last executing test programs: 1m11.221438109s ago: executing program 1 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0001"], 0x38}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x1b, {0x4e22, 0x4e23}}]}, 0x24}}, 0x0) 1m11.221111643s ago: executing program 1 (id=273): socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000340)={0x3, 0x980900, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xfce) 1m11.060916186s ago: executing program 1 (id=276): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="05000000010001", 0x7) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000300)="bfc5b564abd0d503f41d66bc37ef30f44c409d24b4af91b989df27f24af3b1d80e9ca75c6544c9db07037a28e37eba893f6db57f78fbd9875379bd40e75bdad0ebd50213f48251e1cf58778c8df675f7b53bcfb34495c249e5bb5435c253df2a3df0f9c44f7429c0032ac8a9f41582055af732ce5d73a7068eeb6260e3ee223f99e4e808e375d134a9101fca205f86e97547ba8cf932ec90786e48c28fc016e4b478d824f5e5854ae268ac1cfe710d1c765ae78b68b4ed0c77ca9923445478c399d963bb7e85f18789b7ae29a8114c826c033c21ffb0ae99c617639bfb9ad262ec8ee2a32eb1941b78b7929c1705d11d") write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000840)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'tunl0\x00', {0x6c24}, 0xa}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000000)="05000000010001", 0x7) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000300)="bfc5b564abd0d503f41d66bc37ef30f44c409d24b4af91b989df27f24af3b1d80e9ca75c6544c9db07037a28e37eba893f6db57f78fbd9875379bd40e75bdad0ebd50213f48251e1cf58778c8df675f7b53bcfb34495c249e5bb5435c253df2a3df0f9c44f7429c0032ac8a9f41582055af732ce5d73a7068eeb6260e3ee223f99e4e808e375d134a9101fca205f86e97547ba8cf932ec90786e48c28fc016e4b478d824f5e5854ae268ac1cfe710d1c765ae78b68b4ed0c77ca9923445478c399d963bb7e85f18789b7ae29a8114c826c033c21ffb0ae99c617639bfb9ad262ec8ee2a32eb1941b78b7929c1705d11d") (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000840)) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'tunl0\x00', {0x6c24}, 0xa}) (async) 1m10.911446078s ago: executing program 1 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 1m10.830862972s ago: executing program 1 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0xffff629f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000740)=@report={0x344, 0x20, 0x400, 0x70bd2d, 0x25dfdbff, {0xff, {@in6=@loopback, @in6=@private1, 0x4e24, 0x8, 0x4e21, 0xcba, 0x9, 0xa0, 0xa0, 0x33, r2, r3}}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd29, 0x70bd28, 0x70bd28, 0xc80, [0x4]}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e22, 0x1, 0x4e23, 0xff, 0xa, 0x20, 0x40, 0x3c, r6, r7}, {@in=@multicast2, 0x4d6, 0x2b}, @in=@private=0xa010102, {0x5, 0x9, 0x1, 0x4, 0xed6, 0x1, 0x0, 0xfffffffffffffffd}, {0x3, 0x8000000000000000, 0x6, 0x7}, {0xfffffffa, 0x4, 0x1}, 0x70bd2d, 0x3505, 0xa, 0x3, 0x10, 0x2}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd25, 0x70bd27, 0x70bd26, 0x4, [0x4c]}}, @migrate={0x1cc, 0x11, [{@in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x33, 0x1, 0x0, 0x34ff, 0x8, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @in6=@loopback, @in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x33, 0x2, 0x0, 0x3505, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in=@empty, @in=@local, @in6=@rand_addr=' \x01\x00', 0x33, 0x3, 0x0, 0x3505, 0x2, 0x2}, {@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, @in=@multicast2, 0x32, 0x1, 0x0, 0x3507, 0xa, 0xa}, {@in=@empty, @in=@remote, @in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3507, 0x0, 0xa}, {@in=@multicast2, @in=@empty, @in=@multicast2, @in6=@remote, 0x3c, 0x2, 0x0, 0x0, 0x0, 0x2}]}, @tfcpad={0x8, 0x16, 0x8}]}, 0x344}, 0x1, 0x0, 0x0, 0x8000}, 0x4c061) write$UHID_INPUT2(r1, &(0x7f0000000100)={0xc, {0xbe, "b56e759be2194f4483c280ed4a7f3f521c7d83af0adec8ebd62021f4fe25b5dc5d306f4d35a75282fe32f52b031fca47fca433bda71cc6708f25d54231f7e0c2fb412b7436377cad90c2a16231ac35569eedc5658d3d0c40f3165789a5958c550663f34e70f45711d44241eeb34845935f92605d2b23e094372fef3a015a6e59b2393b00d6bb5b8afc7a712fb1ec945f4c224c58420879a37148d8abc521c33d4e049b787e14221635d26d9886a2bde1359607365ce4014b036a86b289e4"}}, 0xc4) 1m10.597629735s ago: executing program 1 (id=284): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000100)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f00000002c0)=[@out_dx={0xaa, 0x28, {0x7343, 0x7, 0xfff}}, @rdmsr={0x32, 0x18, {0xb36}}, @wr_drn={0x6e, 0x20, {0x1, 0x1000}}, @rdmsr={0x32, 0x18, {0x8d3}}, @in_dx={0x82, 0x20, {0xedf4}}, @code={0xa, 0x57, {"360fc719660f383c712b2e4e0fc76d13410f06c74424001f000000c744240244740000ff2c24440f20c03501000000440f22c066b800018ec844f40f837068000066410f00d8"}}, @cpuid={0x14, 0x18, {0x80000000, 0x81}}, @rdmsr={0x32, 0x18, {0xac7}}, @cpuid={0x14, 0x18, {0x3, 0xe9b}}, @set_irq_handler={0xbe, 0x20, {0xaa}}, @code={0xa, 0x6d, {"67f3450f1ef0362e0f79cb8f2838efb4aa80ff3f01000f01f80f20e035000004000f22e0b9800000c00f3235008000000f30b9790a00000f3226410f3066b883000f00d848b80a000000000000000f23c00f21f835020006000f23f8"}}, @set_irq_handler={0xbe, 0x20, {0xdc, 0x1}}, @wr_crn={0x46, 0x20, {0x2}}, @cpuid={0x14, 0x18, {0x5, 0x1}}, @in_dx={0x82, 0x20, {0x42b8, 0x2}}, @rdmsr={0x32, 0x18, {0x81b}}, @set_irq_handler={0xbe, 0x20, {0xc5, 0x2}}, @wr_drn={0x6e, 0x20, {0x3}}, @in_dx={0x82, 0x20, {0x5747, 0x1}}, @code={0xa, 0x56, {"67430f01c366baa000ec660f38820940e523420f01d166baf80cb8d4c2848aef66bafc0cecb9800000c00f3235002000000f30660f0199a00d0000450fc2e4c4440f0176fc"}}, @wr_drn={0x6e, 0x20, {0x5, 0x101}}, @code={0xa, 0x63, {"266765460fd5ff26f30fa6c0f340af48b8e1240000000000000f23c80f21f835040020000f23f8c74424000f000000c744240207000000ff1c2440abf3410f09c4c17d6f80f00000003e0f01cb410fe10417"}}], 0x38d}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000001000)={0x0, "3efe72f3bf818ea09f4cf95d73c3ce3e8de711a7f3de0fc1cb8a24626d1d44910f2236bf9bae103e22391ea3cd172c2ac38179be234f63df3e6f5019535184ef5c39d04cc54c7bdd661cc2ff0d793bbc8433dbbb5ced195489d9389a1b55ef1389ec4f5bdceca542cc3fa739f22d94897c6b9abd311357d25e8ef7df7c43556d8f1107b003a9f87ddfc2dd335207b494877e48ec793e0995c184a0b644a16b065b3f6a987cc6bd06b7a618126a30b9e8aaa05814ca622407b092f3636481d7ab77487609081fb930df46404c837ff3e85d0cb475baf73af4f0702d828e5da37668e8d1396493ae1f100aa9c1fad6965352f36c8c09ad29fc695a266e7b0fd95de6688a99f6dea33f7432f2079339a45bb16c89d66fa2d81feebd0c42e53d9d5abfbacc40912bece541ebb43fc5e30e5724a394a841c9bfa09f08d9cd01d614546e650605921d4c55ad74479948dd4be6086d8f5a0f800461eb7633014de028d6492792cb27ad847037ad678f79e83232f138ab2f0ed350b9ab476d9c9ee41b5c4a96b28cc572f454c4c232aab45f1bc6b0c8caa19fc8c98e598c7891c9fb095ec923afd10c6306f0834d9da98892e9fd24186f446c1f87fced883ab43bcfbe54fc37d70459c049d87030494ebad22dc68cfaf694438ebc70e84a28f63c3b8905effdc87d477c1ddbab9ff5beed93a4d17819344148be913f949635156caf1e4b"}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 1m10.502354798s ago: executing program 32 (id=284): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000100)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f00000002c0)=[@out_dx={0xaa, 0x28, {0x7343, 0x7, 0xfff}}, @rdmsr={0x32, 0x18, {0xb36}}, @wr_drn={0x6e, 0x20, {0x1, 0x1000}}, @rdmsr={0x32, 0x18, {0x8d3}}, @in_dx={0x82, 0x20, {0xedf4}}, @code={0xa, 0x57, {"360fc719660f383c712b2e4e0fc76d13410f06c74424001f000000c744240244740000ff2c24440f20c03501000000440f22c066b800018ec844f40f837068000066410f00d8"}}, @cpuid={0x14, 0x18, {0x80000000, 0x81}}, @rdmsr={0x32, 0x18, {0xac7}}, @cpuid={0x14, 0x18, {0x3, 0xe9b}}, @set_irq_handler={0xbe, 0x20, {0xaa}}, @code={0xa, 0x6d, {"67f3450f1ef0362e0f79cb8f2838efb4aa80ff3f01000f01f80f20e035000004000f22e0b9800000c00f3235008000000f30b9790a00000f3226410f3066b883000f00d848b80a000000000000000f23c00f21f835020006000f23f8"}}, @set_irq_handler={0xbe, 0x20, {0xdc, 0x1}}, @wr_crn={0x46, 0x20, {0x2}}, @cpuid={0x14, 0x18, {0x5, 0x1}}, @in_dx={0x82, 0x20, {0x42b8, 0x2}}, @rdmsr={0x32, 0x18, {0x81b}}, @set_irq_handler={0xbe, 0x20, {0xc5, 0x2}}, @wr_drn={0x6e, 0x20, {0x3}}, @in_dx={0x82, 0x20, {0x5747, 0x1}}, @code={0xa, 0x56, {"67430f01c366baa000ec660f38820940e523420f01d166baf80cb8d4c2848aef66bafc0cecb9800000c00f3235002000000f30660f0199a00d0000450fc2e4c4440f0176fc"}}, @wr_drn={0x6e, 0x20, {0x5, 0x101}}, @code={0xa, 0x63, {"266765460fd5ff26f30fa6c0f340af48b8e1240000000000000f23c80f21f835040020000f23f8c74424000f000000c744240207000000ff1c2440abf3410f09c4c17d6f80f00000003e0f01cb410fe10417"}}], 0x38d}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000001000)={0x0, "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"}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 59.251053475s ago: executing program 0 (id=435): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x125300, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a70000001801000020206425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500280008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e599f4e376e8ba128280b372219d205e81f4aebb66694c2ee2aed7e0054a7765312d8300faa25bb9fa6935849e6098ed884e7cb5172645687e5a7b4fe035bbb095873068", 0x4d}, {&(0x7f00000006c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f7000000001704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f1152344ca78787b28c7f50e8e51f", 0xdb}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="b80000000000000017010000020000009e00000064834bc49b6932cac15091a3555c675e2096e2e9c3590c60ae1ca0a9010a330dd8c0b2bc01912c68d50a2dc94ef0467739381533fad3ef6093d885c4f84f9913cda76f21a6b51fb58133ea831d349b8dad14ab62b4ab57b48084d12dd7b5f013916b481cd4218c8f202125ec0b175dd5446b7c5dce1ea82f2c4eb0a6635974389f8d5e1b62fe0bd1b225c4c6e9cdf30ff5df0ee241ee71555dbb63941045000000000000"], 0xb8}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000380)=0xa5bb) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)="b8b2f0", 0x3}], 0x2) 59.110995412s ago: executing program 0 (id=436): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x48850) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 59.110524102s ago: executing program 0 (id=437): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181942, 0x0) mkdir(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000feffffff"], 0x48) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/237) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fadvise64(r0, 0x6a4, 0xc, 0x2) 59.06021114s ago: executing program 0 (id=438): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0x2, 0x5e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r3, 0x1ff}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="67460f21a0660f3838f5440f78b10010000048b8f1ffffffffffffff4992b0d0d1d0d1f80f23f866460f3834a1ed000000c744240202560000c7442406000000000f011c24b9270b00000f32c4e1c575ad0f00000043e12a66f3400f0966baf80cb87c07f98bef66bafc0c640f1f00ef", 0x70}], 0x1, 0x19, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmmsg$inet6(r9, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="047fbd6ab27c1eb138e6d617f5802f56259aa9ffa2077c53463f54cbe7d0e5d067a62f53dd886d2b9bc06d8098d9554ad2ca5dac97d2c25865c5185cc0bf1bea30bae783daf744fda9d9851d48391b32518dc71cfa8fba4c39994eeb5d768f86f5ca2a812d5d3732f72280842ea783263ad217d8db9c83689b5d4761f7c5de4f7a66a0a18112a27cb1d96d39dfc81d613a54fe791cb79f4d4795bfc80ac123c5060be7b012f87cf6a9d4d31830ece52e240fbd41b68b7fcb059303", 0xbb}, {&(0x7f0000000340)="ff44d13a1dc74ed90d575b769653f382855266f12a29e6b2c6e6923a72426e0536806511046d5e0bd37e812f5af82adff8ab33b50c07920eea157b1c0833ef428a09f59313db36cd4aa5ce52d6365ade27575289fb2d93b84876c6ff962d3809357c5f009b21182733c34b7f6b8f7e393de5184aa8057de9c40b69db4ad5d79e083de59fdf7b8b", 0x87}, {&(0x7f00000001c0)}, {&(0x7f0000000480)="d58c4d6ce24ae011ae4a0427edf8ccd97de070a49e885e7c428743d2501db50c25943e1f94cbd606d84df41b64ae74ff7c0f4ea138501f58e6fe4ecbd0697b9b1397f725fb78095bc75ff7dc1698951802ca25778ab1ad1115a170636fad73b6931d223a2b73d6a1de1c94a826c7545222fa3b92e07e5ee2a9abca814c2e37646771a235575011641c86a8baa93070f294b4ad058555491134a588e3bf98f9bc13c3be4357b357355f914d45f83393dd06ebd51daf2fa8d5377d07eceda206097af63d5908b2a9d3d698", 0xca}, {&(0x7f0000000580)="e7d03d145d2c2accac2a618f5106ac95368b5e824d445c58fee8a4bae2c69ada619fb56c39cdafda135faea78bd9d3394497e4c994ec3474f8e91f9de63d6943c9b586a0ed81ce9c386f7bbbaeec0ca4413e0b2e48c7418a6eef04", 0x5b}, {&(0x7f0000000600)="cb3f7cb85879a62c1874df9da16384e5c7ddbd143a18d9d00ebc2381d9406ad94610ce12542031df31402ec99623e459879762d12e66ee279c0710a7783b96cecd9aa2a49637184bcabd51ada9b8b7f7302b8f62b19a83f2007030f9c4824b2cdc23c9e010", 0x65}], 0x6, &(0x7f0000000400)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}}, {{&(0x7f0000000700)={0xa, 0x4e22, 0x6, @private2, 0x6}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001a40)="66f2a047d9c5c43926e1da116b1df400e3f3fecce0fa45fd7ca0cdeabfde5a189afeff7fd40c427a0baf56cb31a956a5f4b0c4a4998a957dec159683c5c169025602c6b6441b09bc97e04b3278e28f1f6741b576ee4e564dcbd40b1ef529080cc5566a31e237959fece17e15d92126349c0f74f763d3a3d76c43377e44a08a0a111dd3c82917bfe847f4b2e41130bf87a31e4d49f131b907e911b6e10df45c02fd642d8ff1c3b099e8e16e9dc27b213f77e0280b467f633b4f0fd793c525658de9ff7e691feb50aeca2a7537e095935886f7add25bdfa0", 0xd7}, {&(0x7f0000000880)="e8242a518f89e0c3d116fd469f64f3a8c8c64ce35c1452c55a73b9f7ee0f7bcfd7d44a20d75c72f56948272dd36cd6ebb2661f1eff26b68286496ea019175b201c6cf1ea7cd6a98ebd7f180e31a964ee43034110f0be3521a6b928047d340ec05c5c5087f368da9a38a86432845191b0d3d9da78189e62e7500cae78aee7c282b669e2a78a6556e448a264915460c7c1126427a8d3dbe25e77b08dca08d2b4490ea9e1864b87c4ee16218c995f015ab98893d642892fc5f3e36da38ab6755481c1", 0xc1}, {&(0x7f0000000980)="906d2e2ef7208235c89ed07dfeea5505de7ba0e4a297d2ba793639d6633d3afbea9dfb26", 0x24}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, &(0x7f00000032c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x1, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0xdf}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x4}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0xc, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @local]}}}, @hopopts_2292={{0x1088, 0x29, 0x36, {0x11, 0x20d, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x3, 0xe, 0xa2, 0x9, [0x9, 0x4, 0x9, 0x8, 0x6595, 0xffffffffffffffff, 0x80000000]}}, @generic={0x5, 0x1000, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xff}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x29, 0x12, 0x1, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, @empty, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dstopts={{0x28, 0x29, 0x37, {0x30, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xffff8001}, @generic={0x8}, @pad1, @pad1]}}}], 0x11f0}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002c40)="c4767503356f2309528e01b1416805e1c28b95188410b352cb45c980d794d5713c6364cd28b47b5afbbcce72682717cb5454c49893010d598b047cb99882654661fbe10d199433950866ec606403ef7e2fd3995eecb256cfe883d685087404d1c7bed882eb5a7f0ae7d916dd82fb32e72a125a9a990dc242f09ea9724552903c65fb9152742e7d0fdbb7fc540ac74a7a9c2f27e5b165f1d718a7b646593267ef3b775e915c6292d93d0d5c4f1c6da6dd0f61da2a50f26c43e9d0a206beed24724e29d04687b47aa9958b0254eeefa8e145bf877610b0555206", 0xd9}, {&(0x7f0000002d40)="59a4883a7ae604818cc8b0de311796ccd3e1002983b2f32eff3f76e03ca72742b5a4c299aaef5fc41a85decb7fbba56c9bf26697e6139ff13cb9b9b9b673febaf8f676221204f90261703ff628c909e2a0f710055aaccb98d14f7b2be5bd6ef69ad13e0f0d0d760af3732907a0e82dfca7a248cf1383522d9b8cc94ee6ea4a12", 0x80}, {&(0x7f0000002dc0)="f9eda3c8808edd70792fee6ac4e4a4775b260edb486702f17226776ec397cb480ab0cfae2c2ae450fe43bca1c47c89b32a1e01402cec072f65514f37401bbeac4bc9c816d94870c393dc4be4b7aed35ca96ece7a210372cd09c0ee49bf5e6e6309a37f6193bf979d", 0x68}, {&(0x7f0000002e40)="e8a99935e256bd48c98039708111eeb00ecf535f46f6083fd9659b7852484023e349a13386e21b85186c4ca24f4b873fcb20868faebfce0aa089da4dcdb5f40f364c0c037ee739f198dabdce5dac4dc306b32384d570ff9d8792db436e8b6a8facbca3b96e8807b1751cc25b350d808e8ed037c02faf1751a5a4e43f2524103009b01ec62c4d74f3125f2633813d3187ac688cd07b0d458886879dbf961cdde79b8b7ae5552a8482bc4d91412f3cbff86e4259b915b4be8bdc03fce25cec2ff5ead6eaaf979c5e7468422e383edc03c0753947e2cf1525000f5ac01f9d38", 0xde}, {&(0x7f0000002f40)="9b430b3ddb1f6227038b9e40ac17b3d1ec2bb2a424674751657b827cb5e3d7ccccba90568d1cfd19faa082d98ea304502efc2a7247514f9a3dafb7805cc9ea0518969ed9e3252f248acb8d4f6aeff6693c7b0823c159791774cfdf7b8d58e38ee78d2c6dbd20a835f07c4690b7869616f43a3076cd110a37208f3877f2384f17f5a3cc651b30861498433096751f671006612bf4e86f0b3202e5723a6625165a61b137e9b3620a80a4e45b2061cc37", 0xaf}, {&(0x7f0000003000)="e160d63cd4b82de405fe00f8d6f4485bf3686221e57ac34056784c8fdba29381f108672e7e851ebdd0385705c8da0f3969bf70608923ae53780d42aa9deb84a829bea4a9d57f5bb5573fdfc430bc1cdc90b1e39877", 0x55}, {&(0x7f0000003080)="8a6e842317518f0fac042a7fe7e3b5e0fc186f9a8178b591a30dcb33428fb8686cf5a32c519a6397029a065dcb2a44dff1811d4a44c8ccb7b0549049927c8745df1dd2ac002b20d643e9a2ac3c096dfb8e202cb6d4ae1710d8b29290d49a1ae69ce93c7ca2a2ed56f136103c823bf588194ceb956e40b0291c863415da8a7191104a66a3461e6b54e9c26d5a09ecb0109579d79803b0b139e70e0f6d87787fa435bdc1a5f037e0f160f6b7be02945af2b210147102847ec2d4c999c7d5ae75fb42b24cc3ff8a18cc31646700a8775507afe2e2dc3b98454df0790f18a49a4779f3deb8e59499", 0xe6}], 0x7}}], 0x3, 0x24000850) ioctl$KVM_RUN(r7, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 58.701128588s ago: executing program 0 (id=440): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000f3000040"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0xa}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000080)=0xff, 0x4) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, &(0x7f0000009780)={0x2020}, 0x2020) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000100)={0x10, 0xfffffff5, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x1c, r6, 0x605, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r13, &(0x7f0000000300)) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x134, r14, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0af184b8c8da"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="58fb1798153d"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x60}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0x7a, 0x2a, [@supported_rates={0x1, 0x7, [{0x30, 0x1}, {0x30}, {0x1b, 0x1}, {0x1b}, {0x24}, {0x5, 0x1}, {0xb, 0x1}]}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x101}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x4, {0x1, 0x9, @void, @void, @void}}, @random_vendor={0xdd, 0x3d, "7ae02dc72cf24310ff6d6059e91cc59a81ba335e2e026113740bcf3dd93a24cfcfa13e32d304f041b99b061bf05ab8656358f765346a6cba649cadd00e"}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xa3fc}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000240)={0x1, 0x80, 0x2, 0x2, 0x100, 0x3, 0x10, 0xffffce74, 0x0, 0x5, 0x4, 0x6e, 0x0, 0x0, 0x0}) 58.632434258s ago: executing program 0 (id=444): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_RANDOM_ADDR={{0x7f}, 0xff}}}, 0x7) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x251, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x60, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x1, 0x77}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x205}, @l2cap_cid_signaling={{0x201}, [@l2cap_conn_req={{0x2, 0x9, 0x4}, {0xfffc, 0x3}}, @l2cap_conf_req={{0x4, 0x77, 0x2a}, {0x2a81, 0xb23, [@l2cap_conf_ews={0x7, 0x2, 0xff4c}, @l2cap_conf_ews={0x7, 0x2, 0xff}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x4, 0x81, 0xfbd8, 0x7, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xc, 0xb, 0x1000, 0x2, 0xfffa}}]}}, @l2cap_info_req={{0xa, 0x9, 0x2}, {0x4}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x4, 0xb2, 0x1c, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x8b, 0x8}, {0x8, 0x8, 0x3, 0x80}}, @l2cap_conf_rsp={{0x5, 0x3, 0x59}, {0x3, 0xff81, 0x1000, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x1, 0x8, 0x7, 0x8b6f}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x48c1, 0x800, 0x0, 0xff}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x245c, 0x7, 0xffffffd1, 0x9}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x0, 0x2, 0x9, 0x44000}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x1, 0xb2, 0x7, 0xd, 0x5b}}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x9, 0xf0}, {0xb3, 0xd, "566c645b6e6678b40702aacfd62017b6714c6a9f3e092ddf4c918172c239fcd632c306e2f491ca87103a50aec4f2144df2f2992fa02111a1ec4aa057912af3a60d8404fa492e569598483bf1676861feedfb44c72952fb93fc03eccc39d30d055bb8261520c6cea106db6740e95652f050e276d33c25804cf43defd2ef9b67c933a6559724412d26ba9d86eebd085f2494d46b1bf5a660eda76870a649f6a691af71a85594190b76b4d01ff0627977a73636c8d765aa59e494a8f4ab5884a4ba9567342d0c14df17d8b8f9ee935e17de26cab866245938a429ad9116fe7a3a67071083936a6ab5d57a205e74"}}, @l2cap_conf_req={{0x4, 0x6, 0x50}, {0x0, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x7f, 0x3, 0x1, 0x401, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x9, 0xad62, 0x1, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x7ff, 0x0, 0xffffffff, 0xfffffffc}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x1, 0xa, 0x81, 0x401}}]}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x3, 0x3}}]}}, 0x20a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72ffffffffff0400f60000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ae, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) 58.431276359s ago: executing program 4 (id=448): mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455cc, 0x40000000b) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) 58.370563703s ago: executing program 4 (id=450): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2002, 0x3}, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000480)={{r0}, "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"}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, 0x0, 0x100000, 0xb) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000180)) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='zonefs\x00', 0x2000493, 0x0) 58.261212916s ago: executing program 4 (id=451): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x48c, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x42042, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,aname=-']) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) r2 = fanotify_init(0x200, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) chdir(&(0x7f0000000100)='./file1/file0\x00') fanotify_mark(r2, 0x39, 0x1a, r3, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 58.260985796s ago: executing program 4 (id=452): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x8, 0x3ff, 0x802, 0x1600, 0x0, 0x1, 0x9, 0x9, 0xa, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadf, 0x7, 0x3c, 0xc, 0x0, 0x8000000, 0x9]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe9}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 58.178523539s ago: executing program 4 (id=453): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000f3000040"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0xa}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000080)=0xff, 0x4) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, &(0x7f0000009780)={0x2020}, 0x2020) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000100)={0x10, 0xfffffff5, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x1c, r6, 0x605, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r13, &(0x7f0000000300)) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x134, r14, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0af184b8c8da"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="58fb1798153d"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x60}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0x7a, 0x2a, [@supported_rates={0x1, 0x7, [{0x30, 0x1}, {0x30}, {0x1b, 0x1}, {0x1b}, {0x24}, {0x5, 0x1}, {0xb, 0x1}]}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x101}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x4, {0x1, 0x9, @void, @void, @void}}, @random_vendor={0xdd, 0x3d, "7ae02dc72cf24310ff6d6059e91cc59a81ba335e2e026113740bcf3dd93a24cfcfa13e32d304f041b99b061bf05ab8656358f765346a6cba649cadd00e"}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xa3fc}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000240)={0x1, 0x80, 0x2, 0x2, 0x100, 0x3, 0x10, 0xffffce74, 0x0, 0x5, 0x4, 0x6e, 0x0, 0x0, 0x0}) 57.969337025s ago: executing program 4 (id=455): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@overlay={0x8, 0x8, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x2, 0xc, 0x5, 0x5, 0x4, 0xf3, "16426f20"}, 0x2, 0x3, {}, 0x7, 0x0, r1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000140)={0x7ff, 0xd7, "a4195e34eb4c9398df7beccc15497c7266a6f9893c606af6f753c33188768554226d6bf716308522243bd8eafa40df9890059dadb58b7e26e659a2cb7b53c6f2f59d97f386b11061b58bd162123dea4bf987e85f0032aa047b6ce6a0226132f83da786b2d177047e6d737cf9c252fa408ed0ff4d4834403ed59142b244899ec589e97e4791c50b27dec118a85c541243ef30d5b5cf04c39f09d20e2db7950d5a08a9d380fd3d18ced1f3497bbb9c3b5269ac5200db11628e279d42076045020d669b092da956ddc8986cac869094815c44340e127b69d7"}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@generic={0x4, 0x9, 0x9, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6744}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @generic={0x2, 0x6, 0x6, 0x1, 0xffffffff}, @call={0x85, 0x0, 0x0, 0xa6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0xa, 0x4, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xffffb451, 0xf7, &(0x7f00000003c0)=""/247, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x0, 0xfffffff7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1], &(0x7f0000000580)=[{0x2, 0x3, 0xd, 0x3}], 0x10, 0x6}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000680)={"952e0e1948287031810780e2aad0304b", 0x0, 0x0, {0x4, 0x7}, {0x631, 0x20}, 0x6, [0x7, 0x9, 0x6236658e, 0x5, 0xfff, 0x2f, 0x49e, 0xfffffffffffffff7, 0xe01ae4a, 0x8, 0x100000000, 0x22, 0x1, 0x10001, 0x4, 0xfffffffffffffff9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000780)={"f5037bbd5c2a072c19a647d7a9582aa9", r5, 0x0, {0x3, 0x6}, {0x10001, 0x4}, 0x2, [0x2, 0x9, 0x1, 0x2, 0x90, 0x401, 0x8001, 0x8, 0x2, 0x9, 0x8, 0x7, 0x7, 0x101, 0x100, 0x9]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000880)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001880)={0x0, r6, "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", "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"}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000002880)={0x7, 0x7f, 0x2}, 0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000028c0)={0x5, r2, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000002900), 0x5, 0x2c2001) r9 = syz_open_dev$dri(&(0x7f0000002940), 0xfffffffffffffffa, 0x240000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000002980)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f00000029c0)={r10}) write$P9_RWRITE(r7, &(0x7f0000002a00)={0xb, 0x77, 0x1, 0x5}, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002a40)={0x1ff, 0x2, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fgetxattr(r9, &(0x7f0000002a80)=@known='com.apple.FinderInfo\x00', &(0x7f0000002ac0)=""/23, 0x17) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000002b00)) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002b80), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x24, r11, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x44000) write$P9_RLOPEN(r7, &(0x7f0000002c80)={0x18, 0xd, 0x2, {{0x40, 0x1, 0x2}, 0xa8e0}}, 0x18) r12 = socket$packet(0x11, 0x2, 0x300) splice(r12, &(0x7f0000002cc0)=0x7fffffff, r0, &(0x7f0000002d00)=0x3, 0x3, 0x4) pipe2$9p(&(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r13, 0xf507, 0x0) getresuid(&(0x7f0000002d80)=0x0, &(0x7f0000002dc0), &(0x7f0000002e00)) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r14, &(0x7f0000002e40)) read$msr(r7, &(0x7f0000002e80)=""/191, 0xbf) 57.479033335s ago: executing program 3 (id=458): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x1ff) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 57.330292288s ago: executing program 3 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) semget(0x1, 0x4, 0x1e1) semget(0x1, 0x4, 0x3c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) 57.151220023s ago: executing program 3 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r2, 0x100000000) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x25, 0x4, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) 56.970051381s ago: executing program 3 (id=463): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x340bc0}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x1261, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3d3b4d}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x340bc0}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) (async) ioctl$LOOP_CONFIGURE(r3, 0x1261, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3d3b4d}) (async) 56.851148807s ago: executing program 3 (id=464): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000f3000040"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0xa}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000080)=0xff, 0x4) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, &(0x7f0000009780)={0x2020}, 0x2020) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000100)={0x10, 0xfffffff5, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x1c, r6, 0x605, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r13, &(0x7f0000000300)) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x134, r14, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0af184b8c8da"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="58fb1798153d"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x60}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0x7a, 0x2a, [@supported_rates={0x1, 0x7, [{0x30, 0x1}, {0x30}, {0x1b, 0x1}, {0x1b}, {0x24}, {0x5, 0x1}, {0xb, 0x1}]}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x101}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x4, {0x1, 0x9, @void, @void, @void}}, @random_vendor={0xdd, 0x3d, "7ae02dc72cf24310ff6d6059e91cc59a81ba335e2e026113740bcf3dd93a24cfcfa13e32d304f041b99b061bf05ab8656358f765346a6cba649cadd00e"}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xa3fc}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000240)={0x1, 0x80, 0x2, 0x2, 0x100, 0x3, 0x10, 0xffffce74, 0x0, 0x5, 0x4, 0x6e, 0x0, 0x0, 0x0}) 56.61111705s ago: executing program 3 (id=466): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, r2, {0x9}}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000240)="0ce91bc530c01e548ca216a1b5b8d2fb5c7042a78a1d27fa99af09fa5dbbd8cf60e9d555293c1b4ae2554fdaeef528481f3b3da3f25301637c6d989ffc9a62c910bdfcc795d635c8eb4085dafabd858ea0745a38390ad976eeb614beeed651c92f95fa451d6cf36959e3196c867ee961cdc403c9d816a7d6272d00c6d608d99c1d747268575b6642a767770001178ecbbde816fabc839cf0f4958134cf", &(0x7f0000000140)=""/11, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) 39.273172301s ago: executing program 33 (id=444): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_RANDOM_ADDR={{0x7f}, 0xff}}}, 0x7) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x251, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x60, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x1, 0x77}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x205}, @l2cap_cid_signaling={{0x201}, [@l2cap_conn_req={{0x2, 0x9, 0x4}, {0xfffc, 0x3}}, @l2cap_conf_req={{0x4, 0x77, 0x2a}, {0x2a81, 0xb23, [@l2cap_conf_ews={0x7, 0x2, 0xff4c}, @l2cap_conf_ews={0x7, 0x2, 0xff}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x4, 0x81, 0xfbd8, 0x7, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xc, 0xb, 0x1000, 0x2, 0xfffa}}]}}, @l2cap_info_req={{0xa, 0x9, 0x2}, {0x4}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x4, 0xb2, 0x1c, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x8b, 0x8}, {0x8, 0x8, 0x3, 0x80}}, @l2cap_conf_rsp={{0x5, 0x3, 0x59}, {0x3, 0xff81, 0x1000, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x1, 0x8, 0x7, 0x8b6f}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x48c1, 0x800, 0x0, 0xff}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x245c, 0x7, 0xffffffd1, 0x9}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x0, 0x2, 0x9, 0x44000}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x1, 0xb2, 0x7, 0xd, 0x5b}}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x9, 0xf0}, {0xb3, 0xd, "566c645b6e6678b40702aacfd62017b6714c6a9f3e092ddf4c918172c239fcd632c306e2f491ca87103a50aec4f2144df2f2992fa02111a1ec4aa057912af3a60d8404fa492e569598483bf1676861feedfb44c72952fb93fc03eccc39d30d055bb8261520c6cea106db6740e95652f050e276d33c25804cf43defd2ef9b67c933a6559724412d26ba9d86eebd085f2494d46b1bf5a660eda76870a649f6a691af71a85594190b76b4d01ff0627977a73636c8d765aa59e494a8f4ab5884a4ba9567342d0c14df17d8b8f9ee935e17de26cab866245938a429ad9116fe7a3a67071083936a6ab5d57a205e74"}}, @l2cap_conf_req={{0x4, 0x6, 0x50}, {0x0, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x7f, 0x3, 0x1, 0x401, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x9, 0xad62, 0x1, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x7ff, 0x0, 0xffffffff, 0xfffffffc}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x1, 0xa, 0x81, 0x401}}]}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x3, 0x3}}]}}, 0x20a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72ffffffffff0400f60000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ae, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) 39.273000952s ago: executing program 34 (id=455): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@overlay={0x8, 0x8, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x2, 0xc, 0x5, 0x5, 0x4, 0xf3, "16426f20"}, 0x2, 0x3, {}, 0x7, 0x0, r1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000140)={0x7ff, 0xd7, "a4195e34eb4c9398df7beccc15497c7266a6f9893c606af6f753c33188768554226d6bf716308522243bd8eafa40df9890059dadb58b7e26e659a2cb7b53c6f2f59d97f386b11061b58bd162123dea4bf987e85f0032aa047b6ce6a0226132f83da786b2d177047e6d737cf9c252fa408ed0ff4d4834403ed59142b244899ec589e97e4791c50b27dec118a85c541243ef30d5b5cf04c39f09d20e2db7950d5a08a9d380fd3d18ced1f3497bbb9c3b5269ac5200db11628e279d42076045020d669b092da956ddc8986cac869094815c44340e127b69d7"}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@generic={0x4, 0x9, 0x9, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6744}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @generic={0x2, 0x6, 0x6, 0x1, 0xffffffff}, @call={0x85, 0x0, 0x0, 0xa6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0xa, 0x4, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xffffb451, 0xf7, &(0x7f00000003c0)=""/247, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x0, 0xfffffff7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1], &(0x7f0000000580)=[{0x2, 0x3, 0xd, 0x3}], 0x10, 0x6}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000680)={"952e0e1948287031810780e2aad0304b", 0x0, 0x0, {0x4, 0x7}, {0x631, 0x20}, 0x6, [0x7, 0x9, 0x6236658e, 0x5, 0xfff, 0x2f, 0x49e, 0xfffffffffffffff7, 0xe01ae4a, 0x8, 0x100000000, 0x22, 0x1, 0x10001, 0x4, 0xfffffffffffffff9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000780)={"f5037bbd5c2a072c19a647d7a9582aa9", r5, 0x0, {0x3, 0x6}, {0x10001, 0x4}, 0x2, [0x2, 0x9, 0x1, 0x2, 0x90, 0x401, 0x8001, 0x8, 0x2, 0x9, 0x8, 0x7, 0x7, 0x101, 0x100, 0x9]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000880)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001880)={0x0, r6, "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", "0f66d2ee115b06024197b8761da4ed1a26a3730920717294d32d0c21a220e3ddacac1a46e53045d3993b5a65c6b5e1f059712e63454eb005913a68657d6bf9ae8eefa3a03385c6741808bf5d2d58e43f392e136a817880de2f1dad9dd939fc2bab229b1be264bc3a4f98bfcb2503230324f6202778fc8d43ec4b48c02aa76fd4019d9e04804a5c02ce47ecfe3c94a3a5b37ee6069aca4082c02272a756a51663f4d88bcdaf97683b79e32cb459cebb44e68cd627119f4616cab307bb197842b84a7ba458d1c22b64b48297fb09efaf643176526608fbab0794e83335c710fd3e08c9cd290c93be547374cf39abb7665647cab79eaddc49d82360ec615f1efeee7e1439c25bb5f20b657ac358ffae7be036832465e8fb7a7c5f342481941ec9caa380ae773dc6e53182c3128f21518008290e82811b6a6761fc5ad170eb1f97482e354b6f2427afe0cf93e421edb945012a44a725c603410699c9d567ff7e9f4eed908dac2b5ba5acc423cbeda9aaa842215b99f2bfb699f035964eb03489963d2551bd5dd30421c3053e135c8b86dcbe346bf6e88f928d861a780bd3908663d1cc739847884fc79ca8b9b116efc4fcc7ac51163a5b5cb95e4935fb49a64fc1937ba82d9de29c7421e17d14aa1631b15cabb4b7716a0d91624a36df425e93ea76eb24f7cfca697d82f58580bde2fa1dbf28d17dd940965b426cd43526a01c862d87c81f32b7c2fc557929880694090736fe0e60bc3a6d557c9a120fca9ed29281d4c30d7aee0e17286cb107aa1dfd97c7b29fe61123b175db4899867c5eddca332298c8dc6d1da10028bc0d843792d3a0694dd78e9465d406a6045f947c800f5467fc32b980cc05839d5140f20ced99c5f2609aad1e9df078d9d0446d0d8c8854ee3ca27e230489332b8ffb15661579efae53b503ab8309b3fd6ea490c884346aaed70b2a6d5507a58ed9d6382b75c59cffdfdd1ac0092df7b956578a50ecf0a8e9476cf89e189609f60801214dc952e68a9ccfa69a6fe0606d2a3d3e518605b2f949b837bcc70f5faa37351cd601399ef4d12b919a0aec3ea5682dd663f85e1297b39f2d70a9d2d52698898ef45c616cba5df030d2fed8c70881e5a17fd7c252b2a366327e65d20aff320e19b94d37c3f7272a16769a16ac10a0e7ceba1a3ba0907fc8f3a4e106e84f17d23233c43311fdd93676b9b6f5c560151e6da3358052b4a30f334487703980695d5f42f76045d88c621bb4fa4965b7c2d2d410d5b73c46a0d7d77403ce733cec6065be8e94b16371bdbde98b66868dfd00e734fe5ea824f9c3d92a5b64d846e28f924a0d855eaf56fdd12dae5ca06f6341d6b7cac4b22d8c8c087565b5f21a85430035f82f1104833a2cae3808cb9f44b835aae306773847f9a3aabb33e59e8086c8c42e44391def3148ca4a4e29d8b50ac6a239d205118d19b4e162a794f8567f1d9a5fc00b64adedfa8a2a071b0a22e22fdeb6f0dc14e8fbd2cc4620ba441d2cfbd231336d066915d13f10c81c41de746caca4c422e8eef6f480f41d0c31915ec9c9d8d964720e59098a002472bd843d734eb9f2bbda1d0cee38b60c6fefe81cb377ab6c7f6015604aa199040b4b9033fb31d5783509e6075029cc23b616bf6cf0d2a89d69db2db1fa88e9de170dc368be4389c1b64a2c4e2bda8a8b8f429b823879079ec8f5fb88573efe610adda6770c125962ed5be20f7e9e3331f9f1b0564dc35090b613c73aaaa666de8ec25ff2518cbe4d1d4ea6015d30386b345b9a591f4b24d2b5caee4ba526b46f315343104f4df999f211291a9e9dd1efdc03aeee363c68d6d1e4eea8d9bd0e5961eb4fe1cf098a08aa52d1a68c122033fd230c432ff9309d7a79e48e9542aca78de4815c7e81d8e32cb6bfa1d1994f6f735377fa4a6de642b9f3138091ff6c32c2755f67c1c228eb7118113cc9b25cd54b0b461332d0af25ad18ca4ddeed117d15f0d48a9b8a39fd1e23c748deb073a4033d59a9ed4968996f5d33fc7dea40783457fe8e270a0d482ee9a42156dc8fd22e2fe0f59c83769bbf9081a207e2d050eca46108266efa5a536b052fccdeaf37e2743b05ba03739f3a79bdfdc379e798e9bbc48467237a8cd756ea9fafad75da1b7a23c4b1df206fb08f0c63eae997bef9315c828d1da9ccf7af8dc775008b8db513e3d55b5cd35848490ffb474df9725f404585a501001a035e71f71e3f720174e62e5016c8399c0c2d8dfd55c51becd241dc41ee13ffa8d6c2738739517592460d6b4921acc612011ce8076b1be77948295e3d9d8440ec54460cc761f3a7002b18f47c012182344f1f060cc7f3b977e06ded76f1e9c08c3a95149c1a250dcbc1331dd05dccbea60488389987ee7890e5e2b2c656910e8a815d54287c72074daac5b5c75800e472bb3d43adab5600028fb36d534356763175dc9c6fdabdee3f3fd5c0157fd1da7aba68cb4fd066e2ba8372a837378f7ca9a820800e268f9c9dafa828b45710c0e4680508e528998c8ce7dee3e2073aa1d6b9dcdd373e7574260194b494fc95bb71c2f237e5067361966b5c8bf0e7b4bfc0b32a588d997a7ff3630f979248f592b62dcb981b9d841e00c3d3d97fdcd51556ebb22fea2e8e304f486d9bfb8d12e6b473c40d18aeeec1a6e6891eba971a45b9242b3686a53d0bc47cf717947a055a11d142efe684704c09eb7afac3868c2a2d8621c5931fe726b79becb11d6f22873a051e24a9dec7cc9bb0428f9b5235b0ea5dc3290a32d65eece35cddfd333dd4c77e94dde527e8a4cac2092c778a80eb568acd790c60072c4c0dd6c6a024f37b234a3f2a7b5deb3a0430135f5ca0b9cef89d82b0aaff430ae6f8dd1c9581a028ec06dc1cfef96708d0f5ad3650bf6558eece0c265ec1b76bbbbcc7d37f657ed561663b7fe5190ec661cb639cda03f6ef0eddc72203c3b6ab430ba66145f35a53f93971271c06811368af2894feb5c381690d186a48c9135e397be7978a5ffc44c5e6f7151ad4c54d2a81a5ef281836dedd64018b82193a7b76baca5e79176a738e0233267ed49faf6a04c17cbc967a205e70423a0d26f671c0f01aca118bbf29365a131e1b583ad4f9f9772e9f316fca5dfc79a65dfb545a12a91c8cb0471848b20745cb95261a50a615429a7a817429280e8b5b3fd8cfe9d0e3b6852e990db43b7591d940001a7f0cbafb4db88ae47fb6b95edc45a16ab7fb374de3bc295e60d280d61b389978d3efc8aaa472268f2ba9495a05997000b4b296aa748e51a3d7142c11bad2b4c2b9fa6e291b17d5dcb04b3d03aa59a2084d05378b791cacdd71aa77a816f26aa6702fb6b3dd99d57004fc1aba804eaca31fc211d8dceb0e76a7e96e15fd92e1559f45185fc99fc500d3fea2c32f539048ec4ebe353aebbed4a7a1d09be692f67bd0e6d345ba462ed62a27b85bc0c0f95392137a9b54c5b128314e29095dd89144f73594c99aa7e6a11614e88afe4da989891d669473bbb217243d210992544cbcfa409bc7d623cb8dd26cdd3dcc70d231decc9e2cd71480dc86fa6afd72e0af25d8d54add7a0cbbc33a3b5d3b24f82827d11af96b18bcda111e85d4dd08bb0d6d06683ec6e836f2d949bd96aae04e0ff764b74ba5a7d8affa57a93e273f2c8215cb76bbc222ff0f3cf962e1a51e1adae00fc6d135c93f0a51fffb8b687f0745dd0c7d1996e719d57bd50f2c28521635748c690dd2485e39fd5c0ad837b979b6b474146f48299b50676476f69573bf494c115b0debde2f1e9b613a3921a8486256aab8b25b103de2ade28568f29faa48a2bfdb8d358baea181d06498e077c7410cbb423b0e9a0a8833923e67935127ebf07e731c2b54f9a42b66fc0bfea4d213f6b30ac255bc8bf291f4883ead8cab8ec733b40bfa41ee8d3e1bd59f03bca00f829ce38e1ae96d8fa03af63ca50a98d720e6c8ef15ef06cbe4f9954f7c567c32fd20ca92280b492ca46e1bfe7a3b0410677faf84ca76304f3a8c5003613f06685f9e7afae61f294cd92365359a6718fc6be5ae2d41f1bb0cc4786ff3bae61f3459edc9c11eed53238907b95967ae2072fdd944cafd531178354e56e54761eb8f09645513b1456fee64a7a664ddd0297a6a660abfe4d77a3f287b9088b067288203477f852802b40bcee69f3ee47b4b51af5be1432b77bc1a53585a2d7fe40951b9d1758e6ace601ea57dea1f182e246a61cfcd1a18f9a980301d01536525327d8b3696d2e6cb19fa772909c03b52341b00457140fc417b5f9a32c423253f82275fae06fac5406fc4b865d43060c4b5f3a295177fe3df9b96c0ef63ff9a7d9cdcce567a918abcd5a7e2f8e21f4ec9ff06bc1a875e05e3bd6050e2902590cf87c10aa71b775bee42bd21a6698ecfd21238472c3ca7d1faa005d2d38d63a77a163dd441308ba74dac7f4700d6aa17b30f460674e734dadbc764420fdc966223bb8d7965180ab23346ebc1f3e400c69670e3f3c1b0fabb89f56a450ee5cea30a523e45e122cce1e3e7b7398a5c36a6cb410991c918b44e670d060bc97108bdecc1295d2c74782b454d37f063848280961a7edd22df48d7c9075e7baf5621d891e4d8de763e1543b44a11e4a71396c7246f7f8ee74382b115e9b55cb2632a6883b48ac6b8f7cc50392329421f9ab6c2cf8824e63a3b3c8573e1f1951cfdb4a82705c2afe4d1251aed68ce28ff56f650c1688c5b4272a6e68361000dde04e0c320dcf6b9c6dcdc1b91d54e55d8213db13c5e4ff4bfb315b9497c80d9f7456d4a6fe195d52abb57903f89403fc810336e3f5137239c31457aad199079dc4f520094e50d67d0060f3f24076cd35d0d57d26733230d28eae281e282807712f64640ccfed0826ebb961ae4d5ce8dab438035bb06be24f30f63be9df0ab30a97d171dc5009bf75a8b37a1a28b970dc423d9b7de5fbf02a1f771cc3cbd83854748cce46c2524e23236908e46b76c06211334f2010c4f3fe83522edbef3728c752fc4feefa772c60d6c6b856621b79bfcf048a6b4d463e6a7fb23440d5377819d4c1a9bcc2041f65cc9a60ae692866f803b16e3cc9267917cffe91fc36d98ec2953bb1c833ef4c3f1145871ff7ed82a179f3f32f83cdc3b2a07d91e96f16f801afb467d3363bdfdfbb97856290e34e5ad28a6310063832beca99e362bd54a30a3c7abb00b1c208d9e2ebb025055fb895bfb9d1c009aa227ee2f0cf3fd84574e64829e275a283ecb29a045d1c3a0a426e0a0c518530545fdbf158d90baeaa8a21b0feafa4cf9dbff547fb7b16a1c37ab065395ca2d0c060fde8f66126907cda6ea5b86fd736cd8241aaca9a512277f766a470f62545019e5922df21a84b1fd7aecefb73f4540513161b51706d4752dfde9acd5903ff9393cdfc2bbd3926c2c810d04ae"}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000002880)={0x7, 0x7f, 0x2}, 0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000028c0)={0x5, r2, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000002900), 0x5, 0x2c2001) r9 = syz_open_dev$dri(&(0x7f0000002940), 0xfffffffffffffffa, 0x240000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000002980)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f00000029c0)={r10}) write$P9_RWRITE(r7, &(0x7f0000002a00)={0xb, 0x77, 0x1, 0x5}, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002a40)={0x1ff, 0x2, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fgetxattr(r9, &(0x7f0000002a80)=@known='com.apple.FinderInfo\x00', &(0x7f0000002ac0)=""/23, 0x17) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000002b00)) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002b80), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x24, r11, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x44000) write$P9_RLOPEN(r7, &(0x7f0000002c80)={0x18, 0xd, 0x2, {{0x40, 0x1, 0x2}, 0xa8e0}}, 0x18) r12 = socket$packet(0x11, 0x2, 0x300) splice(r12, &(0x7f0000002cc0)=0x7fffffff, r0, &(0x7f0000002d00)=0x3, 0x3, 0x4) pipe2$9p(&(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r13, 0xf507, 0x0) getresuid(&(0x7f0000002d80)=0x0, &(0x7f0000002dc0), &(0x7f0000002e00)) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r14, &(0x7f0000002e40)) read$msr(r7, &(0x7f0000002e80)=""/191, 0xbf) 39.272952202s ago: executing program 35 (id=466): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, r2, {0x9}}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000240)="0ce91bc530c01e548ca216a1b5b8d2fb5c7042a78a1d27fa99af09fa5dbbd8cf60e9d555293c1b4ae2554fdaeef528481f3b3da3f25301637c6d989ffc9a62c910bdfcc795d635c8eb4085dafabd858ea0745a38390ad976eeb614beeed651c92f95fa451d6cf36959e3196c867ee961cdc403c9d816a7d6272d00c6d608d99c1d747268575b6642a767770001178ecbbde816fabc839cf0f4958134cf", &(0x7f0000000140)=""/11, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) 25.308150913s ago: executing program 6 (id=669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x7e20, 0x7, 0x2, 0xc, 0x8, 0xf2, 0x1, 0x1, 0x9, 0x5, 0x80, 0xcd, 0xc0000000000}, {0x6, 0xe5, 0xe, 0x7f, 0x9, 0x5, 0x7f, 0x7, 0xf, 0xf, 0xe, 0x4d, 0xf9c}, {0x5, 0x8b6b, 0x3, 0x9, 0xb, 0x0, 0x20, 0x74, 0x6, 0x1f, 0x6, 0x64, 0x1000000100008}], 0x60000fd}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0xe}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'macvtap0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2d, 0x12, 0x7e, {0xe, @udp_ip4_spec={@multicast1, @multicast1, 0x4e24, 0x4e20, 0x40}, {0x0, @random="ef39c64a29ee", 0x8000, 0x7f, [0xfff, 0x800]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x2c}, @mcast1, 0x4e24, 0x4e22, 0x7}, {0x0, @random="44a87e14fc6d", 0xe, 0x4, [0x4]}, 0x2, 0x8}}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x4, 0x4000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b31, &(0x7f0000000580)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 25.130404974s ago: executing program 6 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001aca08eeb58b398b41414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c00030a010102000100000000000000000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb0000000000000000000000000000f863f0be7b46f7213ed1"], 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'dvmrp0\x00', &(0x7f0000000440)=@ethtool_eee={0x44, 0xfffffffa, 0x9, 0x2, 0x5, 0x7, 0x7, 0x0, [0xc, 0x4]}}) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x1a, 0x4, 0x0, 0x2, 0x7c, 0x66, 0x0, 0x7f, 0x1, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@timestamp_prespec={0x44, 0x3c, 0x40, 0x3, 0x2, [{@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1a}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@private=0xa010101}, {@loopback, 0x3}]}, @lsrr={0x83, 0xb, 0xdf, [@loopback, @remote]}, @timestamp_addr={0x44, 0xc, 0x51, 0x1, 0x5, [{@rand_addr=0x64010102, 0x4}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1, 0x5, 0x5, 0x4}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, r1, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x40, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x14c, r7, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x120, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x1}, "", @void, @value=@ver_80211n={0x0, 0x123a, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x29, "bbc12eccd4999c4b0c316fe119c90b40d7fd54e5a6a352584bc06b890c8e729fdd9e36fe4107b1c47a"}, {@broadcast}, {@device_b, @device_a, 0xa9, "8c319f61b754fbf8b7f897c77990dee0abe16f346ede6ec43cb8754ba4ae15179f26bda05d12f4d7ebc2f689d3de1e8d075ba2fda79c8c3b9c81dc09c80d6604997ba0658372664e8c99d62f40efa8f9044fed4591bd691a5d7627a9a4a57cef9c53f84cee51c57568890eb43b55a5437919feb25e1af554b051c9f034c9aced48b0a08b7ee5c9e466062a0f17681653481f4eb384bf67eec305ed7a6207cd703067e463a5a28e183a"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 24.99687685s ago: executing program 6 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85efb17b5508000018bb00", "0900b43f"}, 0x38) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x90800) poll(&(0x7f0000000180)=[{r0, 0x9070}, {r0, 0x94}, {r0}, {r0, 0xe020}, {r0, 0x4000}, {r2, 0x262d}, {r2, 0x1200}, {0xffffffffffffffff, 0x80}, {r1, 0x200}], 0x9, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 24.996244623s ago: executing program 6 (id=672): mkdir(&(0x7f0000000000)='./file0\x00', 0x89) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2900, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) timer_create(0x3, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x83}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) syz_clone(0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x41) 24.63068305s ago: executing program 6 (id=674): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x14000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x874fd42a7836ef66, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 24.050865152s ago: executing program 6 (id=679): accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000040)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}}}, &(0x7f0000000340)=0xe8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000002"], 0x0) fchown(r0, r1, 0xee01) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000000380)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000100)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'loose'}}, {@afid={'afid', 0x3d, 0x2}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@loose}, {@version_L}, {@nodevmap}]}}) 24.013179718s ago: executing program 36 (id=679): accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000040)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}}}, &(0x7f0000000340)=0xe8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000002"], 0x0) fchown(r0, r1, 0xee01) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000000380)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000100)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'loose'}}, {@afid={'afid', 0x3d, 0x2}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@loose}, {@version_L}, {@nodevmap}]}}) 1.407630525s ago: executing program 8 (id=800): r0 = socket(0x2b, 0x6, 0x0) listen(r0, 0x0) unshare(0x62000000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000280)="a5", 0x1, 0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @remote}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1.148569313s ago: executing program 7 (id=810): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, 0x1}, @isdn={0x22, 0xce, 0x0, 0xfe, 0x8}, @llc={0x1a, 0x73f5bccf93ed8c53, 0xb, 0xd, 0x7, 0x9}, 0x76ea, 0x0, 0x0, 0x0, 0xe980, &(0x7f00000000c0)='veth1_to_bridge\x00', 0x9, 0x80000001, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xb00, 0x6, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x2, 0x4c}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xf3}}}, {{@uncond, 0x0, 0x170, 0x1d0, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x1, 0x7], 0x5, 0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@rand_addr=0x64010101, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0xffff00, 0xffffffff], @ipv6=@mcast2, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@multicast1, [0xffffffff, 0xffffff00, 0xff, 0xff], 0x2, 0x8, 0x3b, 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x188, 0x2000}, 0x40, 0x1008}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffffff, 0x0, 0xffffff00], 0x4e21, 0x4e20, 0x4e22, 0x4e20, 0xfffffbbb, 0x5, 0x6, 0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x8, 0x2) r3 = accept$inet(r0, &(0x7f0000000800), &(0x7f0000000840)=0x10) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000880)={@multicast2, @empty, r1}, 0xc) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x104, r2, 0x200, 0x70bd29, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="43f4347d42a59b0a9f203542b1ed6054749da7dbe494d7b8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d52f31620f15d404fb17df65eccb2e7c29b82ab80e2bc336"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4a8c265b94d80722f52a8cf6961b2eaf"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05c0b1b08c1fe1a7e2ec4fa185af3dd3adab653dac6940af"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b06bb47afa199e6f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="af5f9238023b4954d630d491759400d416cbdd8d3728060453b448cbca245d51"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e2c7a9aeca13158eed8d35ca4b1b9ca157c8c9e3e27f01c4"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "07cd90c0d78ade54"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x2c000090}, 0x2000c050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) flistxattr(r0, &(0x7f0000000b00)=""/121, 0x79) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x10, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008080) llistxattr(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=""/104, 0x68) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000f00)={0x1, &(0x7f0000000ec0)=[{0x0, 0x98, 0x1, 0x8}]}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x68, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x40811) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) statx(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x100, 0x10, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001200)=@nbd={'/dev/nbd', 0x0}, r8, &(0x7f0000001380)={0x3, 0x100000000}) read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000003400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000005440)='./file0\x00', &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000005500)={0x130, 0xffffffffffffffda, r9, {0x37, 0x6, 0x0, '\x00', {0x10, 0x5, 0x80, 0x5, r10, r12, 0x37b605239613276e, '\x00', 0xff, 0x8, 0xd1a, 0x4f, {0xb, 0xe}, {0x7, 0x38}, {0x0, 0x8001}, {0x7, 0xf}, 0x9f, 0x10, 0x20000000, 0x7}}}, 0x130) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000005700)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000005680)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4024000) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r11, &(0x7f0000005740)={0x0, 0x7, 0x3, 0xa9f, 0x6, 0x1, 0x64d, 0x4, 0x3}) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) fsetxattr$security_selinux(r13, &(0x7f00000057c0), &(0x7f0000005800)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x3) 1.057025682s ago: executing program 7 (id=812): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fanotify_init(0x8, 0x40000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r1, 0x1, 0x100018, r2, 0x0) (async) fanotify_mark(r1, 0x1, 0x100018, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0xb6}}, 0x10) close(r0) 990.153766ms ago: executing program 7 (id=813): r0 = socket$netlink(0x10, 0x3, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) listen(r1, 0x9) accept$inet(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x20}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x49, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYBLOB="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"/4279], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 963.457913ms ago: executing program 8 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x400000000010, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@getchain={0x44, 0x66, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {0xfff3, 0xc}, {0xf, 0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xc014}, {0x8, 0xb, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x200cc814) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) 790.330758ms ago: executing program 7 (id=820): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x80, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0xfffffffa, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r3, 0x54, "d1b1dc7c6ab6df740d3451c9f131fa567870905c5146a0e137c99c8c699eda29bc27964e1e076e7cd77e5ce0ee0256aa028b5dcd3909bf8b4f43d46479a6b07276bd7988f00a7916242c3b699355890545afd41a"}, &(0x7f00000002c0)=0x5c) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000340)=0xc, 0x4) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0xff, 0x9, 0x0, 0x8, 0x865c, 0x1, 0x7, 0xfff, r4}, &(0x7f00000003c0)=0x20) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0xbb793000) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000400)={'vcan0\x00'}) (async) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=""/154, &(0x7f0000000500)=0x9a) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e20, 0x9, @local, 0x6}}, 0xa058, 0x9}, &(0x7f0000000600)=0x90) (async) r8 = dup3(r0, r6, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000640)={r7, 0x3, 0x0, 0x4, 0x1}, &(0x7f0000000680)=0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000700)=@assoc_id=r1, &(0x7f0000000740)=0x4) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000780)={r1}, 0x8) (async) ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0) (async) fsetxattr$trusted_overlay_nlink(r9, &(0x7f00000007c0), &(0x7f0000000800)={'L-', 0xfffffffffffffff9}, 0x16, 0x3) (async) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000840)={0x0, 0x2, [@multicast, @remote]}) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x9, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0x0, 0x8}}) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xb, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000a80)='syzkaller\x00', 0x7a, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[r8, r0, r8], &(0x7f0000000b40)=[{0x1, 0x3, 0xc, 0x3}, {0x4, 0x2, 0x5, 0x7}, {0x4, 0x5, 0xb, 0x4}, {0x1, 0x2, 0xf, 0x2}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000d40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)=@getlink={0xb0, 0x12, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x860, 0x20000}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_GROUP={0x8, 0x1b, 0x80000001}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000080) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r9) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r12, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4095}, 0x8008010) 789.951101ms ago: executing program 8 (id=821): r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8a) setreuid(0xee01, 0xee01) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0) 739.104443ms ago: executing program 8 (id=823): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200edc2010a000000000000000080000000"], 0x26}}, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@loopback, @multicast1, @multicast1}, &(0x7f0000000000)=0xc) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)}], 0x1}}], 0x1, 0x140480c1) getpeername$l2tp(r2, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 736.149176ms ago: executing program 7 (id=825): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK={0x8}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x108}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c01) close_range(r0, r0, 0x0) 680.517907ms ago: executing program 7 (id=827): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x1, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x78) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 680.242601ms ago: executing program 5 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4c803) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r4 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000280)={0x3, "c5c2a91e002b1b80000000003d5eff0010000000000000000000000000001100", 0x2, 0x7, 0x2, 0x200, 0x20911, 0x2}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 630.333374ms ago: executing program 8 (id=829): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1842) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000140)={{0x80, 0xf2}, 'port0\x00', 0x25, 0xd255e88465c46e8e, 0x0, 0x9, 0x6, 0xf8, 0xffffffff, 0x0, 0x3, 0xff}) 630.095324ms ago: executing program 8 (id=830): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x80000) close_range(r0, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 530.612658ms ago: executing program 5 (id=831): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x7) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000050000000000000040000000062a0b040000000000002000020000001400048010000180090001006d617b71000000000900010073797a30000000000900020073797a32000000001400f41710010100f500000a93fd0797188c241356719cb4b0662564f2387593f05dca6a198e5c8fc133f28337442c443ef92638272be88c382a73ae8f7ff8573b51f61069ae70491adc00"/170], 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed", 0x91}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000080)=[r1], &(0x7f0000000340)=[0x100000020], 0x400000000009608, 0x1}) 330.115093ms ago: executing program 5 (id=833): creat(&(0x7f0000000040)='./file0\x00', 0x140) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = fsopen(&(0x7f00000000c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000080)={'trans=virtio,', {[{@version_u}]}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8011, &(0x7f0000000340)={[{@nfs_export_on}, {@metacopy_on}, {@redirect_dir_on}, {@verity_on}], [{@appraise}, {@permit_directio}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'nfs_export=on'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x300, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x1c, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004c}, 0x20000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}]}}) 260.719113ms ago: executing program 5 (id=834): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x94) 170.4994ms ago: executing program 2 (id=836): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0xffff, 0x5}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb}, {0xe, 0xc}, {0x4, 0x12}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x40000d1) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x1, 0x10}, 0xc) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r7, &(0x7f0000000340)="8f52eb24cc808000", 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0xffffffff, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000881150001a000000185200000a0000000000000000000000186900000b0000000000000009000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0xf4, &(0x7f00000003c0)=""/244, 0x41100, 0x48, '\x00', r2, 0x18, r4, 0x8, &(0x7f0000000500)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x4, 0x97, 0x1}, 0x10, 0xd7f8, 0xffffffffffffffff, 0x4, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r6, r7, r8, r9, r3], &(0x7f0000000b40)=[{0x3, 0x3, 0xf, 0x2}, {0x2, 0x4, 0xb, 0x4}, {0x5, 0x2, 0xa, 0x7}, {0x5, 0x4, 0xd, 0x7}], 0x10, 0x1ff}, 0x94) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaff08004500101c000000008002907800000000e000030000009078006400d2e53816a779211cd8ab2744de77a783a2310b0bcbd58c3933ce07bb23"], 0x0) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000040), 0xc, 0x0) ioctl$EVIOCGBITSW(r12, 0x80404525, &(0x7f0000000140)=""/97) r13 = openat$cgroup_pressure(r11, &(0x7f0000002500)='io.pressure\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r13, 0x80cd}], 0x1, 0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x1000, 0x100, 0x1, 0x4, "cdd480dfbfd344070c22e65ef771caf99e360f20c46d4b2108146c929bb89a8f80dac51abe16a04fd3c28226ffe3e05bd31383b3bed496698357104478ddebe57cf6df41eb28b49cff02cd7be9d225da7e28f5c8e519ae4864f15ec743e8fbb7ab8a8855b5c28a7d0076249ba5bcaefa91dca3938d6e46a27a82759c0d655f8e"}) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000040)='ramfs\x00', 0xa02412, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') 169.141474ms ago: executing program 2 (id=837): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e657665"], 0x58}, 0x1, 0x2}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 80.345781ms ago: executing program 5 (id=838): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a20000000000a05000000000000002000010000000900010073797a3000000000440000000b0a03000000000000000000010000090900020073797a31000000000900010073797a300000001800118008000100647578000c000280080001400000001014000000060a0104000000000000000001000004140000001100010000000000000000000500000adce8"], 0xa0}}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x30, 0x10, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)}}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) epoll_create1(0x80000) r3 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xa46c2, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x8001}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) close(r3) execveat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000240)) ioctl$KDDELIO(r6, 0x4b34, 0x3bf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000cf7986306671f55700009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) 79.983901ms ago: executing program 2 (id=839): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000280)={0x18}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x24) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r3, 0x0, 0x62, 0x0, &(0x7f00000016c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd1d}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r6, 0x0, 0xff, 0x100000001}) 79.397058ms ago: executing program 5 (id=840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002040)=@delchain={0x1320, 0x65, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x4, 0xfff1}, {0xa, 0xffff}}, [@f_rsvp={{0x9}, {0x28, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x9}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010102}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1ffe6, 0x8}}, @TCA_RSVP_POLICE={0x4}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xc}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}]}}, @f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff0000, 0x0, 0x100, 0x8000, 0x3, 0x4, 0x9c, 0x3, 0x10000, 0xffffc66e, 0x1ca1, 0x7, 0x6, 0x8, 0x3, 0x40, 0x401, 0xfffffff9, 0x4, 0x1000, 0x637a800, 0x3f, 0x5, 0x59d, 0x8, 0x8000, 0x3, 0xdb96, 0x2, 0xf, 0xf26, 0x1d, 0x0, 0x80, 0x1, 0xffff, 0x8, 0x5d, 0xb91, 0x40, 0x1000, 0x0, 0x5296, 0xffff, 0x40000000, 0xf229, 0xd5, 0x6, 0x5, 0xf, 0x0, 0x4, 0x1, 0x3, 0x1000, 0xffffffff, 0x6, 0x3, 0x7, 0x80, 0x6, 0xffff, 0x1, 0xe, 0x9, 0x10, 0x9, 0x5, 0x3, 0xccc, 0x7, 0x0, 0x17d8, 0x4, 0x8001, 0x30a, 0x200, 0x7, 0x3, 0x8, 0xd8, 0x1, 0x2, 0x7, 0x7fff, 0x8, 0x1, 0x41, 0x0, 0x7fffffff, 0x9a2, 0x2, 0x7, 0x8, 0xffffffff, 0x0, 0x7, 0x4c20, 0x1, 0x6, 0x0, 0x6, 0x5d64, 0x7f, 0x4f, 0x1000, 0x4, 0x2, 0x6, 0x1c, 0xa, 0x8, 0x22, 0x5, 0xe4f1, 0x7, 0x9, 0x40, 0x8001, 0x6, 0x80000001, 0x30c, 0xc0000, 0xfffffffc, 0x10001, 0x1, 0x2, 0x80000001, 0x3, 0x4, 0x8, 0xfffffff9, 0x8, 0x1, 0x5, 0x7, 0x6, 0x613, 0x10, 0x7fffffff, 0xd, 0x9, 0x1, 0x9, 0x8, 0x4, 0x5, 0x8, 0x0, 0x2, 0xb8, 0xa, 0x0, 0x7f, 0x7, 0x9, 0x0, 0x6, 0x86d1, 0xffff, 0x4, 0x0, 0x885, 0x9, 0x7, 0x88, 0x10, 0x1000, 0x1, 0xfffffff7, 0x8, 0x10000, 0x1, 0x5, 0x3129c99f, 0x1, 0x3, 0x4, 0x2a1a639d, 0x4, 0x2e, 0xa, 0x7, 0x3ff, 0x81, 0x8001, 0x8c45, 0x3, 0x9, 0x3, 0xee, 0x3, 0x4, 0x7, 0x8c, 0x6, 0xfffffffc, 0x57, 0xaa, 0x5, 0x8, 0x3, 0xe0000, 0x3c, 0x8, 0x4, 0x7a77ba12, 0x3ff80000, 0x8001, 0x8, 0x1, 0x9, 0xefa, 0x5, 0xda7b, 0x6, 0xec, 0x0, 0x7, 0x9, 0x6, 0x400, 0x6, 0x7fffffff, 0x1, 0x7fffffff, 0x7, 0x8, 0xf, 0x1, 0xff, 0x100, 0x101, 0x0, 0x10, 0x6, 0x0, 0x3, 0x1, 0x3, 0x4, 0x80000000, 0x9, 0x2, 0x3000, 0x6, 0x2, 0x3, 0x6, 0x1, 0x6, 0x9, 0x8, 0x7f, 0x2, 0x8]}]}]}}, @f_rsvp={{0x9}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x16, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0x2, 0xffffffffffffffff, 0x7, 0x68000000}, 0x6, 0x6}, [{0xfff, 0x4, 0x81, 0x0, 0x2, 0x4}, {0x9, 0x9, 0xd, 0x5, 0x5, 0x8}, {0x9db, 0x401, 0x74e9, 0x0, 0x5, 0x1}, {0x4bd9, 0x8001, 0xd, 0x1, 0x8, 0x4}, {0x7, 0x5, 0x3, 0x3, 0xffffffff, 0xffffffff}, {0x401, 0x6c, 0x6, 0x7, 0x3ff, 0xcc4}, {0x7, 0xffff, 0xff, 0x0, 0x6, 0x8}, {0xfe7c, 0x80000000, 0x3, 0x0, 0x5, 0xffffff18}, {0xcc7b, 0x8, 0x1, 0x9, 0x10, 0x9}, {0x51, 0x5, 0x0, 0x4, 0x500, 0xffffffff}, {0x101, 0xc5, 0x9, 0x5, 0x4, 0x5}, {0x8, 0x101, 0x7, 0x3, 0x89, 0x3}, {0x6c, 0x9, 0xa1f2, 0x8, 0x9ef, 0x8}, {0x2, 0x8, 0x4, 0x7, 0x2, 0x8c}, {0x101, 0xc0000, 0xb8, 0x2, 0x2, 0x3}, {0x100, 0x6, 0x1, 0x0, 0x2, 0x8}, {0x5, 0x3, 0x9, 0x0, 0x9, 0x1}, {0x7, 0xa9, 0x8, 0x610, 0x6, 0x9d}, {0x34, 0x3, 0x0, 0x3, 0xff8, 0x10001}, {0x6, 0x9b54, 0x56b, 0xd, 0xc4, 0x3ff}, {0x7f, 0x9, 0x1, 0x465, 0xfff, 0xf}, {0x5ecf, 0x5, 0x1, 0x0, 0x5, 0x10001}, {0x7, 0x8001, 0x5b, 0x8, 0x31, 0x7fff}, {0x200, 0x8, 0x4721, 0xfffffffc, 0x3, 0xbfdf}, {0x53a, 0xffffffff, 0x7b5, 0x9, 0x10001, 0x3}, {0x6, 0x79, 0x9, 0x0, 0x2, 0x4}, {0xffff, 0x8, 0xe6, 0x2, 0xb0f, 0x6}, {0xa, 0x2117, 0x5, 0x9, 0xffffffcf, 0x80000001}, {0x5, 0x4, 0x4, 0x5, 0x1}, {0x2, 0x6, 0xff, 0x9, 0x2e, 0x6}, {0xdc, 0xffffff36, 0x3, 0x7, 0x0, 0x6}, {0x4, 0x9, 0x5b, 0x6, 0x7, 0x7}, {0x1, 0x9, 0xfffeffff, 0xbf, 0x3, 0x1000}, {0x3, 0x1b8c, 0x7, 0x7, 0x5, 0x5}, {0xd821d52, 0x401, 0x1, 0x0, 0x4, 0xce}, {0x3, 0x1, 0x4, 0x400, 0x5}, {0x4d4f, 0x80000001, 0x1, 0x6, 0x9, 0x2}, {0x8, 0x3, 0x49a9, 0xd, 0x8, 0x401}, {0x10001, 0xbcfd, 0x80, 0x5, 0x6c}, {0x1, 0xfb0, 0xde95, 0x9, 0x6, 0x7}, {0x2, 0x1, 0xfffffc00, 0x0, 0x8, 0x9125}, {0x2000200, 0x9, 0x0, 0x1, 0x21ac, 0x87e9}, {0x6, 0x101, 0x7, 0x4, 0x0, 0x1}, {0x9, 0x94a, 0x7, 0x2, 0x0, 0x7}, {0x6, 0x9, 0x1e00000, 0x5, 0x9, 0x2}, {0x3, 0x7, 0xb7, 0x7, 0x9, 0x6e}, {0x5, 0x6, 0x9, 0xda, 0x5}, {0x80000000, 0x2b, 0x80000000, 0x2, 0x1ff}, {0x1, 0x400, 0x3, 0x4, 0x0, 0xd5}, {0x1000, 0x0, 0x0, 0x80, 0x4, 0x7}, {0x101, 0x69de841, 0x0, 0x6, 0x7, 0x7}, {0x8, 0x7, 0x5, 0xf, 0x5, 0x109}, {0x3, 0x9, 0xfffffffc, 0x687, 0x101, 0x1}, {0x2, 0x5, 0x3, 0x8, 0xbb6, 0x7}, {0x1, 0x8, 0x3, 0x7, 0x3ff, 0x8}, {0x5, 0x7, 0x5ff0087b, 0x4, 0x7, 0x3}, {0x7, 0x4, 0x7, 0x0, 0x7ff}, {0x9, 0x8f22, 0x5, 0x73b00000, 0x6, 0xffffff70}, {0x3, 0x1060b654, 0xfffffffd, 0x7, 0x9, 0x1}, {0xfffffc00, 0x3, 0x3, 0x3fd, 0x5, 0x4}, {0xfffffbff, 0x6, 0x81, 0x401, 0x4, 0x10000}, {0x0, 0x8, 0x1ff, 0x6ca4, 0x9, 0x8}, {0x8, 0xd, 0x2, 0xdfb3, 0x6, 0x4}, {0x2, 0xd, 0x6, 0x2, 0x10000, 0x3}, {0x0, 0x3, 0x2, 0x8, 0xffffff49, 0x6}, {0xffffffc0, 0xe, 0x7, 0x9, 0x1000, 0x5}, {0x1e, 0x3ff, 0x10, 0xf, 0x0, 0x2}, {0x8, 0x7, 0xe, 0x8, 0x2ab4000, 0x1}, {0x0, 0xad9a, 0x5, 0x7fff, 0x7, 0x8000}, {0xb, 0x7f, 0x1, 0x8, 0x7, 0x3}, {0x5, 0x9, 0x1dfb, 0x5, 0x1000, 0x1}, {0xffffffff, 0x7, 0x7, 0x5, 0x1, 0x10001}, {0xa6ae, 0x0, 0x6, 0x9, 0x10, 0x3}, {0x9, 0x79c, 0x1, 0x401, 0x5, 0x400}, {0x8f, 0xa35, 0x5, 0x40, 0xffff, 0x40}, {0x3, 0x3, 0x6, 0x5, 0x9, 0x8}, {0x4, 0x51, 0x5b2a69d2, 0x7fffffff, 0xf6, 0x9}, {0x1, 0x5, 0x6, 0x3ff, 0x1, 0x7fffffff}, {0xfffffffd, 0x6, 0x800, 0x2, 0x0, 0x1}, {0x0, 0x5, 0x6, 0x453b, 0xc6, 0x101}, {0xfffffff4, 0x1, 0xfff, 0x0, 0xce80, 0x3}, {0x7ff, 0x2, 0xfffffff8, 0x200, 0x7, 0x10}, {0x7, 0x50f, 0x6, 0xa000, 0xb8, 0x76d}, {0x3, 0x528610, 0x9, 0x9, 0x4, 0x7}, {0x3dd3e249, 0x0, 0x800, 0x5, 0x8a9, 0x7ff}, {0x7, 0x0, 0xc94, 0x0, 0x4, 0x428}, {0x0, 0xcffc, 0x5, 0x3, 0x1, 0xb}, {0x3, 0x2, 0xdd08, 0x5, 0x1, 0x3}, {0xfffffffa, 0x8, 0x3, 0xef65, 0x40, 0x4}, {0x81, 0x6, 0x4, 0x1000, 0xa9fd, 0x2}, {0x2, 0x200, 0xcd9, 0x3, 0x8, 0x1}, {0x7, 0x6, 0x38000000, 0x4, 0x8, 0x3}, {0x80, 0x7, 0x7, 0x9, 0x1, 0x1}, {0x2, 0x2a5c, 0xe, 0x7, 0x3, 0x2}, {0x6834, 0x6, 0x800, 0x1, 0xd7d, 0x3}, {0x1, 0xff, 0x5, 0x9, 0x9, 0x5}, {0x9, 0xe, 0x5, 0x1000, 0x40, 0x5f}, {0x5, 0x9, 0x80000001, 0xd, 0x9e1, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x7, 0x1}, {0xfffffffa, 0x2, 0x400, 0x1, 0x61c3, 0x3db0}, {0xb, 0x1d, 0x1ff, 0xffffff7f, 0x4, 0x3}, {0xffff8001, 0xe, 0x80000000, 0xfffffc0c, 0x80000000, 0x401}, {0x7, 0x28000, 0x9, 0x31827040, 0xa, 0x71}, {0xe123a784, 0x2, 0x1, 0x3, 0x3, 0x3}, {0xc31, 0x0, 0xfffff801, 0x7, 0x7fff, 0x10}, {0x2, 0xf, 0x4, 0x401, 0x1, 0x10001}, {0x3, 0x0, 0x36, 0x0, 0x5, 0xf}, {0x3, 0x4, 0x9, 0x5, 0x67, 0x7}, {0x5, 0x0, 0x3, 0x7, 0x8, 0xff}, {0x7, 0x7, 0x80000000, 0x2, 0xf644, 0x3}, {0x57, 0x400, 0x7, 0x80000001, 0x1, 0x5}, {0xff, 0x10001, 0x1, 0x6, 0x0, 0x800}, {0x100, 0x7, 0x3, 0xfffff801, 0x1, 0x9589}, {0x8, 0x8, 0xd810, 0x3ee, 0x4, 0x3}, {0x2, 0x4, 0x7, 0x9, 0x5949357, 0x1e}, {0x24ef, 0x9, 0xdb2, 0x8001, 0x7ff, 0x5}, {0x401, 0x10001, 0x2, 0x40, 0x5914a2fb, 0xc7b}, {0xe, 0x4, 0x78fc, 0x80000001, 0x6, 0x5}, {0x0, 0xc, 0x49, 0x4, 0x0, 0x7}, {0x6, 0xe000, 0x5, 0x1000, 0x9, 0xe2e}, {0xb, 0x8000, 0x2d619c7c, 0xba5, 0x4, 0x28bb}, {0x7, 0x4, 0x2, 0x800000, 0x7, 0x8001}, {0x845, 0xff, 0xd1c, 0xe1ae, 0x1, 0x10}, {0x3, 0xfffffff2, 0x4, 0x8}, {0x5, 0x7, 0x6, 0x15a, 0x6b, 0x4}, {0xa8, 0x7, 0x7fffffff, 0xfffffff7, 0x2, 0x10}, {0x7, 0x5, 0x1, 0x0, 0x0, 0x7}, {0x80, 0xbdf7, 0x54, 0xb, 0x4, 0x3}], [{}, {0x5}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0xb29f7634f3aba25}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0xb1b1fe6788f7187c}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0xe04166e180f52591, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x3}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1320}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000001c0)={0x1, 0x1, 0x4, &(0x7f00000000c0)={0x15, "5bc430f65f743bd601cbdf906a87b559bdc267a4542ac70b3c9259c881e9bbe57e"}}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) getpeername$qrtr(r5, &(0x7f0000000000), &(0x7f0000000040)=0xc) 78.336778ms ago: executing program 2 (id=841): setresuid(0x0, 0x0, 0xee01) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x4b, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x2c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, 0x8000, 0x70b2}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r7 = getpid() kcmp(r7, r7, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x10, 0xe, 0x80000001, 0xee9, r7}) 507.57µs ago: executing program 2 (id=842): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000400000/0xc00000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0100677265001014fc8008000700e00000020400120054d6021e1ff04f92fc32228e48ea5a2d3b8fe17af8f68f2b0eec6b5e5d6eed59f7df38251686879adf57c5a45c6c8a"], 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) 0s ago: executing program 2 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2a615293b57fc4a5}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c00000045000701feffffff00000000017c00000800018001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 0s ago: executing program 2 (id=844): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x80880}, 0x2815) r3 = socket(0x10, 0x2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x24) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r6 = dup(r5) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000380)=[@acquire={0x40046305, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x1, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x1, 0x3c}, @fda={0x66646185, 0xa, 0x2, 0x2a}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}], 0xb7, 0x0, &(0x7f0000000400)="e692f3be5a9cf4302013a5bae6590ddde0e9708f93ce46144538bc93ac8e08324d14a4dedb76e10dc4e47397600b19ec361ecf143de7bd5e9d761783db59e1f883397a9f2ba2fec5f8b571709dc490052e1cb0657a0ba7cf0c253b587c5e23bf121c15b003dd9640e7a8041b55831a06fce911df11f92873ec9d6477166a6df2fbed699faa36404f4fda9a6b171cab7a3378c6cd915cbf439b64b11d6d088f1b5158a00614544492305c8c3224363327ac605766aa6f5c"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x300000e, 0x100010, r9, 0x6020b000) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000140)={0x8}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) kernel console output (not intermixed with test programs): cuous mode [ 60.551544][ T6412] syzkaller0: entered allmulticast mode [ 60.612176][ T5942] Bluetooth: hci1: command tx timeout [ 60.685795][ T6424] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 60.694415][ T6424] CIFS mount error: No usable UNC path provided in device string! [ 60.694415][ T6424] [ 60.697673][ T6424] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 60.772247][ T155] tipc: Node number set to 2130706433 [ 60.776689][ C0] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 60.777761][ T6434] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.780251][ C0] sr 2:0:0:0: [sr0] tag#14 CDB: Write(10) 2a 36 b6 0b fa d6 [ 60.846396][ T6445] netlink: 'syz.1.131': attribute type 30 has an invalid length. [ 60.859835][ T6447] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 60.862734][ T6447] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 60.868725][ T6447] vhci_hcd vhci_hcd.0: Device attached [ 60.873285][ T6448] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 60.876849][ T12] vhci_hcd: stop threads [ 60.878513][ T12] vhci_hcd: release socket [ 60.880053][ T12] vhci_hcd: disconnect device [ 60.885578][ T6445] bond1: option arp_missed_max: invalid value (0) [ 60.888069][ T6445] bond1: option arp_missed_max: allowed values 1 - 255 [ 60.891403][ T842] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 60.891674][ T6445] bond1 (unregistering): Released all slaves [ 60.903253][ T6435] __nla_validate_parse: 43 callbacks suppressed [ 60.903276][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.129'. [ 60.978850][ T6458] openvswitch: netlink: Missing key (keys=40, expected=100) [ 61.023817][ T842] usb 5-1: device descriptor read/64, error -71 [ 61.178656][ T6475] hfs: can't find a HFS filesystem on dev sr0 [ 61.218360][ T6482] program syz.3.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.261937][ T842] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 61.277443][ T6486] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 61.280197][ T6486] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.284333][ T6486] vhci_hcd vhci_hcd.0: Device attached [ 61.289601][ T6487] vhci_hcd: connection closed [ 61.290179][ T640] vhci_hcd: stop threads [ 61.293122][ T640] vhci_hcd: release socket [ 61.294534][ T640] vhci_hcd: disconnect device [ 61.391429][ T842] usb 5-1: device descriptor read/64, error -71 [ 61.501799][ T842] usb usb5-port1: attempt power cycle [ 61.604044][ T6506] ptrace attach of "/syz-executor exec"[5929] was attempted by "/syz-executor exec"[6506] [ 61.841414][ T842] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 61.862333][ T842] usb 5-1: device descriptor read/8, error -71 [ 61.865337][ T6521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.101433][ T842] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 62.114658][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 62.117916][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 62.122012][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 62.122692][ T842] usb 5-1: device descriptor read/8, error -71 [ 62.125170][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 62.136278][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 62.136289][ T40] audit: type=1400 audit(1760816147.100:324): avc: denied { create } for pid=6525 comm="syz.1.153" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.145104][ T40] audit: type=1400 audit(1760816147.100:325): avc: denied { link } for pid=6525 comm="syz.1.153" name="#7" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.152345][ T40] audit: type=1400 audit(1760816147.100:326): avc: denied { rename } for pid=6525 comm="syz.1.153" name="#8" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.180455][ T40] audit: type=1400 audit(1760816147.140:327): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.191488][ T155] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.231730][ T842] usb usb5-port1: unable to enumerate USB device [ 62.237379][ T40] audit: type=1400 audit(1760816147.200:328): avc: denied { connect } for pid=6529 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.243663][ T40] audit: type=1400 audit(1760816147.200:329): avc: denied { name_connect } for pid=6529 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 62.250568][ T40] audit: type=1400 audit(1760816147.210:330): avc: denied { listen } for pid=6529 comm="syz.1.155" lport=53099 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.345028][ T155] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.348694][ T155] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.352582][ T155] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.355416][ T155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.360091][ T6523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.365384][ T155] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.563634][ T40] audit: type=1400 audit(1760816147.530:331): avc: denied { append } for pid=6522 comm="syz.2.152" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.564208][ T843] usb 7-1: USB disconnect, device number 3 [ 62.582842][ T6023] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.612051][ T5942] Bluetooth: hci3: command 0x0419 tx timeout [ 62.613208][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.158'. [ 62.619686][ T6542] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 62.626334][ T6542] netlink: 2 bytes leftover after parsing attributes in process `syz.2.159'. [ 62.647162][ T40] audit: type=1400 audit(1760816147.610:332): avc: denied { create } for pid=6541 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.649995][ T6536] block nbd3: not configured, cannot reconfigure [ 62.655586][ T40] audit: type=1400 audit(1760816147.620:333): avc: denied { write } for pid=6541 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.758159][ T6023] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 62.764047][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 62.767399][ T6023] usb 6-1: Product: syz [ 62.769109][ T6023] usb 6-1: Manufacturer: syz [ 62.771149][ T6023] usb 6-1: SerialNumber: syz [ 62.776386][ T6023] usb 6-1: config 0 descriptor?? [ 62.782375][ T6023] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 62.786642][ T6023] dvb-usb: bulk message failed: -22 (2/0) [ 62.794673][ T6023] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 62.799482][ T6023] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 62.803933][ T6023] usb 6-1: media controller created [ 62.824575][ T6023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.984538][ T6534] cxusb: i2c rd: len=80 is too big! [ 62.984538][ T6534] [ 62.991728][ T6023] cxusb: set interface failed [ 62.993765][ T6023] dvb-usb: bulk message failed: -22 (1/0) [ 63.010384][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 63.019260][ T6550] overlay: Unknown parameter 'smackfstransmute' [ 63.023689][ T6023] DVB: Unable to find symbol mt352_attach() [ 63.026329][ T6023] dvb-usb: bulk message failed: -22 (5/0) [ 63.030585][ T6023] zl10353_read_register: readreg error (reg=127, ret==-121) [ 63.030630][ T6023] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 63.091569][ T6023] rc_core: IR keymap rc-dvico-mce not found [ 63.094076][ T6023] Registered IR keymap rc-empty [ 63.099582][ T6023] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 63.105585][ T6023] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 63.114836][ T6023] dvb-usb: schedule remote query interval to 100 msecs. [ 63.116343][ T6553] syz.2.161 uses obsolete (PF_INET,SOCK_PACKET) [ 63.117654][ T6023] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 63.127246][ T6023] usb 6-1: USB disconnect, device number 2 [ 63.164512][ T6023] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 63.259829][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 63.271983][ T6562] xfrm1: entered allmulticast mode [ 63.408699][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.594305][ T6579] bond1: Unable to set up delay as MII monitoring is disabled [ 63.597599][ T6579] bond1 (unregistering): Released all slaves [ 63.722390][ T6023] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.861517][ T6023] usb 8-1: device descriptor read/64, error -71 [ 64.046608][ T6596] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 64.049068][ T6596] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.173'. [ 64.121410][ T6023] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.216219][ T6614] program syz.1.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.271398][ T6023] usb 8-1: device descriptor read/64, error -71 [ 64.371003][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6621 comm=syz.1.178 [ 64.392374][ T6023] usb usb8-port1: attempt power cycle [ 64.437693][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.701485][ T5942] Bluetooth: hci3: command 0x0419 tx timeout [ 64.740166][ T6023] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.773776][ T6023] usb 8-1: device descriptor read/8, error -71 [ 64.867935][ T6643] ata1.00: invalid multi_count 128 ignored [ 64.990440][ T6646] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 65.021767][ T6023] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.042926][ T6023] usb 8-1: device descriptor read/8, error -71 [ 65.099638][ T6653] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 65.113774][ T6653] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 65.126279][ T6653] /dev/sg0: Can't lookup blockdev [ 65.133865][ T6655] nbd: must specify an index to disconnect [ 65.171436][ T6023] usb usb8-port1: unable to enumerate USB device [ 65.240360][ T6664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6664 comm=syz.2.189 [ 65.344813][ T6669] bond0: (slave bond_slave_1): Releasing backup interface [ 65.397535][ T6675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.726553][ T6678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.730754][ T6678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.217216][ T6703] netlink: 'syz.2.202': attribute type 13 has an invalid length. [ 66.230431][ T6703] gretap0: refused to change device tx_queue_len [ 66.233163][ T6705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.237400][ T6703] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.243395][ T6706] netlink: 'syz.2.202': attribute type 13 has an invalid length. [ 66.246960][ T6706] gretap0: refused to change device tx_queue_len [ 66.249124][ T6706] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.383675][ T6709] netlink: 'syz.2.204': attribute type 4 has an invalid length. [ 66.464923][ T6716] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.527097][ T6718] batman_adv: batadv0: Adding interface: gretap1 [ 66.529690][ T6718] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.539773][ T6718] batman_adv: batadv0: Interface activated: gretap1 [ 66.577903][ T6725] __nla_validate_parse: 5 callbacks suppressed [ 66.577914][ T6725] netlink: 9 bytes leftover after parsing attributes in process `syz.3.208'. [ 66.588093][ T6725] gretap0: entered promiscuous mode [ 66.593591][ T6725] netlink: 5 bytes leftover after parsing attributes in process `syz.3.208'. [ 66.596795][ T6725] 0ªî{X¹¦: renamed from gretap0 [ 66.599874][ T6725] 0ªî{X¹¦: left promiscuous mode [ 66.601788][ T6725] 0ªî{X¹¦: entered allmulticast mode [ 66.605850][ T6725] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 67.011453][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 67.149006][ T6742] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.171463][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 67.175351][ T34] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 67.178066][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 67.178075][ T40] audit: type=1400 audit(1760816152.140:390): avc: denied { watch } for pid=6739 comm="syz.1.215" path="/62/file0" dev="overlay" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.178497][ T34] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 67.195033][ T34] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 67.199561][ T34] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 67.203939][ T34] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 67.209336][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.214356][ T34] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 67.218211][ T34] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 67.221751][ T34] usb 5-1: Product: syz [ 67.223531][ T34] usb 5-1: Manufacturer: syz [ 67.225462][ T34] usb 5-1: SerialNumber: syz [ 67.229659][ T34] usb 5-1: config 0 descriptor?? [ 67.235155][ T34] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 67.273717][ T34] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 67.439983][ T6743] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 67.457598][ T40] audit: type=1400 audit(1760816152.420:391): avc: denied { read } for pid=6728 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.459208][ T61] usb 5-1: USB disconnect, device number 7 [ 67.474935][ T61] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 67.834799][ T6735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.837609][ T6735] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 67.852527][ T6735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.855110][ T6735] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 67.863431][ T6735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.865765][ T6735] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 67.896370][ T6735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.898311][ T6735] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 67.910071][ T40] audit: type=1400 audit(1760816152.870:392): avc: denied { setopt } for pid=6748 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.926555][ T40] audit: type=1400 audit(1760816152.880:393): avc: denied { remount } for pid=6748 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.077901][ T6769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.103843][ T40] audit: type=1400 audit(1760816153.070:394): avc: denied { remount } for pid=6765 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.140198][ T6774] tmpfs: Group quota inode hardlimit too large. [ 68.196820][ T40] audit: type=1400 audit(1760816153.160:395): avc: denied { setopt } for pid=6777 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.213735][ T6780] netlink: 112 bytes leftover after parsing attributes in process `syz.1.224'. [ 68.304193][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.308708][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 68.322691][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.325629][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.328372][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.332512][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.335450][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.351519][ T40] audit: type=1400 audit(1760816153.310:396): avc: denied { block_suspend } for pid=6801 comm="syz.0.228" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.466938][ T40] audit: type=1400 audit(1760816153.430:397): avc: denied { ioctl } for pid=6813 comm="syz.0.231" path="socket:[14143]" dev="sockfs" ino=14143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.492902][ T40] audit: type=1400 audit(1760816153.460:398): avc: denied { listen } for pid=6815 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.525191][ T40] audit: type=1400 audit(1760816153.490:399): avc: denied { mount } for pid=6824 comm="syz.1.234" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.641421][ T5968] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.761469][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.801581][ T5968] usb 7-1: Using ep0 maxpacket: 16 [ 68.805845][ T5968] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 68.810063][ T5968] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.815241][ T5968] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 127, changing to 10 [ 68.819825][ T5968] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 40960, setting to 1024 [ 68.824896][ T5968] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.830151][ T5968] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 68.834292][ T5968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.837602][ T5968] usb 7-1: Product: syz [ 68.839453][ T5968] usb 7-1: Manufacturer: syz [ 68.841957][ T5968] usb 7-1: SerialNumber: syz [ 68.846226][ T5968] usb 7-1: config 0 descriptor?? [ 68.931541][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 68.935168][ T34] usb 6-1: config 0 has no interfaces? [ 68.937477][ T34] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 68.941053][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.945954][ T34] usb 6-1: config 0 descriptor?? [ 69.060363][ T5968] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 69.153117][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.158701][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.165163][ T10] usb 6-1: USB disconnect, device number 3 [ 69.319864][ T34] usb 7-1: USB disconnect, device number 4 [ 69.792015][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.911702][ T5968] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 69.936897][ T6880] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 69.939348][ T6880] netlink: 'syz.2.248': attribute type 2 has an invalid length. [ 70.051797][ T5968] usb 5-1: device descriptor read/64, error -71 [ 70.054629][ T6882] Failed to get privilege flags for destination (handle=0x2:0x10) [ 70.116533][ T6090] Process accounting resumed [ 70.127700][ T10] Process accounting resumed [ 70.142301][ T6895] Process accounting resumed [ 70.291623][ T5968] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 70.413370][ T1230] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.417483][ T1230] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.420228][ T1230] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.426137][ T1230] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.441715][ T5968] usb 5-1: device descriptor read/64, error -71 [ 70.452702][ T6931] delete_channel: no stack [ 70.480701][ T6926] Cannot find add_set index 0 as target [ 70.480904][ T6927] Cannot find add_set index 0 as target [ 70.507646][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 70.509747][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.512300][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.514715][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.517198][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.519609][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.522174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.524561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.527014][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.529373][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.531862][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.534278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.536763][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.539084][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.541530][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.543875][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.546302][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.548690][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.551120][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.553527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.555971][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.558363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.560833][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.561604][ T5968] usb usb5-port1: attempt power cycle [ 70.563251][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.567408][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.569809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.572264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.574671][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.577085][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.579449][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.581967][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.584334][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.586774][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.589061][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.591494][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.593921][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.596377][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.598937][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.601544][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.603968][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.606408][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.608847][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.611376][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.613790][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.616208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.618574][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.621022][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.623428][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.625904][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.628299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.630717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.633133][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.635541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.637934][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.640408][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.642863][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.645286][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.647642][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.650051][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.652490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.837803][ T6970] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 70.842672][ T6970] bond0: (slave wlan1): Opening slave failed [ 70.846938][ T6968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.912899][ T6973] Bluetooth: MGMT ver 1.23 [ 70.921508][ T5968] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 70.952063][ T5968] usb 5-1: device descriptor read/8, error -71 [ 70.967340][ T6975] binfmt_misc: register: failed to install interpreter file ./file0 [ 71.201483][ T5968] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 71.232250][ T5968] usb 5-1: device descriptor read/8, error -71 [ 71.351522][ T5968] usb usb5-port1: unable to enumerate USB device [ 71.394986][ T6991] XFS (nbd3): SB validate failed with error -5. [ 71.459818][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.464254][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.555331][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.558492][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.611022][ T6999] netlink: 'syz.3.286': attribute type 32 has an invalid length. [ 71.613917][ T6999] __nla_validate_parse: 74 callbacks suppressed [ 71.613929][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 71.627359][ T6999] bond1: Setting coupled_control to off (0) [ 71.637192][ T7002] netlink: 'syz.3.286': attribute type 32 has an invalid length. [ 71.640514][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 71.648023][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.651930][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.669424][ T7002] bond2: Setting coupled_control to off (0) [ 71.683398][ T5292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.687978][ T5292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.692169][ T5292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.695192][ T5292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.697964][ T5292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.708064][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.712425][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.713308][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.720148][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.724435][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.728115][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.730837][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.015718][ T7016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.105602][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.110487][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.115334][ T1148] bond0 (unregistering): Released all slaves [ 72.127962][ T7004] chnl_net:caif_netlink_parms(): no params data found [ 72.229384][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.231849][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.234603][ T7004] bridge_slave_0: entered allmulticast mode [ 72.237608][ T7004] bridge_slave_0: entered promiscuous mode [ 72.243866][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.246207][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.248537][ T7004] bridge_slave_1: entered allmulticast mode [ 72.251007][ T7004] bridge_slave_1: entered promiscuous mode [ 72.300523][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.305733][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.347615][ T7004] team0: Port device team_slave_0 added [ 72.362987][ T7004] team0: Port device team_slave_1 added [ 72.395468][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.397671][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.405644][ T7004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.409921][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.412183][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.420133][ T7004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.486098][ T1148] hsr_slave_0: left promiscuous mode [ 72.488892][ T1148] hsr_slave_1: left promiscuous mode [ 72.491659][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.494662][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.499574][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.502667][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.533174][ T1148] veth1_macvtap: left promiscuous mode [ 72.535664][ T1148] veth0_macvtap: left promiscuous mode [ 72.537942][ T1148] veth1_vlan: left promiscuous mode [ 72.540089][ T1148] veth0_vlan: left promiscuous mode [ 72.614837][ T1148] pimreg (unregistering): left allmulticast mode [ 72.623877][ T1148] pim6reg (unregistering): left allmulticast mode [ 73.130691][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 73.189297][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 73.621802][ T7004] hsr_slave_0: entered promiscuous mode [ 73.624691][ T7004] hsr_slave_1: entered promiscuous mode [ 73.627212][ T7004] debugfs: 'hsr0' already exists in 'hsr' [ 73.629303][ T7004] Cannot create hsr debugfs directory [ 73.759522][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.811643][ T5292] Bluetooth: hci3: command tx timeout [ 73.830666][ T7004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.842348][ T7004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.848386][ T7004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.854035][ T7004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.906013][ T7072] kernel profiling enabled (shift: 34) [ 73.908512][ T7072] profiling shift: 34 too large [ 73.931794][ T7004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.954509][ T7077] geneve2: entered promiscuous mode [ 73.956688][ T7077] geneve2: entered allmulticast mode [ 73.969559][ T7004] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.975989][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.978157][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.983886][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.986259][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.154186][ T7004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.209008][ T7100] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 74.214470][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.218760][ T7100] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 74.331295][ T7004] veth0_vlan: entered promiscuous mode [ 74.336490][ T7004] veth1_vlan: entered promiscuous mode [ 74.360859][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 74.362726][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 74.362736][ T40] audit: type=1400 audit(1760816159.330:426): avc: denied { read } for pid=7120 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.363866][ T7004] veth0_macvtap: entered promiscuous mode [ 74.377513][ T7004] veth1_macvtap: entered promiscuous mode [ 74.387009][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.390203][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 74.396475][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.399896][ T7121] bridge_slave_1: left allmulticast mode [ 74.402655][ T7121] bridge_slave_1: left promiscuous mode [ 74.404965][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.408700][ T10] IPVS: starting estimator thread 0... [ 74.412435][ T7121] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 74.418033][ T7128] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.308'. [ 74.424289][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.431519][ T1158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.435266][ T1158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.442200][ T1158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.447032][ T1158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.484489][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.486932][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.501421][ T7127] IPVS: using max 44 ests per chain, 105600 per kthread [ 74.505327][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.507858][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.515545][ T40] audit: type=1400 audit(74.456:427): avc: denied { mounton } for pid=7004 comm="syz-executor" path="/syzkaller.vv301h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.525220][ T40] audit: type=1400 audit(74.456:428): avc: denied { shutdown } for pid=7129 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.561662][ T7139] netlink: 52 bytes leftover after parsing attributes in process `syz.4.285'. [ 74.592234][ T7144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.681789][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.317'. [ 74.687011][ T7151] unsupported nlmsg_type 40 [ 74.755836][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 74.759613][ T7153] bridge_slave_0: left allmulticast mode [ 74.762345][ T7153] bridge_slave_0: left promiscuous mode [ 74.764890][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.881452][ T7156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.883951][ T7156] IPv6: NLM_F_CREATE should be set when creating new route [ 74.886354][ T7156] IPv6: NLM_F_CREATE should be set when creating new route [ 74.888666][ T7156] IPv6: NLM_F_CREATE should be set when creating new route [ 74.892713][ T7156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.927592][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.930688][ T7160] batadv_slave_0: entered promiscuous mode [ 74.933482][ T6000] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 75.083056][ T6000] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.087313][ T6000] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.090997][ T6000] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 75.095880][ T6000] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 75.099662][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.107178][ T7151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.111979][ T6000] hub 8-1:1.0: bad descriptor, ignoring hub [ 75.114869][ T6000] hub 8-1:1.0: probe with driver hub failed with error -5 [ 75.119725][ T6000] cdc_wdm 8-1:1.0: skipping garbage [ 75.122835][ T6000] cdc_wdm 8-1:1.0: skipping garbage [ 75.123888][ T40] audit: type=1400 audit(75.066:429): avc: denied { ioctl } for pid=7167 comm="syz.0.322" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.130631][ T6000] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 75.136848][ T6000] cdc_wdm 8-1:1.0: Unknown control protocol [ 75.137077][ T40] audit: type=1400 audit(75.066:430): avc: denied { bind } for pid=7167 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.146607][ T40] audit: type=1400 audit(75.066:431): avc: denied { name_bind } for pid=7167 comm="syz.0.322" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.154586][ T40] audit: type=1400 audit(75.066:432): avc: denied { node_bind } for pid=7167 comm="syz.0.322" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 75.160952][ T40] audit: type=1400 audit(75.086:433): avc: denied { setopt } for pid=7169 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.185030][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 75.229766][ T7177] tipc: Started in network mode [ 75.232096][ T7177] tipc: Node identity 72e5c6f0a112, cluster identity 4711 [ 75.235341][ T7177] tipc: Enabled bearer , priority 0 [ 75.240741][ T7177] tipc: Disabling bearer [ 75.291483][ T40] audit: type=1400 audit(331.227:434): avc: denied { connect } for pid=7176 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.320771][ T40] audit: type=1400 audit(331.257:435): avc: denied { read write } for pid=7150 comm="syz.3.317" name="cdc-wdm0" dev="devtmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 75.377539][ T7187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.391491][ T53] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.447482][ T7191] netlink: 'syz.2.329': attribute type 9 has an invalid length. [ 75.553152][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 75.556824][ T53] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.560514][ T53] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.563945][ T53] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.566377][ T53] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 75.569334][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.578165][ T53] usb 9-1: config 0 descriptor?? [ 75.671825][ T7200] uprobe: syz.2.332:7200 failed to unregister, leaking uprobe [ 75.901512][ T5292] Bluetooth: hci3: command tx timeout [ 76.111564][ T6000] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.185744][ T7151] cdc_wdm 8-1:1.0: Error autopm - -16 [ 76.186046][ T842] usb 8-1: USB disconnect, device number 6 [ 76.224076][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.226519][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.271519][ T6000] usb 7-1: Using ep0 maxpacket: 16 [ 76.275381][ T6000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.279832][ T6000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.285157][ T6000] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 76.290619][ T6000] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 76.294680][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.300082][ T6000] usb 7-1: config 0 descriptor?? [ 76.559855][ T7218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.337'. [ 76.706063][ T7206] random: crng reseeded on system resumption [ 76.727818][ T6000] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 76.772851][ T7227] netlink: 'syz.4.341': attribute type 21 has an invalid length. [ 76.776176][ T7227] netlink: 128 bytes leftover after parsing attributes in process `syz.4.341'. [ 76.776821][ T6000] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 76.783071][ T7227] netlink: 'syz.4.341': attribute type 6 has an invalid length. [ 76.786422][ T7227] netlink: 3 bytes leftover after parsing attributes in process `syz.4.341'. [ 76.791928][ T6000] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 76.843868][ T7231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7231 comm=syz.4.343 [ 76.859803][ T7233] nbd: socks must be embedded in a SOCK_ITEM attr [ 76.880258][ T7233] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 76.885321][ T7233] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 76.890081][ T7233] overlayfs: failed to get uuid (81/file0, err=-13); falling back to uuid=null. [ 76.902449][ T34] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 76.925945][ T841] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 76.927327][ T5995] usb 7-1: USB disconnect, device number 5 [ 76.932619][ T841] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.936779][ T841] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.940969][ T841] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.958675][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 76.986391][ T7236] binder: 7235:7236 ioctl c0306201 200000000640 returned -22 [ 76.989968][ T7236] binder: 7235:7236 ioctl 81a0ae8c 2000000005c0 returned -22 [ 77.066292][ T34] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.070013][ T34] usb 5-1: config 0 has no interface number 0 [ 77.073222][ T34] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 77.078795][ T34] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 77.085555][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.089683][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.101942][ T34] usb 5-1: config 0 descriptor?? [ 77.107016][ T7223] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 77.120469][ T34] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 77.306018][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 77.315764][ T34] usb 5-1: USB disconnect, device number 12 [ 77.315853][ C2] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 77.529637][ T7279] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 77.545776][ T7284] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 77.715740][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 77.723547][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.363'. [ 77.726388][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 77.904416][ T7298] fuse: Bad value for 'group_id' [ 77.906712][ T7298] fuse: Bad value for 'group_id' [ 77.945726][ T7304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.972993][ T5292] Bluetooth: hci3: command tx timeout [ 78.408234][ T7338] 9pnet_virtio: no channels available for device syz [ 78.414835][ T7339] netlink: 184 bytes leftover after parsing attributes in process `syz.2.377'. [ 78.418910][ T7339] xt_socket: unknown flags 0xd0 [ 78.561763][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'. [ 78.613927][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'. [ 78.774594][ T7365] netlink: zone id is out of range [ 78.777142][ T7365] netlink: zone id is out of range [ 78.779502][ T7365] netlink: zone id is out of range [ 78.783165][ T7365] netlink: zone id is out of range [ 78.785472][ T7365] netlink: zone id is out of range [ 78.787742][ T7365] netlink: zone id is out of range [ 78.789976][ T7365] netlink: zone id is out of range [ 78.929126][ T7376] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.371864][ T7399] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.376364][ T7399] block device autoloading is deprecated and will be removed. [ 79.441455][ T155] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 79.602838][ T155] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 79.606343][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.609303][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.613058][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.617499][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.620492][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.624560][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.627832][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.631072][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.634699][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.637746][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.640475][ T7407] MINIX-fs: unable to read superblock [ 79.642394][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.645928][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.648883][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.652028][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.656079][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.659834][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.662894][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.666456][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.671755][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.674628][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.678115][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.681048][ T155] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.684917][ T155] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.688780][ T155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.693554][ T155] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.696513][ T155] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.699165][ T155] usb 5-1: Product: syz [ 79.700554][ T155] usb 5-1: Manufacturer: syz [ 79.703084][ T155] usb 5-1: SerialNumber: syz [ 79.706638][ T155] usb 5-1: config 0 descriptor?? [ 79.719089][ T155] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.743594][ T7416] batman_adv: batadv0: Adding interface: gretap1 [ 79.745741][ T7416] batman_adv: batadv0: Interface activated: gretap1 [ 79.750427][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 79.750437][ T40] audit: type=1400 audit(335.687:460): avc: denied { listen } for pid=7415 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.761692][ T40] audit: type=1400 audit(335.697:461): avc: denied { watch watch_with_perm watch_reads } for pid=7415 comm="syz.4.402" path="/25/bus" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.868093][ T7426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.926234][ T40] audit: type=1400 audit(335.867:462): avc: denied { read write } for pid=7430 comm="syz.4.406" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.933677][ T40] audit: type=1400 audit(335.867:463): avc: denied { open } for pid=7430 comm="syz.4.406" path="/27/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.940395][ T40] audit: type=1400 audit(335.877:464): avc: denied { ioctl } for pid=7430 comm="syz.4.406" path="/27/file0" dev="tmpfs" ino=164 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.962285][ T7426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.022667][ T7439] overlayfs: conflicting options: nfs_export=on,index=off [ 80.037545][ T7426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.040750][ T7433] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 80.052125][ T5292] Bluetooth: hci3: command tx timeout [ 80.138086][ T7426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.223064][ T7447] fuse: blksize only supported for fuseblk [ 80.275176][ T7449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.288806][ T1150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.304462][ T1150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.314676][ T1150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.327946][ T1150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.563562][ T842] usb 5-1: USB disconnect, device number 13 [ 80.569575][ T842] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 80.839292][ T40] audit: type=1400 audit(336.777:465): avc: denied { ioctl } for pid=7462 comm="syz.4.415" path="socket:[21553]" dev="sockfs" ino=21553 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.015947][ T7468] ata1.00: invalid multi_count 128 ignored [ 81.092213][ T53] usbhid 9-1:0.0: can't add hid device: -32 [ 81.094359][ T53] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 81.335474][ T24] cfg80211: failed to load regulatory.db [ 81.947393][ T40] audit: type=1400 audit(337.887:466): avc: denied { create } for pid=7507 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.961868][ T6023] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.053165][ T40] audit: type=1400 audit(337.997:467): avc: denied { execstack } for pid=7515 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.092458][ T7519] __nla_validate_parse: 5 callbacks suppressed [ 82.092468][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.431'. [ 82.131588][ T6023] usb 7-1: Using ep0 maxpacket: 16 [ 82.134526][ T6023] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 82.138850][ T6023] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.144045][ T6023] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.149588][ T6023] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.154348][ T6023] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.159385][ T6023] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 82.163165][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.166240][ T6023] usb 7-1: Product: syz [ 82.167912][ T6023] usb 7-1: Manufacturer: syz [ 82.169784][ T6023] usb 7-1: SerialNumber: syz [ 82.173183][ T6023] usb 7-1: config 0 descriptor?? [ 82.380949][ T6023] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 82.384997][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.391001][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.397257][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.401603][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.415982][ T5930] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.420019][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.424881][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.429567][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.434962][ T5326] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 82.628780][ T40] audit: type=1400 audit(338.567:468): avc: denied { create } for pid=7530 comm="syz.0.434" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 82.630414][ T40] audit: type=1400 audit(338.567:469): avc: denied { associate } for pid=7530 comm="syz.0.434" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 82.633412][ T7531] overlay: ./file0 is not a directory [ 82.665389][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.697368][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.893187][ T7543] overlay: ./file0 is not a directory [ 83.239698][ T7555] 9pnet_fd: Insufficient options for proto=fd [ 83.246694][ T7555] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.252443][ T7555] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.297978][ T7453] usb 7-1: USB disconnect, device number 6 [ 83.517744][ T7588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=7588 comm=syz.4.447 [ 84.703439][ T7623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.782598][ T7621] bridge1: entered promiscuous mode [ 84.957440][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 84.957451][ T40] audit: type=1400 audit(340.897:478): avc: denied { map } for pid=7626 comm="syz.3.462" path="socket:[22899]" dev="sockfs" ino=22899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.967227][ T40] audit: type=1400 audit(340.897:479): avc: denied { read accept } for pid=7626 comm="syz.3.462" path="socket:[22899]" dev="sockfs" ino=22899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.313735][ T40] audit: type=1400 audit(341.257:480): avc: denied { mounton } for pid=7643 comm="syz.2.465" path="mnt:[4026532885]" dev="nsfs" ino=4026532885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.393834][ T40] audit: type=1400 audit(341.337:481): avc: denied { read } for pid=7646 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.692629][ T7659] tmpfs: Unknown parameter 'usrquotaì(7ýw>;uä1ó@ÑÈh’ƒPx„Œ¥J0êCãàŒî{"¿6q' [ 85.928909][ T7668] PM: Enabling pm_trace changes system date and time during resume. [ 85.928909][ T7668] PM: Correct system time has to be restored manually after resume. [ 86.181576][ T7680] netlink: 'syz.2.473': attribute type 21 has an invalid length. [ 86.192700][ T7680] netlink: 128 bytes leftover after parsing attributes in process `syz.2.473'. [ 86.195562][ T7680] netlink: 'syz.2.473': attribute type 6 has an invalid length. [ 86.197991][ T7680] netlink: 3 bytes leftover after parsing attributes in process `syz.2.473'. [ 86.259340][ T7685] netlink: 104 bytes leftover after parsing attributes in process `syz.2.474'. [ 86.307401][ T7689] sp0: Synchronizing with TNC [ 87.201392][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 87.354745][ T34] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.358562][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.362378][ T34] usb 7-1: Product: syz [ 87.364075][ T34] usb 7-1: Manufacturer: syz [ 87.366062][ T34] usb 7-1: SerialNumber: syz [ 87.377629][ T34] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.397606][ T40] audit: type=1400 audit(343.337:482): avc: denied { firmware_load } for pid=155 comm="kworker/3:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 87.413185][ T155] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.617050][ T24] usb 7-1: USB disconnect, device number 7 [ 88.202997][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 88.333028][ T7731] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 88.396613][ T40] audit: type=1400 audit(344.337:483): avc: denied { load_policy } for pid=7732 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.461525][ T155] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 88.466550][ T155] ath9k_htc: Failed to initialize the device [ 88.470108][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 88.474028][ T7733] SELinux: failed to load policy [ 88.516385][ T7736] ipvlan1: default FDB implementation only supports local addresses [ 88.617158][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.243561][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 89.246520][ T7745] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 89.338344][ T40] audit: type=1400 audit(345.277:484): avc: denied { create } for pid=7746 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.339771][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 89.354137][ T40] audit: type=1400 audit(345.277:485): avc: denied { write } for pid=7746 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.360269][ T40] audit: type=1400 audit(345.277:486): avc: denied { nlmsg_write } for pid=7746 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.589488][ T40] audit: type=1400 audit(354.527:487): avc: denied { execmem } for pid=7760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 98.752462][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.804919][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.960036][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.035634][ T60] bond0: (slave netdevsim0): Releasing backup interface [ 99.041986][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.743615][ T9] usb 9-1: USB disconnect, device number 2 [ 99.880699][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.884642][ T60] bond0 (unregistering): Released all slaves [ 100.266719][ T60] hsr_slave_0: left promiscuous mode [ 100.269010][ T60] hsr_slave_1: left promiscuous mode [ 100.271055][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.275154][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.277525][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.300861][ T60] veth1_macvtap: left promiscuous mode [ 100.302772][ T60] veth0_macvtap: left promiscuous mode [ 100.304812][ T60] veth1_vlan: left promiscuous mode [ 100.306664][ T60] veth0_vlan: left promiscuous mode [ 100.856334][ T60] team0 (unregistering): Port device team_slave_1 removed [ 100.913985][ T60] team0 (unregistering): Port device team_slave_0 removed [ 101.770011][ T60] IPVS: stop unused estimator thread 0... [ 101.848206][ T60] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.912655][ T60] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.987211][ T60] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.055880][ T60] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.197947][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.276898][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.336396][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.428620][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.548350][ T60] bridge_slave_1: left allmulticast mode [ 102.550379][ T60] bridge_slave_1: left promiscuous mode [ 102.555135][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.559914][ T60] bridge_slave_0: left allmulticast mode [ 102.563653][ T60] bridge_slave_0: left promiscuous mode [ 102.566042][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.572683][ T60] bridge_slave_1: left allmulticast mode [ 102.574602][ T60] bridge_slave_1: left promiscuous mode [ 102.576712][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.583895][ T60] bridge_slave_0: left allmulticast mode [ 102.585853][ T60] bridge_slave_0: left promiscuous mode [ 102.587872][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.594215][ T60] batman_adv: batadv0: Interface deactivated: gretap1 [ 102.596793][ T60] batman_adv: batadv0: Interface deactivated: gretap1 [ 102.725195][ T60] batman_adv: batadv0: Removing interface: gretap1 [ 102.915509][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.919296][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.919497][ T40] audit: type=1400 audit(358.857:488): avc: denied { connect } for pid=7815 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.922439][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.931377][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.933851][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.941249][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.947004][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.950732][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.956537][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.961587][ T5292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.962583][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.972401][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.975336][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.979812][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.984017][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.056256][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.060740][ T60] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 103.065029][ T60] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 103.071134][ T60] bond0 (unregistering): Released all slaves [ 103.080677][ T60] bond1 (unregistering): Released all slaves [ 103.087105][ T60] bond2 (unregistering): Released all slaves [ 103.155686][ T60] batman_adv: batadv0: Removing interface: gretap1 [ 103.374161][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.378787][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.382914][ T60] bond0 (unregistering): Released all slaves [ 103.389748][ T60] bond1 (unregistering): Released all slaves [ 103.396832][ T60] bond2 (unregistering): Released all slaves [ 103.459206][ T7836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.546697][ T60] tipc: Disabling bearer [ 103.549707][ T60] tipc: Left network mode [ 103.674392][ T7813] chnl_net:caif_netlink_parms(): no params data found [ 103.750534][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 103.857025][ T7823] chnl_net:caif_netlink_parms(): no params data found [ 103.948014][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.950364][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.953726][ T7820] bridge_slave_0: entered allmulticast mode [ 103.956543][ T7820] bridge_slave_0: entered promiscuous mode [ 103.959597][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.962082][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.964373][ T7813] bridge_slave_0: entered allmulticast mode [ 103.967383][ T7813] bridge_slave_0: entered promiscuous mode [ 104.010258][ T7865] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 104.015301][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.018236][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.021186][ T7820] bridge_slave_1: entered allmulticast mode [ 104.026646][ T7820] bridge_slave_1: entered promiscuous mode [ 104.051583][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.054612][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.057593][ T7813] bridge_slave_1: entered allmulticast mode [ 104.059663][ T7813] bridge_slave_1: entered promiscuous mode [ 104.104983][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.501'. [ 104.145113][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.172280][ T60] hsr_slave_0: left promiscuous mode [ 104.174476][ T60] hsr_slave_1: left promiscuous mode [ 104.176522][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.179053][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.185643][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.187902][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.194409][ T60] hsr_slave_0: left promiscuous mode [ 104.197424][ T60] hsr_slave_1: left promiscuous mode [ 104.200215][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.203080][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.206295][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.209020][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.241292][ T60] veth1_macvtap: left promiscuous mode [ 104.243181][ T60] veth0_macvtap: left promiscuous mode [ 104.245000][ T60] veth1_vlan: left promiscuous mode [ 104.246712][ T60] veth0_vlan: left promiscuous mode [ 104.249126][ T60] veth1_macvtap: left promiscuous mode [ 104.250869][ T60] veth0_macvtap: left promiscuous mode [ 104.252973][ T60] veth1_vlan: left promiscuous mode [ 104.254639][ T60] veth0_vlan: left promiscuous mode [ 104.836018][ T60] team0 (unregistering): Port device team_slave_1 removed [ 104.898855][ T60] team0 (unregistering): Port device team_slave_0 removed [ 105.011733][ T5934] Bluetooth: hci1: command tx timeout [ 105.011773][ T5942] Bluetooth: hci0: command tx timeout [ 105.093188][ T5942] Bluetooth: hci3: command tx timeout [ 105.775293][ T60] team0 (unregistering): Port device team_slave_1 removed [ 105.851408][ T60] team0 (unregistering): Port device team_slave_0 removed [ 106.279368][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.294679][ T40] audit: type=1400 audit(362.237:489): avc: denied { kexec_image_load } for pid=7883 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 106.311998][ T7823] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.314792][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.317137][ T7823] bridge_slave_0: entered allmulticast mode [ 106.320064][ T7823] bridge_slave_0: entered promiscuous mode [ 106.342178][ T7813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.373929][ T7823] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.376273][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.378641][ T7823] bridge_slave_1: entered allmulticast mode [ 106.381216][ T7823] bridge_slave_1: entered promiscuous mode [ 106.397205][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 106.418334][ T7813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.423903][ T7820] team0: Port device team_slave_0 added [ 106.441600][ T7889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.447616][ T7889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7889 comm=syz.2.504 [ 106.454610][ T40] audit: type=1400 audit(362.397:490): avc: denied { read write } for pid=7888 comm="syz.2.504" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.464422][ T40] audit: type=1400 audit(362.397:491): avc: denied { open } for pid=7888 comm="syz.2.504" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.498712][ T7820] team0: Port device team_slave_1 added [ 106.508132][ T7823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.539436][ T7813] team0: Port device team_slave_0 added [ 106.576708][ T7893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.587188][ T7823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.606420][ T7813] team0: Port device team_slave_1 added [ 106.632706][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.635452][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.643993][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.667319][ T7823] team0: Port device team_slave_0 added [ 106.689386][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.691668][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.699535][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.730798][ T7823] team0: Port device team_slave_1 added [ 106.734313][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.736550][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.745070][ T7813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.816688][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.819453][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.828370][ T7813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.835997][ T7820] hsr_slave_0: entered promiscuous mode [ 106.839086][ T7820] hsr_slave_1: entered promiscuous mode [ 106.868012][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.870916][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.881583][ T7823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.940120][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.943183][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.953813][ T7823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.993831][ T7813] hsr_slave_0: entered promiscuous mode [ 106.997033][ T7813] hsr_slave_1: entered promiscuous mode [ 106.999305][ T7813] debugfs: 'hsr0' already exists in 'hsr' [ 107.001077][ T7813] Cannot create hsr debugfs directory [ 107.078960][ T7823] hsr_slave_0: entered promiscuous mode [ 107.082146][ T7823] hsr_slave_1: entered promiscuous mode [ 107.085310][ T7823] debugfs: 'hsr0' already exists in 'hsr' [ 107.087754][ T7823] Cannot create hsr debugfs directory [ 107.091439][ T5942] Bluetooth: hci1: command tx timeout [ 107.091760][ T5934] Bluetooth: hci0: command tx timeout [ 107.171961][ T5934] Bluetooth: hci3: command tx timeout [ 107.238981][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.287919][ T7905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=7905 comm=syz.2.507 [ 107.336144][ T60] IPVS: stop unused estimator thread 0... [ 107.477291][ T7820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.484992][ T7820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.491198][ T7820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.512063][ T7820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.558598][ T7813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.589126][ T7813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.605779][ T7813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.610029][ T7813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.641858][ T7823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.651488][ T7823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 107.660292][ T7823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 107.675953][ T7823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 107.676406][ T40] audit: type=1400 audit(363.617:492): avc: denied { write } for pid=7929 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 107.730113][ T40] audit: type=1400 audit(363.667:493): avc: denied { connect } for pid=7939 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.740539][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.803306][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.818092][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.821162][ T7835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.830490][ T7813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.837281][ T40] audit: type=1400 audit(363.777:494): avc: denied { mount } for pid=7949 comm="syz.2.511" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.839443][ T7950] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.844111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.844233][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.858968][ T7813] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.875322][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.878711][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.884886][ T40] audit: type=1400 audit(363.827:495): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.898014][ T7820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.904112][ T7820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.918481][ T40] audit: type=1400 audit(363.857:496): avc: denied { ioctl } for pid=7953 comm="syz.2.512" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 107.919435][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.931145][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.943175][ T7823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.952667][ T7823] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.956887][ T40] audit: type=1400 audit(363.897:497): avc: denied { write } for pid=7957 comm="syz.2.513" name="cgroup.subtree_control" dev="cgroup2" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.969275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.971491][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.978681][ T40] audit: type=1400 audit(363.897:498): avc: denied { open } for pid=7957 comm="syz.2.513" path="" dev="cgroup2" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.991191][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.993549][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.004228][ T7813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.122987][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.149553][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.168586][ T7813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.213857][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.314871][ T7823] veth0_vlan: entered promiscuous mode [ 108.336450][ T7823] veth1_vlan: entered promiscuous mode [ 108.362675][ T7813] veth0_vlan: entered promiscuous mode [ 108.367460][ T7820] veth0_vlan: entered promiscuous mode [ 108.373945][ T7813] veth1_vlan: entered promiscuous mode [ 108.379565][ T7820] veth1_vlan: entered promiscuous mode [ 108.396508][ T7823] veth0_macvtap: entered promiscuous mode [ 108.403844][ T7823] veth1_macvtap: entered promiscuous mode [ 108.426259][ T7820] veth0_macvtap: entered promiscuous mode [ 108.429033][ T7813] veth0_macvtap: entered promiscuous mode [ 108.436008][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.441839][ T7813] veth1_macvtap: entered promiscuous mode [ 108.445570][ T7820] veth1_macvtap: entered promiscuous mode [ 108.449693][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.461487][ T7828] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.464962][ T7828] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.475448][ T7828] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.478873][ T7828] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.487571][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.491444][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.503362][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.507615][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.528037][ T7837] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.537805][ T7837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.540675][ T7837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.551667][ T7837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.554433][ T7837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.563814][ T7837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.571580][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.572943][ T7837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.574307][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.576974][ T7837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.614434][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.617018][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.651125][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.651274][ T7835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.655914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.656785][ T7835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.671834][ T7828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.675900][ T7828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.686881][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.689724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.709662][ T8010] net_ratelimit: 13 callbacks suppressed [ 108.709678][ T8010] openvswitch: netlink: Key type 78 is out of range max 32 [ 108.728464][ T8012] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 108.735355][ T8012] netlink: 'syz.6.495': attribute type 10 has an invalid length. [ 108.737927][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.6.495'. [ 108.742928][ T8012] dummy0: entered promiscuous mode [ 108.746069][ T8012] bridge0: port 3(dummy0) entered blocking state [ 108.748216][ T8012] bridge0: port 3(dummy0) entered disabled state [ 108.752827][ T8012] dummy0: entered allmulticast mode [ 108.760654][ T8012] bridge0: port 3(dummy0) entered blocking state [ 108.763438][ T8012] bridge0: port 3(dummy0) entered forwarding state [ 109.049301][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ebd800: rx timeout, send abort [ 109.051752][ T6000] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 109.131490][ T7932] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 109.171663][ T5934] Bluetooth: hci1: command tx timeout [ 109.181602][ T5934] Bluetooth: hci0: command tx timeout [ 109.202984][ T6000] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.209327][ T6000] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.213031][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.216163][ T6000] usb 7-1: SerialNumber: syz [ 109.251577][ T5934] Bluetooth: hci3: command tx timeout [ 109.261552][ T7932] usb 11-1: device descriptor read/64, error -71 [ 109.511702][ T7932] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 109.549348][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ebc400: rx timeout, send abort [ 109.552303][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ebd800: abort rx timeout. Force session deactivation [ 109.641383][ T7932] usb 11-1: device descriptor read/64, error -71 [ 109.762673][ T7932] usb usb11-port1: attempt power cycle [ 109.842064][ T6000] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 109.846415][ T6000] usb 7-1: USB disconnect, device number 8 [ 109.956934][ T8072] IPv6: Can't replace route, no match found [ 109.959716][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.531'. [ 110.042565][ T8072] hsr_slave_1 (unregistering): left promiscuous mode [ 110.052221][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ebc400: abort rx timeout. Force session deactivation [ 110.111537][ T7932] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 110.132185][ T7932] usb 11-1: device descriptor read/8, error -71 [ 110.381467][ T7932] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 110.402245][ T7932] usb 11-1: device descriptor read/8, error -71 [ 110.521572][ T7932] usb usb11-port1: unable to enumerate USB device [ 110.609270][ T8084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8084 comm=syz.2.535 [ 110.687655][ T8086] tmpfs: Bad value for 'huge' [ 110.955019][ T8104] overlay: ./bus is not a directory [ 111.075888][ T8112] cgroup: Unknown subsys name 'cpuset' [ 111.112523][ T8112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8112 comm=syz.5.543 [ 111.173083][ T8118] 9pnet_virtio: no channels available for device syz [ 111.224258][ T8122] fuse: Bad value for 'user_id' [ 111.226333][ T8122] fuse: Bad value for 'user_id' [ 111.251451][ T5934] Bluetooth: hci0: command tx timeout [ 111.251565][ T5942] Bluetooth: hci1: command tx timeout [ 111.268024][ T8125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.294531][ T8128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59436 sclass=netlink_route_socket pid=8128 comm=syz.7.548 [ 111.341710][ T5942] Bluetooth: hci3: command tx timeout [ 111.345659][ T8125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8125 comm=syz.5.547 [ 111.390220][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 111.390231][ T40] audit: type=1400 audit(367.327:511): avc: denied { getopt } for pid=8132 comm="syz.7.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.392520][ T8134] overlay: Unknown parameter 'fsmagic' [ 111.398553][ T8137] overlay: Unknown parameter 'fsmagic' [ 111.431669][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.552'. [ 111.438751][ T40] audit: type=1400 audit(367.377:512): avc: denied { bind } for pid=8139 comm="syz.7.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.450536][ T8141] macvtap1: entered allmulticast mode [ 111.452552][ T8141] veth0_macvtap: entered allmulticast mode [ 111.643567][ T8150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.646586][ T8150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.655104][ T8150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.674355][ T8150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.676373][ T8150] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.680769][ T8150] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.685629][ T8150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.687601][ T8150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.692048][ T8150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.793807][ T8173] veth1_to_batadv: entered promiscuous mode [ 111.805567][ T8175] tipc: Started in network mode [ 111.807429][ T8175] tipc: Node identity fa24c0367137, cluster identity 4711 [ 111.815094][ T8175] tipc: Enabled bearer , priority 0 [ 111.818736][ T8175] veth0_to_bond: entered promiscuous mode [ 111.820915][ T8175] veth0_to_bond: entered allmulticast mode [ 111.822936][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 111.832381][ T8174] tipc: Disabling bearer [ 111.865868][ T8184] netlink: 64 bytes leftover after parsing attributes in process `syz.2.565'. [ 111.933163][ T8192] netlink: 32 bytes leftover after parsing attributes in process `syz.5.568'. [ 111.981474][ T8198] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20001 [ 111.986414][ T8198] IPVS: set_ctl: invalid protocol: 8 172.30.1.8:20000 [ 112.028479][ T8201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.042263][ T40] audit: type=1400 audit(367.987:513): avc: denied { write } for pid=8202 comm="syz.6.571" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.106205][ T8206] netdevsim netdevsim5: Direct firmware load for . [ 112.106205][ T8206] failed with error -2 [ 112.110645][ T40] audit: type=1400 audit(368.047:514): avc: denied { firmware_load } for pid=8205 comm="syz.5.573" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 112.116934][ T8206] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 112.116934][ T8206] [ 112.197933][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.577'. [ 112.227792][ T8219] bridge0: port 3(dummy0) entered disabled state [ 112.230702][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.234149][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.592210][ T40] audit: type=1400 audit(368.537:515): avc: denied { read } for pid=8233 comm="syz.7.578" name="file1" dev="9p" ino=71827891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.604442][ T40] audit: type=1400 audit(368.547:516): avc: denied { append } for pid=8233 comm="syz.7.578" name="file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.615405][ T40] audit: type=1400 audit(368.557:517): avc: denied { ioctl } for pid=8233 comm="syz.7.578" path="/20/file0/io.stat" dev="9p" ino=71827965 ioctlcmd=0xae7b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.769386][ T8243] Bluetooth: MGMT ver 1.23 [ 112.866891][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 112.870435][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 112.913502][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.585'. [ 112.960627][ T8261] tipc: Enabling of bearer rejected, media not registered [ 112.969625][ T40] audit: type=1400 audit(368.907:518): avc: denied { mount } for pid=8254 comm="syz.7.580" name="/" dev="autofs" ino=27086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 113.017815][ T40] audit: type=1400 audit(368.957:519): avc: denied { unmount } for pid=7823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 113.121275][ T8282] netlink: 44 bytes leftover after parsing attributes in process `syz.7.592'. [ 113.187184][ T40] audit: type=1400 audit(369.127:520): avc: denied { map } for pid=8284 comm="syz.5.593" path="socket:[25182]" dev="sockfs" ino=25182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.279850][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.595'. [ 113.327299][ T8306] openvswitch: netlink: IP tunnel TTL not specified. [ 113.340209][ T8308] program syz.5.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.571706][ T6000] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 113.629031][ T8325] team0: Port device team_slave_0 removed [ 113.652034][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.721510][ T841] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 113.725854][ T6000] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.730636][ T6000] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.733921][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.737757][ T6000] usb 7-1: config 0 descriptor?? [ 113.744677][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.745391][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.757029][ T8341] geneve2: entered promiscuous mode [ 113.759086][ T8341] geneve2: entered allmulticast mode [ 113.818649][ T8340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 113.871455][ T841] usb 10-1: Using ep0 maxpacket: 8 [ 113.875862][ T841] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 113.878638][ T841] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.883735][ T841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.887338][ T841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.890826][ T841] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.895188][ T841] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.898250][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.033255][ T8357] veth0_macvtap: left promiscuous mode [ 114.062384][ T843] rtc_cmos 00:05: Alarms can be up to one day in the future [ 114.066742][ T843] rtc_cmos 00:05: Alarms can be up to one day in the future [ 114.070170][ T843] rtc_cmos 00:05: Alarms can be up to one day in the future [ 114.074433][ T843] rtc_cmos 00:05: Alarms can be up to one day in the future [ 114.077498][ T843] rtc rtc0: __rtc_set_alarm: err=-22 [ 114.109814][ T841] usb 10-1: usb_control_msg returned -32 [ 114.113571][ T841] usbtmc 10-1:16.0: can't read capabilities [ 114.163077][ T6000] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.346057][ T8366] openvswitch: netlink: IP tunnel TTL not specified. [ 114.360975][ T7932] usb 7-1: USB disconnect, device number 9 [ 114.416185][ T8375] binder: BINDER_SET_CONTEXT_MGR already set [ 114.419958][ T8375] binder: 8373:8375 ioctl 4018620d 2000000002c0 returned -16 [ 114.471446][ T8379] usb 10-1: usbtmc_ioctl_clear_in_halt returned -32 [ 114.525345][ T8389] exFAT-fs (nullb0): invalid boot record signature [ 114.528140][ T8389] exFAT-fs (nullb0): failed to read boot sector [ 114.530148][ T8389] exFAT-fs (nullb0): failed to recognize exfat type [ 114.586485][ T7932] hid (null): invalid report_size 401307999 [ 114.597119][ T7932] hid-generic 0007:0009:0A7C.0004: invalid report_size 401307999 [ 114.599662][ T7932] hid-generic 0007:0009:0A7C.0004: item 0 4 1 7 parsing failed [ 114.603050][ T7932] hid-generic 0007:0009:0A7C.0004: probe with driver hid-generic failed with error -22 [ 115.006348][ T8439] kvm: pic: level sensitive irq not supported [ 115.006716][ T8439] kvm: pic: non byte read [ 115.113924][ T8447] __nla_validate_parse: 5 callbacks suppressed [ 115.113935][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.631'. [ 115.145526][ T8451] tmpfs: Unknown parameter 'grpquota_blockmit' [ 115.220122][ T8456] netlink: 2 bytes leftover after parsing attributes in process `syz.7.633'. [ 115.394420][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.635'. [ 115.429572][ T8472] comedi comedi0: Minor 3 could not be opened [ 115.434184][ T8474] comedi comedi0: Minor 3 could not be opened [ 115.466984][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.6.639'. [ 115.673941][ T8493] XFS (nullb0): Invalid superblock magic number [ 115.674135][ T8494] /dev/nullb0: Can't open blockdev [ 115.731735][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.811566][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.822325][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.958205][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.649'. [ 115.969555][ T8512] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8512 comm=syz.7.649 [ 116.036550][ T8515] netlink: 'syz.7.650': attribute type 1 has an invalid length. [ 116.039375][ T8515] netlink: 'syz.7.650': attribute type 21 has an invalid length. [ 116.042167][ T8515] netlink: 156 bytes leftover after parsing attributes in process `syz.7.650'. [ 116.075048][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.651'. [ 116.078172][ T8520] netlink: 'syz.7.651': attribute type 11 has an invalid length. [ 116.085190][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.651'. [ 116.088183][ T8520] netlink: 'syz.7.651': attribute type 11 has an invalid length. [ 116.251439][ T8537] mkiss: ax0: crc mode is auto. [ 116.493684][ T7932] usb 10-1: USB disconnect, device number 2 [ 116.579186][ T8559] xt_CT: No such helper "syz1" [ 116.579875][ T8565] netlink: 228 bytes leftover after parsing attributes in process `syz.5.666'. [ 116.627421][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 116.627499][ T40] audit: type=1400 audit(372.567:535): avc: denied { append } for pid=8568 comm="syz.6.667" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.636355][ T8569] 9pnet_fd: p9_fd_create_tcp (8569): problem connecting socket to 127.0.0.1 [ 116.746205][ T8571] infiniband syz1: set active [ 116.748610][ T8571] infiniband syz1: added syz_tun [ 116.752474][ T8571] syz1: rxe_create_cq: returned err = -12 [ 116.754583][ T8571] infiniband syz1: Couldn't create ib_mad CQ [ 116.757383][ T8571] infiniband syz1: Couldn't open port 1 [ 116.776056][ T8571] RDS/IB: syz1: added [ 116.777662][ T8571] smc: adding ib device syz1 with port count 1 [ 116.779842][ T8571] smc: ib device syz1 port 1 has no pnetid [ 117.015596][ T40] audit: type=1400 audit(372.957:536): avc: denied { remove_name } for pid=8590 comm="syz.6.672" name="file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.023193][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.672'. [ 117.023728][ T40] audit: type=1400 audit(372.957:537): avc: denied { unlink } for pid=8590 comm="syz.6.672" name="file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.026354][ T8591] netlink: 'syz.6.672': attribute type 11 has an invalid length. [ 117.034465][ T40] audit: type=1400 audit(372.957:538): avc: denied { create } for pid=8590 comm="syz.6.672" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.039328][ T8591] dlm: no locking on control device [ 117.045647][ T40] audit: type=1400 audit(372.987:539): avc: denied { mounton } for pid=8590 comm="syz.6.672" path="/38/file0/file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.053678][ T40] audit: type=1400 audit(372.997:540): avc: denied { setattr } for pid=8590 comm="syz.6.672" name="file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.334067][ T40] audit: type=1400 audit(373.277:541): avc: denied { unmount } for pid=7820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.621564][ T40] audit: type=1400 audit(373.567:542): avc: denied { accept } for pid=8604 comm="syz.5.678" lport=59143 faddr=100.1.1.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.811602][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.901749][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.045747][ T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.151639][ T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.168695][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.173482][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.176432][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.179376][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.183994][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.200111][ T8616] xt_hashlimit: size too large, truncated to 1048576 [ 118.230617][ T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.306008][ T5942] Bluetooth: hci3: unexpected event for opcode 0x041b [ 118.324308][ T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.518407][ T60] dummy0: left allmulticast mode [ 118.520995][ T60] bridge0: port 3(dummy0) entered disabled state [ 118.529234][ T60] bridge_slave_1: left allmulticast mode [ 118.532366][ T60] bridge_slave_1: left promiscuous mode [ 118.535107][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.538256][ T8626] netlink: 'syz.2.684': attribute type 1 has an invalid length. [ 118.542141][ T8626] netlink: 'syz.2.684': attribute type 2 has an invalid length. [ 118.547096][ T60] bridge_slave_0: left allmulticast mode [ 118.549692][ T60] bridge_slave_0: left promiscuous mode [ 118.560792][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.561670][ T9] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 118.724214][ T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.728150][ T9] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.733141][ T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.736834][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.861851][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.867805][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.873054][ T60] bond0 (unregistering): Released all slaves [ 118.950115][ T9] usb 12-1: usb_control_msg returned -32 [ 118.953987][ T9] usbtmc 12-1:16.0: can't read capabilities [ 118.972120][ T24] usb 12-1: USB disconnect, device number 2 [ 119.011966][ T40] audit: type=1400 audit(630.947:543): avc: denied { ioctl } for pid=8664 comm="syz.2.691" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.020339][ T40] audit: type=1400 audit(630.947:544): avc: denied { ioctl } for pid=8664 comm="syz.2.691" path="socket:[28841]" dev="sockfs" ino=28841 ioctlcmd=0x5443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.062931][ T8654] hsr_slave_1 (unregistering): left promiscuous mode [ 119.110448][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 119.268591][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.271008][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.273672][ T8612] bridge_slave_0: entered allmulticast mode [ 119.279596][ T8612] bridge_slave_0: entered promiscuous mode [ 119.291180][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.299169][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.304382][ T8612] bridge_slave_1: entered allmulticast mode [ 119.307294][ T8612] bridge_slave_1: entered promiscuous mode [ 119.345860][ T8703] binder: 8702:8703 ioctl c0306201 2000000001c0 returned -14 [ 119.390979][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.400622][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.530336][ T8612] team0: Port device team_slave_0 added [ 119.555000][ T60] hsr_slave_0: left promiscuous mode [ 119.558375][ T60] hsr_slave_1: left promiscuous mode [ 119.560897][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.564017][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.567199][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.569601][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.592672][ T60] veth1_macvtap: left promiscuous mode [ 119.595011][ T60] veth1_vlan: left promiscuous mode [ 119.597243][ T60] veth0_vlan: left promiscuous mode [ 119.686986][ T8718] overlayfs: overlapping lowerdir path [ 120.213169][ T5942] Bluetooth: hci1: command tx timeout [ 120.216522][ T60] team0 (unregistering): Port device team_slave_1 removed [ 120.300243][ T8748] __nla_validate_parse: 4 callbacks suppressed [ 120.300260][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.705'. [ 120.751782][ T8612] team0: Port device team_slave_1 added [ 120.798014][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.800191][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.809680][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.817931][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.821390][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.833041][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.967903][ T8612] hsr_slave_0: entered promiscuous mode [ 120.975853][ T8612] hsr_slave_1: entered promiscuous mode [ 121.005256][ T8765] EXT4-fs (nbd7): unable to read superblock [ 121.055721][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.710'. [ 121.060124][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.710'. [ 121.069271][ T8768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8768 comm=syz.7.710 [ 121.122909][ T61] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 121.147420][ T8772] bridge: RTM_NEWNEIGH with invalid ether address [ 121.258968][ T8612] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.263660][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 121.265868][ T8612] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.273488][ T8612] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.279180][ T8612] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 121.290107][ T8785] support for the xor transformation has been removed. [ 121.290875][ T61] usb 10-1: unable to get BOS descriptor or descriptor too short [ 121.299481][ T61] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 121.303386][ T61] usb 10-1: can't read configurations, error -71 [ 121.352550][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.374351][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.381089][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.384215][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.394299][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.396650][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.423055][ T8612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.426347][ T8612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.560178][ T8826] xt_hashlimit: size too large, truncated to 1048576 [ 121.567876][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.685161][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.7.723'. [ 121.719999][ T8612] veth0_vlan: entered promiscuous mode [ 121.725151][ T8612] veth1_vlan: entered promiscuous mode [ 121.744665][ T8612] veth0_macvtap: entered promiscuous mode [ 121.748681][ T8612] veth1_macvtap: entered promiscuous mode [ 121.757897][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.770220][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.778770][ T7835] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.782595][ T7835] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.785470][ T7835] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.788594][ T7835] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.829619][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 121.850064][ T7828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.853775][ T7828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.873168][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.875972][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.890344][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 121.890356][ T40] audit: type=1400 audit(633.827:553): avc: denied { mounton } for pid=8612 comm="syz-executor" path="/syzkaller.SNjyue/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 121.914702][ T40] audit: type=1400 audit(633.857:554): avc: denied { mount } for pid=8612 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 122.010862][ T8880] pimreg: entered allmulticast mode [ 122.041260][ T8886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.059867][ T8889] netlink: 'syz.8.734': attribute type 3 has an invalid length. [ 122.116673][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 122.129303][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.8.737'. [ 122.292959][ T5942] Bluetooth: hci1: command tx timeout [ 122.727135][ T8937] netlink: 52 bytes leftover after parsing attributes in process `syz.5.746'. [ 122.824357][ T8949] netlink: 60 bytes leftover after parsing attributes in process `syz.8.749'. [ 122.829180][ T40] audit: type=1400 audit(634.767:555): avc: denied { execute } for pid=8948 comm="syz.8.749" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.943246][ T8951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.949382][ T8951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.954949][ T8951] bond0 (unregistering): Released all slaves [ 123.069194][ T8964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.503312][ T6586] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 123.533204][ T8984] capability: warning: `syz.2.760' uses 32-bit capabilities (legacy support in use) [ 123.539178][ T40] audit: type=1400 audit(635.477:556): avc: denied { ioctl } for pid=8983 comm="syz.2.760" path="socket:[30716]" dev="sockfs" ino=30716 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.597031][ T40] audit: type=1400 audit(635.537:557): avc: denied { map } for pid=8986 comm="syz.2.761" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.661403][ T6586] usb 13-1: Using ep0 maxpacket: 16 [ 123.671263][ T6586] usb 13-1: config 0 has no interfaces? [ 123.676722][ T6586] usb 13-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 123.680128][ T6586] usb 13-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 123.685058][ T6586] usb 13-1: Manufacturer: syz [ 123.690715][ T6586] usb 13-1: config 0 descriptor?? [ 123.713543][ T9001] geneve3: entered promiscuous mode [ 123.716147][ T9001] geneve3: entered allmulticast mode [ 123.870754][ T9009] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 123.912518][ T8975] netlink: 'syz.8.758': attribute type 1 has an invalid length. [ 123.919049][ T9013] comedi comedi3: dac02: I/O port conflict (0x80,8) [ 123.919499][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.924386][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.930181][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.943825][ T155] usb 13-1: USB disconnect, device number 2 [ 124.050800][ T9018] Malformed UNC in devname [ 124.050800][ T9018] [ 124.055695][ T9018] CIFS: VFS: Malformed UNC in devname [ 124.058913][ T9018] cgroup2: Unknown parameter 'memo2y_localevents' [ 124.154905][ T9028] pim6reg: entered allmulticast mode [ 124.265174][ T9038] netlink: 'syz.7.778': attribute type 10 has an invalid length. [ 124.268404][ T9038] team0: entered promiscuous mode [ 124.270687][ T9038] team_slave_0: entered promiscuous mode [ 124.274079][ T9038] team_slave_1: entered promiscuous mode [ 124.277042][ T9038] bridge0: port 3(team0) entered blocking state [ 124.280002][ T9038] bridge0: port 3(team0) entered disabled state [ 124.283635][ T9038] team0: entered allmulticast mode [ 124.285711][ T9038] team_slave_0: entered allmulticast mode [ 124.288139][ T9038] team_slave_1: entered allmulticast mode [ 124.292830][ T9038] bridge0: port 3(team0) entered blocking state [ 124.295599][ T9038] bridge0: port 3(team0) entered forwarding state [ 124.349745][ T9037] team0: left allmulticast mode [ 124.351728][ T9037] team_slave_0: left allmulticast mode [ 124.353461][ T9037] team_slave_1: left allmulticast mode [ 124.355872][ T9037] bridge0: port 3(team0) entered disabled state [ 124.361724][ T9037] bridge_slave_1: left allmulticast mode [ 124.364213][ T9037] bridge_slave_1: left promiscuous mode [ 124.366914][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.372426][ T9037] bridge_slave_0: left allmulticast mode [ 124.374902][ T9037] bridge_slave_0: left promiscuous mode [ 124.377646][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.381419][ T5942] Bluetooth: hci1: command tx timeout [ 124.517334][ T9045] block nbd2: NBD_DISCONNECT [ 124.518672][ T40] audit: type=1400 audit(636.457:558): avc: denied { setopt } for pid=9044 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.565685][ T9051] erofs (device loop2): cannot find valid erofs superblock [ 124.596568][ T40] audit: type=1400 audit(636.537:559): avc: denied { accept } for pid=9052 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 124.785605][ T9057] loop1: detected capacity change from 0 to 7 [ 124.792350][ T9057] Dev loop1: unable to read RDB block 7 [ 124.795231][ T9057] loop1: AHDI p1 p2 [ 124.797003][ T9057] loop1: partition table partially beyond EOD, truncated [ 124.802449][ T9057] loop1: p1 start 809055541 is beyond EOD, truncated [ 124.890628][ T9060] kvm: apic: phys broadcast and lowest prio [ 125.002926][ T9068] vlan0: entered promiscuous mode [ 125.009781][ T9068] team0: Port device vlan0 added [ 125.179564][ T40] audit: type=1400 audit(637.117:560): avc: denied { create } for pid=9089 comm="syz.7.796" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.180324][ T40] audit: type=1400 audit(637.117:561): avc: denied { write } for pid=9089 comm="syz.7.796" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.180363][ T40] audit: type=1400 audit(637.117:562): avc: denied { open } for pid=9089 comm="syz.7.796" path="/86/file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.451968][ T5942] Bluetooth: hci1: command tx timeout [ 127.251609][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.656470][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.658533][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.628920][ T9139] __nla_validate_parse: 50 callbacks suppressed [ 140.628932][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.799'. [ 140.942859][ T9178] rtc_cmos 00:05: Alarms can be up to one day in the future [ 140.946898][ T9179] rtc_cmos 00:05: Alarms can be up to one day in the future [ 141.096127][ T9196] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=102 sclass=netlink_xfrm_socket pid=9196 comm=syz.8.816 [ 141.214173][ T9199] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 141.312286][ T9213] SELinux: policydb magic number 0xc does not match expected magic number 0xf97cff8c [ 141.315303][ T9213] SELinux: failed to load policy [ 141.353341][ T9227] hugetlbfs: Bad value for 'uid' [ 141.355040][ T9227] hugetlbfs: Bad value for 'uid' [ 141.359939][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 141.359949][ T40] audit: type=1400 audit(653.297:564): avc: denied { ioctl } for pid=9225 comm="syz.5.828" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 141.577772][ T40] audit: type=1400 audit(653.517:565): avc: denied { unmount } for pid=9235 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 141.675451][ T40] audit: type=1400 audit(653.617:566): avc: denied { mount } for pid=9243 comm="syz.5.833" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 141.686301][ T9244] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 141.692034][ T9244] fuse: Bad value for 'fd' [ 141.805938][ T9249] syz_tun: entered allmulticast mode [ 141.818500][ T9248] syz_tun: left allmulticast mode [ 141.849747][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.837'. [ 141.854024][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 141.900497][ T9257] netlink: 92 bytes leftover after parsing attributes in process `syz.2.839'. [ 141.996509][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.842'. [ 142.068266][ T40] audit: type=1400 audit(654.007:567): avc: denied { bind } for pid=9267 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.082886][ T9268] ================================================================== [ 142.082899][ T9268] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 142.082960][ T9268] Write of size 8 at addr ffffc900051f9000 by task syz.2.844/9268 [ 142.082975][ T9268] [ 142.082983][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.2.844 Not tainted syzkaller #0 PREEMPT(full) [ 142.083002][ T9268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.083014][ T9268] Call Trace: [ 142.083020][ T9268] [ 142.083027][ T9268] dump_stack_lvl+0x116/0x1f0 [ 142.083056][ T9268] print_report+0xcd/0x630 [ 142.083081][ T9268] ? __virt_addr_valid+0x81/0x610 [ 142.083101][ T9268] ? sys_fillrect+0x15d4/0x17b0 [ 142.083127][ T9268] kasan_report+0xe0/0x110 [ 142.083153][ T9268] ? sys_fillrect+0x15d4/0x17b0 [ 142.083184][ T9268] sys_fillrect+0x15d4/0x17b0 [ 142.083214][ T9268] ? __pfx_sys_fillrect+0x10/0x10 [ 142.083242][ T9268] ? __pfx_bit_putcs+0x10/0x10 [ 142.083262][ T9268] ? bit_cursor+0xeca/0x17e0 [ 142.083286][ T9268] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 142.083314][ T9268] bit_clear+0x17d/0x220 [ 142.083336][ T9268] ? __pfx_bit_clear+0x10/0x10 [ 142.083358][ T9268] ? __pfx___might_resched+0x10/0x10 [ 142.083375][ T9268] ? fb_get_color_depth+0x120/0x250 [ 142.083392][ T9268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.083423][ T9268] ? __pfx_bit_clear+0x10/0x10 [ 142.083443][ T9268] __fbcon_clear+0x603/0x720 [ 142.083466][ T9268] fbcon_scroll+0x48b/0x640 [ 142.083488][ T9268] con_scroll+0x45f/0x690 [ 142.083515][ T9268] do_con_write+0x5575/0x8290 [ 142.083543][ T9268] ? rcu_cleanup_dead_rnp+0x170/0x2e0 [ 142.083567][ T9268] ? __pfx___mutex_lock+0x10/0x10 [ 142.083592][ T9268] ? __pfx_do_con_write+0x10/0x10 [ 142.083643][ T9268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.083672][ T9268] con_write+0x23/0xb0 [ 142.083699][ T9268] n_tty_write+0x41e/0x11e0 [ 142.083724][ T9268] ? __pfx_n_tty_write+0x10/0x10 [ 142.083743][ T9268] ? trace_kmalloc+0x2b/0xd0 [ 142.083769][ T9268] ? __pfx_woken_wake_function+0x10/0x10 [ 142.083797][ T9268] ? kfree+0x252/0x6d0 [ 142.083823][ T9268] ? __pfx_n_tty_write+0x10/0x10 [ 142.083844][ T9268] file_tty_write.constprop.0+0x503/0x9b0 [ 142.083877][ T9268] vfs_write+0x7d3/0x11d0 [ 142.083901][ T9268] ? __pfx_tty_write+0x10/0x10 [ 142.083929][ T9268] ? __pfx_vfs_write+0x10/0x10 [ 142.083950][ T9268] ? find_held_lock+0x2b/0x80 [ 142.083974][ T9268] ksys_write+0x12a/0x250 [ 142.083995][ T9268] ? __pfx_ksys_write+0x10/0x10 [ 142.084019][ T9268] ? fd_install+0x244/0x750 [ 142.084045][ T9268] do_syscall_64+0xcd/0xfa0 [ 142.084068][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.084087][ T9268] RIP: 0033:0x7fa97358efc9 [ 142.084101][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.084119][ T9268] RSP: 002b:00007fa9744f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.084138][ T9268] RAX: ffffffffffffffda RBX: 00007fa9737e5fa0 RCX: 00007fa97358efc9 [ 142.084151][ T9268] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000b [ 142.084162][ T9268] RBP: 00007fa973611f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.084173][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.084185][ T9268] R13: 00007fa9737e6038 R14: 00007fa9737e5fa0 R15: 00007ffd1ad0f098 [ 142.084203][ T9268] [ 142.084210][ T9268] [ 142.084215][ T9268] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004ef9000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 142.084255][ T9268] Memory state around the buggy address: [ 142.084266][ T9268] ffffc900051f8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.084281][ T9268] ffffc900051f8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.084295][ T9268] >ffffc900051f9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.084306][ T9268] ^ [ 142.084316][ T9268] ffffc900051f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.084329][ T9268] ffffc900051f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.084341][ T9268] ================================================================== [ 142.084391][ T9268] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.084403][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.2.844 Not tainted syzkaller #0 PREEMPT(full) [ 142.084426][ T9268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.084439][ T9268] Call Trace: [ 142.084447][ T9268] [ 142.084454][ T9268] dump_stack_lvl+0x3d/0x1f0 [ 142.084477][ T9268] vpanic+0x640/0x6f0 [ 142.084501][ T9268] panic+0xca/0xd0 [ 142.084522][ T9268] ? __pfx_panic+0x10/0x10 [ 142.084543][ T9268] ? sys_fillrect+0x15d4/0x17b0 [ 142.084566][ T9268] ? preempt_schedule_common+0x44/0xc0 [ 142.084590][ T9268] ? preempt_schedule_thunk+0x16/0x30 [ 142.084613][ T9268] check_panic_on_warn+0xab/0xb0 [ 142.084635][ T9268] end_report+0x107/0x170 [ 142.084661][ T9268] kasan_report+0xee/0x110 [ 142.084688][ T9268] ? sys_fillrect+0x15d4/0x17b0 [ 142.084717][ T9268] sys_fillrect+0x15d4/0x17b0 [ 142.084746][ T9268] ? __pfx_sys_fillrect+0x10/0x10 [ 142.084774][ T9268] ? __pfx_bit_putcs+0x10/0x10 [ 142.084795][ T9268] ? bit_cursor+0xeca/0x17e0 [ 142.084826][ T9268] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 142.084855][ T9268] bit_clear+0x17d/0x220 [ 142.084878][ T9268] ? __pfx_bit_clear+0x10/0x10 [ 142.084901][ T9268] ? __pfx___might_resched+0x10/0x10 [ 142.084919][ T9268] ? fb_get_color_depth+0x120/0x250 [ 142.084939][ T9268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.084971][ T9268] ? __pfx_bit_clear+0x10/0x10 [ 142.084992][ T9268] __fbcon_clear+0x603/0x720 [ 142.085015][ T9268] fbcon_scroll+0x48b/0x640 [ 142.085037][ T9268] con_scroll+0x45f/0x690 [ 142.085065][ T9268] do_con_write+0x5575/0x8290 [ 142.085093][ T9268] ? rcu_cleanup_dead_rnp+0x170/0x2e0 [ 142.085116][ T9268] ? __pfx___mutex_lock+0x10/0x10 [ 142.085140][ T9268] ? __pfx_do_con_write+0x10/0x10 [ 142.085167][ T9268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.085196][ T9268] con_write+0x23/0xb0 [ 142.085223][ T9268] n_tty_write+0x41e/0x11e0 [ 142.085248][ T9268] ? __pfx_n_tty_write+0x10/0x10 [ 142.085267][ T9268] ? trace_kmalloc+0x2b/0xd0 [ 142.085291][ T9268] ? __pfx_woken_wake_function+0x10/0x10 [ 142.085319][ T9268] ? kfree+0x252/0x6d0 [ 142.085336][ T9268] ? __pfx_n_tty_write+0x10/0x10 [ 142.085356][ T9268] file_tty_write.constprop.0+0x503/0x9b0 [ 142.085386][ T9268] vfs_write+0x7d3/0x11d0 [ 142.085409][ T9268] ? __pfx_tty_write+0x10/0x10 [ 142.085435][ T9268] ? __pfx_vfs_write+0x10/0x10 [ 142.085457][ T9268] ? find_held_lock+0x2b/0x80 [ 142.085481][ T9268] ksys_write+0x12a/0x250 [ 142.085501][ T9268] ? __pfx_ksys_write+0x10/0x10 [ 142.085524][ T9268] ? fd_install+0x244/0x750 [ 142.085549][ T9268] do_syscall_64+0xcd/0xfa0 [ 142.085571][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.085589][ T9268] RIP: 0033:0x7fa97358efc9 [ 142.085602][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.085620][ T9268] RSP: 002b:00007fa9744f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.085636][ T9268] RAX: ffffffffffffffda RBX: 00007fa9737e5fa0 RCX: 00007fa97358efc9 [ 142.085649][ T9268] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000b [ 142.085661][ T9268] RBP: 00007fa973611f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.085674][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.085685][ T9268] R13: 00007fa9737e6038 R14: 00007fa9737e5fa0 R15: 00007ffd1ad0f098 [ 142.085701][ T9268] [ 142.086370][ T9268] Kernel Offset: disabled VM DIAGNOSIS: 19:37:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8530e555 RDI=ffffffff9ae0a820 RBP=ffffffff9ae0a7e0 RSP=ffffc90003907150 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9ae0a7e0 R15=ffffffff8530e4f0 RIP=ffffffff8530e57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa9744f26c0 ffffffff 00c00000 GS =0000 ffff8880d69d6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b513f CR3=0000000048ecc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9744f1bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa973612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa973612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa973612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa973612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa97361307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa97361315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8161b793 RDX=ffff88801daca480 RSI=ffffffff8161b7db RDI=ffffffff93a9bfe0 RBP=ffff88806a520000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27537fc R10=ffffffff93a9bfe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b7dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ad6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001040 CR3=00000000256ea000 CR4=00350ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a2b5b74a8 00007f5a2b5b74a0 00007f5a2b5b7498 00007f5a2b5b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a2c11d100 00007f5a2b5b7460 00007f5a2b5b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a2b5b74b8 00007f5a2b5b74b0 00007f5a2b5b74a8 00007f5a2b5b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8161b793 RDX=ffff88801dacc900 RSI=ffffffff8161b7db RDI=ffffffff93a9bfe0 RBP=ffff88806a620000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27537fc R10=ffffffff93a9bfe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b7dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555ea78808 CR3=000000005fedf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd50cfc150 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25ac412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25ac412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25ac412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25ac412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25ac41307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25ac41315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8161b793 RDX=ffff88801ded8000 RSI=ffffffff8161b7db RDI=ffffffff93a9bfe0 RBP=ffff88806a720000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27537fc R10=ffffffff93a9bfe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b7dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a4ef4 CR3=0000000049747000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a41307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a41315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a5b74a8 00007fe03a5b74a0 00007fe03a5b7498 00007fe03a5b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03b11d100 00007fe03a5b7460 00007fe03a5b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe03a5b74b8 00007fe03a5b74b0 00007fe03a5b74a8 00007fe03a5b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000