, 0x7fffffff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x8}, &(0x7f0000000640)=0x2, &(0x7f0000000680)=0x5, 0x6, 0x6, 0x9, 0x76d, 0x0, 0x101}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xe0000}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000006c0)=""/177, 0xb1}, &(0x7f0000000780), 0xe}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x3}, &(0x7f00000007c0)=0x10, &(0x7f0000000800)=0x9, 0x3, 0x4, 0x10000, 0x7fffffffffffffff, 0x44, 0x9}}], 0x150, 0x800}, 0x4004094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000a00)) syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000c00)={&(0x7f0000000a40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf8, r6, 0xa00, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) (async) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000c00)={&(0x7f0000000a40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf8, r6, 0xa00, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r7 = socket$kcm(0x29, 0x7, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000c40)=0xcb) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x12c, r9, 0x14, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x101, 0x7f}}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xc3, 0xac, "c9954a820c2b7687a38795d9c09cfc09342a7baf241ba0dbfbb6761c243a9706571da0e2d4270eccff05b40f0390dee5473d67b0d4f28ef1e55ac33ec77630ad79c7b5c353263c27528c5d7ceea27a87f97f619246a7ce65fe6c6b1b39c8aaa87cb4c9384c9825243d0bb1309faadeec6438f9cd1a3a2074c71ed6d94d8919e65ab1bda8c76b2f3a8898d26b9999e2ba9404a121fc53122550b573727c94cbbb034c4413bae536210801b1e84c0d78b8baf3d65a09b3728f785061e8b6101f"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2000}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r13}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000fc0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001040)={0x0}, &(0x7f0000001080)=0xc) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r15 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x64, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r15}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x4) (async) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x64, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r15}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r16 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r16, 0x80044944, &(0x7f00000011c0)={0xfffffffd}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001200)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x2, 0xffffffad, 0xe93, 0x8001, 0x4, 0x4c2b}, {0x0, 0xffff7fff, 0x7, 0xfffffffffffffffe, 0xfd, 0x1000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 1.101593983s ago: executing program 5 (id=1558): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x49200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.001285894s ago: executing program 4 (id=1559): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, 0x0}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x4, 0xcc, &(0x7f0000000240)=""/204}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xb}, {0xb, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x4}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.000137023s ago: executing program 4 (id=1560): io_setup(0x8, &(0x7f0000000600)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x10, 0xfffbfffe) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x905, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x99832dd44f33c9f0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x3dc}, 0x1, 0x0, 0x0, 0x400c854}, 0x240008c0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20080010) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="ec"}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058565d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x2000000000000002) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$kcm(0x10, 0x3, 0x10) 921.559307ms ago: executing program 5 (id=1561): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8c4000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="601661c4ad13"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x54a8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x787}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4000051) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 916.967109ms ago: executing program 5 (id=1562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000001240)=[{r2}, {r2}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 721.088247ms ago: executing program 4 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf25070000000400018008000400ea000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d"]) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5e2d6d5161ffdb78}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) 720.222308ms ago: executing program 4 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103a, 0x200000000006, 0x10000, 0x32a, 0xfffffffffffffffa, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x1], 0x2000, 0xcc4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000c8531e61e2c2ea34ceb86f6e8da81c2307863395e86b8f31e594cbb5d555eace7e92307b207fe345f7dfe20ba442b5d00200b8fe32ee6236e5269d26e8876fb3943770e84b580648013a548bbb7e2bec45524ef7df3ce97425db03c5d8ee16be6d67cc029945e8a5b2d7c259051f7e73bddc0239425e94d6c2c20ccef16d240cba37cde313f559a2a1e05fbcd4c0ae9a2adf88abf10a0d084fca5f5c134bef05eb4768f24a43fcd9746f8487bf42215c002ed87570dfdf41f1df1e8e305eab81511fedad0d4ace7a35d2", @ANYRES16=r3, @ANYBLOB="000b27bd7000fbdbdf253600000008000300", @ANYRES32=r7, @ANYBLOB="0c009900d3df000019000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000160001000000002b000000000a002000", @ANYRES32=0x0], 0x18}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000190001090000000000000000021820000000fd01000000020000000000000001caa0e0e894613c0029dc43d4f504bb02ad06869f19a66556b7d2f7bfa8062357bd57fccf70e5dea16dce2aff020000b57996cb2fa8b8a004b4d7c061f9d70977e074d67f3adbf134a089791bd6e3a971e4fc36fc03030581"], 0x24}}, 0x0) 560.304356ms ago: executing program 4 (id=1565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f000011d340)={0x1, &(0x7f000011d200)=[{0x8000001, 0x92, 0x0, 0x1, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="65640f013b2111bad004b822faef0f38c87c076626f30f09642e2e0f01c2f467f30f090f01c365f30f1efa", 0x2b}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 401.258218ms ago: executing program 4 (id=1566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x7, 0x0}, 0x8) r2 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@private0, r3}, 0x14) recvfrom(r2, 0x0, 0x0, 0x10000, &(0x7f00000005c0)=@xdp={0x2c, 0x1, r3, 0x27}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 71.511168ms ago: executing program 1 (id=1567): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async, rerun: 64) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000009000000000000ffdbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x400c818}, 0x4) ptrace$getregset(0x4204, r6, 0x200, &(0x7f00000000c0)={0x0, 0x60}) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r11 = socket(0x10, 0x803, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r12, 0xc06864b8, &(0x7f0000000340)={0x0, 0x1ffd, 0x7e, 0x3231564e, 0x3, [0x2], [0xfffffffd, 0xfffffffe, 0x4ec], [0x0, 0xffffffff, 0x800000, 0xfffffffc], [0xa1d6]}) (async) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x2}}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="7240298726c8750cc6b534dbdf2519000000", @ANYRES32=r13, @ANYBLOB="05001d0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) 1.460446ms ago: executing program 1 (id=1568): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000255000/0x2000)=nil, 0x2000, 0x3000008, 0x810, 0xffffffffffffffff, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r3 = fsmount(0xffffffffffffffff, 0x1, 0x38) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000001100)) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000001080)=0x1, 0x0, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000300000800000086dd080088be86ddffff100000000193380000000000000022eb000000002000e0200200000000000000000000000800655800000000"], 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x002'], 0x2c}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="012e0000000000fedbdf254c0000000e0001006e65740002006e657464657673696d3000000f00b2007365636f6e646e616d6500"], 0x44}}, 0x0) (async) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e63, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000200)={0xa, 0xe23, 0x18d, @private1, 0x51}, 0x1c) (async) listen(r8, 0x7fff) (async) r10 = socket$inet6(0xa, 0x805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) getsockopt$bt_hci(r10, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r11, &(0x7f00000004c0)=""/57, 0x39) (async, rerun: 32) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) (rerun: 32) 0s ago: executing program 1 (id=1569): ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000080)='1', 0x1) (async) r1 = socket(0x22, 0x6, 0x9) (async) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000100)={0x27, 0x2}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) (async) close_range(r1, r1, 0x2) (async) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @local}, 0x100, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)='ip6erspan0\x00', 0x10, 0x38147f39, 0x4}) (async) r3 = accept4$alg(r1, 0x0, 0x0, 0x80800) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x8100, 0x0) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000440)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000014c0)={0x1, &(0x7f0000000480)="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", &(0x7f0000001480)=""/58, 0x4}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001500)={0x0, 0x4c, "ab4e70b12ec317b39411fc83778d21f46db08d512199565f52e93bfda3ac0e270a684d4d4fef758fdcb80f125b293c77786e2dff7b942543f5826b2df536f95299844c8cde004beba9ca81e8"}, &(0x7f0000001580)=0x54) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f00000015c0)=0x1) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001600)={0xd64, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = syz_open_dev$radio(&(0x7f0000015780), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f00000157c0)={0x1, 0x0, {0x80, 0x7, 0xeda1, 0x5}}) (async) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000015800)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000158c0), r4) (async, rerun: 64) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000015940)={0x0, @ethernet={0x306, @random="f35d1b20d296"}, @phonet={0x23, 0xd8, 0x6, 0x8}, @sco, 0x130, 0x0, 0x0, 0x0, 0x5, &(0x7f0000015900)='ip_vti0\x00', 0x20000000000, 0x8, 0x1000}) (async, rerun: 64) read(r1, &(0x7f00000159c0)=""/149, 0x95) (async) close_range(r2, r0, 0x2) (async) write$tun(r4, &(0x7f0000015a80)={@void, @void, @mpls={[{0x3}, {0x5}, {0xa9fe, 0x0, 0x1}, {0x8}], @ipv4=@dccp={{0x8, 0x4, 0x3, 0x33, 0x36, 0x66, 0x0, 0x7, 0x21, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @end, @timestamp={0x44, 0x8, 0x91, 0x0, 0xe, [0xffff]}, @end, @end]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xd, 0x0, 0x0, 0x1, 0x0, "fe1f1c", 0x4, "b8c226"}, "43f59ccc588f"}}}}, 0x46) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000015b00), 0x0, 0x0) (async) r7 = eventfd(0xa) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000015b40)=r7) (async) preadv(r6, &(0x7f0000015c40)=[{0x0}, {&(0x7f0000015b80)=""/155, 0x9b}], 0x2, 0x80, 0xff) write$selinux_context(0xffffffffffffffff, &(0x7f0000015cc0)='system_u:object_r:mail_spool_t:s0\x00', 0x22) 0s ago: executing program 1 (id=1570): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2024) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x2c, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000041000010000000000000000000000000a54000000060a0b040000000000000000020000002c0004802800018011000100666c8e775f6f66666c6f000000000000100002800900010073797a300000000008000b40000000020900000073797a3200000000140000001100010000000000000000000001000a"], 0x7c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r1) r6 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e3603631a855802b483c", 0x21}], 0x1}}], 0x1, 0x20000800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000067c000/0x4000)=nil, &(0x7f0000711000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000e3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a110000000000000600000000000000"]) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) kernel console output (not intermixed with test programs): starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 118.079633][ T7393] __nla_validate_parse: 3 callbacks suppressed [ 118.079648][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'. [ 118.338514][ T7415] ip6erspan0: entered promiscuous mode [ 118.474488][ T7431] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 118.501871][ T7440] netlink: 168 bytes leftover after parsing attributes in process `syz.1.374'. [ 118.505644][ T7440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.374'. [ 118.560471][ T7445] netfs: Couldn't get user pages (rc=-14) [ 118.778115][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.812317][ T1245] wlan1: Trigger new scan to find an IBSS to join [ 118.875678][ T7510] binder: 7509:7510 ioctl 4018620d 0 returned -22 [ 118.929877][ T7519] (syz.2.398,7519,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 118.965190][ T7526] hugetlbfs: Bad value for 'uid' [ 118.966991][ T7526] hugetlbfs: Bad value for 'uid' [ 118.975179][ T7528] netlink: 44 bytes leftover after parsing attributes in process `syz.1.401'. [ 118.979515][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 119.111807][ T7542] binder: BINDER_SET_CONTEXT_MGR already set [ 119.113711][ T7542] binder: 7541:7542 ioctl 4018620d 200000000040 returned -16 [ 119.263726][ T7556] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 245 [ 119.722979][ T6712] wlan1: Creating new IBSS network, BSSID 9e:01:c0:e3:b4:7c [ 119.855899][ T7572] fuse: Bad value for 'fd' [ 119.975970][ T7576] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 119.976332][ T7575] IPVS: stopping backup sync thread 7576 ... [ 119.988195][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 120.035950][ T7578] binder: BINDER_SET_CONTEXT_MGR already set [ 120.037892][ T7578] binder: 7577:7578 ioctl 4018620d 200000000040 returned -16 [ 120.071856][ T7580] kvm: kvm [7579]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x21 [ 120.077879][ T7580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.158264][ T7587] netlink: 92 bytes leftover after parsing attributes in process `syz.1.422'. [ 120.160251][ T7588] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 120.164538][ T7588] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.168958][ T7588] vhci_hcd vhci_hcd.0: Device attached [ 120.176491][ T7587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=7587 comm=syz.1.422 [ 120.212276][ T7594] sp0: Synchronizing with TNC [ 120.215840][ T7594] syz.0.425 (7594): /proc/7593/oom_adj is deprecated, please use /proc/7593/oom_score_adj instead. [ 120.280972][ T7596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.425'. [ 120.284910][ T7596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.425'. [ 120.298730][ T7593] [U] [ 120.431309][ T53] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 120.485566][ T7600] binder: BINDER_SET_CONTEXT_MGR already set [ 120.487372][ T7600] binder: 7599:7600 ioctl 4018620d 200000000040 returned -16 [ 120.675267][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.824030][ T7630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7630 comm=syz.1.436 [ 120.829505][ T7631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7631 comm=syz.1.436 [ 120.928729][ T7644] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 120.970807][ T7648] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 120.989038][ T7589] vhci_hcd: connection reset by peer [ 120.992222][ T1144] vhci_hcd: stop threads [ 120.994220][ T1144] vhci_hcd: release socket [ 120.996397][ T1144] vhci_hcd: disconnect device [ 121.058315][ T7654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.145525][ T7657] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 121.157849][ T7657] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 121.174944][ T54] hid (null): global environment stack underflow [ 121.175698][ T7654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.178940][ T54] hid-generic 0001:9FC4:0002.0002: unknown main item tag 0x5 [ 121.184059][ T54] hid-generic 0001:9FC4:0002.0002: unknown main item tag 0x6 [ 121.187656][ T54] hid-generic 0001:9FC4:0002.0002: global environment stack underflow [ 121.190631][ T54] hid-generic 0001:9FC4:0002.0002: item 0 0 1 11 parsing failed [ 121.193435][ T54] hid-generic 0001:9FC4:0002.0002: probe with driver hid-generic failed with error -22 [ 121.246751][ T7654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.298394][ T7654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.417239][ T6712] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.425756][ T6712] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.433614][ T6712] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.445763][ T6712] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.520944][ T7670] netlink: 'syz.1.450': attribute type 20 has an invalid length. [ 122.077964][ T7709] bridge0: port 3(dummy0) entered disabled state [ 122.086078][ T7709] dummy0 (unregistering): left allmulticast mode [ 122.088038][ T7709] bridge0: port 3(dummy0) entered disabled state [ 122.627635][ T7723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.977011][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 122.977021][ T40] audit: type=1400 audit(1758439790.708:27486): avc: denied { getopt } for pid=7732 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.045061][ T7733] kvm: pic: non byte write [ 123.137551][ T40] audit: type=1400 audit(1758439790.868:27487): avc: denied { block_suspend } for pid=7735 comm="syz.0.473" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.592945][ T7752] netlink: 'syz.2.478': attribute type 9 has an invalid length. [ 123.704960][ T40] audit: type=1400 audit(1758439791.438:27488): avc: denied { execute } for pid=7754 comm="syz.2.479" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 124.281402][ T1469] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.433555][ T1469] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 124.436169][ T1469] usb 5-1: can't read configurations, error -61 [ 124.561364][ T1469] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.688278][ T40] audit: type=1400 audit(1758439792.418:27489): avc: denied { mounton } for pid=7775 comm="syz.2.485" path="/89/file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 124.688488][ T7776] 9pnet_fd: p9_fd_create_unix (7776): problem connecting socket: ./file0: -111 [ 124.714072][ T1469] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 124.716597][ T1469] usb 5-1: can't read configurations, error -61 [ 124.719669][ T1469] usb usb5-port1: attempt power cycle [ 124.726309][ T7780] trusted_key: syz.2.486 sent an empty control message without MSG_MORE. [ 124.747568][ T7780] sctp: [Deprecated]: syz.2.486 (pid 7780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.747568][ T7780] Use struct sctp_sack_info instead [ 124.787978][ T40] audit: type=1400 audit(1758439792.518:27490): avc: denied { getopt } for pid=7782 comm="syz.2.487" lport=39854 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 124.797857][ T40] audit: type=1400 audit(1758439792.518:27491): avc: denied { bind } for pid=7782 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.805950][ T40] audit: type=1400 audit(1758439792.518:27492): avc: denied { wake_alarm } for pid=7782 comm="syz.2.487" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.897784][ T40] audit: type=1800 audit(1758439792.628:27493): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.488" name="file1" dev="9p" ino=71827733 res=0 errno=0 [ 125.061383][ T1469] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.084639][ T1469] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.088090][ T1469] usb 5-1: can't read configurations, error -61 [ 125.231349][ T1469] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.253733][ T1469] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.256761][ T1469] usb 5-1: can't read configurations, error -61 [ 125.260730][ T1469] usb usb5-port1: unable to enumerate USB device [ 125.319929][ T7790] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 125.327267][ T7790] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 125.332542][ T7790] team0: No ports can be present during mode change [ 125.335394][ T7790] __nla_validate_parse: 8 callbacks suppressed [ 125.335403][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 125.391007][ T7790] team0 (unregistering): Port device team_slave_0 removed [ 125.397429][ T7790] team0 (unregistering): Port device team_slave_1 removed [ 125.531273][ T53] vhci_hcd: vhci_device speed not set [ 125.598925][ T40] audit: type=1400 audit(1758439793.328:27494): avc: denied { setopt } for pid=7796 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.599301][ T7797] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 125.705025][ T40] audit: type=1326 audit(1758439793.438:27495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.495" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd31998ec29 code=0x0 [ 126.009374][ T7807] hfs: can't find a HFS filesystem on dev sr0 [ 126.138033][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'. [ 126.140963][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'. [ 126.563080][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 126.812506][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 126.821814][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 126.826131][ T7847] netlink: 44 bytes leftover after parsing attributes in process `syz.2.510'. [ 126.830795][ T7847] netlink: 'syz.2.510': attribute type 6 has an invalid length. [ 126.834006][ T7847] netlink: 'syz.2.510': attribute type 5 has an invalid length. [ 126.837022][ T7847] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 127.026833][ T7862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.515'. [ 127.178978][ T7864] IPv6: sit1: Disabled Multicast RS [ 127.182332][ T7864] sit1: entered allmulticast mode [ 127.297974][ T7871] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.301040][ T7871] overlayfs: failed to set xattr on upper [ 127.303643][ T7871] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.306408][ T7871] overlayfs: ...falling back to index=off. [ 127.308783][ T7871] overlayfs: ...falling back to uuid=null. [ 127.313920][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 127.386459][ T7875] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 127.761330][ T1469] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.860069][ T5328] Bluetooth: Unexpected continuation frame (len 12) [ 127.881065][ T7915] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 127.887526][ T7915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7915 comm=syz.2.532 [ 127.926822][ T1469] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.929649][ T1469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.932498][ T1469] usb 5-1: Product: syz [ 127.932948][ T7919] random: crng reseeded on system resumption [ 127.933898][ T1469] usb 5-1: Manufacturer: syz [ 127.933909][ T1469] usb 5-1: SerialNumber: syz [ 127.946082][ T1469] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.968540][ T1469] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.099995][ T7923] SELinux: security_context_str_to_sid () failed with errno=-22 [ 128.154519][ T7924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.157262][ T7924] IPv6: NLM_F_CREATE should be set when creating new route [ 128.159497][ T7924] IPv6: NLM_F_CREATE should be set when creating new route [ 128.161821][ T7924] IPv6: NLM_F_CREATE should be set when creating new route [ 128.165813][ T7924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.378998][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 128.379018][ T40] audit: type=1400 audit(1758439796.108:27539): avc: denied { create } for pid=7887 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.383845][ T838] usb 5-1: USB disconnect, device number 7 [ 128.395232][ T40] audit: type=1400 audit(1758439796.118:27540): avc: denied { write } for pid=7887 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.403587][ T40] audit: type=1400 audit(1758439796.118:27541): avc: denied { nlmsg_write } for pid=7887 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.058283][ T40] audit: type=1400 audit(1758439796.788:27542): avc: denied { create } for pid=7933 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.065294][ T40] audit: type=1400 audit(1758439796.788:27543): avc: denied { bind } for pid=7933 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.072349][ T40] audit: type=1400 audit(1758439796.788:27544): avc: denied { prog_load } for pid=7933 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.080390][ T40] audit: type=1400 audit(1758439796.798:27545): avc: denied { bpf } for pid=7933 comm="syz.0.538" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.087032][ T40] audit: type=1400 audit(1758439796.798:27546): avc: denied { perfmon } for pid=7933 comm="syz.0.538" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.097113][ T40] audit: type=1400 audit(1758439796.808:27547): avc: denied { prog_run } for pid=7933 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.103407][ T40] audit: type=1400 audit(1758439796.808:27548): avc: denied { setopt } for pid=7933 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.204845][ T7938] netlink: 72 bytes leftover after parsing attributes in process `syz.2.539'. [ 129.211405][ T1469] usb 5-1: Service connection timeout for: 256 [ 129.214311][ T1469] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 129.218453][ T1469] ath9k_htc: Failed to initialize the device [ 129.221113][ T838] usb 5-1: ath9k_htc: USB layer deinitialized [ 129.323336][ T1330] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.329660][ T1330] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 129.508776][ T7962] bridge_slave_1: left allmulticast mode [ 129.511263][ T7962] bridge_slave_1: left promiscuous mode [ 129.513668][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.519236][ T7962] bridge_slave_0: left allmulticast mode [ 129.522447][ T7962] bridge_slave_0: left promiscuous mode [ 129.524803][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.849632][ T7972] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 129.930954][ T7974] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.309832][ T7994] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 130.339060][ T8004] tipc: Enabling of bearer rejected, media not registered [ 130.341837][ T8003] tipc: Enabling of bearer rejected, media not registered [ 130.355059][ T8007] netlink: 'syz.0.561': attribute type 9 has an invalid length. [ 130.467012][ T8012] netlink: 'syz.0.562': attribute type 5 has an invalid length. [ 130.504078][ T8014] binder: 8013:8014 ioctl c0306201 0 returned -14 [ 130.702591][ T8019] __nla_validate_parse: 6 callbacks suppressed [ 130.702602][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 130.778110][ T8024] overlayfs: failed to clone upperpath [ 130.839191][ T8033] afs: Unknown parameter 'subj_role' [ 130.873217][ T8035] netlink: 'syz.1.570': attribute type 9 has an invalid length. [ 131.200469][ T8056] netlink: 'syz.2.577': attribute type 6 has an invalid length. [ 131.394957][ T8065] binder: 8063:8065 ioctl c0306201 0 returned -14 [ 131.698759][ T8084] (syz.0.587,8084,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 131.703360][ T8084] (syz.0.587,8084,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 131.983684][ T8096] validate_nla: 3 callbacks suppressed [ 131.983695][ T8096] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 131.983720][ T8097] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 131.993442][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.0.590'. [ 132.918979][ T8115] netlink: 'syz.1.595': attribute type 9 has an invalid length. [ 132.933778][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 132.936549][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 132.940098][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 132.943838][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 132.953665][ T8111] bridge2: entered promiscuous mode [ 133.045409][ T8123] input: syz0 as /devices/virtual/input/input6 [ 133.055567][ T8123] overlayfs: cannot append lower layer [ 133.118774][ T8130] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 133.122840][ T8130] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.324285][ T1330] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 133.471404][ T1330] usb 7-1: device descriptor read/64, error -71 [ 133.583000][ T8163] netlink: 'syz.1.606': attribute type 9 has an invalid length. [ 133.670689][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 133.670710][ T40] audit: type=1400 audit(1758439801.398:27702): avc: denied { ioctl } for pid=8170 comm="syz.1.609" path="socket:[19014]" dev="sockfs" ino=19014 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.681211][ T6216] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 133.708743][ T40] audit: type=1400 audit(1758439801.438:27703): avc: denied { ioctl } for pid=8178 comm="syz.1.610" path="socket:[19019]" dev="sockfs" ino=19019 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.721380][ T1330] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 133.753573][ T8183] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 133.768188][ T8183] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 133.777143][ T8183] overlayfs: unescaped trailing colons in lowerdir mount option. [ 133.851645][ T1330] usb 7-1: device descriptor read/64, error -71 [ 133.855609][ T6216] usb 5-1: config 0 has no interfaces? [ 133.860029][ T6216] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 133.863898][ T6216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.867321][ T6216] usb 5-1: Product: syz [ 133.869211][ T6216] usb 5-1: Manufacturer: syz [ 133.871525][ T6216] usb 5-1: SerialNumber: syz [ 133.875820][ T6216] usb 5-1: config 0 descriptor?? [ 133.971823][ T1330] usb usb7-port1: attempt power cycle [ 134.058673][ T40] audit: type=1400 audit(1758439801.788:27704): avc: denied { create } for pid=8186 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.131550][ T8149] netlink: 'syz.0.603': attribute type 2 has an invalid length. [ 134.134727][ T8149] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 134.137859][ T8195] netlink: 'syz.0.603': attribute type 2 has an invalid length. [ 134.140346][ T8195] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 134.146860][ T60] usb 5-1: USB disconnect, device number 8 [ 134.322531][ T1330] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 134.341965][ T1330] usb 7-1: device descriptor read/8, error -71 [ 134.387631][ T40] audit: type=1400 audit(1758439802.118:27705): avc: denied { mount } for pid=8209 comm="syz.1.618" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 134.388145][ T8210] overlayfs: failed to clone lowerpath [ 134.437645][ T40] audit: type=1400 audit(1758439802.168:27706): avc: denied { mount } for pid=8212 comm="syz.1.619" name="/" dev="hugetlbfs" ino=19052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 134.488119][ T40] audit: type=1400 audit(1758439802.218:27707): avc: denied { create } for pid=8214 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 134.500609][ T40] audit: type=1400 audit(1758439802.228:27708): avc: denied { ioctl } for pid=8214 comm="syz.1.620" path="socket:[20317]" dev="sockfs" ino=20317 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 134.553702][ T40] audit: type=1400 audit(1758439802.288:27709): avc: denied { name_bind } for pid=8217 comm="syz.1.621" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 134.581343][ T1330] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 134.602247][ T1330] usb 7-1: device descriptor read/8, error -71 [ 134.650020][ T8226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.659202][ T40] audit: type=1400 audit(1758439802.388:27710): avc: denied { create } for pid=8225 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.696111][ T8225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.721806][ T1330] usb usb7-port1: unable to enumerate USB device [ 134.791432][ T40] audit: type=1400 audit(1758439802.518:27711): avc: denied { read write } for pid=8229 comm="syz.0.626" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 134.792676][ T8230] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 135.131335][ T838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.134297][ T838] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 135.329215][ T8245] veth1_to_bond: entered allmulticast mode [ 135.474357][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 135.474492][ T8246] veth1_to_bond: left allmulticast mode [ 135.772584][ T8278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8278 comm=syz.0.642 [ 135.777276][ T8278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.168422][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 136.190838][ T8297] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.649'. [ 136.714532][ T5328] Bluetooth: hci1: unexpected event 0x23 length: 11 < 13 [ 137.037255][ T8342] 9pnet: Could not find request transport: fB [ 137.211409][ T5328] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.213493][ T838] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 137.215429][ T838] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 137.292008][ T8364] overlayfs: failed to clone upperpath [ 137.506076][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 137.515848][ T8381] validate_nla: 2 callbacks suppressed [ 137.515859][ T8381] netlink: 'syz.1.679': attribute type 17 has an invalid length. [ 137.520022][ T8381] netlink: 5 bytes leftover after parsing attributes in process `syz.1.679'. [ 137.523018][ T8381] macvtap0: entered allmulticast mode [ 137.524797][ T8381] veth0_macvtap: entered allmulticast mode [ 137.527109][ T8381] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 137.600752][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 137.600766][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 137.605597][ T8384] ip6gre2: entered allmulticast mode [ 137.616471][ T8385] netlink: 92 bytes leftover after parsing attributes in process `syz.1.680'. [ 137.856297][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.859004][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.942298][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 138.942315][ T40] audit: type=1400 audit(1758439806.678:27738): avc: denied { write } for pid=8407 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.953813][ T40] audit: type=1400 audit(1758439806.678:27739): avc: denied { nlmsg_write } for pid=8407 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.037654][ T8421] overlayfs: missing 'lowerdir' [ 139.226874][ T40] audit: type=1400 audit(1758439806.958:27740): avc: denied { bind } for pid=8443 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.234963][ T40] audit: type=1400 audit(1758439806.958:27741): avc: denied { setopt } for pid=8443 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.237911][ T8444] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.243035][ T40] audit: type=1400 audit(1758439806.968:27742): avc: denied { mount } for pid=8443 comm="syz.1.694" name="/" dev="ramfs" ino=20446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 139.246370][ T8444] overlayfs: failed to set xattr on upper [ 139.256158][ T40] audit: type=1400 audit(1758439806.968:27743): avc: denied { mounton } for pid=8443 comm="syz.1.694" path="/bus" dev="ramfs" ino=20448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 139.257649][ T8444] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.266672][ T8444] overlayfs: ...falling back to metacopy=off. [ 139.269061][ T8444] overlayfs: ...falling back to index=off. [ 139.271773][ T8444] overlayfs: ...falling back to uuid=null. [ 139.292276][ T5328] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.294844][ T838] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 139.296900][ T838] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 139.424525][ T5972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.434227][ T5972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.438388][ T5972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.448664][ T5972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.454394][ T5972] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.464765][ T5328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.467946][ T5328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.471115][ T5328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.475858][ T5328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.478552][ T5328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.486680][ T8460] netlink: 'syz.2.700': attribute type 9 has an invalid length. [ 139.492007][ T40] audit: type=1400 audit(1758439807.218:27744): avc: denied { mounton } for pid=8249 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 139.550522][ T40] audit: type=1400 audit(1758439807.278:27745): avc: denied { create } for pid=8470 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 139.556119][ T8473] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 139.561109][ T8473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.703'. [ 139.566505][ T40] audit: type=1400 audit(1758439807.278:27746): avc: denied { setopt } for pid=8470 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 139.599587][ T40] audit: type=1400 audit(1758439807.328:27747): avc: denied { create } for pid=8480 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.605838][ T8481] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20000 [ 139.629329][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 139.670287][ T6717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.675601][ T6717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.688156][ T8496] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 139.726725][ T8504] netlink: 'syz.1.710': attribute type 9 has an invalid length. [ 139.803882][ T6717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.807751][ T6717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.815319][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.818439][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.821732][ T8249] bridge_slave_0: entered allmulticast mode [ 139.827800][ T8249] bridge_slave_0: entered promiscuous mode [ 139.833150][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.836163][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.839138][ T8249] bridge_slave_1: entered allmulticast mode [ 139.847502][ T8249] bridge_slave_1: entered promiscuous mode [ 139.880028][ T6717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.884899][ T6717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.909815][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.917025][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.961539][ T6717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.964820][ T6717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.972113][ T8249] team0: Port device team_slave_0 added [ 139.975429][ T8249] team0: Port device team_slave_1 added [ 140.006481][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.008688][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.017169][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.028093][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.030316][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.039542][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.077395][ T8249] hsr_slave_0: entered promiscuous mode [ 140.079683][ T8249] hsr_slave_1: entered promiscuous mode [ 140.082059][ T8249] debugfs: 'hsr0' already exists in 'hsr' [ 140.083925][ T8249] Cannot create hsr debugfs directory [ 140.546731][ T6717] bond0 (unregistering): left promiscuous mode [ 140.549275][ T6717] bond0 (unregistering): Released all slaves [ 140.633866][ T6717] : left promiscuous mode [ 140.679451][ T8249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.684639][ T8249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.688611][ T8249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.692918][ T8249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.709282][ T6717] tipc: Disabling bearer [ 140.715385][ T6717] tipc: Left network mode [ 140.768541][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.785511][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.792829][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.795670][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.809501][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.811840][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.870288][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 140.870889][ T8580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8580 comm=syz.1.729 [ 140.893034][ T6717] batadv0: left promiscuous mode [ 140.898654][ T6717] hsr_slave_0: left promiscuous mode [ 140.901118][ T6717] hsr_slave_1: left promiscuous mode [ 140.905142][ T8585] afs: Unknown parameter 'n' [ 140.921435][ T6717] veth1_macvtap: left promiscuous mode [ 140.924202][ T6717] veth0_macvtap: left promiscuous mode [ 140.926101][ T6717] veth1_vlan: left promiscuous mode [ 141.087812][ T6717] team0 (unregistering): Port device vlan0 removed [ 141.531734][ T5328] Bluetooth: hci4: command tx timeout [ 141.776788][ T8599] overlay: Unknown parameter 'fsname' [ 141.780179][ T8599] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 142.021953][ T8593] 8021q: VLANs not supported on ip6gre0 [ 142.032337][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.158354][ T8249] veth0_vlan: entered promiscuous mode [ 142.163066][ T8249] veth1_vlan: entered promiscuous mode [ 142.182324][ T8249] veth0_macvtap: entered promiscuous mode [ 142.188419][ T8249] veth1_macvtap: entered promiscuous mode [ 142.197724][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.204665][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.213649][ T1245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.217073][ T1245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.220127][ T1245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.223801][ T1245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.263902][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.267426][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.288131][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.291256][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.296130][ T8629] netlink: 200 bytes leftover after parsing attributes in process `syz.1.741'. [ 142.299482][ T8629] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 142.373571][ T6717] IPVS: stop unused estimator thread 0... [ 142.390196][ T8640] vlan2: entered allmulticast mode [ 142.393854][ T8640] bond0: entered allmulticast mode [ 142.395514][ T8640] bond_slave_0: entered allmulticast mode [ 142.397316][ T8640] bond_slave_1: entered allmulticast mode [ 142.432651][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.434933][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.437768][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.440072][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.642459][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 142.682862][ T8664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8664 comm=syz.1.751 [ 143.058139][ T8702] netlink: 5 bytes leftover after parsing attributes in process `syz.4.764'. [ 143.060948][ T8702] netlink: 5 bytes leftover after parsing attributes in process `syz.4.764'. [ 143.063846][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.764'. [ 143.067116][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.764'. [ 143.095088][ T8708] netlink: 'syz.4.767': attribute type 7 has an invalid length. [ 143.106479][ T8708] nbd_handle_cmd: 2 callbacks suppressed [ 143.106495][ T8708] block nbd4: Attempted send on invalid socket [ 143.109985][ T8708] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.114291][ T8708] (syz.4.767,8708,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 143.116614][ T8708] (syz.4.767,8708,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 143.118679][ T8708] (syz.4.767,8708,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 143.121254][ T8708] (syz.4.767,8708,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 143.385026][ T8738] netlink: 'syz.1.778': attribute type 9 has an invalid length. [ 143.387847][ T8738] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.778'. [ 143.443111][ T8743] netfs: Couldn't get user pages (rc=-14) [ 143.451365][ T1330] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.524257][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.782'. [ 143.581351][ T1330] usb 5-1: device descriptor read/64, error -71 [ 143.611021][ T8754] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 143.622722][ T5328] Bluetooth: hci4: command tx timeout [ 143.686366][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 143.831245][ T1330] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.961271][ T1330] usb 5-1: device descriptor read/64, error -71 [ 144.006068][ T1144] syzkaller0: tun_net_xmit 76 [ 144.007683][ T1144] syzkaller0: tun_net_xmit 48 [ 144.030773][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 144.030783][ T40] audit: type=1400 audit(1758439811.758:27812): avc: denied { connect } for pid=8770 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.031354][ T838] syzkaller0: tun_net_xmit 76 [ 144.031857][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 144.071469][ T1330] usb usb5-port1: attempt power cycle [ 144.409634][ T40] audit: type=1400 audit(1758439812.138:27813): avc: denied { getopt } for pid=8774 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.417983][ T1330] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.441807][ T1330] usb 5-1: device descriptor read/8, error -71 [ 144.691649][ T1330] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.723918][ T1330] usb 5-1: device descriptor read/8, error -71 [ 144.831719][ T1330] usb usb5-port1: unable to enumerate USB device [ 145.078664][ T40] audit: type=1400 audit(1758439812.808:27814): avc: denied { setattr } for pid=8800 comm="syz.2.797" name="NETLINK" dev="sockfs" ino=24771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.141758][ T8810] netlink: 'syz.2.800': attribute type 9 has an invalid length. [ 145.186215][ T40] audit: type=1400 audit(1758439812.918:27815): avc: denied { write } for pid=8812 comm="syz.2.801" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.245170][ T40] audit: type=1400 audit(1758439812.978:27816): avc: denied { mounton } for pid=8814 comm="syz.4.802" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 145.263116][ T40] audit: type=1400 audit(1758439812.998:27817): avc: denied { append } for pid=8812 comm="syz.2.801" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.390547][ T8833] netlink: 'syz.4.809': attribute type 9 has an invalid length. [ 145.450579][ T8838] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 145.519774][ T40] audit: type=1400 audit(1758439813.248:27818): avc: denied { sqpoll } for pid=8829 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 145.528404][ T40] audit: type=1400 audit(1758439813.248:27819): avc: denied { create } for pid=8829 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.534686][ T40] audit: type=1400 audit(1758439813.258:27820): avc: denied { setopt } for pid=8829 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.540660][ T40] audit: type=1400 audit(1758439813.258:27821): avc: denied { write } for pid=8829 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.574278][ T8851] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 145.574715][ T8850] IPVS: stopping master sync thread 8851 ... [ 145.691300][ T5328] Bluetooth: hci4: command tx timeout [ 145.935484][ T838] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 146.082420][ T838] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.085555][ T838] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.089758][ T8861] 9pnet_fd: p9_fd_create_unix (8861): problem connecting socket: ./file0: -30 [ 146.089947][ T838] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.096488][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.246182][ T8865] netlink: 'syz.0.818': attribute type 9 has an invalid length. [ 146.294950][ T8867] mkiss: ax0: crc mode is auto. [ 146.302166][ T838] usb 9-1: usb_control_msg returned -32 [ 146.304335][ T838] usbtmc 9-1:16.0: can't read capabilities [ 146.476021][ T8877] comedi comedi2: comedi_config --init_data is deprecated [ 146.764492][ T1144] syzkaller0: tun_net_xmit 76 [ 146.766389][ T1144] syzkaller0: tun_net_xmit 48 [ 146.791314][ T53] syzkaller0: tun_net_xmit 76 [ 146.795524][ T8890] netlink: 'syz.1.828': attribute type 9 has an invalid length. [ 146.901922][ T8899] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 146.904409][ T8899] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 146.905619][ T8898] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 146.909544][ T8898] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 147.694564][ T8905] erspan0: entered promiscuous mode [ 147.759510][ T8917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=8917 comm=syz.2.836 [ 147.771850][ T5328] Bluetooth: hci4: command tx timeout [ 148.172365][ T8970] __nla_validate_parse: 6 callbacks suppressed [ 148.172377][ T8970] netlink: 52 bytes leftover after parsing attributes in process `syz.1.848'. [ 148.292364][ T8982] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.359355][ T8978] could not allocate digest TFM handle cryptd(blake2b-160) [ 148.505961][ T1245] syzkaller0: tun_net_xmit 76 [ 148.507671][ T1245] syzkaller0: tun_net_xmit 48 [ 148.542073][ T60] syzkaller0: tun_net_xmit 76 [ 148.708556][ T60] usb 9-1: USB disconnect, device number 2 [ 149.203006][ T9012] netlink: 100 bytes leftover after parsing attributes in process `syz.2.860'. [ 149.616217][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.859'. [ 149.621200][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.674605][ T9020] netlink: 'syz.4.863': attribute type 9 has an invalid length. [ 149.828443][ T9039] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 149.852904][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 149.852919][ T40] audit: type=1400 audit(1758439817.588:27843): avc: denied { create } for pid=9046 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.865129][ T40] audit: type=1400 audit(1758439817.588:27844): avc: denied { getopt } for pid=9046 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.873429][ T40] audit: type=1400 audit(1758439817.588:27845): avc: denied { write } for pid=9046 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.880231][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 149.881537][ T40] audit: type=1400 audit(1758439817.588:27846): avc: denied { ioctl } for pid=9046 comm="syz.1.870" path="socket:[24310]" dev="sockfs" ino=24310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.962000][ T40] audit: type=1400 audit(1758439817.698:27847): avc: denied { connect } for pid=9048 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.968038][ T40] audit: type=1400 audit(1758439817.698:27848): avc: denied { read } for pid=9048 comm="syz.2.871" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 149.975798][ T40] audit: type=1400 audit(1758439817.698:27849): avc: denied { open } for pid=9048 comm="syz.2.871" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 150.021261][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.049533][ T9059] netlink: 'syz.1.874': attribute type 9 has an invalid length. [ 150.173476][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 150.176349][ T60] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 150.179008][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.182346][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.185615][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.188695][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.193538][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.196393][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.405854][ T60] usb 5-1: usb_control_msg returned -32 [ 150.407852][ T60] usbtmc 5-1:16.0: can't read capabilities [ 150.599021][ T40] audit: type=1400 audit(1758439818.328:27850): avc: denied { ioctl } for pid=9061 comm="syz.2.875" path="socket:[24993]" dev="sockfs" ino=24993 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.043314][ T40] audit: type=1400 audit(1758439818.778:27851): avc: denied { ioctl } for pid=9088 comm="syz.4.882" path="socket:[25632]" dev="sockfs" ino=25632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.095171][ T40] audit: type=1400 audit(1758439818.828:27852): avc: denied { read } for pid=9088 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.098704][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.4.882 [ 151.198080][ T9104] 9pnet: Could not find request transport: virTio [ 151.829510][ T9140] openvswitch: netlink: Key type 7457 is out of range max 32 [ 151.847794][ T1148] syzkaller0: tun_net_xmit 76 [ 151.850008][ T1148] syzkaller0: tun_net_xmit 48 [ 151.852405][ T9140] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.897'. [ 151.909181][ T9144] pvfs2: Unknown parameter 'X rejected, failed to enable media [ 153.986917][ T9271] syzkaller0: entered promiscuous mode [ 153.989203][ T9271] syzkaller0: entered allmulticast mode [ 154.183865][ T9290] binder: 9289:9290 ioctl c018620c 200000000240 returned -22 [ 154.200402][ T9294] netlink: 'syz.1.944': attribute type 9 has an invalid length. [ 154.244017][ T9297] autofs: Unknown parameter '0x0000000000000468' [ 154.278624][ T9303] netlink: 156 bytes leftover after parsing attributes in process `syz.1.948'. [ 154.291697][ T9300] netlink: 80 bytes leftover after parsing attributes in process `syz.0.947'. [ 154.324257][ T9290] batadv_slave_0: entered allmulticast mode [ 154.326612][ T9290] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 154.333558][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.943'. [ 154.396104][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'. [ 154.398945][ T9314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 154.509014][ T9323] tipc: Can't bind to reserved service type 2 [ 154.814483][ T9334] KVM: debugfs: duplicate directory 9334-1 [ 154.987672][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 154.987690][ T40] audit: type=1400 audit(1758439822.718:27889): avc: denied { connect } for pid=9335 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.015815][ T9298] orangefs_mount: mount request failed with -4 [ 155.041376][ T40] audit: type=1400 audit(1758439822.768:27890): avc: denied { read } for pid=9335 comm="syz.0.960" path="socket:[25984]" dev="sockfs" ino=25984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.050756][ T40] audit: type=1400 audit(1758439822.778:27891): avc: denied { read } for pid=9338 comm="syz.4.961" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.060432][ T40] audit: type=1400 audit(1758439822.778:27892): avc: denied { open } for pid=9338 comm="syz.4.961" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.101940][ T40] audit: type=1400 audit(1758439822.838:27893): avc: denied { ioctl } for pid=9338 comm="syz.4.961" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.146608][ T40] audit: type=1400 audit(1758439822.878:27894): avc: denied { shutdown } for pid=9348 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.175023][ T40] audit: type=1400 audit(1758439822.908:27895): avc: denied { accept } for pid=9350 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 155.177441][ T9351] validate_nla: 3 callbacks suppressed [ 155.177456][ T9351] netlink: 'syz.2.964': attribute type 39 has an invalid length. [ 155.237335][ T9359] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 155.261423][ T40] audit: type=1400 audit(1758439822.998:27896): avc: denied { getopt } for pid=9360 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.380412][ T9372] bond0: (slave bond_slave_0): Releasing backup interface [ 155.388176][ T9372] bond0: (slave bond_slave_1): Releasing backup interface [ 155.397224][ T9372] team0: Port device team_slave_0 removed [ 155.405043][ T9372] team0: Port device team_slave_1 removed [ 155.408442][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.412520][ T9372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.417176][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.420201][ T9372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.433142][ T9372] bond1: (slave ip6gre1): Releasing backup interface [ 155.436084][ T9372] ip6gre1: left promiscuous mode [ 155.453384][ T9373] team0: Mode changed to "random" [ 155.462658][ T9372] vlan0: entered promiscuous mode [ 155.474191][ T9372] tipc: Enabled bearer , priority 0 [ 155.478849][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 155.559849][ T9385] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 155.562456][ T40] audit: type=1400 audit(1758439823.298:27897): avc: denied { ioctl } for pid=9382 comm="syz.4.974" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 155.574044][ T40] audit: type=1400 audit(1758439823.298:27898): avc: denied { getopt } for pid=9382 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.149605][ T9403] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.981'. [ 156.217468][ T9413] hfsplus: unable to find HFS+ superblock [ 156.576313][ T9426] kvm: emulating exchange as write [ 156.576765][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 156.584452][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 156.918077][ T9470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=9470 comm=syz.1.999 [ 156.924486][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 156.925618][ T9471] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 156.929487][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 156.930528][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 157.023217][ T9470] infiniband syz2: set active [ 157.024005][ T54] vxcan1 speed is unknown, defaulting to 1000 [ 157.025175][ T9470] infiniband syz2: added vxcan1 [ 157.062297][ T9479] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 157.063219][ T9470] RDS/IB: syz2: added [ 157.066652][ T9470] smc: adding ib device syz2 with port count 1 [ 157.068823][ T9470] smc: ib device syz2 port 1 has pnetid [ 157.072267][ T1330] vxcan1 speed is unknown, defaulting to 1000 [ 157.076516][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 157.171025][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 157.206940][ T6717] syzkaller0: tun_net_xmit 76 [ 157.210871][ T6717] syzkaller0: tun_net_xmit 48 [ 157.231403][ T60] syzkaller0: tun_net_xmit 76 [ 158.191345][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 158.346020][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 159.440812][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1019'. [ 159.444724][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1019'. [ 159.648456][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 159.655936][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 159.736252][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1028'. [ 159.747892][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 159.754357][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 159.774222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.788844][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 159.864784][ T9574] syz.4.1031 (9574) used obsolete PPPIOCDETACH ioctl [ 160.573157][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 160.573173][ T40] audit: type=1400 audit(1758439828.308:27914): avc: denied { append } for pid=9594 comm="syz.2.1037" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.999894][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1042'. [ 161.003800][ T9624] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1042'. [ 161.025094][ T9626] netlink: 'syz.4.1045': attribute type 3 has an invalid length. [ 161.379101][ T9648] netlink: 'syz.2.1051': attribute type 39 has an invalid length. [ 161.607165][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.624495][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.630367][ T5972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.646305][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.653883][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.239810][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.249589][ T9665] IPVS: length: 184 != 24 [ 162.254094][ T9652] vxcan1 speed is unknown, defaulting to 1000 [ 162.426071][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.440969][ T9683] netlink: 'syz.1.1064': attribute type 18 has an invalid length. [ 162.446229][ T9683] netlink: 'syz.1.1064': attribute type 18 has an invalid length. [ 162.484775][ T40] audit: type=1400 audit(1758439830.218:27915): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 162.508379][ T9688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=205 sclass=netlink_route_socket pid=9688 comm=syz.1.1065 [ 162.529737][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.550533][ T9652] chnl_net:caif_netlink_parms(): no params data found [ 162.632078][ T9698] overlayfs: failed to clone lowerpath [ 162.640815][ T46] bond0: (slave netdevsim0): Releasing backup interface [ 162.646248][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.655256][ T6717] syzkaller0: tun_net_xmit 76 [ 162.656978][ T6717] syzkaller0: tun_net_xmit 48 [ 162.681479][ T1330] syzkaller0: tun_net_xmit 76 [ 162.890693][ T9708] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 163.617268][ T9652] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.620053][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.623268][ T9652] bridge_slave_0: entered allmulticast mode [ 163.625942][ T9652] bridge_slave_0: entered promiscuous mode [ 163.628644][ T9705] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 163.634845][ T9707] tipc: Resetting bearer [ 163.645180][ T9708] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 163.647526][ T9708] bond0: (slave wlan1): refused to change device type [ 163.658526][ T9652] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.661902][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.664960][ T9652] bridge_slave_1: entered allmulticast mode [ 163.668738][ T9652] bridge_slave_1: entered promiscuous mode [ 163.676149][ T54] vxcan1 speed is unknown, defaulting to 1000 [ 163.680308][ T40] audit: type=1400 audit(1758439831.408:27916): avc: denied { read } for pid=9713 comm="syz.4.1074" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.688748][ T40] audit: type=1400 audit(1758439831.408:27917): avc: denied { open } for pid=9713 comm="syz.4.1074" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.700502][ T40] audit: type=1400 audit(1758439831.428:27918): avc: denied { read } for pid=9719 comm="syz.1.1075" path="socket:[28060]" dev="sockfs" ino=28060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.718293][ T9652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.724014][ T9652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.761181][ T40] audit: type=1400 audit(1758439831.488:27919): avc: denied { getopt } for pid=9719 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.767801][ T40] audit: type=1400 audit(1758439831.488:27920): avc: denied { ioctl } for pid=9719 comm="syz.1.1075" path="socket:[27234]" dev="sockfs" ino=27234 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.777442][ T5972] Bluetooth: hci2: command tx timeout [ 163.783009][ T9652] team0: Port device team_slave_0 added [ 163.790477][ T9652] team0: Port device team_slave_1 added [ 163.830725][ T9652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.833764][ T9652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.844080][ T9652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.851662][ T9652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.854552][ T9652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.864644][ T9652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.869677][ T46] bridge_slave_1: left allmulticast mode [ 163.873144][ T46] bridge_slave_1: left promiscuous mode [ 163.877403][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.885068][ T46] bridge_slave_0: left allmulticast mode [ 163.887619][ T46] bridge_slave_0: left promiscuous mode [ 163.890205][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.319690][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.325694][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.329659][ T46] bond0 (unregistering): Released all slaves [ 164.336177][ T46] bond1 (unregistering): Released all slaves [ 164.343485][ T46] bond2 (unregistering): Released all slaves [ 164.349667][ T46] bond3 (unregistering): Released all slaves [ 164.367153][ T9736] syzkaller1: entered promiscuous mode [ 164.369153][ T9736] syzkaller1: entered allmulticast mode [ 164.442472][ T6717] syzkaller0: tun_net_xmit 76 [ 164.444666][ T6717] syzkaller0: tun_net_xmit 48 [ 164.471701][ T838] syzkaller0: tun_net_xmit 76 [ 164.489406][ T46] : left promiscuous mode [ 164.511341][ T1330] syzkaller0: tun_net_xmit 76 [ 164.554122][ T9750] fuse: Unknown parameter '0x0000000000000003' [ 164.585854][ T46] IPVS: stopping backup sync thread 6146 ... [ 164.589593][ T9756] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 164.616178][ T40] audit: type=1400 audit(1758439832.348:27921): avc: denied { relabelto } for pid=9755 comm="syz.4.1083" name="cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 164.624001][ T9756] __nla_validate_parse: 11 callbacks suppressed [ 164.624018][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 164.629608][ T40] audit: type=1400 audit(1758439832.348:27922): avc: denied { associate } for pid=9755 comm="syz.4.1083" name="cgroup.procs" dev="cgroup" ino=468 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 164.855247][ T9764] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 165.502831][ T9652] hsr_slave_0: entered promiscuous mode [ 165.504907][ T9652] hsr_slave_1: entered promiscuous mode [ 165.506821][ T9652] debugfs: 'hsr0' already exists in 'hsr' [ 165.508482][ T9652] Cannot create hsr debugfs directory [ 165.546558][ T9768] binder: 9767:9768 unknown command 1078485781 [ 165.548605][ T9768] binder: 9767:9768 ioctl c0306201 2000000001c0 returned -22 [ 165.640273][ T40] audit: type=1400 audit(1758439833.368:27923): avc: denied { watch watch_reads } for pid=9784 comm="syz.4.1091" path="pipe:[28144]" dev="pipefs" ino=28144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 165.649149][ T40] audit: type=1400 audit(1758439833.388:27924): avc: denied { ioctl } for pid=9784 comm="syz.4.1091" path="cgroup:[4026533775]" dev="nsfs" ino=4026533775 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.685534][ T9788] binder: Bad value for 'max' [ 165.685833][ T40] audit: type=1400 audit(1758439833.418:27925): avc: denied { mounton } for pid=9787 comm="syz.2.1092" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.710227][ T40] audit: type=1400 audit(1758439833.438:27926): avc: denied { getopt } for pid=9789 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.759928][ T46] hsr_slave_0: left promiscuous mode [ 165.765695][ T46] hsr_slave_1: left promiscuous mode [ 165.767760][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.770148][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.773239][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.775560][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.795381][ T46] veth1_macvtap: left promiscuous mode [ 165.797147][ T46] veth0_macvtap: left promiscuous mode [ 165.798993][ T46] veth1_vlan: left promiscuous mode [ 165.800681][ T46] veth0_vlan: left promiscuous mode [ 165.836034][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1097'. [ 165.851300][ T5972] Bluetooth: hci2: command tx timeout [ 165.958697][ T40] audit: type=1400 audit(1758439833.688:27927): avc: denied { write } for pid=9797 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.958812][ T9809] block nbd2: Send control failed (result -22) [ 165.964510][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'. [ 165.964527][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'. [ 165.975207][ T9809] block nbd2: Request send failed, requeueing [ 165.980263][ T67] block nbd2: Dead connection, failed to find a fallback [ 165.984818][ T40] audit: type=1400 audit(1758439833.718:27928): avc: denied { accept } for pid=9810 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.987593][ T67] block nbd2: shutting down sockets [ 165.995942][ T67] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 166.000494][ T9809] EXT4-fs (nbd2): unable to read superblock [ 166.024447][ T9816] netlink: 'syz.1.1101': attribute type 21 has an invalid length. [ 166.415499][ T46] team0 (unregistering): Port device team_slave_1 removed [ 166.474819][ T46] team0 (unregistering): Port device team_slave_0 removed [ 166.980268][ T9816] netlink: 'syz.1.1101': attribute type 6 has an invalid length. [ 166.984439][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1101'. [ 166.995577][ T9818] : entered promiscuous mode [ 167.941428][ T5972] Bluetooth: hci2: command tx timeout [ 167.957350][ T9652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.963534][ T9821] : left promiscuous mode [ 167.974642][ T9652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.983795][ T9652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.999818][ T9652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.058487][ T9835] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1104'. [ 168.063899][ T9835] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1104'. [ 168.070302][ T9652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.089230][ T9652] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.107456][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.110450][ T6717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.123588][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.126571][ T6717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.330050][ T9652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.337076][ T40] audit: type=1400 audit(1758439836.068:27929): avc: denied { transfer } for pid=9861 comm="syz.4.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 168.338246][ T9862] binder: 9861:9862 ioctl c0306201 2000000005c0 returned -14 [ 168.375987][ T9865] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1110'. [ 168.384349][ T40] audit: type=1400 audit(1758439836.118:27930): avc: denied { create } for pid=9868 comm="syz.4.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.396470][ T40] audit: type=1400 audit(1758439836.128:27931): avc: denied { read } for pid=9864 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.432975][ T40] audit: type=1400 audit(1758439836.158:27932): avc: denied { mounton } for pid=9874 comm="syz.2.1112" path="/235/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 168.440633][ T9875] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1112'. [ 168.498077][ T9652] veth0_vlan: entered promiscuous mode [ 168.503604][ T9652] veth1_vlan: entered promiscuous mode [ 168.518149][ T9652] veth0_macvtap: entered promiscuous mode [ 168.522193][ T9652] veth1_macvtap: entered promiscuous mode [ 168.530355][ T9652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.536760][ T9652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.545117][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.548817][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.552916][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.555699][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.592297][ T6717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.594837][ T6717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.628470][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.632028][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.681303][ T1469] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 168.683577][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1053'. [ 168.698735][ T9884] SELinux: failed to load policy [ 168.859019][ T1469] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 168.863188][ T1469] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 168.866074][ T1469] usb 9-1: Product: syz [ 168.867904][ T1469] usb 9-1: Manufacturer: syz [ 168.869731][ T1469] usb 9-1: SerialNumber: syz [ 168.874438][ T1469] usb 9-1: config 0 descriptor?? [ 168.878345][ T1469] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 168.881648][ T1469] dvb-usb: bulk message failed: -22 (2/0) [ 168.889675][ T1469] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.894888][ T1469] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 168.897838][ T1469] usb 9-1: media controller created [ 168.910675][ T1469] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.912671][ T9907] Invalid source name [ 168.915142][ T9907] UBIFS error (pid: 9907): cannot open "./file0", error -22 [ 169.081472][ T9869] dvb-usb: bulk message failed: -22 (4/0) [ 169.086128][ T9869] cxusb: i2c read failed [ 169.089907][ T1469] cxusb: set interface failed [ 169.092399][ T1469] dvb-usb: bulk message failed: -22 (1/0) [ 169.110394][ T9927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=9927 comm=syz.1.1128 [ 169.112047][ T1469] DVB: Unable to find symbol mt352_attach() [ 169.116403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 169.117267][ T1469] dvb-usb: bulk message failed: -22 (5/0) [ 169.123748][ T1469] zl10353_read_register: readreg error (reg=127, ret==-121) [ 169.126096][ T1469] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 169.133513][ T9927] tipc: Resetting bearer [ 169.170104][ T9927] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 169.180565][ T9927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.181309][ T1469] rc_core: IR keymap rc-dvico-mce not found [ 169.184842][ T9927] team0: Device bond0 failed to register rx_handler [ 169.185637][ T1469] Registered IR keymap rc-empty [ 169.195511][ T1469] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 169.196291][ T9931] netlink: 'syz.5.1129': attribute type 18 has an invalid length. [ 169.200370][ T1469] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input10 [ 169.208261][ T9931] netlink: 'syz.5.1129': attribute type 18 has an invalid length. [ 169.208347][ T61] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.212756][ T1469] dvb-usb: schedule remote query interval to 100 msecs. [ 169.216986][ T61] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.218616][ T1469] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 169.220064][ T1469] usb 9-1: USB disconnect, device number 3 [ 169.224558][ T61] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.233845][ T61] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.259149][ T1469] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 169.261006][ T9933] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 169.460600][ T9942] ntfs3(sr0): try to read out of volume at offset 0x0 [ 169.661261][ T9950] netlink: 'syz.4.1135': attribute type 13 has an invalid length. [ 169.672175][ T9950] gretap0: refused to change device tx_queue_len [ 169.674402][ T9950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.716419][ T9955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.717077][ T9957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.781600][ T9975] __nla_validate_parse: 10 callbacks suppressed [ 169.781610][ T9975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1142'. [ 169.836759][ T9990] sysfs: Unknown parameter 'ƒ]us"' [ 169.870154][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.876256][ T9999] netem: change failed [ 170.129227][T10028] program syz.2.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.130360][T10029] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 170.131313][T10022] netlink: 'syz.4.1157': attribute type 10 has an invalid length. [ 170.137869][T10029] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 170.153228][T10033] netlink: 'syz.5.1153': attribute type 1 has an invalid length. [ 170.453925][ T99] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.551892][ T99] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.585301][T10062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1172'. [ 170.587259][T10064] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 170.614754][ T99] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.630545][ T5328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.638829][ T5328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.642214][ T5328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.645952][ T5328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.649369][ T5328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.678875][ T99] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.684927][T10074] mmap: syz.1.1177 (10074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 170.694333][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 170.755439][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 170.755450][ T40] audit: type=1326 audit(1758439838.488:27949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.5.1153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2515f8ec29 code=0x7fc00000 [ 170.764818][ T40] audit: type=1326 audit(1758439838.488:27950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.5.1153" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2515f8ec29 code=0x7fc00000 [ 170.812113][ T40] audit: type=1400 audit(1758439838.538:27951): avc: denied { setattr } for pid=10084 comm="syz.5.1180" path="socket:[29361]" dev="sockfs" ino=29361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.829333][ T1144] Bluetooth: hci3: Frame reassembly failed (-84) [ 170.837893][T10087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1181'. [ 170.876533][ T99] bridge_slave_1: left allmulticast mode [ 170.881881][ T99] bridge_slave_1: left promiscuous mode [ 170.884603][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.894205][ T99] bridge_slave_0: left allmulticast mode [ 170.896452][ T99] bridge_slave_0: left promiscuous mode [ 170.898855][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.296530][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.302533][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.307048][ T99] bond0 (unregistering): Released all slaves [ 171.318196][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1184'. [ 171.370723][T10068] chnl_net:caif_netlink_parms(): no params data found [ 171.487104][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.489903][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.493890][T10068] bridge_slave_0: entered allmulticast mode [ 171.497065][T10068] bridge_slave_0: entered promiscuous mode [ 171.501323][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.504094][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.506516][T10068] bridge_slave_1: entered allmulticast mode [ 171.509932][T10068] bridge_slave_1: entered promiscuous mode [ 171.564770][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.581919][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.612109][T10068] team0: Port device team_slave_0 added [ 171.615239][T10068] team0: Port device team_slave_1 added [ 171.643120][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.645462][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.653771][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.661602][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.664196][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.673757][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.762202][ T99] hsr_slave_0: left promiscuous mode [ 171.764349][ T99] hsr_slave_1: left promiscuous mode [ 171.766322][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.768692][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.772546][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.775109][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.794547][ T99] veth1_macvtap: left promiscuous mode [ 171.796396][ T99] veth0_macvtap: left promiscuous mode [ 171.798235][ T99] veth1_vlan: left promiscuous mode [ 171.799911][ T99] veth0_vlan: left promiscuous mode [ 172.731357][ T5328] Bluetooth: hci0: command tx timeout [ 172.891197][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 172.891345][ T5328] Bluetooth: hci3: command 0x1003 tx timeout [ 173.693463][T10068] hsr_slave_0: entered promiscuous mode [ 173.695865][T10068] hsr_slave_1: entered promiscuous mode [ 173.893437][T10146] netlink: 'syz.4.1196': attribute type 6 has an invalid length. [ 173.895852][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1196'. [ 174.725949][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.780161][T10155] syzkaller1: entered promiscuous mode [ 174.782626][ T40] audit: type=1400 audit(1758439842.518:27952): avc: denied { setopt } for pid=10158 comm="syz.5.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.790744][T10155] syzkaller1: entered allmulticast mode [ 174.811304][ T5972] Bluetooth: hci0: command tx timeout [ 174.906949][T10068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.911428][T10068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.915759][T10068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.920936][T10068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.937503][ T40] audit: type=1400 audit(1758439842.668:27953): avc: denied { ioctl } for pid=10169 comm="syz.1.1204" path="socket:[28607]" dev="sockfs" ino=28607 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.986396][T10068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.999043][ T40] audit: type=1400 audit(1758439842.728:27954): avc: denied { read } for pid=10189 comm="syz.5.1207" path="socket:[31250]" dev="sockfs" ino=31250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.003669][T10068] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.015210][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.015671][T10190] netlink: 'syz.5.1207': attribute type 1 has an invalid length. [ 175.017439][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.023773][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.026117][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.051412][ T53] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 175.082052][T10190] netlink: 'syz.5.1207': attribute type 1 has an invalid length. [ 175.150066][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.201422][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 175.206254][ T53] usb 9-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 175.209271][ T53] usb 9-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 64 [ 175.212945][ T53] usb 9-1: config 1 interface 0 has no altsetting 0 [ 175.216572][ T53] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.219357][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.222117][ T53] usb 9-1: Product: ᠌ [ 175.223445][ T53] usb 9-1: Manufacturer: ꗑ㐳ࠗᡜ餎醓ӫⱡ쉃ퟁႛꚥ㪻㬯〾铍䜸Ⳑყ䨃줭幒轰䊂쟨Ǽ穖擻û퐀ℨ饊䵈餶뭔͂菍꬝媚䇨瘬멼瓠㝁㴮됣ζ霽⺎ᤓ뽁㽲Ａ鑞뢨봁詐ु༥㸫쵀ꮝ醔個菂盯ᮌ錭ꚱ쨝薄恍邟ꃚ裈틪檙䴪愭 [ 175.232362][ T53] usb 9-1: SerialNumber: я [ 175.235629][T10155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.235866][ T61] syzkaller0: tun_net_xmit 76 [ 175.237896][T10155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.239926][ T61] syzkaller0: tun_net_xmit 48 [ 175.460635][ T53] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 175.467851][ T53] usb 9-1: USB disconnect, device number 4 [ 176.057906][ T40] audit: type=1400 audit(1758439843.788:27955): avc: denied { connect } for pid=10222 comm="syz.1.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 176.112785][T10224] netlink: 163952 bytes leftover after parsing attributes in process `syz.1.1214'. [ 176.279166][T10068] veth0_vlan: entered promiscuous mode [ 176.288642][T10068] veth1_vlan: entered promiscuous mode [ 176.309049][T10068] veth0_macvtap: entered promiscuous mode [ 176.315697][T10068] veth1_macvtap: entered promiscuous mode [ 176.330376][T10068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.337470][T10068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.346608][ T99] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.349415][ T99] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.356701][ T99] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.359899][ T99] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.368081][T10234] blkio.reset_stats is deprecated [ 176.371095][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1217'. [ 176.375383][T10234] bridge_slave_1: left allmulticast mode [ 176.377559][T10234] bridge_slave_1: left promiscuous mode [ 176.385664][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.385950][T10236] netlink: 'syz.1.1218': attribute type 11 has an invalid length. [ 176.394698][T10234] bridge_slave_0: left allmulticast mode [ 176.396549][T10234] bridge_slave_0: left promiscuous mode [ 176.398679][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.488502][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.491017][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.505855][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.508995][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.542087][T10243] netlink: 'syz.1.1220': attribute type 12 has an invalid length. [ 176.564010][T10247] fuse: Invalid rootmode [ 176.590568][T10247] befs: (nullb0): No write support. Marking filesystem read-only [ 176.595747][T10247] befs: (nullb0): invalid magic header [ 176.614511][ T40] audit: type=1400 audit(1758439844.348:27956): avc: denied { read } for pid=10253 comm="syz.1.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 176.640022][T10258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1225'. [ 176.667448][ T40] audit: type=1400 audit(1758439844.398:27957): avc: denied { write } for pid=10244 comm="syz.6.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.893021][ T5972] Bluetooth: hci0: command tx timeout [ 177.101296][ T54] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 177.147057][ T40] audit: type=1400 audit(1758439844.878:27958): avc: denied { write } for pid=10286 comm="syz.4.1233" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 177.150332][T10287] block nbd4: Attempted send on invalid socket [ 177.154603][ T40] audit: type=1400 audit(1758439844.878:27959): avc: denied { open } for pid=10286 comm="syz.4.1233" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 177.157518][T10287] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.168527][T10287] exFAT-fs (nbd4): unable to read boot sector [ 177.170567][T10287] exFAT-fs (nbd4): failed to read boot sector [ 177.173324][T10287] exFAT-fs (nbd4): failed to recognize exfat type [ 177.261314][ T54] usb 10-1: Using ep0 maxpacket: 8 [ 177.264216][ T54] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 177.266720][ T54] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.269756][ T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.274752][ T54] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024 [ 177.278183][ T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 177.281468][ T54] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.285454][ T54] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.288394][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.438909][T10301] netlink: 'syz.6.1237': attribute type 10 has an invalid length. [ 177.447359][T10301] team0: Port device dummy0 added [ 177.450186][T10301] netlink: 'syz.6.1237': attribute type 10 has an invalid length. [ 177.470190][T10301] team0: Port device dummy0 removed [ 177.478887][T10301] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 177.481936][T10301] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1237'. [ 177.485164][T10302] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1237'. [ 177.498140][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.500979][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.504151][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.506967][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.510086][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.513016][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.515905][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.518839][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.521777][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.524610][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.534493][ T54] usb 10-1: usb_control_msg returned -32 [ 177.536624][ T54] usbtmc 10-1:16.0: can't read capabilities [ 177.549136][ T40] audit: type=1400 audit(1758439845.278:27960): avc: denied { setattr } for pid=10305 comm="syz.6.1239" name="/" dev="9p" ino=71827725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.551017][ T6056] usb 10-1: USB disconnect, device number 2 [ 177.581724][T10304] team0 (unregistering): Port device team_slave_0 removed [ 177.585813][T10304] team0 (unregistering): Port device team_slave_1 removed [ 177.627544][T10313] tipc: Enabled bearer , priority 0 [ 177.761327][ T40] audit: type=1400 audit(1758439845.488:27961): avc: denied { map } for pid=10331 comm="syz.1.1250" path="socket:[34001]" dev="sockfs" ino=34001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 177.774184][T10330] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 178.301700][ T6056] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 178.463181][ T6056] usb 10-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 178.466165][ T6056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.469812][ T6056] usb 10-1: config 0 descriptor?? [ 178.643588][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1255'. [ 178.685573][ T6056] usbhid 10-1:0.0: can't add hid device: -71 [ 178.687571][ T6056] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 178.692624][ T6056] usb 10-1: USB disconnect, device number 3 [ 178.971325][ T5972] Bluetooth: hci0: command tx timeout [ 179.032161][ T6027] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 179.161242][ T6027] usb 9-1: device descriptor read/64, error -71 [ 179.331755][ T40] audit: type=1400 audit(1758439847.058:27962): avc: denied { associate } for pid=10378 comm="syz.1.1267" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 179.391475][T10380] tipc: Enabling of bearer rejected, already enabled [ 179.395032][T10380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.398986][T10380] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.410331][T10381] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.413111][ T6027] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 179.553107][ T6027] usb 9-1: device descriptor read/64, error -71 [ 179.673771][ T6027] usb usb9-port1: attempt power cycle [ 179.773768][T10403] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 179.777713][T10403] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 180.021319][ T6027] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 180.051996][ T6027] usb 9-1: device descriptor read/8, error -71 [ 180.125136][T10417] IPv6: sit1: Disabled Multicast RS [ 180.127846][T10417] sit1: entered allmulticast mode [ 180.291368][ T6027] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 180.311658][ T6027] usb 9-1: device descriptor read/8, error -71 [ 180.350227][ T40] audit: type=1400 audit(1758439848.078:27963): avc: denied { read } for pid=10425 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.421567][ T6027] usb usb9-port1: unable to enumerate USB device [ 180.872685][ T46] syzkaller0: tun_net_xmit 76 [ 180.874508][ T46] syzkaller0: tun_net_xmit 48 [ 181.293808][ T5328] Bluetooth: hci3: command 0x1003 tx timeout [ 181.293850][ T5972] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 181.561566][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1292'. [ 181.613422][T10456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1292'. [ 181.617064][T10456] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1292'. [ 182.017954][T10466] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1295'. [ 182.022470][T10468] netlink: 'syz.5.1296': attribute type 11 has an invalid length. [ 182.025716][T10468] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1296'. [ 182.061774][T10473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1297'. [ 182.204198][ T99] syzkaller0: tun_net_xmit 76 [ 182.208028][ T99] syzkaller0: tun_net_xmit 48 [ 182.226970][ T839] syzkaller0: tun_net_xmit 76 [ 182.238748][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'. [ 182.287987][T10505] binder_alloc: 10504: binder_alloc_buf, no vma [ 183.175891][ T40] audit: type=1326 audit(1758439850.908:27964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.184910][ T40] audit: type=1326 audit(1758439850.908:27965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.196694][ T40] audit: type=1326 audit(1758439850.908:27966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb8db8ec29 code=0x0 [ 183.229263][ T40] audit: type=1326 audit(1758439850.958:27967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.237271][ T40] audit: type=1326 audit(1758439850.958:27968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.244543][ T40] audit: type=1326 audit(1758439850.958:27969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.251960][ T40] audit: type=1326 audit(1758439850.958:27970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.259489][ T40] audit: type=1326 audit(1758439850.958:27971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.267217][ T40] audit: type=1326 audit(1758439850.958:27972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.6.1312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8db8ec29 code=0x7ffc0000 [ 183.364177][T10509] netlink: 'syz.1.1310': attribute type 30 has an invalid length. [ 183.364187][T10525] tipc: Started in network mode [ 183.364205][T10525] tipc: Node identity c, cluster identity 4711 [ 183.372093][T10525] tipc: Node number set to 12 [ 183.440429][T10534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1318'. [ 183.470941][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 183.475060][T10540] openvswitch: netlink: Flow actions attr not present in new flow. [ 183.485667][ T40] audit: type=1400 audit(1758439851.218:27973): avc: denied { listen } for pid=10542 comm="syz.6.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.559885][ T5972] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 183.560756][T10554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.564203][T10558] fuse: Bad value for 'fd' [ 183.564220][ T5972] CPU: 3 UID: 0 PID: 5972 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 183.564236][ T5972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.564244][ T5972] Workqueue: hci0 hci_rx_work [ 183.564285][ T5972] Call Trace: [ 183.564291][ T5972] [ 183.564295][ T5972] dump_stack_lvl+0x16c/0x1f0 [ 183.564314][ T5972] sysfs_warn_dup+0x7f/0xa0 [ 183.564334][ T5972] sysfs_create_dir_ns+0x24b/0x2b0 [ 183.564349][ T5972] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 183.564364][ T5972] ? find_held_lock+0x2b/0x80 [ 183.564387][ T5972] ? do_raw_spin_unlock+0x172/0x230 [ 183.564405][ T5972] kobject_add_internal+0x2c4/0x9b0 [ 183.564424][ T5972] kobject_add+0x16e/0x240 [ 183.564439][ T5972] ? __pfx_kobject_add+0x10/0x10 [ 183.564455][ T5972] ? do_raw_spin_unlock+0x172/0x230 [ 183.564473][ T5972] ? kobject_put+0xab/0x5a0 [ 183.564502][ T5972] device_add+0x288/0x1aa0 [ 183.564528][ T5972] ? __pfx_dev_set_name+0x10/0x10 [ 183.564541][ T5972] ? __pfx_device_add+0x10/0x10 [ 183.564556][ T5972] ? mgmt_send_event_skb+0x2fb/0x460 [ 183.564572][ T5972] hci_conn_add_sysfs+0x17e/0x230 [ 183.564594][ T5972] le_conn_complete_evt+0x1075/0x1d70 [ 183.564612][ T5972] ? preempt_count_sub+0xb0/0x160 [ 183.564637][ T5972] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 183.564648][ T5972] ? hci_event_packet+0x459/0x11c0 [ 183.564663][ T5972] hci_le_conn_complete_evt+0x23c/0x370 [ 183.564678][ T5972] hci_le_meta_evt+0x357/0x5e0 [ 183.564690][ T5972] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 183.564704][ T5972] hci_event_packet+0x682/0x11c0 [ 183.564715][ T5972] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 183.564728][ T5972] ? __pfx_hci_event_packet+0x10/0x10 [ 183.564741][ T5972] ? kcov_remote_start+0x3c9/0x6d0 [ 183.564753][ T5972] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.564775][ T5972] hci_rx_work+0x2c5/0x16b0 [ 183.564789][ T5972] ? rcu_is_watching+0x12/0xc0 [ 183.564804][ T5972] process_one_work+0x9cc/0x1b70 [ 183.564824][ T5972] ? __pfx_process_one_work+0x10/0x10 [ 183.564841][ T5972] ? assign_work+0x1a0/0x250 [ 183.564854][ T5972] worker_thread+0x6c8/0xf10 [ 183.564873][ T5972] ? __pfx_worker_thread+0x10/0x10 [ 183.564886][ T5972] kthread+0x3c2/0x780 [ 183.564898][ T5972] ? __pfx_kthread+0x10/0x10 [ 183.564910][ T5972] ? rcu_is_watching+0x12/0xc0 [ 183.564929][ T5972] ? __pfx_kthread+0x10/0x10 [ 183.564942][ T5972] ret_from_fork+0x56a/0x730 [ 183.564952][ T5972] ? __pfx_kthread+0x10/0x10 [ 183.564963][ T5972] ret_from_fork_asm+0x1a/0x30 [ 183.564986][ T5972] [ 183.565004][ T5972] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.593658][T10560] sock: sock_set_timeout: `syz.5.1329' (pid 10560) tries to set negative timeout [ 183.595695][ T5972] Bluetooth: hci0: failed to register connection device [ 183.837025][T10569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.844668][T10569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.863815][T10580] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1332'. [ 183.926759][T10577] macvtap1: entered allmulticast mode [ 183.928441][T10577] veth0_macvtap: entered allmulticast mode [ 183.936016][ T1144] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.939584][ T1144] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.509271][T10587] openvswitch: netlink: Duplicate or invalid key (type 0). [ 184.514235][T10587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.900898][ T1144] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.903940][ T1144] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.918980][ T1144] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.922712][ T1144] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.926087][ T1144] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.929617][ T1144] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.094913][T10603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.683810][T10656] hfsplus: unable to find HFS+ superblock [ 185.957699][T10672] netlink: 'syz.4.1368': attribute type 5 has an invalid length. [ 186.040980][T10676] vxcan1 speed is unknown, defaulting to 1000 [ 186.104661][T10679] vlan2: entered promiscuous mode [ 186.106435][T10679] vlan2: entered allmulticast mode [ 186.108449][T10679] hsr_slave_1: entered allmulticast mode [ 186.668191][T10722] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.793876][T10734] overlayfs: failed to clone upperpath [ 186.856109][T10738] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 186.939757][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10745 comm=syz.1.1397 [ 186.940565][T10746] __nla_validate_parse: 6 callbacks suppressed [ 186.940579][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1397'. [ 186.992794][T10751] fuse: Bad value for 'group_id' [ 186.994642][T10751] fuse: Bad value for 'group_id' [ 186.995639][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 187.065950][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 187.155788][T10764] hsr_slave_1 (unregistering): left promiscuous mode [ 188.187753][T10805] overlayfs: failed to clone upperpath [ 188.306253][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 188.306266][ T40] audit: type=1326 audit(1758439856.038:27983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.1.1418" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd31998ec29 code=0x0 [ 188.312034][T10817] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1419'. [ 188.459360][T10827] all: renamed from lo [ 188.613836][T10837] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 189.204526][ T40] audit: type=1400 audit(1758439856.938:27984): avc: denied { write } for pid=10844 comm="syz.4.1430" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.274126][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1432'. [ 189.432067][ T40] audit: type=1400 audit(1758439857.158:27985): avc: denied { rename } for pid=10863 comm="syz.4.1437" name="file1" dev="overlay" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.435862][T10866] netlink: 'syz.1.1438': attribute type 18 has an invalid length. [ 189.441225][T10864] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 189.442818][ T40] audit: type=1400 audit(1758439857.168:27986): avc: denied { setattr } for pid=10863 comm="syz.4.1437" name="#30" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.442864][ T40] audit: type=1400 audit(1758439857.168:27987): avc: denied { rename } for pid=10863 comm="syz.4.1437" name="file1" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.443774][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 189.466547][T10866] netlink: 'syz.1.1438': attribute type 18 has an invalid length. [ 189.469535][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 189.526337][ T40] audit: type=1400 audit(1758439857.258:27988): avc: denied { read } for pid=10876 comm="syz.4.1440" path="socket:[35117]" dev="sockfs" ino=35117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 189.570512][T10883] IPVS: Unknown mcast interface: vcan0 [ 189.638546][T10892] ./file0: Can't lookup blockdev [ 189.766175][T10909] overlayfs: failed to clone upperpath [ 189.772571][T10909] netlink: 'syz.5.1451': attribute type 1 has an invalid length. [ 189.796137][T10909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.829174][T10909] bond2: (slave veth3): Enslaving as an active interface with a down link [ 189.838514][T10909] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.844105][T10909] bond2: (slave team0): Enslaving as an active interface with a down link [ 189.848982][T10909] tmpfs: Bad value for 'mpol' [ 189.862736][ T5328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.866732][ T5328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.870394][ T5328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.877754][ T5328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.884441][ T5328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.920618][ T61] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.930186][T10911] vxcan1 speed is unknown, defaulting to 1000 [ 190.002280][ T61] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.084185][ T61] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.144411][ T61] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.186265][T10911] chnl_net:caif_netlink_parms(): no params data found [ 190.269614][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.272764][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.276054][T10911] bridge_slave_0: entered allmulticast mode [ 190.280080][T10911] bridge_slave_0: entered promiscuous mode [ 190.297851][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.301010][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.304303][T10911] bridge_slave_1: entered allmulticast mode [ 190.308496][T10911] bridge_slave_1: entered promiscuous mode [ 190.382287][T10911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.397729][T10911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.778556][ T61] bond0 (unregistering): Released all slaves [ 190.845366][T10938] netlink: 'syz.5.1457': attribute type 10 has an invalid length. [ 190.868642][ T61] bond1 (unregistering): Released all slaves [ 190.879208][ T61] bond2 (unregistering): Released all slaves [ 190.890127][ T61] bond3 (unregistering): Released all slaves [ 190.897021][T10939] netlink: 'syz.5.1457': attribute type 10 has an invalid length. [ 190.902243][ T61] bond4 (unregistering): Released all slaves [ 190.915344][T10911] team0: Port device team_slave_0 added [ 190.920180][T10911] team0: Port device team_slave_1 added [ 190.930798][T10938] team0: Port device dummy0 added [ 190.938957][T10939] team0: Port device dummy0 removed [ 190.942607][T10939] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.987044][ T40] audit: type=1326 audit(1758439858.718:27989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.5.1458" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2515f8ec29 code=0x0 [ 191.025668][T10911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.028091][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.036168][T10911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.043342][ T61] tipc: Disabling bearer [ 191.045695][ T61] tipc: Disabling bearer [ 191.048304][ T61] tipc: Left network mode [ 191.050919][T10911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.053614][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.063817][T10911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.073636][ T61] IPVS: stopping backup sync thread 9385 ... [ 191.150653][T10911] hsr_slave_0: entered promiscuous mode [ 191.153307][T10911] hsr_slave_1: entered promiscuous mode [ 191.155825][T10911] debugfs: 'hsr0' already exists in 'hsr' [ 191.157950][T10911] Cannot create hsr debugfs directory [ 191.327639][ T61] hsr_slave_0: left promiscuous mode [ 191.351932][ T61] veth1_macvtap: left promiscuous mode [ 191.354228][ T61] veth0_macvtap: left allmulticast mode [ 191.356433][ T61] veth0_macvtap: left promiscuous mode [ 191.358858][ T61] veth1_vlan: left promiscuous mode [ 191.932790][ T5972] Bluetooth: hci1: command tx timeout [ 192.297971][ T99] smc: removing ib device syz2 [ 192.416809][ T61] lo (unregistering): left allmulticast mode [ 192.441101][ T6215] vxcan1 speed is unknown, defaulting to 1000 [ 192.451313][ T6215] syz2: Port: 1 Link DOWN [ 192.793414][T10978] openvswitch: netlink: Message has 8 unknown bytes. [ 192.939781][T10911] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.944320][T10911] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.949704][T10911] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.954623][T10911] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.980127][ T61] IPVS: stop unused estimator thread 0... [ 193.009586][ T40] audit: type=1400 audit(1758439860.738:27990): avc: denied { map } for pid=10994 comm="syz.4.1474" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.021335][ T40] audit: type=1400 audit(1758439860.738:27991): avc: denied { execute } for pid=10994 comm="syz.4.1474" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.040002][T10911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.047475][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1473'. [ 193.050948][T10997] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1473'. [ 193.086402][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.095946][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.098813][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.116645][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.119735][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.140275][T11002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1476'. [ 193.145440][T11002] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1476'. [ 193.274582][T10911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.315414][T10911] veth0_vlan: entered promiscuous mode [ 193.326023][T10911] veth1_vlan: entered promiscuous mode [ 193.350711][T10911] veth0_macvtap: entered promiscuous mode [ 193.358045][T10911] veth1_macvtap: entered promiscuous mode [ 193.371378][T10911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.379427][T10911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.387258][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.390470][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.395108][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.398346][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.443323][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.446269][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.459770][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.462969][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.551089][T11017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 193.855518][T11034] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 193.878499][T11038] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1486'. [ 193.882344][T11038] netem: unknown loss type 12 [ 193.884714][T11038] netem: change failed [ 193.897063][T11038] 9p: Unknown Cache mode or invalid value loos [ 193.959524][T11050] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1490'. [ 193.966834][T11053] program syz.4.1491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.022536][ T5972] Bluetooth: hci1: command tx timeout [ 194.036915][T11056] overlayfs: missing 'workdir' [ 194.061001][T11065] tmpfs: Unknown parameter 'nlocks' [ 194.207978][T11078] fuse: Bad value for 'user_id' [ 194.209730][T11078] fuse: Bad value for 'user_id' [ 194.272204][ T40] audit: type=1400 audit(1758439862.008:27992): avc: denied { read } for pid=11080 comm="syz.4.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.445125][ T40] audit: type=1400 audit(1758439862.168:27993): avc: denied { watch_mount } for pid=11097 comm="syz.5.1507" path="/138" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 194.513018][ T40] audit: type=1400 audit(1758439862.248:27994): avc: denied { ioctl } for pid=11102 comm="syz.4.1509" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x3b80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 194.531225][ T40] audit: type=1400 audit(1758439862.248:27995): avc: denied { read write } for pid=11102 comm="syz.4.1509" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 194.550846][ T40] audit: type=1400 audit(1758439862.248:27996): avc: denied { open } for pid=11102 comm="syz.4.1509" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 194.564411][ T40] audit: type=1400 audit(1758439862.248:27997): avc: denied { ioctl } for pid=11102 comm="syz.4.1509" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x5306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 194.630025][ T40] audit: type=1400 audit(1758439862.358:27998): avc: denied { associate } for pid=11116 comm="syz.1.1512" name="cpuset.effective_mems" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 194.855877][T11136] netlink: 'syz.1.1518': attribute type 10 has an invalid length. [ 194.860268][T11136] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 194.896477][ T40] audit: type=1400 audit(1758439862.628:27999): avc: denied { setattr } for pid=11137 comm="syz.1.1519" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 195.146197][T11152] binder: BINDER_SET_CONTEXT_MGR already set [ 195.148078][T11152] binder: 11151:11152 ioctl 4018620d 200000000040 returned -16 [ 196.083321][T11159] IPVS: You probably need to specify IP address on multicast interface. [ 196.086715][T11159] IPVS: Error connecting to the multicast addr [ 196.091601][ T5972] Bluetooth: hci1: command tx timeout [ 196.248433][ T40] audit: type=1400 audit(1758439863.978:28000): avc: denied { setattr } for pid=11184 comm="syz.1.1534" name="file1" dev="overlay" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.249847][T11187] binder: 11186:11187 ioctl c0306201 0 returned -14 [ 196.264445][T11187] binder: 11186:11187 ioctl c0306201 2000000001c0 returned -14 [ 196.282954][T11187] mkiss: ax0: crc mode is auto. [ 196.291719][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'. [ 196.417852][ T40] audit: type=1400 audit(1758439864.148:28001): avc: denied { write } for pid=11188 comm="syz.4.1536" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.539430][T11193] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 196.781779][T11207] loop2: detected capacity change from 0 to 7 [ 196.785355][T11207] loop2: [ 196.786689][T11207] loop2: partition table partially beyond EOD, truncated [ 196.824283][T11209] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 196.833306][T11206] IPVS: Error connecting to the multicast addr [ 197.012351][T11218] devtmpfs: Cannot change global quota limit on remount [ 197.317639][T11227] block nbd1: Unsupported socket: shutdown callout must be supported. [ 197.597722][T11244] could not allocate digest TFM handle cryptd(blake2b-160) [ 197.606173][T11247] macvlan2: entered promiscuous mode [ 197.608616][T11247] macvlan2: entered allmulticast mode [ 197.615221][T11247] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 197.681286][ T6056] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 197.770472][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 197.843832][ T6056] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.849667][ T6056] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.852853][ T6056] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.855465][ T6056] usb 6-1: Product: syz [ 197.857903][ T6056] usb 6-1: Manufacturer: syz [ 197.860094][ T6056] usb 6-1: SerialNumber: syz [ 197.864740][ T6056] usb 6-1: config 0 descriptor?? [ 197.879723][T11259] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 197.883085][T11259] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 197.886226][T11259] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1559'. [ 197.951828][T11261] @0: renamed from syz_tun (while UP) [ 198.182011][ T5972] Bluetooth: hci1: command tx timeout [ 198.224290][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'. [ 198.279408][ T6056] usb 6-1: USB disconnect, device number 3 [ 198.892705][T11288] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 198.965255][T11298] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 198.967728][T11298] #PF: supervisor instruction fetch in kernel mode [ 198.970256][T11298] #PF: error_code(0x0010) - not-present page [ 198.974317][T11298] PGD 4f9f3067 P4D 4f9f3067 PUD 0 [ 198.977185][T11298] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 198.979427][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.1.1570 Not tainted syzkaller #0 PREEMPT(full) [ 198.983183][T11298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.986773][T11298] RIP: 0010:0x0 [ 198.988263][T11298] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 198.991234][T11298] RSP: 0018:ffffc900068ff9c8 EFLAGS: 00010283 [ 198.993340][T11298] RAX: 0000000000000aec RBX: 0000000000000000 RCX: ffffc90029253000 [ 198.996052][T11298] RDX: 0000000000080000 RSI: ffffea00016ff240 RDI: ffff888026110a80 [ 198.999192][T11298] RBP: ffffea00016ff240 R08: 0000000000000007 R09: 0000000000000000 [ 199.002284][T11298] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000d1ff3a [ 199.005551][T11298] R13: ffff888026110a80 R14: 0000000000000000 R15: dffffc0000000000 [ 199.008302][T11298] FS: 00007f72a8e1e6c0(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 199.011656][T11298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.014093][T11298] CR2: ffffffffffffffd6 CR3: 0000000041c4f000 CR4: 0000000000352ef0 [ 199.016873][T11298] DR0: 0000000000000000 DR1: 00000000fec00049 DR2: 0000000000000000 [ 199.019576][T11298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 199.022617][T11298] Call Trace: [ 199.023895][T11298] [ 199.024843][T11298] filemap_read_folio+0xc5/0x2a0 [ 199.026535][T11298] ? __pfx_filemap_read_folio+0x10/0x10 [ 199.028715][T11298] ? __filemap_get_folio+0x32b/0xc30 [ 199.030403][T11298] ? down_read+0x13d/0x480 [ 199.031875][T11298] do_read_cache_folio+0x263/0x5c0 [ 199.033882][T11298] freader_get_folio+0x337/0x930 [ 199.035678][T11298] freader_fetch+0xc2/0x5e0 [ 199.037106][T11298] ? mt_find+0x3ef/0xa30 [ 199.038744][T11298] __build_id_parse.isra.0+0xec/0x7a0 [ 199.040793][T11298] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 199.042864][T11298] ? __pfx_find_vma+0x10/0x10 [ 199.044817][T11298] do_procmap_query+0xd96/0x1090 [ 199.046766][T11298] ? __pfx_do_procmap_query+0x10/0x10 [ 199.048793][T11298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.050754][T11298] ? do_vfs_ioctl+0x128/0x14f0 [ 199.052717][T11298] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.054637][T11298] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.056832][T11298] ? selinux_file_ioctl+0x180/0x270 [ 199.058921][T11298] ? selinux_file_ioctl+0xb4/0x270 [ 199.060965][T11298] procfs_procmap_ioctl+0x7d/0xb0 [ 199.062827][T11298] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 199.064736][T11298] __x64_sys_ioctl+0x18e/0x210 [ 199.066705][T11298] do_syscall_64+0xcd/0x4e0 [ 199.068513][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.070912][T11298] RIP: 0033:0x7f72a7f8ec29 [ 199.072782][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.079834][T11298] RSP: 002b:00007f72a8e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.082633][T11298] RAX: ffffffffffffffda RBX: 00007f72a81d5fa0 RCX: 00007f72a7f8ec29 [ 199.085771][T11298] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 000000000000000a [ 199.088448][T11298] RBP: 00007f72a8011e41 R08: 0000000000000000 R09: 0000000000000000 [ 199.091114][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.094246][T11298] R13: 00007f72a81d6038 R14: 00007f72a81d5fa0 R15: 00007ffcf2a88908 [ 199.097355][T11298] [ 199.098616][T11298] Modules linked in: [ 199.100233][T11298] CR2: 0000000000000000 [ 199.101866][T11298] ---[ end trace 0000000000000000 ]--- [ 199.103668][T11298] RIP: 0010:0x0 [ 199.105035][T11298] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 199.107667][T11298] RSP: 0018:ffffc900068ff9c8 EFLAGS: 00010283 [ 199.109643][T11298] RAX: 0000000000000aec RBX: 0000000000000000 RCX: ffffc90029253000 [ 199.112018][T11298] RDX: 0000000000080000 RSI: ffffea00016ff240 RDI: ffff888026110a80 [ 199.115242][T11298] RBP: ffffea00016ff240 R08: 0000000000000007 R09: 0000000000000000 [ 199.117694][T11298] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000d1ff3a [ 199.120734][T11298] R13: ffff888026110a80 R14: 0000000000000000 R15: dffffc0000000000 [ 199.123236][T11298] FS: 00007f72a8e1e6c0(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 199.126557][T11298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.128595][T11298] CR2: ffffffffffffffd6 CR3: 0000000041c4f000 CR4: 0000000000352ef0 [ 199.131450][T11298] DR0: 0000000000000000 DR1: 00000000fec00049 DR2: 0000000000000000 [ 199.134118][T11298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 199.137278][T11298] Kernel panic - not syncing: Fatal exception [ 199.140342][T11298] Kernel Offset: disabled [ 199.142050][T11298] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:31:06 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f192c RBX=0000000000000000 RCX=ffffffff8b94cb49 RDX=ffffed100d486656 RSI=ffffffff8c163300 RDI=ffffffff81914111 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000003fb000 CR3=0000000034838000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000fec00049 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c0d5 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc900068ff288 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b1180e0 R15=ffffffff8564c070 RIP=ffffffff8564c0ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f72a8e1e6c0 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000041c4f000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000fec00049 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72a8e1df90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf2a88e16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf2a88e16 00007ffcf2a88e1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72a8012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72a8012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72a8012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72a8012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72a8012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72a8012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000af7a522d RBX=0000000001ada837 RCX=ffffc90000a6f658 RDX=ffffffff812c109a RSI=000000000000001a RDI=00000000201a281c RBP=0000000000000013 RSP=ffffc90000a6f5d0 R8 =ffffffff913b7486 R9 =000000000d2fd207 R10=00000000923ee12e R11=0000000000002c10 R12=0000000000000001 R13=0000000000000000 R14=0000000000000013 R15=ffffc90000a6f628 RIP=ffffffff85177901 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda74060e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda74060e6 00007ffda74060ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b7a74a8 00007fe76b7a74a0 00007fe76b7a7498 00007fe76b7a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76c30d100 00007fe76b7a7460 00007fe76b7a7478 00007fe76b7a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe76b7a74b8 00007fe76b7a74b0 00007fe76b7a74a8 00007fe76b7a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d89dc RBX=0000000000000003 RCX=ffffffff8b94cb49 RDX=ffffed100d4e6656 RSI=ffffffff8c163300 RDI=ffffffff81914111 RBP=ffffed1003c55000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a8000 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f72a8dfcf98 CR3=0000000034838000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000fec00049 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000