last executing test programs: 6m59.136978561s ago: executing program 0 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x2, 0x2}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "c14e93", 0x8, 0x11, 0x91b1bbe66f0b58a, @loopback, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x4e23, 0x4e22, 0x8}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newtaction={0xac, 0x30, 0x709, 0x0, 0x25dfdbfe, {}, [{0x98, 0x1, [@m_sample={0x94, 0x13, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x431, 0x20000000, 0x3a, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcafe}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7f, 0x80, 0x1, 0x9, 0x101}}]}, {0x27, 0x6, "a741e4738928665a7ad16213f02adb9faf6d12f46a64d43b384d0ee462e0bcaeff3c0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4c801}, 0x40000) 6m59.136041974s ago: executing program 0 (id=31): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 6m59.046473342s ago: executing program 0 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)={0x18, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000908000d405453bc5b140000001000010000000000000000000084000aa05e847d189716d0b6df9fdd24f59b91441a2dacb71f1ad17f079fe2"], 0x8c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xf58, 0x2) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x8, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x8, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x1000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) dup2(r3, r4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x40000032, r9, 0x0) writev(r9, &(0x7f0000000100)=[{&(0x7f00000003c0)='-', 0x1}], 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x60f}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000001c0)) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x13, 0x1, {0x80, 0x0, 0x3}}, 0x14) 6m58.817042286s ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@delqdisc={0x50, 0x25, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xb}, {0x7, 0xe}, {0xffe0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x40}}, @qdisc_kind_options=@q_red={{0x8}, {0x1c, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x400}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x884) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@delqdisc={0x50, 0x25, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xb}, {0x7, 0xe}, {0xffe0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x40}}, @qdisc_kind_options=@q_red={{0x8}, {0x1c, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x400}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x884) (async) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) 6m58.81663696s ago: executing program 0 (id=34): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) 6m56.957089602s ago: executing program 0 (id=64): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x8000, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x400, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000340)={0xffffffffffffffff, r5}) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000540)=0xc250, 0x4) socket(0x400000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0) add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f0000000180), 0x0, 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) recvmsg(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x3) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x893c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6m56.91450033s ago: executing program 32 (id=64): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x8000, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x400, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000340)={0xffffffffffffffff, r5}) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000540)=0xc250, 0x4) socket(0x400000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0) add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f0000000180), 0x0, 0x2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) recvmsg(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x3) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x893c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 5m53.308441058s ago: executing program 4 (id=989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2, &(0x7f0000000000)=@raw=[@generic={0xdb, 0x9, 0x0, 0x1413, 0x7}, @exit], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x0, 0x427, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4008004) 5m53.096798385s ago: executing program 4 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000097c7c13aa0136faee8ff00009500000000200000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @val=@iter={0x0}}, 0x20) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x3ffffffffffff7c, 0x0, &(0x7f0000003700)={0x77359400}) 5m53.031523168s ago: executing program 4 (id=995): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x3, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffff47c7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x5, 0x0, 0x0, 0xf, 0x0, 0x14c, 0xfeb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x1000, 0xe0a2, 0xfffffffffffffffe, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x2, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]}) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="bf", 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x63) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xe2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x44, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bff200010074", "e2266bd8", "d1b29b99d21d88a2"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2160, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000000)) 5m52.957984136s ago: executing program 4 (id=997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x54, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x8, 0x2, 0x0, 0x40}, {"eac7ca00e96d8a967e540d652a2ba61092c25c99280340e567d33678b6a5cbfb7f03dc9eb7c08ed837977649"}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 5m52.904666888s ago: executing program 4 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) setpgid(0x0, r1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x40, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}]}}}]}, 0x40}}, 0x24008040) 5m52.807079391s ago: executing program 4 (id=1001): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) close(r0) ppoll(&(0x7f00000006c0)=[{}, {0xffffffffffffffff, 0x40a8}, {0xffffffffffffffff, 0x8048}, {0xffffffffffffffff, 0x1120}, {0xffffffffffffffff, 0xc02f}, {0xffffffffffffffff, 0xbc66a0fa5b6f9da4}, {0xffffffffffffffff, 0x8201}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x18ec}], 0x9, &(0x7f0000000740), &(0x7f00000007c0), 0xfffffffffffffee1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000002c0)={@broadcast, @broadcast, @remote}, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000b060108000000000000000006000180080001a701e75f5a9e4500"/43], 0x38}}, 0x4800) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r5 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffffffffffffffd9, 0x18202) sendto$inet(r5, &(0x7f0000000340)="357fef8ccefbb885cdd44c593dcbdfc71a1b4c7ad71a910342e929a43ef2493f37f384e3e26f73b541fb87f112b68868dbdc466a267edc39569887b8efa4ac3f093d872c0a7d6ece393337eac4a1c42dbe19451c80233e0408725e3f2ca83954a438ee66373dc93b9553481f3ea4372fd492fa4b90388de2f34520460fbbb7e3540471b9688e60a6ec420fb744194313b9d529e6a30fc2acc2494fc07633", 0x9e, 0x4000084, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) 5m36.708197475s ago: executing program 33 (id=1001): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) close(r0) ppoll(&(0x7f00000006c0)=[{}, {0xffffffffffffffff, 0x40a8}, {0xffffffffffffffff, 0x8048}, {0xffffffffffffffff, 0x1120}, {0xffffffffffffffff, 0xc02f}, {0xffffffffffffffff, 0xbc66a0fa5b6f9da4}, {0xffffffffffffffff, 0x8201}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x18ec}], 0x9, &(0x7f0000000740), &(0x7f00000007c0), 0xfffffffffffffee1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000002c0)={@broadcast, @broadcast, @remote}, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000b060108000000000000000006000180080001a701e75f5a9e4500"/43], 0x38}}, 0x4800) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r5 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffffffffffffffd9, 0x18202) sendto$inet(r5, &(0x7f0000000340)="357fef8ccefbb885cdd44c593dcbdfc71a1b4c7ad71a910342e929a43ef2493f37f384e3e26f73b541fb87f112b68868dbdc466a267edc39569887b8efa4ac3f093d872c0a7d6ece393337eac4a1c42dbe19451c80233e0408725e3f2ca83954a438ee66373dc93b9553481f3ea4372fd492fa4b90388de2f34520460fbbb7e3540471b9688e60a6ec420fb744194313b9d529e6a30fc2acc2494fc07633", 0x9e, 0x4000084, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) 5m23.554392656s ago: executing program 3 (id=1268): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) (async) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000280)='./file1\x00') (async) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) creat(&(0x7f0000000000)='./file1\x00', 0x100) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}}}}}}}, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) 5m23.554003438s ago: executing program 3 (id=1270): openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x200) read$FUSE(0xffffffffffffffff, &(0x7f00000052c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000005c0)) read(r2, &(0x7f0000000140)=""/73, 0x49) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000001, 0x3032, r3, 0x4000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000001, 0x3032, r3, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendfile(r0, r1, 0x0, 0x106f) 5m23.300500068s ago: executing program 3 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5d) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 5m23.300112521s ago: executing program 3 (id=1274): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000), 0x0) r4 = dup(r2) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x1, 0x8, 0xffffff3b, 0xfffffffc, 0x0, 0x623, 0x3ff}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xb}, {0xffe0, 0xa}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYBLOB="f327"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0xff, 0x0}, {0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="02c926"], 0x3) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000200)={{0xcbfe, 0xfffffffe}, 0xa336eb6c22b6a9e4}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400c43, 0x180) flock(r10, 0x2) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x1c, 0x42, 0xa01, 0x4, 0xffffffff, {0xb}, [@generic="119f93325d49"]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) fstat(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), 0x100040, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r12, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESOCT=r13]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESDEC=r12, @ANYBLOB=',seclabel,mask=^MAY_EXEC,smackfstransmute=fscontext,audit,\x00']) r14 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) accept$ax25(r14, 0x0, &(0x7f0000000080)) 5m19.84790641s ago: executing program 3 (id=1298): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) (async, rerun: 64) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) (rerun: 64) close_range(r0, r0, 0x2) (async, rerun: 64) r1 = syz_io_uring_setup(0x4e8e, &(0x7f0000000100)={0x0, 0xebc6, 0x1000, 0x1, 0x18d}, &(0x7f0000000180), &(0x7f00000001c0)) (rerun: 64) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000200)={0x4, r0, 0x39, {0x67d, 0x3}, 0x6}, 0x1) (async, rerun: 32) fcntl$setflags(r0, 0x2, 0x1) (async, rerun: 32) r2 = open(&(0x7f0000000240)='./file0\x00', 0x400, 0xa8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@hyper, 0x2}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000002c0)={0x0, 0xffff, [0x9, 0x77, 0x5, 0x5, 0x4, 0x46]}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0xa0880, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x9, 0x8, [0x9, 0x400, 0x1e9, 0x9, 0x0, 0x80, 0x1, 0xfffd]}, 0x18) (async) syz_clone3(&(0x7f0000000600)={0x8041000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x18}, &(0x7f0000000440)=""/238, 0xee, &(0x7f0000000540)=""/78, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7, {r3}}, 0x58) syz_open_procfs$pagemap(r4, &(0x7f0000000680)) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f00000006c0), 0x4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r5, 0x4, 0x50a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3c, 0x27}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000900)={r7, 0xff, 0x7, [0x2, 0x6, 0x5, 0x1, 0x2e1, 0x3, 0x4]}, 0x16) (async, rerun: 32) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000940)=""/35, &(0x7f0000000980)=0x23) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000009c0)={r0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x65, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x8d, 0x7}, {0x3, 0x1}, {0x5, 0x7}, {0xc, 0x1}, {0xf, 0x3}, {0x9c, 0x3}, {0x8, 0x4}, {0x81, 0x3}, {0xfc, 0x2}, {0x7, 0x6}, {0xb4, 0x4}, {0x1, 0x6}, {0xe, 0x2}, {0x14, 0x2}, {0x9, 0x5}], "0eda1d5af4d02712"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004054}, 0x24040800) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000b40)={@loopback, 0x1, 0x0, 0x10, 0x0, [{@multicast1}]}}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000bc0)={'macvlan1\x00', {0x2, 0x4e24, @broadcast}}) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000c00)=0x1) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000d80)=0x2) 5m19.782968097s ago: executing program 3 (id=1301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x500, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0xa, 0x7, 0x5, @generic=0x5, 0x8f, 0xa, 0x1}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002440)=ANY=[@ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000020c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB="360a73624a91546dc1c256fdd0c61eb5c3cf83eb202429a57a4e7a0842dcf6a9b5870f9cb1b348af6103704dc9abb0e342446e5bd893dd3bf7baa9cc9468c481c58105073ac964c5607b67cf42b926f72e1305126debd4803f10255da9bced27556d060afd94d3808d3dcccef22d5be179651c269d2e585508787830aa81362d5f17a65740c985228c6bfeab0b586263925b4df678f3c9ecb1b70b411d54a1fb9b5a88809084f1d2fed6", @ANYRES16=r5, @ANYBLOB="00012dbd7000fbdbdf255400000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {0x3}, {0xd, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 5m3.490600677s ago: executing program 34 (id=1301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x500, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0xa, 0x7, 0x5, @generic=0x5, 0x8f, 0xa, 0x1}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002440)=ANY=[@ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000020c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB="360a73624a91546dc1c256fdd0c61eb5c3cf83eb202429a57a4e7a0842dcf6a9b5870f9cb1b348af6103704dc9abb0e342446e5bd893dd3bf7baa9cc9468c481c58105073ac964c5607b67cf42b926f72e1305126debd4803f10255da9bced27556d060afd94d3808d3dcccef22d5be179651c269d2e585508787830aa81362d5f17a65740c985228c6bfeab0b586263925b4df678f3c9ecb1b70b411d54a1fb9b5a88809084f1d2fed6", @ANYRES16=r5, @ANYBLOB="00012dbd7000fbdbdf255400000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {0x3}, {0xd, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 2m57.913429075s ago: executing program 2 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x2d, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/129, 0x0, 0x0, 0x28}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x23}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/63, 0x0, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/221, 0x0, 0x2, 0x29}}, &(0x7f0000000300)}}], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0213"], 0x10}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) syz_create_resource$binfmt(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0xfd, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa0009061abe2c00640015010400030a0101027f0000017c32f8ac52d876d0406ec4500604aca4676433eb36edc64bd6b2c50c72fb44c78b0c14623c11b46d78aed2acc97d7ce781322cbc8c777698453252ddfae5ad28f130a760e6114d5e38a4b2884053b51655ebd0d138129a4d93e9e801cce284b7b9b1cc33b2127590f000fe08c0f8c75f78501a9137e68e0142956f2712c681f38498142a744cfca13353ab53f49ebdb67cfddc9ffb15351e06da50d0b5630fe31512669f88acc6c0a758da40626e643b88e1"], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79346af081496d0420922f45aa8b610468cd140526c41efcd3a4a42200", 0x4, 0x1, 0x85}, 0x3c) 2m34.685280095s ago: executing program 2 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x2d, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/129, 0x0, 0x0, 0x28}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x23}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/63, 0x0, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/221, 0x0, 0x2, 0x29}}, &(0x7f0000000300)}}], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0213"], 0x10}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) syz_create_resource$binfmt(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0xfd, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa0009061abe2c00640015010400030a0101027f0000017c32f8ac52d876d0406ec4500604aca4676433eb36edc64bd6b2c50c72fb44c78b0c14623c11b46d78aed2acc97d7ce781322cbc8c777698453252ddfae5ad28f130a760e6114d5e38a4b2884053b51655ebd0d138129a4d93e9e801cce284b7b9b1cc33b2127590f000fe08c0f8c75f78501a9137e68e0142956f2712c681f38498142a744cfca13353ab53f49ebdb67cfddc9ffb15351e06da50d0b5630fe31512669f88acc6c0a758da40626e643b88e1"], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79346af081496d0420922f45aa8b610468cd140526c41efcd3a4a42200", 0x4, 0x1, 0x85}, 0x3c) 2m14.097225848s ago: executing program 1 (id=1911): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000d00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/35, 0x23}], 0x1, &(0x7f0000000380)=""/103, 0x67}, 0x7}, {{&(0x7f0000000400)=@rc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000006c0)=""/175, 0xaf}], 0x5, &(0x7f0000000940)=""/187, 0xbb}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000000c00)=""/85, 0x55}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x5, &(0x7f00000037c0)=""/4096, 0x1000}, 0x200}], 0x3, 0x2, &(0x7f0000000e00)={r3, r4+60000000}) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg$inet_sctp(r6, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="90", 0x1}], 0x1}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.830400772s ago: executing program 1 (id=1912): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x30120, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)) 2m12.214737768s ago: executing program 2 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x2d, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/129, 0x0, 0x0, 0x28}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x23}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/63, 0x0, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/221, 0x0, 0x2, 0x29}}, &(0x7f0000000300)}}], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0213"], 0x10}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) syz_create_resource$binfmt(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0xfd, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa0009061abe2c00640015010400030a0101027f0000017c32f8ac52d876d0406ec4500604aca4676433eb36edc64bd6b2c50c72fb44c78b0c14623c11b46d78aed2acc97d7ce781322cbc8c777698453252ddfae5ad28f130a760e6114d5e38a4b2884053b51655ebd0d138129a4d93e9e801cce284b7b9b1cc33b2127590f000fe08c0f8c75f78501a9137e68e0142956f2712c681f38498142a744cfca13353ab53f49ebdb67cfddc9ffb15351e06da50d0b5630fe31512669f88acc6c0a758da40626e643b88e1"], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79346af081496d0420922f45aa8b610468cd140526c41efcd3a4a42200", 0x4, 0x1, 0x85}, 0x3c) 2m9.659337131s ago: executing program 5 (id=1949): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 32) r1 = socket(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2, 0x0, 0x0, 0x9a40}, 0x1c) (async) accept4$inet6(r1, 0x0, 0x0, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5bce, @void, @value}, 0x94) (async, rerun: 64) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) (rerun: 64) ioctl$LOOP_SET_FD(r3, 0x80044df9, 0xffffffffffffffff) (async) r4 = syz_io_uring_setup(0x53f, &(0x7f0000000380)={0x0, 0x807734, 0x80, 0xfffffff8, 0x102, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x6fbe, 0x10100, 0x0, 0x2e0}, &(0x7f0000000140), &(0x7f00000001c0)) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(r1, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async, rerun: 64) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r9, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 32) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x49001, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r11, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r10, 0x0, 0x201, 0xe00, &(0x7f0000003080)="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", 0x4}) (async) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m9.596948746s ago: executing program 5 (id=1950): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee01}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r1}) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002500)={{0x7f, 0x45, 0x4c, 0x46, 0xa5, 0x80, 0x40, 0x7, 0x3, 0x2, 0x3, 0x2, 0x3e5, 0x40, 0x31f, 0x4, 0x8, 0x38, 0x4, 0xc, 0x5, 0x1}, [{0x2, 0x8000, 0x4, 0x80000000, 0x0, 0x8000, 0x561}, {0x2, 0x6, 0x3, 0xffffffffffffffff, 0x2, 0x9, 0x0, 0x6a61}, {0x1, 0x9, 0xc9a, 0x3, 0x1000000000000, 0x8, 0xfffffffffffff801, 0x3a6}, {0x4, 0x1, 0x5, 0x9, 0x0, 0x0, 0x5, 0xd620}], "64102bc944914c9a76b23e561c8aa812a96802b0ce249086398debf2522f1502d42c6dbe5823b86b848b6cbb89d0ac3c61caa46d75d54d762d65a6646753fdb7fa63ccae85585baa70e9821a0590bdcb31df7edb702c7b9517556f002d8678c6e4741eb84826e1cf3148f6269b7d25aac177317f141c34b4f68338a6846a5a00a70e3e75cdc0c07330dfd4a43ce2a96f3683d65e943d3e5375a2bea20b273e6fee27b2f43f27f434e10fe061f3147daf6ed8e23b53ad7366340fe9db1028e6858f7cfd0f19e4c4e0a99703d38cf6e697c055df240bd66e5567f1758ed8f72b49f2ed45bb99effd1aff9b9cd13b1ef1c8ffb3", ['\x00', '\x00', '\x00']}, 0x512) 2m9.595424999s ago: executing program 5 (id=1951): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$l2tp(r0, &(0x7f0000000040)=""/176, 0xb0, 0x40000120, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r1, {0x7, 0x2b, 0x2, 0x4000000, 0x8, 0xb, 0xd, 0x9, 0x0, 0x0, 0x4, 0x7}}, 0x50) syz_emit_vhci(&(0x7f0000002200)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) mkdirat(r0, &(0x7f0000002240)='./file0\x00', 0x14e) sendto$l2tp(r0, &(0x7f0000002280)="b8c3cc496a8a2d11ba5feb77e2164d3b5b122132f3514aa294d44457e8795ababad5a57158cc08d7f9019fb3c338b9504acaa0fe2d65859ff48518d8243aa4e08f88460a89a2ee063292b130be3fd9a35ac87fd0f34896b1027944e461f1b41bd79178b51bb93143bb5d21395f712f05f44807d100ea8a5302235fa72134637c150d794a5c4a75fa700c754532a586631656fc67750c2a3635a98f41b740c08d379c18e548a47cf4013cd649621b17eabc6a37edbb4e21f0ff383480a6ff74", 0xbf, 0x1, &(0x7f0000002340)={0x2, 0x0, @empty, 0x4}, 0x10) bind$l2tp(r0, &(0x7f0000002380)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) flock(r2, 0x1) recvfrom$l2tp(r0, &(0x7f0000002400)=""/222, 0xde, 0x20, &(0x7f0000002500)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000002540)=0x6c5, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000002580), 0x100000001, 0x2) sendfile(r3, r2, 0x0, 0x5) write$char_usb(r2, &(0x7f00000025c0)="dd496a33d5a2db3268455e6e21b5480a5d2fdb3d2f466ef61a3b605af8bb7f3fa497cfadf10e45684f553557658c8048edcedbda69fb843705b4ee2ee264bb719ea17c392fd1ea7ffbbe4992a30889da7056f26f9dedb22b16c7ef1207d13c48e4077b1153f5", 0x66) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000026c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002680)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000002700)={0x6, 0x118, 0xfa00, {{0xcef, 0x800, "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", 0x9, 0x5, 0x0, 0x8, 0xc6, 0x2b, 0xd0}, r5}}, 0x120) syz_emit_vhci(&(0x7f0000002840)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x8, 0xfff9}}}}, 0x11) recvfrom$l2tp(r0, &(0x7f0000002880)=""/158, 0x9e, 0x10040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004880)=[{{&(0x7f0000002940)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000029c0)=""/116, 0x74}, {&(0x7f0000002a40)=""/4, 0x4}, {&(0x7f0000002a80)=""/86, 0x56}, {&(0x7f0000002b00)=""/233, 0xe9}], 0x4, &(0x7f0000002c40)=""/10, 0xa}, 0x67c0}, {{&(0x7f0000002c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d00)=""/176, 0xb0}, {&(0x7f0000002dc0)=""/88, 0x58}, {&(0x7f0000002e40)=""/199, 0xc7}], 0x3, &(0x7f0000002f80)=""/44, 0x2c}, 0xffffffff}, {{&(0x7f0000002fc0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003280)=[{&(0x7f0000003040)=""/36, 0x24}, {&(0x7f0000003080)=""/235, 0xeb}, {&(0x7f0000003180)=""/169, 0xa9}, {&(0x7f0000003240)=""/52, 0x34}], 0x4, &(0x7f00000032c0)=""/169, 0xa9}, 0x2}, {{&(0x7f0000003380)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000004740)=[{&(0x7f0000003400)=""/238, 0xee}, {&(0x7f0000003500)=""/75, 0x4b}, {&(0x7f0000003580)=""/18, 0x12}, {&(0x7f00000035c0)=""/3, 0x3}, {&(0x7f0000003600)}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/16, 0x10}, {&(0x7f0000004680)=""/142, 0x8e}], 0x8, &(0x7f00000047c0)=""/162, 0xa2}, 0x1}], 0x4, 0x2002, &(0x7f0000004980)={0x0, 0x3938700}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000049c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000004a00)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000004a40)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) write$FUSE_BMAP(r2, &(0x7f0000004ac0)={0x18, 0x0, r1, {0x1}}, 0x18) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000004b00)={@in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x1e, 0x0, "14b839fa11be7f24a10116b9c2348ca851918dc5d1716fc2b049224c7f890030f3e68a5b6ac67f156a6506049b36b80fadd38305889b729da2f186e26299b39a086bf33773ed79ae73930427c91f74a7"}, 0xd8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000004c00)={@my=0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000004c40)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) 2m9.520196146s ago: executing program 5 (id=1952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1014, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000001c0)='nl80211\x00', &(0x7f0000000240)='./file0/file0/file0\x00', r2) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="03c900a8d563f8b69f52caf4d79a4dbabc529f5e0065342230bc155fa0c661ad724858694b31c7a43379d2f0ca0df0c994c8a046cf4d44525c2172e1d81a9ac42bff0f2959203c5808fb894dd01feccea0656daedde4a7639c3d5813772ebad5365e20b88f7d1c24d1c6cee516a3d081d1c1710488bf3da02f8bfd647b51e7313083aa3759a5990279bc7531f09ec84816f25c41be7fab4362f9fbcf8cfd5c2213dfe3d68c00000000000000"], 0xac) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff0000440081"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 2m7.488966592s ago: executing program 5 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004b00004000000000000690780a010101ac1414aa07171200000000ffffffffac141400ac1e00017f0000010000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200009078f500"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004b00004000000000000690780a010101ac1414aa07171200000000ffffffffac141400ac1e00017f0000010000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200009078f500"], 0x0) r3 = syz_usb_connect$cdc_ecm(0x4, 0x84, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0xc0, 0x3, 0x2, 0x6, 0x0, 0xff, {{0xb, 0x24, 0x6, 0x0, 0x0, "53f8a440c181"}, {0x5, 0x24, 0x0, 0x18}, {0xd, 0x24, 0xf, 0x1, 0xf, 0xf69, 0x1, 0x93}, [@mdlm={0x15, 0x24, 0x12, 0x6075}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x0, 0x7ff}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x11, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x9, 0x3e}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x0, 0x7f}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x1, 0x8, 0x7, 0x40, 0x80}, 0x54, &(0x7f0000000500)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d0779c14c3a20692dceb229ff952fac8"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0xa, 0xb}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x7fffffa, 0x0, 0x2, [0x1f70, 0xf, 0x3f37, 0xf, 0xffff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "160b9133e98da0f55f184bc0a1e20e23"}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_disconnect(r3) (async) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x23, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x23, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x2, 0x80805, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) syz_open_dev$dri(0x0, 0x2, 0x2000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r8, r7, 0x0) recvmmsg(r9, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) (async) recvmmsg(r9, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 2m7.201077622s ago: executing program 5 (id=1955): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xf000}, 0x0) 2m7.158825849s ago: executing program 35 (id=1955): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xf000}, 0x0) 2m6.966840473s ago: executing program 1 (id=1912): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x30120, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)) 1m27.604096458s ago: executing program 2 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x2d, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/129, 0x0, 0x0, 0x28}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x23}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/63, 0x0, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/221, 0x0, 0x2, 0x29}}, &(0x7f0000000300)}}], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0213"], 0x10}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) syz_create_resource$binfmt(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0xfd, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa0009061abe2c00640015010400030a0101027f0000017c32f8ac52d876d0406ec4500604aca4676433eb36edc64bd6b2c50c72fb44c78b0c14623c11b46d78aed2acc97d7ce781322cbc8c777698453252ddfae5ad28f130a760e6114d5e38a4b2884053b51655ebd0d138129a4d93e9e801cce284b7b9b1cc33b2127590f000fe08c0f8c75f78501a9137e68e0142956f2712c681f38498142a744cfca13353ab53f49ebdb67cfddc9ffb15351e06da50d0b5630fe31512669f88acc6c0a758da40626e643b88e1"], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79346af081496d0420922f45aa8b610468cd140526c41efcd3a4a42200", 0x4, 0x1, 0x85}, 0x3c) 1m26.992231644s ago: executing program 1 (id=1912): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x30120, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)) 47.05053838s ago: executing program 1 (id=1912): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x30120, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)) 45.780855199s ago: executing program 2 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x2d, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/129, 0x0, 0x0, 0x28}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x23}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/63, 0x0, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/221, 0x0, 0x2, 0x29}}, &(0x7f0000000300)}}], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0213"], 0x10}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) syz_create_resource$binfmt(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0xfd, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa0009061abe2c00640015010400030a0101027f0000017c32f8ac52d876d0406ec4500604aca4676433eb36edc64bd6b2c50c72fb44c78b0c14623c11b46d78aed2acc97d7ce781322cbc8c777698453252ddfae5ad28f130a760e6114d5e38a4b2884053b51655ebd0d138129a4d93e9e801cce284b7b9b1cc33b2127590f000fe08c0f8c75f78501a9137e68e0142956f2712c681f38498142a744cfca13353ab53f49ebdb67cfddc9ffb15351e06da50d0b5630fe31512669f88acc6c0a758da40626e643b88e1"], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79346af081496d0420922f45aa8b610468cd140526c41efcd3a4a42200", 0x4, 0x1, 0x85}, 0x3c) 24.934726222s ago: executing program 7 (id=2127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="6565670f21140f013aeae8000400baa100b087ee0f23aedb938e00660f383ba946baf20f1c405a66b80500000066b9d41800000f01d90f72d101"}], 0x1, 0x11, 0x0, 0xfffffffffffffeff) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="eaff4800003a0065f2d3a4bcf55bdc6c0fc79f9c06268865f4c4c121dc4000b805000000b90b0000000f01d966f30fc73066b81e008ee078b58fe860cdd3ba", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="80b20800000045c4e282f7744e56460f01de410f013ac401a6c2b322b2f22023c744240001000000c744240200800000c7442406000000000f011c240f01cf0f7855190f20d835080000000f22d80f01c5", 0x51}], 0x1, 0x0, &(0x7f0000000280), 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0xc, 0x8c9, &(0x7f0000000100)=0x1}) 24.81716261s ago: executing program 7 (id=2128): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x0, 0x4, 0x0, 0x3}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x78}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 20.390830514s ago: executing program 7 (id=2129): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "ae4e381a36809d0968c7ef3176d70f2dd9e21f34e96de4858d3da62a7d7a70aa46d968768444b1919207e05e643127db00b9a68a65d62e4e7bc0d72b239318b7", 0x26}, 0x48, 0xfffffffffffffffa) r2 = eventfd2(0x707, 0x801) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0xe61, 0xdddd1000, 0x4, r2, 0x2}) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xb1) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000003740)=[{0x2, 0x1, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000200)=""/136, 0x88}], &(0x7f0000000300)=[0xed, 0x9, 0x4, 0x100]}, {0x3, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/46, 0x2e}], &(0x7f0000000540)=[0x2, 0x5]}, {0x3, 0x1, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/18, 0x12}], &(0x7f0000000780)=[0x1, 0x0, 0x7fffffffffffffff, 0x401, 0x0, 0xff]}, {0x3, 0x1, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/47, 0x2f}, {&(0x7f0000000880)=""/237, 0xed}], &(0x7f00000009c0)=[0x9, 0x7a4d, 0x10001, 0x8]}, {0x9, 0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000a00)=""/126, 0x7e}, {&(0x7f0000000a80)=""/41, 0x29}, {&(0x7f0000000ac0)=""/17, 0x11}, {&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000c00)=""/49, 0x31}, {&(0x7f0000000c40)=""/143, 0x8f}, {&(0x7f0000000d00)=""/33, 0x21}, {&(0x7f0000000d40)=""/255, 0xff}, {&(0x7f0000000e40)=""/212, 0xd4}], &(0x7f0000001000)=[0x80000001, 0xc, 0xe3, 0x0, 0x4, 0xf]}, {0x6, 0x1, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)=""/50, 0x32}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/7, 0x7}, {&(0x7f00000020c0)=""/95, 0x5f}, {&(0x7f0000002140)=""/197, 0xc5}, {&(0x7f0000002240)=""/67, 0x43}], &(0x7f0000002340)=[0x6, 0x2, 0x2]}, {0x6, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/69, 0x45}, {&(0x7f0000003400)=""/237, 0xed}, {&(0x7f0000003500)=""/253, 0xfd}, {&(0x7f0000003600)=""/17, 0x11}, {&(0x7f0000003640)}], &(0x7f0000003700)=[0x4, 0x8000000000000000, 0xe42a, 0x4, 0x3]}], 0x7) r3 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000003840)={0x7, 'team_slave_1\x00', {0x1a}, 0xfff9}) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000003880), &(0x7f00000038c0)=0x8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000003900)=0x80041e96) r4 = add_key$keyring(&(0x7f0000003940), &(0x7f0000003980)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$setperm(0x5, r4, 0x100008) r5 = add_key$fscrypt_provisioning(&(0x7f00000039c0), &(0x7f0000003a00)={'syz', 0x0}, &(0x7f0000003a40)={0x2, 0x0, @a}, 0x48, r1) keyctl$unlink(0x9, r5, r4) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000003ac0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r1, 0x0) keyctl$setperm(0x5, r5, 0x2000) keyctl$unlink(0x9, r4, r4) r7 = syz_open_dev$vcsu(&(0x7f0000003b40), 0xb, 0x400) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000003b80)={{0x0, @local, 0x4e24, 0x0, 'fo\x00', 0x8, 0x9, 0x7}, {@broadcast, 0x4e24, 0xa00c, 0x8, 0x6, 0x40}}, 0x44) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000003c40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000003c00)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000003c80)={0x7, 0x8, 0xfa00, {r8, 0x4}}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003e00)={'wg1\x00', &(0x7f0000003cc0)=@ethtool_gstrings={0x1b, 0x1, 0xff, "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"}}) getsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000003e40), &(0x7f0000003e80)=0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000004000)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) 20.335791704s ago: executing program 7 (id=2130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x20, 0x13, 0x0, 0xfffe, 0xc1, 0x7, &(0x7f0000000300)="2bbb5a6f1ce603453e12f429152e248b135fa81b56288b20cb98843d289b17c5b2e30fb01933741e57b0c39ffa6c57214a4810c8ef15504c92c8265f0517a07d6021f04992ded9b0169ba3a12ebff4d3207fe2bfd5de51357499bf17dc8393dc2370496cc1fd63d5fbe0b87a85903b5a22f02a277914131692241be97dac103972531f7f4d2e302dea470b07e2263da406c02f82ed9d4e69a48ad4ad6ab040e4e517467eb4cb311a844824885044e8ca1d965717ba50dccf93643aa784f3e602fd"}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x1}, 0x7, 0x0, 0x4}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040), &(0x7f00000000c0)=""/255, &(0x7f00000001c0), &(0x7f0000000380), 0x6, r0}, 0x38) 20.262765776s ago: executing program 7 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES16=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2874072, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5b, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0105b08, &(0x7f0000000040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r12, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 19.662815957s ago: executing program 1 (id=1912): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x30120, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)) 19.036860491s ago: executing program 6 (id=2139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000ec0)={'virt_wifi0\x00', @remote}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x58, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x97d}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) 18.921500551s ago: executing program 6 (id=2140): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x3]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 18.916936561s ago: executing program 6 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x4f00, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r2, 0x0, 0x0, 0x2101, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x30}}, 0x40) 18.722879576s ago: executing program 6 (id=2142): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x12, 0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@uexit={0x0, 0x18, 0x7}, @code={0x1, 0x4a, {"0f23d0440fc76a0466440f56d0460f78db8f49f00275f266ba4200ec66b834018ec865660f3880a10000000036410f32c4a1c96c9e1e790000"}}, @cpuid={0x2, 0x18, {0x1}}, @cpuid={0x2, 0x18, {0xfffffff7, 0x6a9}}, @cpuid={0x2, 0x18, {0x6, 0x2}}, @uexit={0x0, 0x18, 0x400}, @uexit={0x0, 0x18, 0x1}, @code={0x1, 0x83, {"660f3801fbb966080000b8933dc7b7ba6a37461d0f3048b800800000000000000f23c80f21f8350000c0000f23f866baf80cb8ee721084ef66bafc0cb00aee3ef3460f0966ba4200ed66baf80cb8e5965880ef66bafc0cec65f2a7470f019b0000000066baf80cb81a9d488bef66bafc0cec"}}, @uexit={0x0, 0x18, 0xc879}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x5e, {"663e660f01f80f01c9c401bd680f41da8479f8800000470f01b8d7f40000c4c2f5bfcb66ba430066b882a866ef660f380112b9820900000f3266baf80cb844fc2887ef66bafc0cb8c73578a3ef"}}, @cpuid={0x2, 0x18, {0x7, 0x6}}], 0x203}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000002c0)="f30f080f35670f07660f3a421fb70f21c6660f38417b4e66b9c00a000066b80d00000066ba000000000f3066b9b20200000f32baf80c66b86c73618a66efbafc0c66b80000000066ef660f388218", 0x4e}], 0x1, 0x10, &(0x7f0000000380)=[@dstype0={0x6, 0x5}], 0x1) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1f}, "787278cbbcbf88c482c9e69808868bf5f9a160507a7f9008e8b2ce965f48ea"}, 0x23) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa7}, "348fdfa194ced93e9498268b701425751b4af25c7c3cfdfb639001db15bbe6355d8b458116254730f753d35867ac76a0e277c955cccdfc9e9c10de42a7aae3abe2da4dfc0d38677afdefc641f53a66b25b347d033e3d433f0d26d0f002a4df88dc81ab94e480f54f8ccdc99716c51d2eb8e069e401b775260f0424d0a127db2cbaa60aa28e4e41e9567a65274190ddd670cbec675bd1c2ac6e4345f68e0488d04b54896e421fbe"}, 0xab) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000004c0)=@x86={0x4, 0x4, 0x2, 0x0, 0xa6, 0x5, 0xaf, 0x8, 0xa3, 0x9, 0x6, 0x2, 0x0, 0x2, 0x101, 0x84, 0x1, 0x8, 0x8f, '\x00', 0x1, 0x800}) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x4, 0xc8, 0x5}}}, 0x7) syz_open_dev$I2C(&(0x7f0000000540), 0xfb65, 0x42) r3 = signalfd(r1, &(0x7f0000000580)={[0x8]}, 0x8) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000005c0)={0x80}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000e40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000740)={0x6b4, r5, 0xdd0f19ee15c08836, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_CSA_IES={0x66c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x7ff, 0x5, 0x3, 0xf, 0x5, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x9, 0x3ff, 0x8371, 0xe, 0x7e9, 0x1]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2b8, 0xf, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x1, 0x0, {0xa51e, 0x6, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x1}}, @cf={0x4, 0x6, {0x9, 0xb, 0xffff, 0x4a35}}, @perr={0x84, 0x2, {0xe}}, @fast_bss_trans={0x37, 0xf2, {0x6, 0x6, "ea928f421e80df4cade98f8e10ea96a3", "32623683ddcdfb0ca30b9163abce248af3aede36ed8d08af7bcd40ed9d3b3a58", "521f0c0835fbe8ae822f714bfddfbdbd5155281ce4581dfe24e8a183e3c9ee08", [{0x2, 0x20, "9e7585237d4677a1957ea4d0baccf0e2942d99c1410eb48c1e836a265aac77f7"}, {0x3, 0x4, "ddaf0270"}, {0x4, 0x28, "2112655dfd283f3d7c1cae7a634e2df22f2ec6b0db0677ad7bcb7cc90d70300420de24883f1796c6"}, {0x4, 0x28, "6b5d60bc65c1f374cd49c6a02d08276fdadb20a3879a0b140b62f9475fb2d90398abbb81229008fb"}, {0x4, 0x1b, "7b12be01409ec81180d368ad49d7ab02835d57ddc2de0617a57d1c"}, {0x3, 0x5, "5e217f34d7"}]}}, @random_vendor={0xdd, 0x7b, "32b9c085fa0be04ba16e7f04f3ca43f330867e46ee8120aaf4a0d7c818eb1b118076263eb2e29a4ae2124d45123fcecd6a52f1cac0fe0c1e5930fd2966793dfe0ad9ad3d4a65afb0afea70b803b1fd88acbe635cbde6b695808a8f4238be325b99ac3a77f576bd05f65db10b889688ad3af7ee9863c2e64b89232a"}, @dsss={0x3, 0x1, 0x99}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x10b, {0x0, 0x8, "aa5ac459e335efa72723c86016022c99", "ab93f729985dc7991ca5e50321268e8bf6497bbc3d16d9624867d34ca61f3321", "35debcc96f0a49635273736c23ef24960c166652b8555823110af42922caacbe", [{0x2, 0x16, "b0acf3e60877f4a96f72dc203c81851b2bf0c9b45eaf"}, {0x1, 0x17, "43d33e426c8672571e9e79c1a3fdf9da064ca294f5d10a"}, {0x1, 0x23, "0e8f2105a410b844bf922f483372a15d30a8e34a0ad084530143dbda1966d309baca25"}, {0x3, 0xd, "653df8f14e38c20536da081006"}, {0x3, 0x1c, "a6978cf73446cbe621dab5ce09ac7e2a311ec0dca01d26395a4fdfd8"}, {0x3, 0x9, "2dbd56fd9b7396764a"}, {0x4, 0x8, "7f9a6d52f38d06b1"}, {0x2, 0x1f, "c1c3b2239626244408e78fcf9fbd97bdac63bc49414686bf6f1a751c39e51e"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x42, 0x7f, [@dsss={0x3, 0x1, 0xa1}, @supported_rates={0x1, 0x6, [{0x1}, {0x9}, {0x60, 0x1}, {0x12, 0x1}, {0x9, 0x1}, {0x1, 0x1}]}, @gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6, {0x0, 0x0, 0x50b, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf3, 0xc, 0x8}}, @chsw_timing={0x68, 0x4, {0x5, 0x5}}, @chsw_timing={0x68, 0x4, {0x8f3, 0xffff}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, @mesh_chsw={0x76, 0x6, {0xff, 0x8, 0xf, 0x8000}}]}, @NL80211_ATTR_BEACON_TAIL={0x33, 0xf, [@supported_rates={0x1, 0x1, [{0x3}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x333}, @challenge={0x10, 0x1, 0x2b}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x68, 0x5}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x1, 0x7, @device_a, 0xfffffff8, 0x8, 0x1}}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xa8, 0x3, "e1a76c9fca84d960cd0402f38fff2ca8f83484cec264fc3c970ae0f30be3f418c2bc6864ecdad6001606daf66933a96cb751bf6f1658f01a465bba25e15151713bce8e05eb355cc351ed5a1506f2bcd9d6936a7608e72e8fb9251246119b033733c936318172310275de393b3966e1bd70f3a5126aa5abd1d950c96cfb86d586feb9d1828c2e8511717fd21195d10917c41f9acb5070f12384b80175ebc4b68755e53d61"}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x2, 0x4}}, @dsss={0x3, 0x1, 0x95}, @tim={0x5, 0xa5, {0xb, 0x91, 0x8, "71c1ae791df335b13834d16f58f45061af9c1ed324d1e98eee4090fa7ee1c1cfa59ef202d879096e9cb9816c14dc5b65a4599036f0a91d68b594d1934c97ea545cf0cd0f08ebbbacb280fd2cf10279c5743bce0786c37600b3899dd88868c9d24b93ce831ea043051d00c43fe04df5bbb40988e80286a3882fa3f8f94617a4b68521ad10d38d0391f0678630e1f96c2c2349ed185cf12bc605f6b38f4dfa2172ebdf"}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0xc4, 0xc, 0x26, 0xc82}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1a1, 0x80, [@supported_rates={0x1, 0x5, [{0x9}, {0x24, 0x1}, {0xc}, {0x3, 0x1}, {0x18}]}, @tim={0x5, 0x59, {0x2, 0x22, 0x6, "27667dafcd4c3728baea0700ad2b14584f11cca66d356190cf03136546f72596011baf60e6ebb7cbfa5529a4c23ac5007c72ebf462c00cddd872944a55c40758603587631955b8cb2adefdaafcc988a30dd4ab352655"}}, @random_vendor={0xdd, 0x81, "16f90204e305a77730291abda015d1c0659744b9dfc089516d6676842e9c2854d40cc16353a88a2332f725ee0fd83a53e3110d10240e72e4736a25fabb28958735c7ef5c0731a1fb60e738bab173325af63429f1755203127e37a61d63bc3958e449540c596b1d2d19da6a0cfdaad1863fa173113594e03c173c0cad997d17d5a4"}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x1, 0x71, @broadcast, 0x1, 0x369f8000, 0x4}}, @fast_bss_trans={0x37, 0x9f, {0x1, 0x3, "41d4e5d9c79d51416554a11d661b1d18", "cb484906e5cfa8cb2d377a4f7cfbf28c7e794f502f3795f7445b9cf66e452543", "7b64333f8d17161a4a7b839ec985543455981bd8b82a8cd9581a9e317bc1d8de", [{0x2, 0x8, "92d1453871ae0bdc"}, {0x4, 0x22, "0abe8143d2ead3f6b98bc4b5decc093c5bb67f8f10436cc80862ecfdc8bcd68e6f11"}, {0x1, 0x1d, "8b655cbbbb3fd4e850018dfc0601de14d46cf79253c7525e849bd918c6"}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x4]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8895}, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0xc}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) write$cgroup_subtree(r3, &(0x7f00000010c0)={[{0x2d, 'perf_event'}, {0x2d, 'net'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x2b, 'net'}, {0x2d, 'rlimit'}]}, 0x2b) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000001400)={0x100, 0x9, 0x9, 0xf0, &(0x7f0000001100)=""/240, 0xff, &(0x7f0000001200)=""/255, 0xf7, &(0x7f0000001300)=""/247}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xc4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x88}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x20}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x81}, @ETHTOOL_A_LINKMODES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = open$dir(&(0x7f0000001600)='./file0\x00', 0x58ec0ee12e3e7851, 0x140) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000001640), &(0x7f0000001680), 0x2, 0x3) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001700), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x54, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x90}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x1) 18.722122098s ago: executing program 6 (id=2143): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18.659199136s ago: executing program 6 (id=2144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009001c00f00000005d9768197fe000000000000000"], 0x34}}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x27}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) dup3(r2, r0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) close(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x43, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009001c00f00000005d9768197fe000000000000000"], 0x34}}, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x27}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r4) (async) socket$netlink(0x10, 0x3, 0x4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) (async) dup3(r2, r0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) close(r5) (async) 17.695913151s ago: executing program 2 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x2d, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/129, 0x0, 0x0, 0x28}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x23}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/63, 0x0, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/221, 0x0, 0x2, 0x29}}, &(0x7f0000000300)}}], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0213"], 0x10}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) syz_create_resource$binfmt(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0xfd, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa0009061abe2c00640015010400030a0101027f0000017c32f8ac52d876d0406ec4500604aca4676433eb36edc64bd6b2c50c72fb44c78b0c14623c11b46d78aed2acc97d7ce781322cbc8c777698453252ddfae5ad28f130a760e6114d5e38a4b2884053b51655ebd0d138129a4d93e9e801cce284b7b9b1cc33b2127590f000fe08c0f8c75f78501a9137e68e0142956f2712c681f38498142a744cfca13353ab53f49ebdb67cfddc9ffb15351e06da50d0b5630fe31512669f88acc6c0a758da40626e643b88e1"], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79346af081496d0420922f45aa8b610468cd140526c41efcd3a4a42200", 0x4, 0x1, 0x85}, 0x3c) 16.070820795s ago: executing program 7 (id=2145): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) sendmmsg$inet6(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="77a030a190fe1541", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="b48b", 0x2}], 0x1}}], 0x2, 0x4) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="344dbc7a8386733e099a2e87c4fbdceef254e498aaaec8677bef91b854e948f20b099ca134f7da7856ed16ae152e119cd91842a9a73c511853c923812340a3a62c440e6328cb857115d54f9f834499f6197ae85a2ea0ecd2f675795bf9db5436", 0x60}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x240008c5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x81) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x90}}, 0x0) 2.150953492s ago: executing program 36 (id=2144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009001c00f00000005d9768197fe000000000000000"], 0x34}}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x27}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) dup3(r2, r0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) close(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x43, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009001c00f00000005d9768197fe000000000000000"], 0x34}}, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x27}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r4) (async) socket$netlink(0x10, 0x3, 0x4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) (async) dup3(r2, r0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) close(r5) (async) 0s ago: executing program 37 (id=2145): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) sendmmsg$inet6(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="77a030a190fe1541", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="b48b", 0x2}], 0x1}}], 0x2, 0x4) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="344dbc7a8386733e099a2e87c4fbdceef254e498aaaec8677bef91b854e948f20b099ca134f7da7856ed16ae152e119cd91842a9a73c511853c923812340a3a62c440e6328cb857115d54f9f834499f6197ae85a2ea0ecd2f675795bf9db5436", 0x60}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x240008c5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x81) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x90}}, 0x0) kernel console output (not intermixed with test programs): 6-1: Using ep0 maxpacket: 8 [ 294.819332][ T1334] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 294.821901][ T1334] usb 6-1: config 0 has no interface number 0 [ 294.824294][ T1334] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.834375][ T1334] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 294.837932][ T1334] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.844287][ T1334] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.848540][ T1334] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 294.853822][ T1334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.857851][ T1334] usb 6-1: config 0 descriptor?? [ 294.862272][ T1334] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 294.862913][T12488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12488 comm=syz.5.1782 [ 295.144248][T11806] usb 6-1: USB disconnect, device number 19 [ 295.146688][ C2] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 295.148913][T12461] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 295.151986][T11806] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 295.226354][T12461] CIFS mount error: No usable UNC path provided in device string! [ 295.226354][T12461] [ 295.229751][T12461] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 295.380772][ T40] audit: type=1400 audit(281.100:30968): avc: denied { connect } for pid=12498 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.491662][ T40] audit: type=1400 audit(281.203:30969): avc: denied { create } for pid=12501 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.497627][ T40] audit: type=1400 audit(281.213:30970): avc: denied { bind } for pid=12501 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.504545][ T40] audit: type=1400 audit(281.213:30971): avc: denied { setopt } for pid=12501 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.526447][ T40] audit: type=1400 audit(281.241:30972): avc: denied { read } for pid=12501 comm="syz.1.1787" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.535349][ T40] audit: type=1400 audit(281.241:30973): avc: denied { open } for pid=12501 comm="syz.1.1787" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.542300][ T40] audit: type=1400 audit(281.241:30974): avc: denied { prog_load } for pid=12501 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 295.548351][ T40] audit: type=1400 audit(281.241:30975): avc: denied { bpf } for pid=12501 comm="syz.1.1787" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 295.554793][ T40] audit: type=1400 audit(281.241:30976): avc: denied { perfmon } for pid=12501 comm="syz.1.1787" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 295.897284][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1788'. [ 296.017760][T12510] block nbd1: shutting down sockets [ 296.322818][T12514] Invalid option length (1047906) for dns_resolver key [ 296.325648][ T24] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 296.508740][ T24] usb 11-1: unable to get BOS descriptor set [ 296.511508][ T24] usb 11-1: config 0 has an invalid interface number: 175 but max is 1 [ 296.514100][ T24] usb 11-1: config 0 has an invalid interface number: 149 but max is 1 [ 296.516723][ T24] usb 11-1: config 0 has no interface number 0 [ 296.518840][ T24] usb 11-1: config 0 has no interface number 1 [ 296.520859][ T24] usb 11-1: config 0 interface 175 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.524279][ T24] usb 11-1: config 0 interface 175 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 296.527421][ T24] usb 11-1: config 0 interface 175 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 296.530940][ T24] usb 11-1: config 0 interface 175 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.534364][ T24] usb 11-1: config 0 interface 175 altsetting 2 bulk endpoint 0xD has invalid maxpacket 64 [ 296.537511][ T24] usb 11-1: config 0 interface 175 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 296.541033][ T24] usb 11-1: config 0 interface 175 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 296.544624][ T24] usb 11-1: config 0 interface 175 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 296.548174][ T24] usb 11-1: config 0 interface 175 altsetting 2 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 296.551892][ T24] usb 11-1: config 0 interface 175 altsetting 2 endpoint 0x8B has an invalid bInterval 114, changing to 7 [ 296.555412][ T24] usb 11-1: config 0 interface 175 altsetting 2 endpoint 0x8B has invalid maxpacket 25080, setting to 1024 [ 296.558942][ T24] usb 11-1: config 0 interface 175 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 8 [ 296.562178][ T24] usb 11-1: config 0 interface 175 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 296.565590][ T24] usb 11-1: config 0 interface 175 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 296.568920][ T24] usb 11-1: config 0 interface 175 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 296.572584][ T24] usb 11-1: config 0 interface 175 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 296.575948][ T24] usb 11-1: config 0 interface 175 altsetting 2 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 296.580091][ T24] usb 11-1: config 0 interface 175 has no altsetting 0 [ 296.582385][ T24] usb 11-1: config 0 interface 149 has no altsetting 0 [ 296.586202][ T24] usb 11-1: New USB device found, idVendor=07b8, idProduct=8179, bcdDevice=c3.32 [ 296.589063][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.591649][ T24] usb 11-1: Product: 율æµç¢î»®ä¬¯ä—°å’žà¼î‰®ä¦‹ä€‡áž‹á–·ê¯†çª‚㟂ᬳ㒃ᅷ⚠å¿ëŸ‹éƒ¬á–»î€†í‹©è®è‡‹ç•™ãªŠá²¸è²¾é§ï±Ÿä¯±èŠ‰î³ì„Žâ²žãš§é¸µï—ºîœî•îŽ¡í‹¤ï‘³ä¿£ã²¨éƒ¼ä¢†èž¾ê‡ªãœ¼ÇƒæˆšáŽªá’·äº ì¥‚츭 [ 296.597854][ T24] usb 11-1: SerialNumber: syz [ 296.601548][ T24] usb 11-1: config 0 descriptor?? [ 296.605319][T12512] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 296.608507][T12512] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 296.612030][T12512] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 296.804255][T12525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.852383][ T24] usb 11-1: USB disconnect, device number 8 [ 296.864536][ T5353] udevd[5353]: worker [5947] terminated by signal 33 (Unknown signal 33) [ 296.867944][ T5353] udevd[5353]: worker [5947] failed while handling '/devices/platform/dummy_hcd.6/usb11/11-1' [ 297.242705][ T6218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.085769][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.091947][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.095828][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.100430][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.103139][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.123929][T12545] lo speed is unknown, defaulting to 1000 [ 298.235491][T12545] chnl_net:caif_netlink_parms(): no params data found [ 298.292858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 298.307300][T12545] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.310373][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.313621][T12545] bridge_slave_0: entered allmulticast mode [ 298.316967][T12545] bridge_slave_0: entered promiscuous mode [ 298.320005][T12545] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.322252][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.324525][T12545] bridge_slave_1: entered allmulticast mode [ 298.327428][T12545] bridge_slave_1: entered promiscuous mode [ 298.361521][T12545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.365885][T12545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.377729][ T6240] tipc: Subscription rejected, illegal request [ 298.460854][T12545] team0: Port device team_slave_0 added [ 298.465049][T12545] team0: Port device team_slave_1 added [ 298.513312][T12545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.515764][T12545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.525420][T12545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.532688][T12545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.535049][T12545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.549519][T12545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.590345][T12545] hsr_slave_0: entered promiscuous mode [ 298.594402][T12545] hsr_slave_1: entered promiscuous mode [ 298.597756][T12545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.600810][T12545] Cannot create hsr debugfs directory [ 298.723531][T12589] random: crng reseeded on system resumption [ 298.951043][ T6218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.035587][T12595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.080226][ T6218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.187511][ T6218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.419270][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1827'. [ 299.460255][ T6218] bridge_slave_1: left allmulticast mode [ 299.462085][ T6218] bridge_slave_1: left promiscuous mode [ 299.463945][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.470032][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 299.470045][ T40] audit: type=1400 audit(284.926:31088): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.491005][ T6218] bridge_slave_0: left allmulticast mode [ 299.493386][ T6218] bridge_slave_0: left promiscuous mode [ 299.495888][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.524356][ T40] audit: type=1400 audit(284.982:31089): avc: denied { bind } for pid=12643 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.530694][ T40] audit: type=1400 audit(284.982:31090): avc: denied { node_bind } for pid=12643 comm="syz.1.1830" saddr=fe80::32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 300.313330][ T5954] Bluetooth: hci0: command tx timeout [ 301.534757][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.587523][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.640139][ T6218] bond0 (unregistering): Released all slaves [ 301.692124][ T40] audit: type=1400 audit(287.003:31091): avc: denied { read } for pid=12655 comm="syz.6.1833" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 301.699886][ T40] audit: type=1400 audit(287.003:31092): avc: denied { open } for pid=12655 comm="syz.6.1833" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 301.710211][ T40] audit: type=1400 audit(287.003:31093): avc: denied { ioctl } for pid=12655 comm="syz.6.1833" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 301.745620][ T40] audit: type=1400 audit(287.049:31094): avc: denied { create } for pid=12656 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.753132][ T40] audit: type=1400 audit(287.059:31095): avc: denied { setopt } for pid=12656 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.760925][ T40] audit: type=1400 audit(287.059:31096): avc: denied { create } for pid=12656 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.766748][ T40] audit: type=1400 audit(287.059:31097): avc: denied { bind } for pid=12656 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.134864][T12676] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 302.140997][T12676] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 302.527168][ T6218] hsr_slave_0: left promiscuous mode [ 302.530210][ T6218] hsr_slave_1: left promiscuous mode [ 302.533101][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.536392][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.537028][ T5954] Bluetooth: hci0: command tx timeout [ 302.544827][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.547653][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.586507][ T6218] veth1_macvtap: left promiscuous mode [ 302.588686][ T6218] veth0_macvtap: left promiscuous mode [ 302.591238][ T6218] veth1_vlan: left promiscuous mode [ 302.593676][ T6218] veth0_vlan: left promiscuous mode [ 302.824394][T12688] syz.6.1843: attempt to access beyond end of device [ 302.824394][T12688] sr0: rw=0, sector=4, nr_sectors = 4 limit=0 [ 302.829489][T12688] vxfs: unable to read disk superblock at 1 [ 302.831691][T12688] syz.6.1843: attempt to access beyond end of device [ 302.831691][T12688] sr0: rw=0, sector=32, nr_sectors = 4 limit=0 [ 302.835747][T12688] vxfs: unable to read disk superblock at 8 [ 302.837831][T12688] vxfs: can't find superblock. [ 303.096624][ T9] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 303.263030][T12692] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1845'. [ 303.265764][ T9] usb 10-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 303.270102][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 303.274052][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 303.278205][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.281836][ T9] usb 10-1: Product: syz [ 303.283290][ T9] usb 10-1: Manufacturer: syz [ 303.284921][ T9] usb 10-1: SerialNumber: syz [ 303.290774][T12689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 303.397865][T12696] usb usb8: usbfs: process 12696 (syz.1.1846) did not claim interface 0 before use [ 303.404140][T12697] usb usb8: usbfs: process 12697 (syz.1.1846) did not claim interface 0 before use [ 304.760697][ T5954] Bluetooth: hci0: command tx timeout [ 306.984239][ T5954] Bluetooth: hci0: command tx timeout [ 309.981981][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 310.932690][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 317.400386][T12545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.401573][ T10] usb 10-1: USB disconnect, device number 10 [ 317.410732][T12545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.417310][T12545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.422597][T12545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.424638][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 317.426465][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 317.426475][ T40] audit: type=1400 audit(301.717:31118): avc: denied { mount } for pid=12704 comm="syz.6.1849" name="/" dev="ramfs" ino=50090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 317.452308][ T40] audit: type=1400 audit(301.754:31119): avc: denied { mounton } for pid=12702 comm="syz.1.1848" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 317.466453][T12703] hpfs: Bad magic ... probably not HPFS [ 317.484485][T12545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.496563][T12545] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.515965][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.520921][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.528809][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.531741][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.564168][T12545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.567324][T12545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.567617][ T40] audit: type=1400 audit(301.847:31120): avc: denied { read } for pid=12711 comm="syz.5.1852" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 317.584942][ T40] audit: type=1400 audit(301.847:31121): avc: denied { open } for pid=12711 comm="syz.5.1852" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 317.651302][ T40] audit: type=1400 audit(301.932:31122): avc: denied { ioctl } for pid=12711 comm="syz.5.1852" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 317.663798][T12545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.687190][T12545] veth0_vlan: entered promiscuous mode [ 317.692513][T12545] veth1_vlan: entered promiscuous mode [ 317.705817][T12545] veth0_macvtap: entered promiscuous mode [ 317.711022][T12545] veth1_macvtap: entered promiscuous mode [ 317.720495][T12545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.726337][T12545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.731296][T12545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.734063][T12545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.736753][T12545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.739760][T12545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.746194][T12720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1853'. [ 317.783695][ T6240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.786139][ T6240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.801101][ T40] audit: type=1400 audit(302.072:31123): avc: denied { getopt } for pid=12719 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.842900][ T40] audit: type=1400 audit(302.109:31124): avc: denied { create } for pid=12722 comm="syz.5.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 317.849878][ T40] audit: type=1400 audit(302.109:31125): avc: denied { connect } for pid=12722 comm="syz.5.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 317.855750][ T40] audit: type=1400 audit(302.109:31126): avc: denied { write } for pid=12722 comm="syz.5.1854" path="socket:[53175]" dev="sockfs" ino=53175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 317.860848][ T6247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.865467][ T6247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.869268][ T40] audit: type=1400 audit(302.109:31127): avc: denied { ioctl } for pid=12722 comm="syz.5.1854" path="socket:[53785]" dev="sockfs" ino=53785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 318.191205][T12727] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 318.193971][T12727] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.198726][T12727] vhci_hcd vhci_hcd.0: Device attached [ 318.217817][T12732] vhci_hcd: connection closed [ 318.218027][ T6240] vhci_hcd: stop threads [ 318.221046][ T6240] vhci_hcd: release socket [ 318.222581][ T6240] vhci_hcd: disconnect device [ 318.384248][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1857'. [ 318.476862][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1859'. [ 318.555835][T12746] x_tables: duplicate underflow at hook 1 [ 318.936498][ T10] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 319.020989][T12760] netlink: 'syz.5.1864': attribute type 4 has an invalid length. [ 319.028299][T12760] netlink: 'syz.5.1864': attribute type 4 has an invalid length. [ 319.058946][T12760] netlink: 'syz.5.1864': attribute type 4 has an invalid length. [ 319.059040][T12762] netlink: 'syz.5.1864': attribute type 4 has an invalid length. [ 319.097471][ T10] usb 11-1: too many configurations: 250, using maximum allowed: 8 [ 319.100871][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1865'. [ 319.102255][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 319.111923][ T10] usb 11-1: can't read configurations, error -61 [ 319.246960][ T10] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 319.400118][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 319.407364][ T10] usb 11-1: too many configurations: 250, using maximum allowed: 8 [ 319.411252][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 319.413669][ T10] usb 11-1: can't read configurations, error -61 [ 319.415915][ T10] usb usb11-port1: attempt power cycle [ 319.770194][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 319.780935][ T10] usb 11-1: new low-speed USB device number 11 using dummy_hcd [ 319.803127][ T10] usb 11-1: too many configurations: 250, using maximum allowed: 8 [ 319.807026][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 319.809976][ T10] usb 11-1: can't read configurations, error -61 [ 319.930606][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 319.934276][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.937529][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 319.940389][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 319.941307][ T10] usb 11-1: new low-speed USB device number 12 using dummy_hcd [ 319.944023][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 319.949825][ T24] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 319.952924][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.959138][ T24] hub 6-1:1.0: bad descriptor, ignoring hub [ 319.961079][ T24] hub 6-1:1.0: probe with driver hub failed with error -5 [ 319.963441][ T10] usb 11-1: too many configurations: 250, using maximum allowed: 8 [ 319.964480][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 319.967910][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 319.968610][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 319.971938][ T10] usb 11-1: can't read configurations, error -61 [ 319.974217][ T10] usb usb11-port1: unable to enumerate USB device [ 319.974494][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 319.978249][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 320.284846][ T10] usb 6-1: USB disconnect, device number 20 [ 320.578757][ T6247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.370463][T12783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1870'. [ 321.416020][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.422273][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.426169][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.430246][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.434868][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.851698][T12785] lo speed is unknown, defaulting to 1000 [ 322.030981][T12785] chnl_net:caif_netlink_parms(): no params data found [ 322.130997][T12785] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.133861][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.136177][T12785] bridge_slave_0: entered allmulticast mode [ 322.137182][T12812] syz.6.1875: attempt to access beyond end of device [ 322.137182][T12812] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 322.138932][T12785] bridge_slave_0: entered promiscuous mode [ 322.143682][T12812] vxfs: unable to read disk superblock at 1 [ 322.146442][T12812] syz.6.1875: attempt to access beyond end of device [ 322.146442][T12812] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 322.147159][T12785] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.150403][T12812] vxfs: unable to read disk superblock at 8 [ 322.152650][T12785] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.154800][T12812] vxfs: can't find superblock. [ 322.157155][T12785] bridge_slave_1: entered allmulticast mode [ 322.161070][T12785] bridge_slave_1: entered promiscuous mode [ 322.195047][T12785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.266279][ T6247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.277146][T12785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.322108][T12785] team0: Port device team_slave_0 added [ 322.330764][T12785] team0: Port device team_slave_1 added [ 322.390867][ T6247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.422108][ T5943] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 322.508788][ T6247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.516738][T12785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.519049][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.528624][T12785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.534538][T12785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.537222][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.546875][T12785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.604469][ T5943] usb 10-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.608599][ T5943] usb 10-1: config 1 interface 0 has no altsetting 0 [ 322.610773][T12785] hsr_slave_0: entered promiscuous mode [ 322.612376][ T5943] usb 10-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.40 [ 322.616280][ T5943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.616459][T12785] hsr_slave_1: entered promiscuous mode [ 322.619430][ T5943] usb 10-1: Product: 댌 [ 322.619447][ T5943] usb 10-1: Manufacturer: 䵂㠗儨ᑕ벹é–콿쉹﹮謕賔쪚匂俆ì«í™œï±é‚䯽㥯慼腌஭ഢ릮갴쇈츎ㅪꃗí ç œå‹è‹¼Û¢î–‹æ‡“墊ⲫ᫥ષíŽæ”ªî£ç¡ë¬£Ü•ç‰ºå¡“ᒇ虊汦뵗á幊轃乤๡ኣéŸï©§ï™½ìŠ©î‘¡áŸƒ×šì¤ï‘¿æ§œã§½íŠ ê†µä”€ï£»ì¯°ïªë¶ºç”šìµ®îƒˆëœµ [ 322.621633][T12785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.622999][ T5943] usb 10-1: SerialNumber: â ‰ [ 322.631162][T12785] Cannot create hsr debugfs directory [ 322.790869][ T6247] bridge_slave_1: left allmulticast mode [ 322.792599][ T6247] bridge_slave_1: left promiscuous mode [ 322.794429][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.798343][ T6247] bridge_slave_0: left allmulticast mode [ 322.800116][ T6247] bridge_slave_0: left promiscuous mode [ 322.801960][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.984966][T12818] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1879'. [ 323.073207][ T5943] usbhid 10-1:1.0: can't add hid device: -71 [ 323.075348][ T5943] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 323.081583][ T5943] usb 10-1: USB disconnect, device number 11 [ 323.629912][T12820] delete_channel: no stack [ 323.661821][ T5954] Bluetooth: hci0: command tx timeout [ 323.814456][T12777] cdc_wdm 6-1:1.0: Error autopm - -16 [ 323.818298][T12778] cdc_wdm 6-1:1.0: Error autopm - -16 [ 323.917415][T12824] overlayfs: missing 'lowerdir' [ 323.923514][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 323.923527][ T40] audit: type=1400 audit(307.797:31154): avc: denied { read } for pid=12822 comm="syz.1.1881" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.936161][ T40] audit: type=1400 audit(307.797:31155): avc: denied { open } for pid=12822 comm="syz.1.1881" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.945379][ T40] audit: type=1400 audit(307.806:31156): avc: denied { ioctl } for pid=12822 comm="syz.1.1881" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.956697][ T40] audit: type=1400 audit(307.806:31157): avc: denied { read } for pid=12822 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.690879][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.733892][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.796797][ T6247] bond0 (unregistering): Released all slaves [ 324.857904][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1883'. [ 324.971502][ T40] audit: type=1400 audit(308.779:31158): avc: denied { open } for pid=12841 comm="syz.1.1888" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 324.983836][ T40] audit: type=1400 audit(308.779:31159): avc: denied { ioctl } for pid=12841 comm="syz.1.1888" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 324.991925][ T40] audit: type=1400 audit(308.779:31160): avc: denied { setcurrent } for pid=12840 comm="syz.6.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 324.997972][ T40] audit: type=1400 audit(308.807:31161): avc: denied { nlmsg_read } for pid=12840 comm="syz.6.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 325.014754][ T40] audit: type=1400 audit(308.816:31162): avc: denied { associate } for pid=12845 comm="syz.5.1889" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 325.015105][T12846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1889'. [ 325.161155][ T40] audit: type=1400 audit(308.957:31163): avc: denied { map } for pid=12850 comm="syz.5.1891" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 325.281565][T12859] syzkaller0: entered promiscuous mode [ 325.283580][T12859] syzkaller0: entered allmulticast mode [ 325.525990][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1896'. [ 325.680863][ T6247] hsr_slave_0: left promiscuous mode [ 325.683205][ T6247] hsr_slave_1: left promiscuous mode [ 325.685178][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.687499][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.690273][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.692637][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.725724][ T6247] veth1_macvtap: left promiscuous mode [ 325.727701][ T6247] veth0_macvtap: left promiscuous mode [ 325.729494][ T6247] veth1_vlan: left promiscuous mode [ 325.731149][ T6247] veth0_vlan: left promiscuous mode [ 325.885230][ T5954] Bluetooth: hci0: command tx timeout [ 326.193450][T12889] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1903'. [ 328.108909][ T5954] Bluetooth: hci0: command tx timeout [ 330.343213][ T5954] Bluetooth: hci0: command tx timeout [ 332.859133][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 333.499149][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.501185][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.758455][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 338.972256][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.132298][T12785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.136359][T12785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.145227][T12785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.150786][T12785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.175403][T12896] tmpfs: Bad value for 'mpol' [ 340.177348][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 340.177360][ T40] audit: type=1400 audit(322.997:31176): avc: denied { read write } for pid=12895 comm="syz.6.1904" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 340.177892][T12896] binder: 12895:12896 ioctl c018620c 2000000000c0 returned -22 [ 340.184790][ T40] audit: type=1400 audit(322.997:31177): avc: denied { open } for pid=12895 comm="syz.6.1904" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 340.192196][T12899] Bluetooth: MGMT ver 1.23 [ 340.196672][ T40] audit: type=1400 audit(322.997:31178): avc: denied { ioctl } for pid=12895 comm="syz.6.1904" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 340.199679][T12899] Bluetooth: hci0: load_link_keys: too big key_count value 6144 [ 340.203220][T12785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.207845][ T40] audit: type=1400 audit(323.016:31179): avc: denied { write } for pid=12897 comm="syz.1.1906" path="socket:[55575]" dev="sockfs" ino=55575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.212806][T12785] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.225719][T12898] team0: Device gtp1 is of different type [ 340.371777][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.373985][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.377148][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.379311][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.389663][ T40] audit: type=1400 audit(323.203:31180): avc: denied { name_bind } for pid=12902 comm="syz.6.1908" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 340.397177][ T40] audit: type=1400 audit(323.212:31181): avc: denied { create } for pid=12904 comm="syz.5.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 340.403841][ T40] audit: type=1400 audit(323.212:31182): avc: denied { read } for pid=12904 comm="syz.5.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 340.446891][ T40] audit: type=1400 audit(323.259:31183): avc: denied { connect } for pid=12908 comm="syz.1.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.452758][ T40] audit: type=1400 audit(323.259:31184): avc: denied { write } for pid=12908 comm="syz.1.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.460082][ T40] audit: type=1400 audit(323.259:31185): avc: denied { write } for pid=12908 comm="syz.1.1909" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 340.546416][T12785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.566418][T12785] veth0_vlan: entered promiscuous mode [ 340.571035][T12785] veth1_vlan: entered promiscuous mode [ 340.584345][T12785] veth0_macvtap: entered promiscuous mode [ 340.588484][T12785] veth1_macvtap: entered promiscuous mode [ 340.604602][T12785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.619511][T12785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.624892][T12785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.629514][T12785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.633036][T12785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.636449][T12785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.721560][ T6218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.724485][ T6218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.736564][ T6218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.739138][ T6218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.135175][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.139699][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.146863][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.153746][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.157222][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.177958][T12918] lo speed is unknown, defaulting to 1000 [ 341.284673][T12918] chnl_net:caif_netlink_parms(): no params data found [ 341.343236][T12930] random: crng reseeded on system resumption [ 341.348043][T12930] Restarting kernel threads ... [ 341.350273][T12930] Done restarting kernel threads. [ 341.353171][T12930] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 341.364854][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1915'. [ 341.386104][T12918] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.389021][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.391285][T12918] bridge_slave_0: entered allmulticast mode [ 341.394035][T12918] bridge_slave_0: entered promiscuous mode [ 341.397402][T12918] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.399636][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.401816][T12918] bridge_slave_1: entered allmulticast mode [ 341.404429][T12918] bridge_slave_1: entered promiscuous mode [ 341.609610][T12918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.615189][T12918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.660550][T12940] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 341.662729][T12940] [U] J"—e:ÀÆ" [ 341.668539][T12918] team0: Port device team_slave_0 added [ 341.676143][T12918] team0: Port device team_slave_1 added [ 341.708470][T12918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.710766][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.718796][T12918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.725141][T12918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.727303][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.735305][T12918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.836324][T12918] hsr_slave_0: entered promiscuous mode [ 341.838875][T12918] hsr_slave_1: entered promiscuous mode [ 341.841048][T12918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.843494][T12918] Cannot create hsr debugfs directory [ 342.139411][T12918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.162063][T12958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=122 sclass=netlink_tcpdiag_socket pid=12958 comm=syz.6.1924 [ 342.173697][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1925'. [ 342.265584][T12918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.455812][ T34] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 342.492342][T12918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.637579][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 342.641361][ T34] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 342.643987][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.646969][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.650092][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 32288, setting to 1024 [ 342.653519][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 342.656590][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.660826][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.663598][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.884152][ T34] usb 11-1: usb_control_msg returned -32 [ 342.885937][ T34] usbtmc 11-1:16.0: can't read capabilities [ 342.938859][T12918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.005816][ T6247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.152276][T12918] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.156081][T12918] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.159747][T12918] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.164089][T12918] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.207925][T12918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.217358][T12918] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.223385][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.225622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.231466][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.233597][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.262363][T12974] usbtmc 11-1:16.0: INITIATE_ABORT_BULK_OUT returned f1 [ 343.332375][ T5954] Bluetooth: hci0: command tx timeout [ 343.351284][T12918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.373309][T12918] veth0_vlan: entered promiscuous mode [ 343.378823][T12918] veth1_vlan: entered promiscuous mode [ 343.392584][T12918] veth0_macvtap: entered promiscuous mode [ 343.396237][T12918] veth1_macvtap: entered promiscuous mode [ 343.406239][T12918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.412949][T12918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.419625][T12918] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.422331][T12918] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.425054][T12918] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.427756][T12918] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.469824][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.472755][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.476989][ T5943] usb 11-1: USB disconnect, device number 13 [ 343.494995][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.497398][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.945755][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.955065][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.959758][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.964350][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.967175][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.997072][T12983] lo speed is unknown, defaulting to 1000 [ 344.126686][T12983] chnl_net:caif_netlink_parms(): no params data found [ 344.201133][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1936'. [ 344.272581][T13008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=13008 comm=syz.6.1938 [ 344.299820][ T6247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.336149][T12983] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.339475][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.342408][T12983] bridge_slave_0: entered allmulticast mode [ 344.345868][T12983] bridge_slave_0: entered promiscuous mode [ 344.349774][T12983] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.352713][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.355584][T12983] bridge_slave_1: entered allmulticast mode [ 344.367537][T12983] bridge_slave_1: entered promiscuous mode [ 344.377180][T13015] xt_l2tp: v2 tid > 0xffff: 150994944 [ 344.430943][T12983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.499168][ T6247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.514872][T12983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.568826][T12983] team0: Port device team_slave_0 added [ 344.629721][ T6247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.649730][T12983] team0: Port device team_slave_1 added [ 344.702541][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'. [ 344.716959][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1945'. [ 344.724599][T12983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.726868][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.735211][T12983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.745855][T12983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.749606][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.760319][T12983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.871089][T12983] hsr_slave_0: entered promiscuous mode [ 344.875369][T12983] hsr_slave_1: entered promiscuous mode [ 344.877469][T12983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.879840][T12983] Cannot create hsr debugfs directory [ 345.119962][ T6247] bridge_slave_1: left allmulticast mode [ 345.121843][ T6247] bridge_slave_1: left promiscuous mode [ 345.123873][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.129153][ T6247] bridge_slave_0: left allmulticast mode [ 345.130950][ T6247] bridge_slave_0: left promiscuous mode [ 345.133233][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.211271][T13057] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1952'. [ 345.214344][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1952'. [ 346.154892][ T5950] Bluetooth: hci0: command tx timeout [ 347.086726][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.141136][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.192913][ T6247] bond0 (unregistering): Released all slaves [ 347.236512][T13041] lo speed is unknown, defaulting to 1000 [ 347.310456][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 347.310468][ T40] audit: type=1400 audit(329.676:31206): avc: denied { add_name } for pid=13040 comm="syz.6.1948" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.318873][ T40] audit: type=1400 audit(329.676:31207): avc: denied { create } for pid=13040 comm="syz.6.1948" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 347.325921][ T40] audit: type=1400 audit(329.676:31208): avc: denied { associate } for pid=13040 comm="syz.6.1948" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 347.334681][ T40] audit: type=1400 audit(329.694:31209): avc: denied { read write } for pid=13040 comm="syz.6.1948" name="file0" dev="9p" ino=35913912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.344292][ T40] audit: type=1400 audit(329.694:31210): avc: denied { open } for pid=13040 comm="syz.6.1948" path="/255/file0/file0" dev="9p" ino=35913912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.724786][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.729401][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.732964][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.736593][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.742949][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.961559][T13071] lo speed is unknown, defaulting to 1000 [ 348.001818][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.007282][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.010529][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.015880][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.019746][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.097664][ T6247] hsr_slave_0: left promiscuous mode [ 348.099783][ T6247] hsr_slave_1: left promiscuous mode [ 348.102709][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.105017][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.107598][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.109955][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.148406][ T6247] veth1_macvtap: left promiscuous mode [ 348.150426][ T6247] veth0_macvtap: left promiscuous mode [ 348.152257][ T6247] veth1_vlan: left promiscuous mode [ 348.154241][ T6247] veth0_vlan: left promiscuous mode [ 348.378327][ T5954] Bluetooth: hci0: command tx timeout [ 349.918295][ T5954] Bluetooth: hci1: command tx timeout [ 350.175691][ T5954] Bluetooth: hci2: command tx timeout [ 350.601979][ T5954] Bluetooth: hci0: command tx timeout [ 352.141523][ T5954] Bluetooth: hci1: command tx timeout [ 352.398335][ T5954] Bluetooth: hci2: command tx timeout [ 352.825750][ T5954] Bluetooth: hci0: command tx timeout [ 354.375771][ T5954] Bluetooth: hci1: command tx timeout [ 354.621766][ T5954] Bluetooth: hci2: command tx timeout [ 355.621587][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 356.517742][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 356.588866][ T5954] Bluetooth: hci1: command tx timeout [ 356.845910][ T5954] Bluetooth: hci2: command tx timeout [ 363.186013][T13081] lo speed is unknown, defaulting to 1000 [ 363.222142][T13091] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 363.289878][T13071] chnl_net:caif_netlink_parms(): no params data found [ 363.328548][T12983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.337049][T12983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.372768][T12983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.388612][T12983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.416834][T13071] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.419655][T13071] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.423254][T13071] bridge_slave_0: entered allmulticast mode [ 363.427256][T13071] bridge_slave_0: entered promiscuous mode [ 363.432302][T13071] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.435373][T13071] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.438525][T13071] bridge_slave_1: entered allmulticast mode [ 363.442467][T13071] bridge_slave_1: entered promiscuous mode [ 363.495027][ T6217] usb 11-1: new low-speed USB device number 14 using dummy_hcd [ 363.602968][T13071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.606256][T13081] chnl_net:caif_netlink_parms(): no params data found [ 363.614924][T13071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.677319][ T6217] usb 11-1: Invalid ep0 maxpacket: 64 [ 363.696023][T13071] team0: Port device team_slave_0 added [ 363.704316][T13071] team0: Port device team_slave_1 added [ 363.762422][T13071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.764612][T13071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.772324][T13071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.798445][T13081] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.801365][T13081] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.804145][T13081] bridge_slave_0: entered allmulticast mode [ 363.808333][T13081] bridge_slave_0: entered promiscuous mode [ 363.812004][T13081] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.815106][T13081] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.823088][T13081] bridge_slave_1: entered allmulticast mode [ 363.826367][T13081] bridge_slave_1: entered promiscuous mode [ 363.829890][T13071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.832454][T13071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.840955][ T6217] usb 11-1: new low-speed USB device number 15 using dummy_hcd [ 363.841860][T13071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.895810][T13081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.945143][T13081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.968691][T13071] hsr_slave_0: entered promiscuous mode [ 363.971850][T13071] hsr_slave_1: entered promiscuous mode [ 363.974688][T13071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.978265][T13071] Cannot create hsr debugfs directory [ 364.008133][T13081] team0: Port device team_slave_0 added [ 364.008143][ T6217] usb 11-1: Invalid ep0 maxpacket: 64 [ 364.008514][ T6217] usb usb11-port1: attempt power cycle [ 364.385917][ T6247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.395363][ T6217] usb 11-1: new low-speed USB device number 16 using dummy_hcd [ 364.397396][T13081] team0: Port device team_slave_1 added [ 364.425595][ T6217] usb 11-1: Invalid ep0 maxpacket: 64 [ 364.522899][ T6247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.574916][ T6217] usb 11-1: new low-speed USB device number 17 using dummy_hcd [ 364.587233][T13081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.590033][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.598548][T13081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.607787][ T6217] usb 11-1: Invalid ep0 maxpacket: 64 [ 364.610231][ T6217] usb usb11-port1: unable to enumerate USB device [ 364.625392][T13081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.627588][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.636260][T13081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.698332][ T6247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.801788][T13081] hsr_slave_0: entered promiscuous mode [ 364.804753][T13081] hsr_slave_1: entered promiscuous mode [ 364.807401][T13081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.810423][T13081] Cannot create hsr debugfs directory [ 364.874786][ T6247] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.996360][T12983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.016553][T13071] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 365.021915][T13071] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 365.028748][T13071] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 365.033919][T13071] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 365.046682][T12983] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.056701][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.058928][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.067573][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.069824][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.132252][ T6247] bridge_slave_1: left allmulticast mode [ 365.134034][ T6247] bridge_slave_1: left promiscuous mode [ 365.135761][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.139488][ T6247] bridge_slave_0: left allmulticast mode [ 365.141513][ T6247] bridge_slave_0: left promiscuous mode [ 365.143651][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.475853][ T40] audit: type=1400 audit(347.598:31211): avc: denied { append } for pid=13102 comm="syz.6.1961" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 366.478387][T13103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=13103 comm=syz.6.1961 [ 366.536157][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1962'. [ 367.196643][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.259643][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.334193][ T6247] bond0 (unregistering): Released all slaves [ 367.427632][T13071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.451268][T13071] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.458063][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.460996][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.493713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.493761][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.695578][T12983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.808901][ T9] usb 11-1: new low-speed USB device number 18 using dummy_hcd [ 367.809650][T12983] veth0_vlan: entered promiscuous mode [ 367.819745][T12983] veth1_vlan: entered promiscuous mode [ 367.953128][ T9] usb 11-1: device descriptor read/64, error -71 [ 368.032191][T12983] veth0_macvtap: entered promiscuous mode [ 368.038800][T12983] veth1_macvtap: entered promiscuous mode [ 368.053850][T12983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.063304][T12983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.069698][T12983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.077166][T12983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.080671][T12983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.083825][T12983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.163784][T13071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.182740][ T6247] hsr_slave_0: left promiscuous mode [ 368.185558][ T6247] hsr_slave_1: left promiscuous mode [ 368.188920][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.191948][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.195503][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.198496][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.210792][ T9] usb 11-1: new low-speed USB device number 19 using dummy_hcd [ 368.249595][ T6247] veth1_macvtap: left promiscuous mode [ 368.251953][ T6247] veth0_macvtap: left promiscuous mode [ 368.254959][ T6247] veth1_vlan: left promiscuous mode [ 368.257184][ T6247] veth0_vlan: left promiscuous mode [ 368.350729][ T9] usb 11-1: device descriptor read/64, error -71 [ 368.468692][ T9] usb usb11-port1: attempt power cycle [ 368.829790][ T9] usb 11-1: new low-speed USB device number 20 using dummy_hcd [ 368.851840][ T9] usb 11-1: device descriptor read/8, error -71 [ 369.107723][ T9] usb 11-1: new low-speed USB device number 21 using dummy_hcd [ 369.129714][ T9] usb 11-1: device descriptor read/8, error -71 [ 369.251139][ T9] usb usb11-port1: unable to enumerate USB device [ 370.800322][ T40] audit: type=1400 audit(351.648:31212): avc: denied { create } for pid=13128 comm="syz.6.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 370.808762][T13129] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1968'. [ 370.809466][ T40] audit: type=1400 audit(351.658:31213): avc: denied { getopt } for pid=13128 comm="syz.6.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 370.813835][T13130] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1968'. [ 370.848026][ T40] audit: type=1400 audit(351.686:31214): avc: denied { create } for pid=13132 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 370.855063][ T40] audit: type=1400 audit(351.686:31215): avc: denied { ioctl } for pid=13132 comm="syz.6.1969" path="socket:[59486]" dev="sockfs" ino=59486 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 375.569561][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 376.551320][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 382.905767][ T6218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.908179][ T6218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.942660][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.945915][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.965874][T13081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.965942][ T40] audit: type=1401 audit(363.023:31216): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 382.980711][T13081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.990506][T13081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.999073][T13142] ntfs3(sr0): try to read out of volume at offset 0x0 [ 383.002076][T13081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.004149][ T40] audit: type=1400 audit(363.060:31217): avc: denied { read write } for pid=13141 comm="syz.6.1971" name="rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 383.004192][ T40] audit: type=1400 audit(363.060:31218): avc: denied { open } for pid=13141 comm="syz.6.1971" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 383.005446][T13142] ucma_write: process 806 (syz.6.1971) changed security contexts after opening file descriptor, this is not allowed. [ 383.031691][ T40] audit: type=1400 audit(363.088:31219): avc: denied { watch watch_reads } for pid=13143 comm="syz.6.1972" path="/272" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 383.085005][T13071] veth0_vlan: entered promiscuous mode [ 383.098278][T13071] veth1_vlan: entered promiscuous mode [ 383.120035][T13081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.131787][T13146] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.139082][T13071] veth0_macvtap: entered promiscuous mode [ 383.142765][T13071] veth1_macvtap: entered promiscuous mode [ 383.157598][T13081] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.163187][T13071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.171232][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.173587][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.180160][T13071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.196822][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.199857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.207312][T13071] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.210460][T13071] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.213543][T13071] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.216224][T13071] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.438054][ T6218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.449371][ T6218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.470029][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.472510][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.480034][ T40] audit: type=1400 audit(363.509:31220): avc: denied { getopt } for pid=13157 comm="syz.6.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 383.539175][T13081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.565800][T13081] veth0_vlan: entered promiscuous mode [ 383.572037][T13081] veth1_vlan: entered promiscuous mode [ 383.598116][T13081] veth0_macvtap: entered promiscuous mode [ 383.602205][T13081] veth1_macvtap: entered promiscuous mode [ 383.612854][T13081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.619454][T13081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.624589][T13081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.631057][T13081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.633688][T13081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.636418][T13081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.684805][ T6238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.687224][ T6238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.708702][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.712374][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.752731][ T40] audit: type=1400 audit(363.762:31221): avc: denied { mounton } for pid=13184 comm="syz.7.1984" path="/proc/11/task" dev="proc" ino=59723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 383.755503][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1984'. [ 384.074389][ T5983] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 384.234563][ T5983] usb 12-1: Using ep0 maxpacket: 8 [ 384.239883][ T5983] usb 12-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 384.244269][ T5983] usb 12-1: config 1 interface 0 altsetting 111 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 384.249455][ T5983] usb 12-1: config 1 interface 0 has no altsetting 0 [ 384.253630][ T5983] usb 12-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 384.257522][ T5983] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.260525][ T5983] usb 12-1: Product: syz [ 384.261917][ T5983] usb 12-1: Manufacturer: syz [ 384.263439][ T5983] usb 12-1: SerialNumber: syz [ 384.268635][ T5983] usb 12-1: rejected 1 configuration due to insufficient available bus power [ 384.272086][ T5983] usb 12-1: no configuration chosen from 1 choice [ 385.035283][ T40] audit: type=1400 audit(364.959:31222): avc: denied { write } for pid=13189 comm="syz.6.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.041573][ T40] audit: type=1400 audit(364.968:31223): avc: denied { setopt } for pid=13189 comm="syz.6.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 386.967229][ T24] usb 12-1: USB disconnect, device number 2 [ 387.051690][ T40] audit: type=1400 audit(366.848:31224): avc: denied { write } for pid=13197 comm="syz.7.1987" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 387.054446][T13198] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 387.059210][ T40] audit: type=1400 audit(366.848:31225): avc: denied { open } for pid=13197 comm="syz.7.1987" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 387.075401][T13200] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 387.077425][T13200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.079887][T13200] vhci_hcd vhci_hcd.0: Device attached [ 387.256344][T13201] vhci_hcd: connection closed [ 387.256535][ T6234] vhci_hcd: stop threads [ 387.259876][ T6234] vhci_hcd: release socket [ 387.261758][ T6234] vhci_hcd: disconnect device [ 387.270835][ T6021] vhci_hcd: vhci_device speed not set [ 387.476727][ T6238] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.620144][ T6238] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.766425][ T6238] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.791033][T13222] syzkaller0: entered promiscuous mode [ 387.792818][T13222] syzkaller0: entered allmulticast mode [ 387.934602][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.939725][ T6238] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.942027][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.942477][T13231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.945561][T13231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.949176][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.953462][T13231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.957924][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.958785][T13231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.959269][T13231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.962452][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.990997][T13229] lo speed is unknown, defaulting to 1000 [ 388.033076][T13234] overlay: filesystem on ./file0 is read-only [ 388.035283][T13227] lo speed is unknown, defaulting to 1000 [ 388.041198][T13234] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1993'. [ 388.140203][T13229] chnl_net:caif_netlink_parms(): no params data found [ 388.173979][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1994'. [ 388.193266][T13227] chnl_net:caif_netlink_parms(): no params data found [ 388.340373][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.343460][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.346540][T13229] bridge_slave_0: entered allmulticast mode [ 388.351360][T13229] bridge_slave_0: entered promiscuous mode [ 388.358005][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.361187][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.363998][T13229] bridge_slave_1: entered allmulticast mode [ 388.367498][T13229] bridge_slave_1: entered promiscuous mode [ 388.373727][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 388.373736][ T40] audit: type=1400 audit(368.093:31228): avc: denied { read write } for pid=13251 comm="syz.7.1996" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 388.375587][T13252] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 388.375749][ T40] audit: type=1400 audit(368.093:31229): avc: denied { open } for pid=13251 comm="syz.7.1996" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 388.437046][T13260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 388.464936][ T6238] bridge_slave_1: left allmulticast mode [ 388.466793][ T6238] bridge_slave_1: left promiscuous mode [ 388.469304][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.474932][ T6238] bridge_slave_0: left allmulticast mode [ 388.476805][ T6238] bridge_slave_0: left promiscuous mode [ 388.478687][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.527635][ T40] audit: type=1400 audit(368.233:31230): avc: denied { ioctl } for pid=13262 comm="syz.7.1998" path="/dev/ptp0" dev="devtmpfs" ino=730 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 388.571212][T13263] tmpfs: Bad value for 'mpol' [ 388.573517][ T40] audit: type=1400 audit(368.270:31231): avc: denied { mount } for pid=13262 comm="syz.7.1998" name="/" dev="hugetlbfs" ino=62478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 388.586723][ T40] audit: type=1400 audit(368.289:31232): avc: denied { remount } for pid=13262 comm="syz.7.1998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 388.840441][T13265] netlink: 'syz.6.1999': attribute type 5 has an invalid length. [ 388.843001][T13265] netlink: 'syz.6.1999': attribute type 7 has an invalid length. [ 390.125359][T13231] Bluetooth: hci0: command tx timeout [ 390.125375][ T5942] Bluetooth: hci2: command tx timeout [ 390.587686][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.662733][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.703884][ T6238] bond0 (unregistering): Released all slaves [ 390.726215][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.729337][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.732146][T13227] bridge_slave_0: entered allmulticast mode [ 390.736638][T13227] bridge_slave_0: entered promiscuous mode [ 390.741070][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.743329][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.745773][T13227] bridge_slave_1: entered allmulticast mode [ 390.748419][T13227] bridge_slave_1: entered promiscuous mode [ 390.757652][T13265] : entered promiscuous mode [ 390.769516][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.778652][ T40] audit: type=1400 audit(370.337:31233): avc: denied { unmount } for pid=13071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 390.793415][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.807061][ T40] audit: type=1400 audit(370.356:31234): avc: denied { ioctl } for pid=13271 comm="syz.7.2001" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 390.867300][T13277] input: syz0 as /devices/virtual/input/input25 [ 390.885698][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.891280][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.909481][T13229] team0: Port device team_slave_0 added [ 390.949644][ T40] audit: type=1400 audit(370.497:31235): avc: denied { read } for pid=5338 comm="acpid" name="event3" dev="devtmpfs" ino=3385 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.956436][ T40] audit: type=1400 audit(370.497:31236): avc: denied { open } for pid=5338 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3385 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.965556][ T40] audit: type=1400 audit(370.497:31237): avc: denied { ioctl } for pid=5338 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3385 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.127772][T13229] team0: Port device team_slave_1 added [ 391.184176][T13227] team0: Port device team_slave_0 added [ 391.203078][T13227] team0: Port device team_slave_1 added [ 391.325609][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.328003][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.338015][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.343129][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.351631][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.361847][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.371470][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.374212][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.385615][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.389923][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.391993][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.399923][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.669573][T13227] hsr_slave_0: entered promiscuous mode [ 391.672085][T13227] hsr_slave_1: entered promiscuous mode [ 391.674245][T13227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.677285][T13227] Cannot create hsr debugfs directory [ 391.820651][T13229] hsr_slave_0: entered promiscuous mode [ 391.823018][T13229] hsr_slave_1: entered promiscuous mode [ 391.826019][T13229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.828983][T13229] Cannot create hsr debugfs directory [ 391.861200][ T6238] hsr_slave_0: left promiscuous mode [ 391.863766][ T6238] hsr_slave_1: left promiscuous mode [ 391.865779][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.868694][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.872500][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.874967][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.907224][ T6238] veth1_macvtap: left promiscuous mode [ 391.908946][ T6238] veth0_macvtap: left promiscuous mode [ 391.911473][ T6238] veth1_vlan: left promiscuous mode [ 391.913244][ T6238] veth0_vlan: left promiscuous mode [ 392.338133][T13231] Bluetooth: hci2: command tx timeout [ 392.338157][ T5942] Bluetooth: hci0: command tx timeout [ 392.727441][T13321] 9pnet_virtio: no channels available for device syz [ 392.818046][T13325] sctp: [Deprecated]: syz.6.2013 (pid 13325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.818046][T13325] Use struct sctp_sack_info instead [ 393.685093][ T24] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 393.845376][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 393.849492][ T24] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 393.852991][ T24] usb 11-1: config 0 has no interface number 0 [ 393.855607][ T24] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.859567][ T24] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 393.863279][ T24] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.866796][ T24] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.870860][ T24] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 393.873691][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.877630][ T24] usb 11-1: config 0 descriptor?? [ 393.881886][ T24] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 394.096984][ T24] usb 11-1: USB disconnect, device number 23 [ 394.102462][ T24] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 394.572884][ T5942] Bluetooth: hci2: command tx timeout [ 394.572924][T13231] Bluetooth: hci0: command tx timeout [ 395.185199][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 395.185211][ T40] audit: type=1400 audit(374.463:31246): avc: denied { ioctl } for pid=13351 comm="syz.6.2023" path="socket:[62895]" dev="sockfs" ino=62895 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.194962][ T40] audit: type=1400 audit(374.463:31247): avc: denied { write } for pid=13351 comm="syz.6.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.785420][T13231] Bluetooth: hci0: command tx timeout [ 396.796459][T13231] Bluetooth: hci2: command tx timeout [ 399.090429][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 399.183486][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.185792][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.082202][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 406.618524][T13352] tipc: Enabling of bearer rejected, failed to enable media [ 406.624822][T13353] netlink: 'syz.6.2023': attribute type 29 has an invalid length. [ 406.844303][T13227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.095630][T13227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.256299][T13227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.277223][T13394] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 407.287445][T13394] kvm: pic: non byte read [ 407.290517][T13394] kvm: pic: level sensitive irq not supported [ 407.290805][T13394] kvm: pic: non byte read [ 407.432237][T13398] overlay: Unknown parameter 'smackfsroot' [ 407.798049][T13227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.927014][T13412] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 407.929475][T13412] SELinux: failed to load policy [ 407.929916][ T40] audit: type=1400 audit(386.370:31248): avc: denied { load_policy } for pid=13402 comm="syz.6.2035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 407.965945][ T6238] bridge_slave_1: left allmulticast mode [ 407.968564][ T6238] bridge_slave_1: left promiscuous mode [ 407.970845][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.979926][ T6238] bridge_slave_0: left allmulticast mode [ 407.982084][ T6238] bridge_slave_0: left promiscuous mode [ 407.984341][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.078040][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2037'. [ 408.337290][T13425] syz.7.2038: attempt to access beyond end of device [ 408.337290][T13425] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 410.163281][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.203686][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.288926][ T6238] bond0 (unregistering): Released all slaves [ 410.373771][T13227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.410008][T13227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.414446][T13227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.419747][T13227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.458564][ T40] audit: type=1400 audit(388.737:31249): avc: denied { create } for pid=13433 comm="syz.7.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 410.463332][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2041'. [ 410.466565][ T40] audit: type=1400 audit(388.746:31250): avc: denied { ioctl } for pid=13433 comm="syz.7.2042" path="socket:[63185]" dev="sockfs" ino=63185 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 410.486716][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.694250][ T6235] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.725973][ T1237] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.747636][ T6218] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.769401][ T6218] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.783608][T13440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.787847][T13440] batadv_slave_0: entered promiscuous mode [ 410.790081][ T6247] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.804485][T13431] syzkaller0: entered promiscuous mode [ 410.806243][T13431] syzkaller0: entered allmulticast mode [ 410.811804][ T1237] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.824375][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.834275][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.834831][ T1237] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.836432][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.848204][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.851050][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.854997][ T6218] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.875955][ T6247] bond1: (slave ip6gretap1): link status up again after 0 ms [ 410.907916][ T84] bond1: (slave ip6gretap1): link status up again after 0 ms [ 411.134985][ T6238] hsr_slave_0: left promiscuous mode [ 411.137060][ T6238] hsr_slave_1: left promiscuous mode [ 411.139025][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.141316][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.144797][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.147036][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.176242][ T6238] veth1_macvtap: left promiscuous mode [ 411.178099][ T6238] veth0_macvtap: left promiscuous mode [ 411.179857][ T6238] veth1_vlan: left promiscuous mode [ 411.181502][ T6238] veth0_vlan: left promiscuous mode [ 411.191023][ T40] audit: type=1400 audit(389.420:31251): avc: denied { append } for pid=13458 comm="syz.7.2048" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 418.814617][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 419.752475][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 426.114441][T13462] tmpfs: Unknown parameter 'usrquota_inod' [ 426.118174][T13462] fuse: Bad value for 'user_id' [ 426.120215][T13462] fuse: Bad value for 'user_id' [ 426.140735][ T40] audit: type=1400 audit(403.413:31252): avc: denied { append } for pid=13461 comm="syz.7.2049" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.198837][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.235727][T13229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.241708][T13229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.245579][T13229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.250482][T13229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.273333][T13227] veth0_vlan: entered promiscuous mode [ 426.279164][T13227] veth1_vlan: entered promiscuous mode [ 426.309402][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.315204][T13227] veth0_macvtap: entered promiscuous mode [ 426.320050][T13227] veth1_macvtap: entered promiscuous mode [ 426.327521][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.335012][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.337231][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.345251][ T1237] net_ratelimit: 8 callbacks suppressed [ 426.345261][ T1237] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.358064][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.360315][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.363990][T13227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.371219][T13227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.379348][T13227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.382094][T13227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.384724][T13227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.387368][T13227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.480228][ T40] audit: type=1400 audit(403.731:31253): avc: denied { ioctl } for pid=13480 comm="syz.6.2054" path="socket:[62406]" dev="sockfs" ino=62406 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 426.488485][ T40] audit: type=1400 audit(403.741:31254): avc: denied { setopt } for pid=13480 comm="syz.6.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 426.511837][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.514300][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.527240][ T1237] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.530395][T13481] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer. [ 426.542418][T13481] kvm: pic: single mode not supported [ 426.542431][T13481] kvm: pic: level sensitive irq not supported [ 426.543750][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.551609][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.580853][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.609973][T13229] veth0_vlan: entered promiscuous mode [ 426.617101][T13229] veth1_vlan: entered promiscuous mode [ 426.644495][T13229] veth0_macvtap: entered promiscuous mode [ 426.649789][T13229] veth1_macvtap: entered promiscuous mode [ 426.659514][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.665949][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.676131][T13229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.679931][T13229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.682593][T13229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.685199][T13229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.693004][ T6218] tipc: Subscription rejected, illegal request [ 426.698076][ T6238] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.745589][ T6218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.748624][ T6218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.762420][ T40] audit: type=1400 audit(404.003:31255): avc: denied { append } for pid=13487 comm="syz.6.2056" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.765957][ T6218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.772202][ T6218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.815974][ T1237] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.824661][T13489] syz.6.2056 (13489): attempted to duplicate a private mapping with mremap. This is not supported. [ 426.831001][ T40] audit: type=1400 audit(404.059:31256): avc: denied { relabelto } for pid=13487 comm="syz.6.2056" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:shell_exec_t:s0" [ 426.840927][ T40] audit: type=1400 audit(404.059:31257): avc: denied { associate } for pid=13487 comm="syz.6.2056" name="loop0" dev="devtmpfs" ino=658 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:shell_exec_t:s0" [ 426.933628][ T1237] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.051656][ T6218] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.076387][ T40] audit: type=1400 audit(404.293:31258): avc: denied { bind } for pid=13494 comm="syz.6.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 427.189639][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.213584][T13511] overlayfs: overlapping lowerdir path [ 427.216581][ T40] audit: type=1400 audit(404.423:31259): avc: denied { mount } for pid=13510 comm="syz.7.2064" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 427.218276][T13511] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 427.248917][ T40] audit: type=1400 audit(404.452:31260): avc: denied { unmount } for pid=13071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 427.279925][ T40] audit: type=1400 audit(404.480:31261): avc: denied { read } for pid=13517 comm="syz.7.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 427.305445][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2066'. [ 427.309299][ T6218] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.425613][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.434170][T13527] x_tables: duplicate underflow at hook 1 [ 427.553103][ T6234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.704607][T13539] Debayer B: ================= START STATUS ================= [ 427.706924][T13539] Debayer B: Debayer Mean Window Size: 3 [ 427.710269][T13539] Debayer B: ================== END STATUS ================== [ 428.047373][T13550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2074'. [ 428.122911][ T6218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.392063][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.394297][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2077'. [ 428.396447][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.397021][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2077'. [ 428.401388][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.405989][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.409751][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.429105][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2078'. [ 428.434323][T13561] lo speed is unknown, defaulting to 1000 [ 428.509137][T13573] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 428.511738][T13575] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2081'. [ 428.541228][T13561] chnl_net:caif_netlink_parms(): no params data found [ 428.607994][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.610195][T13561] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.613016][T13561] bridge_slave_0: entered allmulticast mode [ 428.615570][T13561] bridge_slave_0: entered promiscuous mode [ 428.618518][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.620722][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.623483][T13561] bridge_slave_1: entered allmulticast mode [ 428.626088][T13561] bridge_slave_1: entered promiscuous mode [ 428.667270][T13561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.671722][T13561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.727980][T13561] team0: Port device team_slave_0 added [ 428.732377][T13561] team0: Port device team_slave_1 added [ 428.762319][T13561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.765562][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.776976][T13561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.780017][T13231] Bluetooth: hci1: Malformed HCI Event [ 428.782040][T13561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.785332][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.794539][T13561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.881787][ T6218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.929823][T13561] hsr_slave_0: entered promiscuous mode [ 428.932491][T13561] hsr_slave_1: entered promiscuous mode [ 428.934569][T13561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.936968][T13561] Cannot create hsr debugfs directory [ 428.955371][T13600] loop3: detected capacity change from 0 to 1 [ 428.959388][T13600] Dev loop3: unable to read RDB block 1 [ 428.961265][T13600] loop3: unable to read partition table [ 428.963429][T13600] loop3: partition table beyond EOD, truncated [ 428.965841][T13600] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.970300][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2087'. [ 429.399714][ T6218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.542492][ T6218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.799179][ T6218] bridge_slave_1: left allmulticast mode [ 429.801420][ T6218] bridge_slave_1: left promiscuous mode [ 429.803747][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.808960][ T6218] bridge_slave_0: left allmulticast mode [ 429.811188][ T6218] bridge_slave_0: left promiscuous mode [ 429.813503][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.453063][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2088'. [ 430.554851][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.561290][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.563538][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2089'. [ 430.571190][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.575422][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.578038][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.578769][ T5954] Bluetooth: hci0: command tx timeout [ 431.777254][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.843749][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.894895][ T6218] bond0 (unregistering): Released all slaves [ 431.956199][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2090'. [ 431.991815][ T84] net_ratelimit: 11 callbacks suppressed [ 431.991826][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.003477][T13608] lo speed is unknown, defaulting to 1000 [ 432.052741][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 432.052751][ T40] audit: type=1400 audit(408.941:31273): avc: denied { accept } for pid=13618 comm="syz.6.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.060548][ T40] audit: type=1400 audit(408.941:31274): avc: denied { append } for pid=13618 comm="syz.6.2092" name="vsock" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.067442][ T40] audit: type=1400 audit(408.941:31275): avc: denied { execute } for pid=13618 comm="syz.6.2092" path="/dev/vsock" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.334713][ T40] audit: type=1400 audit(409.213:31276): avc: denied { read } for pid=13637 comm="iou-sqp-13638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.376969][ T6235] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.384724][T13608] chnl_net:caif_netlink_parms(): no params data found [ 432.485772][ T40] audit: type=1400 audit(409.353:31277): avc: denied { getopt } for pid=13641 comm="syz.6.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 432.723515][ T6218] hsr_slave_0: left promiscuous mode [ 432.726089][ T6218] hsr_slave_1: left promiscuous mode [ 432.728278][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.730584][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.733556][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.735939][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.763989][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2099'. [ 432.779659][ T6218] veth1_macvtap: left promiscuous mode [ 432.781929][ T6218] veth0_macvtap: left promiscuous mode [ 432.783697][ T6218] veth1_vlan: left promiscuous mode [ 432.785345][ T6218] veth0_vlan: left promiscuous mode [ 432.791577][T13231] Bluetooth: hci2: command tx timeout [ 432.791925][ T5954] Bluetooth: hci0: command tx timeout [ 432.904141][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2100'. [ 433.098489][ T40] audit: type=1400 audit(409.924:31278): avc: denied { create } for pid=13654 comm="syz.7.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 433.110420][ T40] audit: type=1400 audit(409.933:31279): avc: denied { bind } for pid=13654 comm="syz.7.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 433.517455][T13663] input: syz0 as /devices/virtual/input/input26 [ 433.599334][ T40] audit: type=1400 audit(410.391:31280): avc: denied { map } for pid=13664 comm="syz.7.2104" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 435.025801][ T5954] Bluetooth: hci2: command tx timeout [ 435.025851][T13231] Bluetooth: hci0: command tx timeout [ 437.238598][T13231] Bluetooth: hci0: command tx timeout [ 437.249578][T13231] Bluetooth: hci2: command tx timeout [ 439.473156][T13231] Bluetooth: hci2: command tx timeout [ 439.808219][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 440.782569][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 447.561767][T13608] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.563948][T13608] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.566346][T13608] bridge_slave_0: entered allmulticast mode [ 447.569764][T13608] bridge_slave_0: entered promiscuous mode [ 447.572484][T13652] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 447.575391][T13652] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 447.594764][T13608] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.596913][T13608] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.599811][T13608] bridge_slave_1: entered allmulticast mode [ 447.602358][T13608] bridge_slave_1: entered promiscuous mode [ 447.661214][ T40] audit: type=1400 audit(423.543:31281): avc: denied { create } for pid=13672 comm="syz.6.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 447.667915][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2108'. [ 447.671061][ T40] audit: type=1400 audit(423.543:31282): avc: denied { write } for pid=13672 comm="syz.6.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 447.691050][T13608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.705046][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.709820][T13608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.760307][T13561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.771206][T13608] team0: Port device team_slave_0 added [ 447.773912][T13561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.790678][T13608] team0: Port device team_slave_1 added [ 447.793059][T13561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.840675][ T40] audit: type=1400 audit(423.711:31283): avc: denied { append } for pid=13683 comm="syz.7.2112" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 447.851019][T13561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.858334][T13608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.860622][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.871424][T13608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.875996][T13608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.878016][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.885467][T13608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.942737][T13608] hsr_slave_0: entered promiscuous mode [ 447.945146][T13608] hsr_slave_1: entered promiscuous mode [ 447.947091][T13608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.949596][T13608] Cannot create hsr debugfs directory [ 448.015085][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.017216][ T40] audit: type=1400 audit(423.880:31284): avc: denied { map } for pid=13683 comm="syz.7.2112" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 448.036331][ T40] audit: type=1400 audit(423.889:31285): avc: denied { write execute } for pid=13683 comm="syz.7.2112" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 448.101260][ T40] audit: type=1400 audit(423.964:31286): avc: denied { read } for pid=13683 comm="syz.7.2112" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 448.162884][T13561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.242110][T13608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.914444][T13696] syz.7.2115: attempt to access beyond end of device [ 448.914444][T13696] sr0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 448.918887][T13696] hpfs: hpfs_map_sector(): read error [ 448.923146][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2115'. [ 448.926323][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2115'. [ 449.121281][T13608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.299178][T13608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.312181][T13561] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.317026][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.319269][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.324595][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.326757][ T6238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.365059][T13706] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2118'. [ 449.368494][ T40] audit: type=1400 audit(425.143:31287): avc: denied { lock } for pid=13705 comm="syz.7.2118" path="socket:[67009]" dev="sockfs" ino=67009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.409085][T13608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.411406][T13708] nbd: couldn't find a device at index -1605786504 [ 449.448405][ T6240] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 449.576863][T13561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.598713][T13561] veth0_vlan: entered promiscuous mode [ 449.605368][T13561] veth1_vlan: entered promiscuous mode [ 449.620924][T13561] veth0_macvtap: entered promiscuous mode [ 449.624709][T13561] veth1_macvtap: entered promiscuous mode [ 449.637154][T13561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.639952][ T6218] bridge_slave_0: left allmulticast mode [ 449.641853][ T6218] bridge_slave_0: left promiscuous mode [ 449.643907][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.663995][ T6218] bridge_slave_1: left allmulticast mode [ 449.665703][ T6218] bridge_slave_1: left promiscuous mode [ 449.672727][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.681574][ T6218] bridge_slave_0: left allmulticast mode [ 449.685833][ T6218] bridge_slave_0: left promiscuous mode [ 449.687761][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.697901][ T40] audit: type=1400 audit(425.451:31288): avc: denied { getopt } for pid=13722 comm="syz.7.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 451.418768][ T6218] bond1 (unregistering): Released all slaves [ 452.292685][ T6218] bond0 (unregistering): Released all slaves [ 452.306252][ T6218] bond2 (unregistering): Released all slaves [ 454.165727][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.207700][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.284314][ T6218] bond0 (unregistering): Released all slaves [ 454.304934][T13561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.310923][T13737] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2128'. [ 454.313926][T13737] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2128'. [ 454.331596][T13561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.341134][T13561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.344456][T13561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.347051][T13561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.393256][ T6218] tipc: Disabling bearer [ 454.397823][ T6238] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.397918][ T6218] tipc: Left network mode [ 454.435801][T13608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 454.450306][T13608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.466947][T13608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 454.487124][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2134'. [ 454.499855][T13608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 454.541476][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.544028][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.579075][ T6247] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.587506][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.589799][T13755] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2134'. [ 454.591069][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.651609][T13608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.762707][ T40] audit: type=1400 audit(430.194:31289): avc: denied { read } for pid=13759 comm="syz.6.2135" path="socket:[64481]" dev="sockfs" ino=64481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.792888][ T1026] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 454.809225][T13608] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.814821][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.817248][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.823374][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.825656][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.865724][T13764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 454.953776][ T1026] usb 12-1: device descriptor read/64, error -71 [ 455.041135][ T6240] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 455.167888][T13608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.191637][T13608] veth0_vlan: entered promiscuous mode [ 455.196388][T13608] veth1_vlan: entered promiscuous mode [ 455.199113][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 455.213607][T13608] veth0_macvtap: entered promiscuous mode [ 455.217346][T13608] veth1_macvtap: entered promiscuous mode [ 455.220548][ T1026] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 455.225550][T13608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.231876][T13608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.276224][T13608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.279156][T13608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.282150][T13608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.285978][T13608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.317579][ T6240] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 455.327560][ T6238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.329969][ T6238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.345539][ T6235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.348839][ T6235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.370299][ T1026] usb 12-1: device descriptor read/64, error -71 [ 455.487848][ T1026] usb usb12-port1: attempt power cycle [ 455.605530][ T6235] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 455.766696][T13776] netlink: 'syz.6.2139': attribute type 2 has an invalid length. [ 455.770503][T13776] netlink: 'syz.6.2139': attribute type 1 has an invalid length. [ 455.878040][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.883067][ T1026] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 455.889961][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.895195][ T1026] usb 12-1: device descriptor read/8, error -71 [ 455.898762][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.907301][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.911057][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.968785][ T6238] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 455.988453][T13781] lo speed is unknown, defaulting to 1000 [ 456.081500][ T6218] hsr_slave_0: left promiscuous mode [ 456.084326][ T6218] hsr_slave_1: left promiscuous mode [ 456.089038][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.092543][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.095359][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.104465][ T6218] hsr_slave_0: left promiscuous mode [ 456.107164][ T6218] hsr_slave_1: left promiscuous mode [ 456.109989][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.112846][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.116302][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.119860][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.161460][ T1026] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 456.177495][ T6218] veth0_macvtap: left promiscuous mode [ 456.179125][ T6218] veth1_vlan: left promiscuous mode [ 456.180556][ T6218] veth0_vlan: left promiscuous mode [ 456.183988][ T1026] usb 12-1: device descriptor read/8, error -71 [ 456.186924][ T6218] veth1_macvtap: left promiscuous mode [ 456.188472][ T6218] veth0_macvtap: left promiscuous mode [ 456.189997][ T6218] veth1_vlan: left promiscuous mode [ 456.191471][ T6218] veth0_vlan: left promiscuous mode [ 456.300516][ T1026] usb usb12-port1: unable to enumerate USB device [ 458.107155][ T5954] Bluetooth: hci0: command tx timeout [ 458.806543][T13231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 458.810705][T13231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 458.815431][T13231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 458.818792][T13231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 458.821460][T13231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.330557][T13231] Bluetooth: hci0: command tx timeout [ 461.014858][T13231] Bluetooth: hci2: command tx timeout [ 462.554029][T13231] Bluetooth: hci0: command tx timeout [ 463.238262][T13231] Bluetooth: hci2: command tx timeout [ 463.256135][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 464.244775][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 464.778188][T13231] Bluetooth: hci0: command tx timeout [ 464.866089][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.868124][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.462558][T13231] Bluetooth: hci2: command tx timeout [ 467.685773][T13231] Bluetooth: hci2: command tx timeout [ 472.734139][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.738808][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.745542][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.749400][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.754051][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.896013][ T5954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 474.899997][ T5954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 474.904398][ T5954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 474.908576][ T5954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 474.912012][ T5954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.955214][T13231] Bluetooth: hci4: command tx timeout [ 477.054477][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 477.093395][T13231] Bluetooth: hci5: command tx timeout [ 477.178978][T13231] Bluetooth: hci4: command tx timeout [ 477.982768][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 479.317009][T13231] Bluetooth: hci5: command tx timeout [ 479.402492][T13231] Bluetooth: hci4: command tx timeout [ 481.551220][ T5954] Bluetooth: hci5: command tx timeout [ 481.626196][ T5954] Bluetooth: hci4: command tx timeout [ 483.518346][ T5954] Bluetooth: hci1: command 0x0406 tx timeout [ 483.765953][T13231] Bluetooth: hci5: command tx timeout [ 484.730991][ T24] infiniband syz1: ib_query_port failed (-19) [ 484.750663][T13790] syzkaller0: entered promiscuous mode [ 484.752498][T13790] syzkaller0: entered allmulticast mode [ 484.832504][T13804] lo speed is unknown, defaulting to 1000 [ 484.843346][T13807] lo speed is unknown, defaulting to 1000 [ 484.853421][T13799] lo speed is unknown, defaulting to 1000 [ 485.030595][T13781] chnl_net:caif_netlink_parms(): no params data found [ 486.760410][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.185175][ C0] ------------[ cut here ]------------ [ 487.187831][ C0] refcount_t: addition on 0; use-after-free. [ 487.190645][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0x1ca/0x210 [ 487.194268][ C0] Modules linked in: [ 487.196457][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.197123][ T40] audit: type=1400 audit(460.529:31290): avc: denied { write } for pid=5908 comm="syz-executor" path="pipe:[5849]" dev="pipefs" ino=5849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 487.202433][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.212546][ C0] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 487.214419][ C0] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 80 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 487.220264][ C0] RSP: 0018:ffffc900000078b0 EFLAGS: 00010286 [ 487.222282][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 487.224722][ C0] RDX: ffffffff8e297780 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 487.227093][ C0] RBP: ffff888028d7816c R08: 0000000000000001 R09: 0000000000000000 [ 487.229547][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888028d7816c [ 487.231835][ C0] R13: ffff888028d78000 R14: ffff888029f46000 R15: ffff8880337ce800 [ 487.234201][ C0] FS: 0000000000000000(0000) GS:ffff8880d675a000(0000) knlGS:0000000000000000 [ 487.237000][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.239057][ C0] CR2: 00007f0eddce7d60 CR3: 00000000332fc000 CR4: 0000000000352ef0 [ 487.241521][ C0] DR0: 0000000000000007 DR1: 0000000000004e6a DR2: 0000000000000007 [ 487.243888][ C0] DR3: 00000000000002d5 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 487.246331][ C0] Call Trace: [ 487.247391][ C0] [ 487.248299][ C0] tipc_crypto_xmit+0x20c1/0x2550 [ 487.249992][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 487.251650][ C0] ? lock_acquire+0x179/0x350 [ 487.253098][ C0] ? find_held_lock+0x2b/0x80 [ 487.254532][ C0] ? net_generic+0xea/0x2a0 [ 487.256112][ C0] tipc_bearer_xmit_skb+0x15f/0x430 [ 487.257704][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 487.259398][ C0] ? mark_held_locks+0x49/0x80 [ 487.260900][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 487.262483][ C0] tipc_disc_timeout+0x5b2/0x850 [ 487.264022][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 487.265770][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 487.267692][ C0] call_timer_fn+0x19a/0x620 [ 487.269237][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 487.271089][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.272831][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 487.274713][ C0] __run_timers+0x6ef/0x960 [ 487.276244][ C0] ? __pfx___run_timers+0x10/0x10 [ 487.278019][ C0] run_timer_base+0x114/0x190 [ 487.279623][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 487.281511][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.283170][ C0] run_timer_softirq+0x1a/0x40 [ 487.284802][ C0] handle_softirqs+0x219/0x8e0 [ 487.286548][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 487.288296][ C0] __irq_exit_rcu+0x109/0x170 [ 487.289931][ C0] irq_exit_rcu+0x9/0x30 [ 487.291519][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 487.293524][ C0] [ 487.294527][ C0] [ 487.295542][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.297372][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 487.299236][ C0] Code: 1b 73 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 f0 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 487.305436][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 00000286 [ 487.307898][ C0] RAX: 000000000043d97d RBX: 0000000000000000 RCX: ffffffff8b7f1c99 [ 487.310898][ C0] RDX: 0000000000000000 RSI: ffffffff8de14d4b RDI: ffffffff8c157020 [ 487.313830][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed100d486645 [ 487.316811][ C0] R10: ffff88806a43322b R11: 0000000000000001 R12: 0000000000000000 [ 487.319844][ C0] R13: ffffffff8e297780 R14: ffffffff90a7ff50 R15: 0000000000000000 [ 487.322964][ C0] ? ct_kernel_exit+0x139/0x190 [ 487.325068][ C0] default_idle+0x13/0x20 [ 487.326789][ C0] default_idle_call+0x6d/0xb0 [ 487.328705][ C0] do_idle+0x391/0x510 [ 487.330310][ C0] ? __pfx_do_idle+0x10/0x10 [ 487.332122][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 487.334213][ C0] cpu_startup_entry+0x4f/0x60 [ 487.336230][ C0] rest_init+0x16b/0x2b0 [ 487.337962][ C0] ? acpi_subsystem_init+0x133/0x180 [ 487.340143][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 487.342460][ C0] start_kernel+0x3ee/0x4d0 [ 487.344361][ C0] x86_64_start_reservations+0x18/0x30 [ 487.346631][ C0] x86_64_start_kernel+0x130/0x190 [ 487.348453][ C0] common_startup_64+0x13e/0x148 [ 487.349938][ C0] [ 487.351017][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.353231][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 487.356614][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.359877][ C0] Call Trace: [ 487.360933][ C0] [ 487.361827][ C0] dump_stack_lvl+0x3d/0x1f0 [ 487.363262][ C0] panic+0x71c/0x800 [ 487.364525][ C0] ? __pfx_panic+0x10/0x10 [ 487.365946][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 487.367676][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 487.369261][ C0] ? refcount_warn_saturate+0x1ca/0x210 [ 487.370964][ C0] check_panic_on_warn+0xab/0xb0 [ 487.372520][ C0] __warn+0xf6/0x3c0 [ 487.373751][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 487.375288][ C0] ? refcount_warn_saturate+0x1ca/0x210 [ 487.376973][ C0] report_bug+0x3c3/0x580 [ 487.378338][ C0] ? refcount_warn_saturate+0x1ca/0x210 [ 487.380058][ C0] handle_bug+0x184/0x210 [ 487.381437][ C0] exc_invalid_op+0x17/0x50 [ 487.382858][ C0] asm_exc_invalid_op+0x1a/0x20 [ 487.384391][ C0] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 487.386294][ C0] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 80 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 487.392065][ C0] RSP: 0018:ffffc900000078b0 EFLAGS: 00010286 [ 487.393962][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 487.396428][ C0] RDX: ffffffff8e297780 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 487.398824][ C0] RBP: ffff888028d7816c R08: 0000000000000001 R09: 0000000000000000 [ 487.401541][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888028d7816c [ 487.404649][ C0] R13: ffff888028d78000 R14: ffff888029f46000 R15: ffff8880337ce800 [ 487.407699][ C0] ? __warn_printk+0x198/0x350 [ 487.409193][ C0] ? __warn_printk+0x1a5/0x350 [ 487.410688][ C0] tipc_crypto_xmit+0x20c1/0x2550 [ 487.412236][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 487.413893][ C0] ? lock_acquire+0x179/0x350 [ 487.415370][ C0] ? find_held_lock+0x2b/0x80 [ 487.416827][ C0] ? net_generic+0xea/0x2a0 [ 487.418251][ C0] tipc_bearer_xmit_skb+0x15f/0x430 [ 487.419827][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 487.421582][ C0] ? mark_held_locks+0x49/0x80 [ 487.423024][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 487.424781][ C0] tipc_disc_timeout+0x5b2/0x850 [ 487.426317][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 487.428241][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 487.430425][ C0] call_timer_fn+0x19a/0x620 [ 487.432305][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 487.434370][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.436100][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 487.437787][ C0] __run_timers+0x6ef/0x960 [ 487.439198][ C0] ? __pfx___run_timers+0x10/0x10 [ 487.440763][ C0] run_timer_base+0x114/0x190 [ 487.442216][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 487.443813][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.445285][ C0] run_timer_softirq+0x1a/0x40 [ 487.446752][ C0] handle_softirqs+0x219/0x8e0 [ 487.448236][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 487.449834][ C0] __irq_exit_rcu+0x109/0x170 [ 487.451307][ C0] irq_exit_rcu+0x9/0x30 [ 487.452626][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 487.454359][ C0] [ 487.455277][ C0] [ 487.456222][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.458064][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 487.459764][ C0] Code: 1b 73 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 f0 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 487.465546][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 00000286 [ 487.467371][ C0] RAX: 000000000043d97d RBX: 0000000000000000 RCX: ffffffff8b7f1c99 [ 487.469757][ C0] RDX: 0000000000000000 RSI: ffffffff8de14d4b RDI: ffffffff8c157020 [ 487.472169][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed100d486645 [ 487.474558][ C0] R10: ffff88806a43322b R11: 0000000000000001 R12: 0000000000000000 [ 487.476979][ C0] R13: ffffffff8e297780 R14: ffffffff90a7ff50 R15: 0000000000000000 [ 487.479391][ C0] ? ct_kernel_exit+0x139/0x190 [ 487.480905][ C0] default_idle+0x13/0x20 [ 487.482224][ C0] default_idle_call+0x6d/0xb0 [ 487.483700][ C0] do_idle+0x391/0x510 [ 487.484966][ C0] ? __pfx_do_idle+0x10/0x10 [ 487.486365][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 487.487916][ C0] cpu_startup_entry+0x4f/0x60 [ 487.489371][ C0] rest_init+0x16b/0x2b0 [ 487.490676][ C0] ? acpi_subsystem_init+0x133/0x180 [ 487.492296][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 487.493978][ C0] start_kernel+0x3ee/0x4d0 [ 487.495310][ C0] x86_64_start_reservations+0x18/0x30 [ 487.496944][ C0] x86_64_start_kernel+0x130/0x190 [ 487.498515][ C0] common_startup_64+0x13e/0x148 [ 487.500073][ C0] [ 487.501734][ C0] Kernel Offset: disabled [ 487.503068][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:55:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b2985 RDI=ffffffff9b082320 RBP=ffffffff9b0822e0 RSP=ffffc90000007220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0822e0 R15=ffffffff855b2920 RIP=ffffffff855b29af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d675a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0eddce7d60 CR3=00000000332fc000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000010 Opmask01=0000000000021d1f Opmask02=00000000ffff1fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4ee5df60274c11 a37585d7d7e24560 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0935589c18f1f64d 22ec1cf9b84a8594 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c7c4181c0c6155f bc2da17e27e1cd3d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 067a72d6d152cffd 07f7a954d9605b33 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 55561b154915d5f7 8e14c6a732ddb14a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e458d6e5520eccde 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63577d7b6b9efe3f 27608dd75e74c32a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0b4703800000000 d2a891afc599cf19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 33080374beb116a6 f1c6e01a5303532f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 339b4c9a9198890f 0f6e91d1903b3132 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f72726520636269 6c67206c61746146 000000706d74752f 6e75722f7261762f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3031747600006574 756c610000000072 2d20612d20746e75 6f6d752f6e69622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1312575500004657 564f420000000051 0e03420e03574d56 4c4e560c4d4a410c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572202c74696e69 73797320666f2065 6e6f203d3d202020 206e6f6974636120 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003d7757 RBX=0000000000000001 RCX=ffffffff8b7f1c99 RDX=0000000000000000 RSI=ffffffff8de14d4b RDI=ffffffff8c157020 RBP=ffffed1003bd1488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801de8a440 R14=ffffffff90a7ff50 R15=0000000000000000 RIP=ffffffff8b7f07ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d685a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe964e6b6c8 CR3=000000002c45e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000869 0000001000000000 0000000000000000 0000000000000014 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0e210000010000f fac080100000040c 0140ae0002000716 000001ed00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04040672a2006c6f 6f7468746501ffff ffffffffffffef08 1380032008000610 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020100006046ff4 0002000700080002 100004100006026f dc00100001000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08062410000193ca c4b09f81a284a310 00018080100006a3 8080040c0140ae00 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200070008000210 0002100006007094 1b85fec080100001 08000280808080ae ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030000000000000b 0000000cffffffae 0000000003000000 00000008ffffffba ZMM25=534764ec534764ec 534764ec534764ec 534764ec534764ec 534764ec534764ec 534764ec534764ec 534764ec534764ec 534764ec534764ec 534764ec534764ec ZMM26=c2d844a0c2d844a0 c2d844a0c2d844a0 c2d844a0c2d844a0 c2d844a0c2d844a0 c2d844a0c2d844a0 c2d844a0c2d844a0 c2d844a0c2d844a0 c2d844a0c2d844a0 ZMM27=356499b8356499b8 356499b8356499b8 356499b8356499b8 356499b8356499b8 356499b8356499b8 356499b8356499b8 356499b8356499b8 356499b8356499b8 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=da090000da090000 da090000da090000 da090000da090000 da090000da090000 da090000da090000 da090000da090000 da090000da090000 da090000da090000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df06bc5 RDI=ffffffff8c157020 RBP=0000000000000002 RSP=ffffc90003f2efe0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010ca7 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b7f244d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d695a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2f03ce7d60 CR3=00000000332d5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f031846a3 00007f2f031846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5f50d000 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556589ed80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000009 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000019 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555565889570 0000555565889200 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000100806 06013b8400040000 08000fff0000003c ff0401c700000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000810 00007f2f03184d10 000055556588ca20 000000000000003f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004020100000000 1000408004060173 de00232d6332692f 7665642f0000003e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 800300040061a284 08000fffffffffff ff0401c70000003d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49c2028000000000 0800010000100806 06013b8400040000 08000fff0000003c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000000e9 RCX=ffffffff819b8392 RDX=ffff88801faa8000 RSI=ffffffff819b8380 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000f1f75 R13=0000000000000200 R14=ffffffff8e297780 R15=ffffc9000078fc60 RIP=ffffffff819b8389 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8d006e7d60 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004041020 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b9e54e4b52b77356 24e80cc31235056a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35b5232f9368a3d5 c3fc3bf760c13c18 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8768d273e213827 82178b8a43e44f90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 76d9c75f6b78eec4 1000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ae6967f00000000 0000017900000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 352e489ca5fe8c64 0a25b4d93668c21a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a8af59138dd0138 8b97acbcac8b94be ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ae6967f00000000 0000017900000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6376003065676469 7262003070617465 7267367069007061 7465726736706900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 465300154042414c 5747001555445140 574213554c005544 5140574213554c00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001