last executing test programs: 46.342462034s ago: executing program 3 (id=1704): socket$inet6(0xa, 0x802, 0x0) (async) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="5d95e35a6e20ddcd61e6c47f37235184936cee2993724324d9ceba8ffb69fad9606ee6db1c7df8d1045276c4595079ed365a175d05a4b0df6e482eae96009e41d7e30a8cf19c3d28cfda262f38606e0fc867a956b468eb09289e998a1514f10e709ef632da4f304b198b9cd43e359c4bb5f60e0eb653a57f957d03244d011b3289c109cbb0a70de7d379784936ca67ea898f9099940bbcdd27a9c83929ddfc22d25a8a8f0bfc61b6", 0xa8}], 0x2, &(0x7f0000000300)=[{0x50, 0x103, 0x6, "99f4bdf5c7358b54ecc0d86c73ff66e839837616950fbd65d3d86275b8e5c9ea2da3f71711c999b2a09563eaa63fc511f88f93e9ea17e54bbba00e16d5861e59"}, {0x108, 0x29, 0x5, "e0b735d85684d5b651dce8019ee48185f8faaadc4116d9cc0a8dc35c2d8e9832e518a5db1a2db2a8404b75e7c3a367e084c3b52eea3fd43ec72938d3c67835804757658c1ea31e39b962a2ed691ddf679c5d212b4c99ad63b2216967c8fef1ee99a71b7587d458ceb3261cf85d347414aeaa22899a4b1c1230ee017dbb487c29229606f0edfb7fcd3f94161933d5bb75d707e3374cc3c802e250add7a2e5c31105af22edc1f09383a8777178d64cb871b4cda4ada57dd3a23234d23dcae5abc7ec93d862ca33b4ebbb40d9a44194b59831be426bc507b69ff0f096f74eb58650dd42c9c09ca53058fb924a279c175953b51527c146585d4c"}], 0x158}, 0x10) (async) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="5d95e35a6e20ddcd61e6c47f37235184936cee2993724324d9ceba8ffb69fad9606ee6db1c7df8d1045276c4595079ed365a175d05a4b0df6e482eae96009e41d7e30a8cf19c3d28cfda262f38606e0fc867a956b468eb09289e998a1514f10e709ef632da4f304b198b9cd43e359c4bb5f60e0eb653a57f957d03244d011b3289c109cbb0a70de7d379784936ca67ea898f9099940bbcdd27a9c83929ddfc22d25a8a8f0bfc61b6", 0xa8}], 0x2, &(0x7f0000000300)=[{0x50, 0x103, 0x6, "99f4bdf5c7358b54ecc0d86c73ff66e839837616950fbd65d3d86275b8e5c9ea2da3f71711c999b2a09563eaa63fc511f88f93e9ea17e54bbba00e16d5861e59"}, {0x108, 0x29, 0x5, "e0b735d85684d5b651dce8019ee48185f8faaadc4116d9cc0a8dc35c2d8e9832e518a5db1a2db2a8404b75e7c3a367e084c3b52eea3fd43ec72938d3c67835804757658c1ea31e39b962a2ed691ddf679c5d212b4c99ad63b2216967c8fef1ee99a71b7587d458ceb3261cf85d347414aeaa22899a4b1c1230ee017dbb487c29229606f0edfb7fcd3f94161933d5bb75d707e3374cc3c802e250add7a2e5c31105af22edc1f09383a8777178d64cb871b4cda4ada57dd3a23234d23dcae5abc7ec93d862ca33b4ebbb40d9a44194b59831be426bc507b69ff0f096f74eb58650dd42c9c09ca53058fb924a279c175953b51527c146585d4c"}], 0x158}, 0x10) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x203}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x203}, 0x8) 45.490949712s ago: executing program 3 (id=1713): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c00028005000100000000001400038008"], 0xe4}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0xf000, 0x2000, &(0x7f0000005000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000180)={0x28, 0x1b, 0xe, 0x18, 0xa, 0xfffffff8, 0x4, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x2, 0x4, {0x9, 0x0, 0x3, 0x1097}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r7, 0x5f03) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000240)={0x0, 0x1, 0x8, '\x00', &(0x7f0000000200)=0x3}) listen(r8, 0xd) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x23456}) 45.111809415s ago: executing program 3 (id=1725): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x2, 0x4) (async) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, &(0x7f00000000c0)=""/177, 0xb1}, 0xfe3fce6fa550e52d) (async, rerun: 64) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async, rerun: 64) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000240)=""/125, 0x7d}) (async) fsetxattr$security_evm(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x5, 0x3, 0x14, 0x3, 0xb3, "5411b4216b57b35eb17ff702d03eb8edecc47f442bdf840af7243acee087448b04d4259b2d92d4b1a8982963fc12b6b1d5087a6466e3c332417313bb29a095b6cf6e31ff41c8abbfb6b7820cdcb2c1fa34ccc1764426bf5afd904c0da3bbe149963ab8655d9dd7195ba5b2c67aa98f69c517e574b4fdb82c7c9301042dea71d20f82138c73eb97f3ce845b3a792d767d5476be7a4b8508443c08de2de924805196eab856de47e2d446b927ce76c6fd961f0996"}, 0xbc, 0x2) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000400), 0x0, 0x240401) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000440)=[@cpuid={0x14, 0x18, {0x3, 0x2}}, @wr_crn={0x46, 0x20, {0x9, 0xfffffffffffffffe}}, @code={0xa, 0x74, {"0f01c80fc7ab05000000420f001fc744240005550d10c7442402ed3ae59dc7442406000000000f011c24e300c4a1b9f89306000000430f01cfc744240000000000c744240200000000c7442406000000000f011c240f01c40f20d835200000000f22d8"}}, @out_dx={0xaa, 0x28, {0x5baa, 0x5, 0x1}}, @out_dx={0xaa, 0x28, {0xbbf3, 0x3, 0x2}}, @cpuid={0x14, 0x18, {0x4, 0x5}}, @wr_crn={0x46, 0x20, {0xd, 0xb}}, @code={0xa, 0x66, {"0f01cbb9800000c00f3235000100000f3036410f01b9002000006567f3450fc77200b805000000b9000000800f01d90f212d0f01d666ba430066b8040066ef440f20c03503000000440f22c08f8930942d73000000"}}, @code={0xa, 0x64, {"66b846008ec8c4e29daaf466b8bb000f00d844e707b9800000c00f3235004000000f30642ef2ac66baa100edb8010000000f01d9c74424006a531041c744240200580000c7442406000000000f011c240f01c9"}}, @wr_drn={0x6e, 0x20, {0x2, 0x5}}, @in_dx={0x82, 0x20, {0xc6f0, 0x2}}, @in_dx={0x82, 0x20, {0xbc76, 0x2}}, @wr_drn={0x6e, 0x20, {0x1, 0x4}}, @in_dx={0x82, 0x20, {0x4cdf}}, @code={0xa, 0x50, {"66410faef50f20c035000000400f22c0c481a9dff1b9230800000f326565410f2240c4c179f7e5660f3880b78a00000066ba4300ec66400f5b5987410f2042"}}, @wrmsr={0x1e, 0x20, {0x8b9, 0xffffffffffffffff}}, @wrmsr={0x1e, 0x20, {0xa57, 0x600000000}}], 0x32e}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000840)=[@textreal={0x8, &(0x7f00000007c0)="c0320f0f20e06635800000000f22e066b9d30b000066b80050000066ba000000000f300f35ba6100ec660ff3b0d09c0f2e7a6cd22366b9ec0b00000f320f20c06635000004000f22c0", 0x49}], 0x1, 0x54, &(0x7f0000000880)=[@dstype0], 0x1) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) bind$802154_dgram(r1, &(0x7f00000008c0)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) (async) fsetxattr$security_capability(r1, &(0x7f0000000900), &(0x7f0000000940)=@v1={0x1000000, [{0x40, 0x79}]}, 0xc, 0x3) (async) recvmmsg(r1, &(0x7f0000004780)=[{{&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/103, 0x67}, {&(0x7f0000000a80)=""/185, 0xb9}, {&(0x7f0000000b40)=""/102, 0x66}], 0x3, &(0x7f0000000c00)=""/231, 0xe7}, 0x4}, {{&(0x7f0000000d00)=@un=@abs, 0x80, &(0x7f00000030c0)=[{&(0x7f0000000d80)=""/14, 0xe}, {&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/151, 0x97}, {&(0x7f0000002f00)=""/230, 0xe6}, {&(0x7f0000003000)=""/150, 0x96}], 0x7, &(0x7f0000003140)=""/193, 0xc1}, 0x5}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003240)=""/60, 0x3c}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/105, 0x69}, {&(0x7f0000003340)=""/178, 0xb2}, {&(0x7f0000003400)=""/48, 0x30}], 0x5, &(0x7f00000034c0)=""/143, 0x8f}, 0x3}, {{&(0x7f0000003580)=@nfc, 0x80, &(0x7f0000003680)=[{&(0x7f0000003600)=""/71, 0x47}], 0x1}, 0xfff}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000036c0)=""/70, 0x46}], 0x1, &(0x7f0000003780)=""/4096, 0x1000}, 0x5}], 0x5, 0x61, &(0x7f00000048c0)={0x0, 0x3938700}) (async) getsockopt(r1, 0x7e1, 0x8001, &(0x7f0000004900)=""/139, &(0x7f00000049c0)=0x8b) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000004a00)={0x1, 0x1, 0x2}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) socket$phonet(0x23, 0x2, 0x1) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000004a40), 0x4) (async) fremovexattr(r1, &(0x7f0000004a80)=@random={'system.', '/dev/vcs#\x00'}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000004ac0)={0x10002, 0x0, 0x4000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) io_setup(0x1, &(0x7f0000004b00)=0x0) io_submit(r5, 0x6, &(0x7f0000005040)=[&(0x7f0000004b80)={0x0, 0x0, 0x0, 0x8, 0x89a5, r2, &(0x7f0000004b40)="d8d37ef45e07d25c96db32221353a6947d5d7b7b140615f69659e46ed39a44f3edafcb1bc857055a", 0x28, 0x5, 0x0, 0x1, r1}, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x300, r3, &(0x7f0000004bc0)="6c3a7918eede0a2cef166d52412dbfce8bbc9779f1049d7f1e25e203ceb40a520067c053634fbb2933ef69581e5eb02fb97d97f7e2470c284c730e6731451741523659c49e41b6c2c551a84a71e6c7bbeb72", 0x52, 0x53d7f7b, 0x0, 0x6, r1}, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x1, 0x7, r2, &(0x7f0000004c80)="d1dc80641eddb21bdef43376ccce08a7b54a097207638abff4b694437f226e19ff8eb502997c1787314590d896fa41793e518beeb36ff962fec33adc49ca0c86ed5863df4659fbcaf282ed9d5b583d023af82c7bc52a7c98f1b4ca6edefae8aa5da835604a0aba3e301f3ad3a61b2f225fae085a589f002c6004e83ed67babe19f8d45039147d5b53b450950717566eb594807eb0fa70216182d29e4d130fccbc51cf6a09dbb268f7cabe8496704b936a6f4d991d1173a", 0xb7, 0x3, 0x0, 0x2}, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000004d80)="59743515bc4db69d9c26130e9f6f5e169367153bb27051e907a2130efaa6803baba4ab12cf000f2714bdaf678db724d380b052a3ff10c2345800551c09dabee1d46c67db811990a89217ce31523e1ae556283645d33c98becb0d7e21727ac167def5a0e8819f86e064fe716befef879ef1ea32d6788895fcc8b1289ef733f23f02866209d71b3ae9a587ce14f5beef1ad41afa4fd5776828a0fd9075c22daf3c61ebf823c537cef302a0540d0f2db536dc5f83173be46bf8085d1aa14b1987", 0xbf, 0x7, 0x0, 0x2, r1}, &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f0000004e80)="cd4d68b2fe1da10f484dc5e37f4f8fc276b98b6937fcacf52918f79dd433d36229718f828ff0f0bc2f1000e43c7704c9c7a0b7055c79775d5a989205fdbf339963a00a679e99f65606cfcc", 0x4b, 0x0, 0x0, 0x0, r1}, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x2, 0x7024, r4, &(0x7f0000004f40)="197357758e8d4765c03114407022fc2660b9efc40a1b4ccea5318cbcd5e50d1ef7bad8d6a523e29fef90401b5949af0e8bae3dcff8e581282eb2930f3e44376ea77cd1b9bf784731542c43c07f261834a099606006f0f2e661c1f9e7a51452d0b2874774fbd2679d0ee4f0d6886d02af022c5c5c53cfc6c9b71bca4c4a8c4ba4bcae28cc67fc6fc8600778faaf497926e7678d663e219a2bf67d003e3dffcd33e3dd8444d78f5ce9ca96dbff6332261812655b", 0xb3, 0x9, 0x0, 0x1}]) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000005080), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000050c0), 0x1, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x17) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000005100)={0x2, 0xfc6}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000005140)={0xc0, 0x1, 0x1, 'queue1\x00', 0x4}) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000005340)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x2, 0x6, 0xffffff00, 0xa}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24048000}, 0x4008800) (rerun: 64) 45.111353611s ago: executing program 3 (id=1726): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x195) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c3c79e0407c0a9ee1ffff008000000007000000"], 0x280) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000f, 0x80010, r1, 0xfeec9000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x89401, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x181097, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) setresuid(0xee01, 0xee01, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x204001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x195) (async) socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c3c79e0407c0a9ee1ffff008000000007000000"], 0x280) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000f, 0x80010, r1, 0xfeec9000) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x89401, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x181097, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) (async) setresuid(0xee01, 0xee01, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x204001, 0x0) (async) 44.971139202s ago: executing program 3 (id=1729): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000100)="66450f280585000000262e45d8200fd8bc23ef848c870fc7aa0000010064f021b5e90000000fc770f9c4a275ac01420f01c3670f787700b805000000b9000001000f01d9", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001002200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0be7689e89003d8e1b2f0d43e33b3230d584b47937e90cfb0cb35c50ecf6e133e4010000000000000007e707af7a984a667e7138dc15d1498d99b30509138ce81282a28998ce479970f82e146bea282aa0fa8858ca2f9141"], 0x30}}, 0x0) 44.611655335s ago: executing program 3 (id=1738): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x12, 0x1, 0x3, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x21000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f0000000340)={0x18}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xf}, {0x2, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 44.556720943s ago: executing program 32 (id=1738): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x12, 0x1, 0x3, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x21000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f0000000340)={0x18}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xf}, {0x2, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 33.112088011s ago: executing program 2 (id=1918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000040)=0x1f) 32.890998754s ago: executing program 2 (id=1921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) fsopen(&(0x7f0000000700)='affs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x22199, 0x6003}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}, 0x1, 0xfc, 0x0, 0x240400c1}, 0x4000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x10103, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES16=r7], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 32.731816923s ago: executing program 2 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="2da18da91098022e4d3d60b05bd123e77567f4fe6dbc07d6bcc62f1b67c5a802467f709d5ad3e540523fa7c1e2c969a598861e2b6e375424b0c405765133897c3c7e0e2098c58946a3d1c26f26348a7c4ff4d2736305c04a5faed9b04bc4d73fd44bcba911448680a596e8b5d11dd7cd51254467f97c5c6116dc3f463eb3eccc3e4a043fee5dad371f93a2a678cf81c556d49b1aba25d6da06a9ea734587271f6bcbb6d7b625da6359af6e90e170ab332eff8e97c958888a464e798454f6ddc10b12b2ffa7a055e9ad37bd9829d5", @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x8800) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xa57, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r1, &(0x7f0000000580)="44c394f305916c4516999da288a8", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x14) keyctl$dh_compute(0x17, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) (async) keyctl$dh_compute(0x17, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@loopback, @empty}, 0x8) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@loopback, @empty}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000143f4"], 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000143f4"], 0x30}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa8881, 0xea) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa8881, 0xea) writev(r5, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0xfdef}], 0x20) (async) writev(r5, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0xfdef}], 0x20) r6 = pidfd_getfd(r5, r3, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000410101c0"]) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000000)={0xe, {0xbc8, 0x8, 0xd, 0x9}, {0x8, 0x9838, 0x4, 0x8}, {0x0, 0x101}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x2000000) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000540)=0x2, 0x4) 32.620306007s ago: executing program 2 (id=1924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffd40, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77a287fb3317c0c4, 0x2200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 32.619774041s ago: executing program 2 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x999}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x8000040) r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@hyper, 0x67928152d4eac0e7}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETS(r5, 0x80047456, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) 32.532117237s ago: executing program 2 (id=1928): syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0xc0f85403, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000700005d980000000000005608007ffc9c07008500000007000000b70000000000000095000000000000d23d14f3070d2d16579d00"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.494389925s ago: executing program 33 (id=1928): syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0xc0f85403, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000700005d980000000000005608007ffc9c07008500000007000000b70000000000000095000000000000d23d14f3070d2d16579d00"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.792600168s ago: executing program 4 (id=2209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000780)={@fd={0x66646185, 0x0, r1, 0x1000000}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @fd}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 12.710243476s ago: executing program 4 (id=2210): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f00000003c0)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x14, &(0x7f0000000180)={&(0x7f0000000140)="a44eb39bb1934a7bfc85f5029bd5e9602d18c75648ab9a9f86ca76fd8c2996dfb2a8cd", 0x23}, 0x1, 0x0, 0x0, 0x40}, 0x2000c814) 12.709858818s ago: executing program 4 (id=2211): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 12.653119147s ago: executing program 4 (id=2212): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x8) 12.652939092s ago: executing program 4 (id=2213): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x4, 0x2, 0x2, 0x4}}, 0x26) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x1, 0x8, &(0x7f0000000040)={0x1b, "1a0c149da4693f2542000000007f98bba3d23098936688731f1de08638c487719d"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='lp', 0x2) r3 = socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 8.011819839s ago: executing program 4 (id=2242): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x36000000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8005}, 0x10000050) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 7.921373747s ago: executing program 34 (id=2242): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x36000000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8005}, 0x10000050) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 3.223135662s ago: executing program 6 (id=2243): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c}, 0x90) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0xd, @raw_data="0910d1cdacb161a34e539b8033ab0200e858d0b8265ff08ca886c0543e7c784619384b22caf782c9ed7ade616a716b9b113fd429f1aa3061dc2e34dc7f22d89f01d17ffa2b04e43b48b129b34ae06be13f0d077c51acdc7db67ad673fb7b3174780e677e1e040247fa10ef1071e8aaff14d69ad27fb3eb30c8cb1436832d0dba161e601b6513d3eae8c2ab233bcbaed962c63f09236ccafe66a084007bf82f9b60a9dbab37bb9754024121e9345f56298ef8488e4ffa56a50f0c091c96d7bf00340a9ead71ea98c8"}) syz_usb_connect$cdc_ncm(0x5, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x2, 0x1, 0x0, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f9f7"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xbe, 0xcaf7, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x0, 0x5}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xe, 0x24, 0x7, 0x9, 0x5, [0x7ff, 0xff7f, 0xfffc, 0x10]}, @mdlm_detail={0x53, 0x24, 0x13, 0x6, "fcada0127cf5381dc2ca13ca980235819a5298eccf62716e4efea5c6c72d17bca738f9e72ae67a44ee7a6893e5c18ecbf9932fae1b73fd961e6142360acf58ee9cf638d1ec17ff424f5999e9cf4dc0"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xb, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x5cf, 0x40, 0xf}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x6, 0x8, 0x8, 0x40}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x6, 0xc}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2040}}, {0xe0, &(0x7f0000000340)=@string={0xe0, 0x3, "bb8f50ceed195a79f11e0d04c7763c4f370c3611d57fef3886712c8048be7c7e84340d9c8df95ffd9005af1de46a7b1b86255c659f6387e47c3b9c98ff9ae7821836dcbec52083099bdfc6db104dac06493214d67a1598d21a96734c428da9f83eb61577a8986dbc7914b2c07f6ff5e560b9c2a03fa3545a6bbf5ddf9cc69f10f4d48c8838c344946c0e4bca6565a7ff7cb6a31bde39dc9e080251bf90d8e45f787e138ee30e662ca4590b2fc8794bb383088ed7493867aee7d861241cabb86b73508c5aeeda8534c063fa9e4e527c9ce022315f6ff43b5a84cda563fe78"}}, {0x11, &(0x7f0000000440)=@string={0x11, 0x3, "e82256090105319cdc682cedb3e1b7"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 2.069230204s ago: executing program 6 (id=2294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x29, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="ae440761b55b2fc49f3526da61c5039fcd28287324684da1f849cbe5c1863f32169a277b6ce4bf8f647b0acd7c6de4137230f1479e78bf3261003226bd", @ANYRES8, @ANYRES32, @ANYRES8=r6, @ANYRES64=r8, @ANYBLOB="e926ac1108e8cfd1ec1dd99972d4080000000000000069efa1a338bf8113460569ba4309d99559cf680c8ea51cc3f4ffc590af42870747890541cd9d0adf8b64aa5e19285aca45acd5811058be20cc76d2fdbfe6f51eb58247f65dcf5295cd9084b61a27dfca651bfb55b5854b4fddc5d5827b4d9575f01f8507138542049d4c4bbefdd5e2a7cc8a449c28b090487085f5efef4946b6d40365c06d81fa243621808adf5c81cb"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r9, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0}) close(r7) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xd569, 0x0, 0x4, 0xb}, 0x80000001, 0x1, 0x3, 0x3, 0x8e, 0x5, 0x1, 0x14, 0x0, 0x4, {0x7, 0x13, 0x361f, 0x1, 0x6, 0xd}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) r13 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.603370693s ago: executing program 5 (id=2302): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "ab2c7b9c5cff6ce785d8c4dc064744e04200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.603204781s ago: executing program 5 (id=2303): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000780)={@fd={0x66646185, 0x0, r1, 0x0, 0x2000000}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @fd}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1.513337204s ago: executing program 5 (id=2305): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) fsopen(&(0x7f0000000700)='affs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES16=r4], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.402149173s ago: executing program 0 (id=2308): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.401404011s ago: executing program 0 (id=2309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000003c0)="b805000000660f6ae10f01d9660f78c4020ab8010000000f01c1b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x4e}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x4, 0xa3, 0x40, @empty, @empty, 0x40, 0x7, 0x3, 0x4}}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@deltfilter={0x44, 0x2d, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0xe}, {0x7, 0x1}, {0x2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x17}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x48, {"360f005200b8010000000f01c1400f20410f01cf420f01c3f041800f00c463a94142b04d66ba420066b8c26666ef3646637f00410f0011"}}, @uexit={0x0, 0x18, 0x1}, @wrmsr={0x1e, 0x20, {0x263, 0x7f32}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffffd}}, @uexit={0x0, 0x18, 0x2}, @wrmsr={0x1e, 0x20, {0xb0f, 0x38000}}, @in_dx={0x82, 0x20, {0x2482, 0x2}}, @wr_crn={0x46, 0x20, {0x3, 0x3fbb874d}}, @rdmsr={0x32, 0x18, {0xe8}}, @cpuid={0x14, 0x18, {0xc, 0x9}}, @wrmsr={0x1e, 0x20, {0xa6f, 0x2}}], 0x168}) 1.282970924s ago: executing program 5 (id=2310): syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601200b000303a0000000000000000000000000000000000ff020000000000006000000000000001a00090"], 0x0) 1.282656423s ago: executing program 5 (id=2311): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x8847}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "101b01", 0x11, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @opaque="715c6fd5536167bd28"}}}}}}}, 0x4b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xa0, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x13}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100d}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0xa, @private1, 0xfffffffa}, @in6={0xa, 0x4e20, 0xd, @local, 0xd2}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.041970037s ago: executing program 0 (id=2314): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000180)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x143) 1.004543046s ago: executing program 0 (id=2316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x202c41, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x458, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5ced041d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "fa655c7b169e83eec3c5bc244388de6efaf7c81c016805cfd13e1a582d67"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7a00cdaa65c3ac10184314cfd51460b33572977e04"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x3d, 0x3, "614eef23c86cc7f96aeecfb0e8eaae3f058dc95cf3d8c537348b78f39a525bd6dcb31e72be2b43107f05595ad992e2d709202e832076841dbe"}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "d26752589c4ec216fb1ee1889fbfb02b7b5772f99b6561768a563b7b00427a1cc0415559f318e520fc4bea0d9c1cb3fb42ba54c827b0d7c73a1883341e9fe0018eccb726a9cd5f9638ec75ea969fe4e8eee2c0e847fe1e3546cb60bf779f65ab7fd319f0eab1a67910b314722bbead2a928b964ed8daa312b1f6161bfb64f1bb1f86c4f37922271e4faf7787414a2238daf1de56c109c93d5d06d24c4418fe57fbd9593f1f30b56cd6e992eb267b981747a32ff9a4d3fc35369f744e7c2f9363d72f164d0d82b220182711f15a77f967"}, @TIPC_NLA_NODE_ID={0x9d, 0x3, "ddaf7f99d64c6fd512a1b58d857475687277af6d71f491278ac7e563f42d54eca8282c6a6f9d0ffff5705895a6575d2a99891485eea990ae7dcbdc6e818c01042df2fe2b74cc6885b99fb4a0fc510f87a626dd5ac25fce9ed9fec9f0324106174bef38fd02ee6e1224193fa169728e2d6ba48bca4eeefa75aa7124e5c119e2f135f7f6043cea1fd75f68bf657e281ca6772b20bd023a57ad40"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb7ae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c2a13e1cf11d04b62c2a5da5556ecc265cedfb25b55333f9a442695945e74cdd5b69d2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x36b}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x7a, 0x3, "347d01457dd8773e5e68a4083015d78cdcaad002dac0325f1a8d7d1c02815b39037cd2c90028d7b78af68279285bcbbacc33c52d314fc6b1391bc02a5890a122ac55050e597b03010ae47717ee9931ad9d30905b52d5e7e729f67941f72f7c01975010ea5b9c0770e19985c01106959810b6f4cc24c2"}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x20008800}, 0x4004) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) 907.388937ms ago: executing program 0 (id=2318): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) fsopen(&(0x7f0000000700)='affs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES16=r4], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 659.0643ms ago: executing program 0 (id=2322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp', 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 502.362996ms ago: executing program 1 (id=2326): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000140)={0x9, r2}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x114840, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000280)={{r3}, r4, 0x2, @inherit={0x60, &(0x7f0000000200)={0x1, 0x3, 0x6bf8, 0x1ff, {0x3e, 0x7fffffff, 0xc4, 0x3, 0x2}, [0x0, 0x8, 0x4]}}, @subvolid=0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001280)={0x0, 0x0, r1}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000012c0), 0x1, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000001300)=""/4096) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000002400)={&(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0xa, 0x7}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000002440)={[{0x5, 0xaf, 0x2, 0x6, 0x2, 0x7f, 0x46, 0x9, 0x5, 0xb8, 0x4, 0x5, 0x1}, {0x9, 0x0, 0x6, 0x33, 0x4, 0x1, 0x0, 0x3, 0x10, 0xd, 0xce, 0x0, 0x1da}, {0x4b80, 0x7, 0x1, 0x7e, 0x2, 0xfe, 0x3, 0x7, 0x8, 0x0, 0x6, 0x2, 0x4}], 0x6}) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000024c0), 0x545c00, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000002580)={&(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002540), 0x8, r6, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000002600)={r7, 0x1, 0xb, 0x3, &(0x7f00000025c0)=[{0x4, 0xd73, 0x1000, 0x7f}, {0x800, 0xff, 0x2, 0x40}, {0xfd11, 0xf0f5, 0x1, 0x6}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000002640)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f00000026c0)={&(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000002700)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000002740)={r5, 0xfffffff7, 0x9, 0xb, 0x2, [], [0xc, 0x9, 0x0, 0xe1], [0x3, 0x80e, 0x3, 0xe44c], [0x9, 0x10000, 0xe46d, 0x467]}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r11) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000002f40)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f00)={&(0x7f0000002840)={0x694, r12, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x66}}}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x0, 0x24, 0x52, 0xc, 0x1b, 0x2, 0x18, 0x30, 0x6, 0x60, 0x1, 0x3]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x6}, {0x0, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x4, 0xa}, {0x5, 0x7}, {0x5, 0x4}, {0x1}, {0x7, 0x7}, {0x1}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0x4}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x12}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x7}, {0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x7}, {0x4, 0xa}, {0x6, 0x8}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x2, 0x1}, {0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x49, 0xb, 0x30, 0x4, 0x12, 0x48, 0x48, 0x0, 0x60, 0x6f6949c9ea0ebe21, 0x5, 0x5, 0x18, 0x18, 0x9, 0x16, 0x9, 0x4, 0x6c, 0xa]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x8c510a770b706aad}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x4, 0x10, 0x4, 0xff, 0x5, 0x8001, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x5000, 0xf07, 0x9, 0x2d, 0x8, 0xf0eb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x2}, {}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0xa}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x7}, {0x2, 0x8}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x6}, {0x4, 0x5}, {0x4}, {0x3, 0x7}, {0x2, 0x1}, {0x7, 0x8}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {}, {0x7, 0x3}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0x4}, {0x2, 0xa}, {0x5, 0x7}, {0x6}, {0x2, 0x5}, {}, {0x4}, {0x6, 0x4}, {0x0, 0x6}, {0x5, 0x1}, {}, {0x0, 0x8}, {0x7, 0xa}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x3, 0x400, 0xfff7, 0x59d, 0x200, 0x1]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xfff7, 0xec8, 0x3ff, 0x3, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x8}, {0x6}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x7}, {0x4}, {0x7, 0xa}, {0x2, 0x9}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x3}, {0x4}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x5}, {0x3, 0x3}, {0x4, 0x3}, {0x4, 0x6}, {0x1}, {0x2, 0x8}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x7, 0x9}, {0x5}, {0x2, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x6c, 0x36, 0xc, 0xc, 0x18, 0x1b, 0x12, 0x16, 0x3, 0xb, 0x30, 0x6c, 0x36, 0x1, 0x2, 0xb, 0xc, 0x3, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0xa}, {0x2, 0x3}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x6, 0x6}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x1}, {0x2, 0xa}, {}, {0x7, 0x8}, {0x5, 0x7}, {0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x154, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x2, 0x1, 0x18, 0x5, 0xb, 0x12, 0x6c, 0x16, 0x16, 0xc, 0x16, 0x60, 0x12, 0x60, 0xb, 0x1b, 0x0, 0x60, 0x17, 0x6, 0x3, 0x18, 0x61, 0xc]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0xb, 0xb, 0x4, 0x24, 0x4, 0x48, 0x30, 0x3, 0x1b, 0x48, 0x1, 0x16, 0x0, 0x1, 0x30, 0xb, 0x48, 0x3, 0x16, 0x3, 0x6c, 0xc, 0x1, 0xc, 0x3, 0xc, 0x30, 0x5, 0xc, 0x30, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4f, 0xfff, 0xaf53, 0x8, 0x0, 0x2e0, 0x4, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x8, 0x4, 0x1ff, 0x0, 0xbbd3, 0xb6c2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffe, 0x6, 0xd5, 0x4d0, 0x7, 0xaea, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x1e, 0x1, 0x1, 0x3, 0xfff, 0xfffb, 0x1]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x7}, {0x1, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x2, 0x4}, {0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x3, 0x8}, {0x3, 0x3}, {0x6, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x3}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x9}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x1e}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x7, 0x6}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x6}, {0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x4, 0x7}, {0x4, 0x3}, {0x6, 0x9}, {0x4}, {0x2, 0xa}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x1}, {0x3, 0xa}, {}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x6}, {0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x6}, {0x3, 0xa}, {0x3, 0x8}, {0x2, 0xa}, {0x2, 0x4}, {0x5}, {0x5, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd7ce, 0x3, 0x1, 0x0, 0x0, 0x4, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd19f, 0xfff, 0x5, 0x0, 0x3e, 0x0, 0xfffb, 0x5]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x1}, {0x5, 0x9}, {0x3, 0x2}, {0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0xb, 0x6c, 0x24, 0x1f74fcd0520f7ea2, 0x60, 0x3, 0x3, 0x30, 0x9, 0x1b, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x12, 0xc, 0x48, 0xb, 0x1b, 0x24, 0x0, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0xc, 0x18, 0xb, 0x4, 0x2, 0x18, 0x12, 0x16, 0x0, 0x6c, 0x12, 0x12, 0x3, 0x4f, 0x0, 0x1, 0x24, 0xb, 0x36, 0x48, 0xc, 0x4, 0x12, 0x48, 0x2, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x6, 0x57, 0x2, 0x7, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x9}, {0x7, 0x4}, {0x0, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x12, 0x3, 0x1b]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4d, 0xc, 0x24, 0x48, 0x3, 0x18, 0x1, 0x1b, 0x78, 0x2, 0x18, 0x24, 0x5, 0x69, 0x2, 0x2]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x5}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x3}, {}, {0x0, 0x6}, {0x4}, {0x3, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x4}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x5, 0xa}, {0x2, 0x4}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x3}, {0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x4, 0x7}, {0x4, 0x9}, {0x2, 0x1}, {0x3, 0x3}, {}, {0x7, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x12, 0x3, 0xb, 0x60, 0x4, 0x24, 0x12, 0x12, 0x18, 0xb, 0x16, 0x30, 0x2, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7d, 0x80, 0x1, 0xfff9, 0x5, 0xf, 0xe]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x800, 0x6760, 0x4, 0x5, 0x9, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x8, 0x81, 0x8, 0x3, 0xb635, 0x2]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x1b, 0x5, 0x1b, 0x4, 0x4, 0xc, 0xb, 0xc, 0x6c, 0x36, 0x1b, 0x6c, 0x4, 0x60, 0x3, 0x16, 0xb, 0x3, 0x4, 0xb, 0x3, 0x36, 0x5, 0x30, 0x5, 0x1, 0x0, 0x36, 0x1]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x8, 0x200, 0xfff, 0x4, 0xfffc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x98, 0x8, 0x2, 0x2800, 0x11, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x2, 0x3, 0x80, 0x9, 0x0, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x5, 0x30, 0xc, 0x60, 0x12, 0x1b, 0x8366a280c815ce99, 0x36, 0xb, 0x1a, 0x6, 0xb, 0xb, 0x7, 0x60, 0x1, 0x36, 0x0, 0x65, 0x1b, 0x9, 0x1c, 0x6, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x40, 0x1, 0xfff6, 0x2, 0xfff, 0x7, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x10, 0x1ff, 0xd31d, 0x2, 0x3ff, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x8, 0x73, 0x1, 0x8, 0x3, 0x5, 0x4]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x7}, {0x2, 0x7}, {0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x3, 0x3}, {0x7, 0x2}, {0x6, 0xa}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x7}, {0x5, 0x9}, {0x5, 0x4}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x2}, {0x2, 0x2}, {0x3, 0x9}, {0x3}, {0x5}, {0x5, 0x2}, {0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x7}, {0x6, 0x6}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0x4}, {}, {0x0, 0x13}, {0x5, 0x5}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x2}, {}, {0x1, 0x3}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x694}, 0x1, 0x0, 0x0, 0x20040014}, 0x14) ioctl$KDSETMODE(r10, 0x4b3a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000002f80)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000002fc0)={0x1d, r13, 0x3, {0x1, 0xf0, 0x1}, 0xfe}, 0x18) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r10, 0xc04064aa, &(0x7f0000003240)={&(0x7f0000003000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x9, 0xa}) clock_gettime(0x0, &(0x7f0000003280)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f00000032c0)={0x80000000, 0xb, 0x4, 0x400, 0x3ff, {r14, r15/1000+10000}, {0x4, 0x1, 0x5, 0x7f, 0x2, 0x2, "26aefecb"}, 0x8, 0x4, {}, 0xfff, 0x0, r3}) pread64(r16, &(0x7f0000003340)=""/89, 0x59, 0x9) 501.764942ms ago: executing program 5 (id=2327): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x90, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd73}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]]}, 0x90}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000a40)) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[], [{@seclabel}]}) 432.986306ms ago: executing program 1 (id=2328): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 428.911878ms ago: executing program 1 (id=2329): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) (async, rerun: 64) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@cache_loose}]}}) (rerun: 64) 341.888435ms ago: executing program 6 (id=2330): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) fsopen(&(0x7f0000000700)='affs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES16=r4], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 182.044152ms ago: executing program 6 (id=2331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x80ff, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x10, {{@in6=@loopback, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x3, 0x80}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 179.134722ms ago: executing program 6 (id=2332): vmsplice(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000500)='k', 0x1}], 0x1, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x400, @loopback, 0x6}, {0xa, 0x4e20, 0x8, @empty, 0x4}, r4, 0x8}}, 0x48) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)=@OVL_FILEID_V0={0x8e, 0xfb, {0x0, 0xfb, 0x8e, 0x0, 0xb, "0ff75f027faef46f180f78b7fe38716b", "69b75168aadf1e8a988c11694509a5c42577c8f2223afd82314e7e94cbf425067962a0832085be2c98740e3f73520a1ea8a7d7f4ec3f0a47ff08dd2936a95bfca8975f8cf1203a5a814cc94755731bf4d5b55402505b727725dfd0ca52a550b878e97b724e0c2ffcec9781f13283b59a5e9c182e4db4819bc8"}}, 0x42) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20bd00f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000880)=[@iv={0x88, 0x117, 0x2, 0x24, "a10e6f15b49d15d53750607fa2594061d8b753b9391b623368c45376d342c1eb50d7297d328b61e525dc1c6d367255899f7ab193943948dc6d0ab0b2baf009e344669e78ef82c067468aef85a4cb575aea0ace00b6b9b8e5be40c5a9b81c12700efab23e0ce365c13deb34378b012a"}, @iv={0x0, 0x117, 0x2, 0x0, "8b2c878c136047fcc889388d8baed35f1bb65d6abc8d734c4eacf0f6c169300845542846098f80f3431130d83601d3aeb210ca9b0e5a0866b4cdfc0fc9be1265b1ec0f31a8f89166fd33776d726d70bdf4883ecb6047a9905d92cb1405b57b20c955175f51b05363ce77fc11baafcaf17229c99c81e19c04edc0b9a9447896f707fbdb40700738aeeb276b9346ca6f76d709bc587324e8b392fe81ae28d7f33641ab5f913d5f011e5c90dadbeaf4973dc2c2657933b932767508f46e2914732a227b78f23134093104cf0d7f8168c260d6d79f0634b7d8"}], 0x88}], 0x1, 0x40040004) (async, rerun: 32) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 177.132566ms ago: executing program 1 (id=2333): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x93}]}, 0x34}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[], "235d6c8f833b40b4"}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) 39.74022ms ago: executing program 1 (id=2334): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000040)="80c67ed4b2623618b8dbd36e1e327cb5ec265cec2eb7f4b171b69da2f500439408ff6663f9f4a69e", 0x28}], 0x1}, 0x3) shutdown(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b000000", 0xd, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x8111b9d6a5135eb1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0x12) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r6, 0x0, 0xd1, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) 370.32µs ago: executing program 1 (id=2335): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_wakeup_irq', 0x40000, 0x2) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000400)) (async) r2 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x229}, 0x50) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async, rerun: 32) r11 = memfd_create(&(0x7f0000000380)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fY\xf8\xfa\xb6\xf8\v;\x00`\x00\x00\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xd2s\xacZ\x1el\x19g\xd6\xfa\xfe\xa9\x1b\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x7) (rerun: 32) ioctl$FIBMAP(r11, 0x1, &(0x7f0000000000)=0x8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4, @ANYRES16=r12], 0x4c}}, 0x40000) (async, rerun: 64) r13 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r13, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r13, 0x7a0, &(0x7f0000000100)={@local}) prctl$PR_SET_SECUREBITS(0x1c, 0x0) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r13, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) (async, rerun: 64) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r13, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) (rerun: 64) sendmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000480), 0x10000000000000a6, &(0x7f0000000cc0)=[{0xe8, 0x1, 0x8, "926d0423eb053677383f8205b56225bd24ff9570675b46a60084fbfb6bd1be808931d553da9854ccf2d35a03f659bc86d591387881539047429040c17ec20e095586e16824d17aaed41ed6db0d894631ca8ed1cd3431460cb58b3b57c7a281202c55799a9e3d56c69848914639f15cbc7b8baa1bead020b9adf68e75ca2e8906bdcd06dfbad3caf8d3e02153dded2198dea964284a9631671136ae399db73e96b80219d09535cb63d2defe83560f370a76975776bb9377426e258b17cef0ea8f19ba5fe775de21056506886d2361e52c6e30c408b2"}, {0x30, 0x116, 0x6, "961df4e12e97f270e1254d6f0a5cbd1c63ff1c7d16d47025640b000000"}, {0x40, 0x104, 0x0, "53ee08a1d8ff6dd29efe0c8252b5030003000000b4260000000053a53f97dc9a312166c404ac04e585f6cd849f75c6318c50437d4b706debc4d240a0dfb4d320347fda1d8263817c43888d96be76cea08cf0ab04ef411d514bf0f1d6b4cbf94573775b2c759e1fed324a680550b1a94de449e436c6b57abd42727e82d8"}, {0xe8, 0x10a, 0x0, "8f4feac938c5fcdf544d330c4e3b4fe1155342f2f84f404a9678b5eb3a7f18e81c4fcdc9777deb152dbe9fc34980ea1f8a2fd8dfcb6e7ed374b022c16401a0065c53acc2bc4f259be965bd6281c901ee1df91c094ae73fc884afa5eb8aa8c090586333dafa38413a95c5f8868d92b39cce8cdb7d581e9ed7bb7f013e20557fc9c06804e31c4cfea1beedc2d31c941be27d8e0a3126610a7fc7a6675e391bfa9b7efed2259665174d6c8eac3d4881ef3054f430f900fc2f7c424392372da6c93690eff4d3e8d2edf04bcde55e342aeef6d45496850b4cf6f1"}, {0x110, 0x113, 0x2, "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"}], 0x350}}], 0x1, 0xfc) pidfd_getfd(r0, r3, 0x0) 0s ago: executing program 6 (id=2336): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mmap(&(0x7f0000b81000/0x2000)=nil, 0x2000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd69, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x6}]}}]}, 0x38}}, 0x4048000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = io_uring_setup(0x3c90, &(0x7f0000000100)={0x0, 0xc819, 0x40, 0x3, 0x38}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000209000/0x2000)=nil, 0x2000, 0x3, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x11) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 274][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 162.638257][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 162.641993][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 162.734850][T10333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.738419][T10332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.083597][T10354] veth0_vlan: left promiscuous mode [ 163.086792][T10354] veth0_vlan: entered promiscuous mode [ 163.279531][ T34] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 163.349896][T10361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1546'. [ 163.353403][T10361] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1546'. [ 163.356775][T10361] netlink: 'syz.2.1546': attribute type 5 has an invalid length. [ 163.360070][T10361] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1546'. [ 163.435199][ T5960] Bluetooth: hci2: Malformed LE Event: 0x0d [ 163.459266][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 163.465266][ T34] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.468917][ T34] usb 5-1: config 179 has no interface number 0 [ 163.472283][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.475939][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.479926][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.485004][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 163.491999][ T34] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.497325][ T34] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.501053][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.510156][T10352] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.724264][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input18 [ 163.921313][ T9] usb 5-1: USB disconnect, device number 22 [ 163.921358][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.926520][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.985450][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 163.989846][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 163.995676][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 164.001028][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 164.004877][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 164.007985][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 164.012215][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 164.015413][T10382] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 164.018754][T10382] UDF-fs: warning (device md0): udf_fill_super: No partition found (1) [ 164.093947][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.096886][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.227860][T10392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10392 comm=syz.1.1559 [ 164.462454][T10399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.654815][ T5960] Bluetooth: hci2: Malformed LE Event: 0x0d [ 164.655839][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 164.655854][ T40] audit: type=1400 audit(1759450830.730:2714): avc: denied { ioctl } for pid=10407 comm="syz.2.1566" path="socket:[33292]" dev="sockfs" ino=33292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.669858][ T40] audit: type=1400 audit(1759450830.730:2715): avc: denied { open } for pid=10407 comm="syz.2.1566" path="/dev/ptyq9" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 164.678821][ T40] audit: type=1400 audit(1759450830.740:2716): avc: denied { ioctl } for pid=10407 comm="syz.2.1566" path="/dev/ptyq9" dev="devtmpfs" ino=135 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 164.789422][ T6017] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 164.835029][ T40] audit: type=1400 audit(1759450830.910:2717): avc: denied { execmem } for pid=10409 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 164.961538][ T6017] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.965400][ T6017] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.966808][ T40] audit: type=1400 audit(1759450831.040:2718): avc: denied { create } for pid=10409 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.969279][ T6017] usb 5-1: config 0 has no interface number 0 [ 164.979218][ T40] audit: type=1400 audit(1759450831.050:2719): avc: denied { write } for pid=10409 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.980659][ T6017] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.993619][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.997809][ T6017] usb 5-1: config 0 descriptor?? [ 165.002468][ T6017] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 165.086203][ T40] audit: type=1400 audit(1759450831.160:2720): avc: denied { module_request } for pid=10412 comm="syz.1.1568" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 165.121828][ T40] audit: type=1400 audit(1759450831.200:2721): avc: denied { sys_module } for pid=10412 comm="syz.1.1568" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 165.142583][ T40] audit: type=1400 audit(1759450831.220:2722): avc: denied { create } for pid=10412 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.186217][ T40] audit: type=1400 audit(1759450831.260:2723): avc: denied { read write } for pid=5954 comm="syz-executor" name="loop2" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.216012][ T6037] usb 5-1: USB disconnect, device number 23 [ 165.336882][T10421] mmap: syz.1.1569 (10421) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.418917][T10428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10428 comm=syz.2.1572 [ 165.781968][T10455] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 165.831085][T10460] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 165.917790][T10464] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.020221][T10469] binder: 10468:10469 ioctl c0306201 2000000001c0 returned -14 [ 166.381927][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 166.389267][ T10] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 166.499640][ T9] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 166.514998][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1591 [ 166.673490][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.676941][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.682107][ T9] usb 8-1: config 0 has no interface number 0 [ 166.685183][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.692184][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.698107][ T9] usb 8-1: config 0 descriptor?? [ 166.708651][ T9] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 166.757229][T10490] netlink: 'syz.2.1593': attribute type 32 has an invalid length. [ 166.793114][T10490] syzkaller0: entered promiscuous mode [ 166.796778][T10490] syzkaller0: entered allmulticast mode [ 166.801278][ T92] syzkaller0: tun_net_xmit 48 [ 166.804840][T10490] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 166.807604][T10490] syzkaller0: Linktype set failed because interface is up [ 166.813269][T10490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.817029][T10490] IPv6: NLM_F_CREATE should be set when creating new route [ 166.820256][T10490] IPv6: NLM_F_CREATE should be set when creating new route [ 166.824290][T10490] IPv6: NLM_F_CREATE should be set when creating new route [ 166.830788][T10490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.839681][T10489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.964649][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 167.973545][ T5960] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.067744][T10498] netlink: 'syz.0.1594': attribute type 1 has an invalid length. [ 168.178979][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 168.429791][ T6973] usb 8-1: USB disconnect, device number 23 [ 168.446475][T10498] bond2: entered promiscuous mode [ 168.448611][T10498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.606164][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 168.610576][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 168.614303][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 168.934952][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1598'. [ 168.938591][T10512] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 168.941974][T10512] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1598'. [ 169.335006][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 169.563752][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 169.696735][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 169.696757][ T40] audit: type=1400 audit(1759450835.770:2859): avc: denied { write } for pid=10551 comm="syz.2.1612" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.702460][T10552] binder: 10551:10552 ioctl c0306201 2000000001c0 returned -14 [ 169.707590][ T40] audit: type=1400 audit(1759450835.780:2860): avc: denied { map } for pid=10551 comm="syz.2.1612" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.722415][ T40] audit: type=1400 audit(1759450835.780:2861): avc: denied { call } for pid=10551 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 169.728405][ T40] audit: type=1400 audit(1759450835.780:2862): avc: denied { transfer } for pid=10551 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 169.735808][ T40] audit: type=1400 audit(1759450835.810:2863): avc: denied { create } for pid=10554 comm="syz.3.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.746874][ T40] audit: type=1400 audit(1759450835.820:2864): avc: denied { ioctl } for pid=10554 comm="syz.3.1615" path="socket:[33557]" dev="sockfs" ino=33557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.759832][ T40] audit: type=1400 audit(1759450835.840:2865): avc: denied { mounton } for pid=10556 comm="syz.2.1616" path="/369/file0" dev="tmpfs" ino=1983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.773767][ T40] audit: type=1400 audit(1759450835.850:2866): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.799377][ T6022] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 169.805967][T10562] binder: BC_ATTEMPT_ACQUIRE not supported [ 169.808915][T10562] binder: 10561:10562 ioctl c0306201 200000000300 returned -22 [ 169.823843][ T40] audit: type=1400 audit(1759450835.900:2867): avc: denied { append } for pid=10561 comm="syz.2.1617" name="loop6" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.856584][ T40] audit: type=1400 audit(1759450835.930:2868): avc: denied { sys_module } for pid=10565 comm="syz.3.1618" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.963675][ T6022] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.967259][ T6022] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.979338][ T6022] usb 5-1: config 0 has no interface number 0 [ 169.982018][ T6022] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.985760][ T6022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.000924][ T6022] usb 5-1: config 0 descriptor?? [ 170.005946][ T6022] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 170.226224][ T10] usb 5-1: USB disconnect, device number 24 [ 170.542501][T10610] tmpfs: Unknown parameter 'n}22' [ 170.752532][T10623] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1636'. [ 170.793262][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 170.844783][T10627] netlink: 'syz.3.1638': attribute type 2 has an invalid length. [ 170.845034][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.060462][T10640] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 171.072185][T10640] CIFS mount error: No usable UNC path provided in device string! [ 171.072185][T10640] [ 171.075781][T10640] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.147531][T10649] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.246400][T10656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10656 comm=syz.0.1647 [ 171.478336][T10676] netlink: 'syz.2.1653': attribute type 12 has an invalid length. [ 171.868662][T10692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10692 comm=syz.0.1658 [ 171.927578][ T5960] Bluetooth: hci2: Malformed LE Event: 0x0d [ 171.937235][T10696] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 171.943297][T10696] team0: Device ipvlan3 is already an upper device of the team interface [ 172.349207][ T6017] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 172.479316][ T6017] usb 8-1: device descriptor read/64, error -71 [ 172.523386][T10706] kvm: MWAIT instruction emulated as NOP! [ 172.651734][T10716] veth0_vlan: left promiscuous mode [ 172.654279][T10716] veth0_vlan: entered promiscuous mode [ 172.739535][ T6017] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 172.879361][ T6017] usb 8-1: device descriptor read/64, error -71 [ 172.990433][ T6017] usb usb8-port1: attempt power cycle [ 173.037695][T10731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10731 comm=syz.1.1671 [ 173.107181][T10736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10736 comm=syz.1.1673 [ 173.304403][T10753] __nla_validate_parse: 7 callbacks suppressed [ 173.304416][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1680'. [ 173.339320][ T6017] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 173.360285][ T6017] usb 8-1: device descriptor read/8, error -71 [ 173.366856][T10755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10755 comm=syz.1.1681 [ 173.428311][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 173.599294][ T6017] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 173.630894][ T6017] usb 8-1: device descriptor read/8, error -71 [ 173.722564][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 173.749724][ T6017] usb usb8-port1: unable to enumerate USB device [ 173.947252][T10779] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.050106][T10782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10782 comm=syz.0.1690 [ 174.119378][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 174.259228][ T10] usb 8-1: device descriptor read/64, error -71 [ 174.519514][ T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 174.537736][T10788] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1692'. [ 174.649415][ T10] usb 8-1: device descriptor read/64, error -71 [ 174.680311][T10796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10796 comm=syz.1.1695 [ 174.769574][ T10] usb usb8-port1: attempt power cycle [ 175.119423][ T10] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 175.121268][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 175.121281][ T40] audit: type=1400 audit(1759450841.200:3095): avc: denied { write } for pid=10801 comm="syz.3.1697" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 175.192879][T10805] fuse: Bad value for 'fd' [ 175.195317][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1698'. [ 175.201958][T10805] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1698'. [ 175.209092][T10805] batadv1: entered allmulticast mode [ 175.238265][ T40] audit: type=1400 audit(1759450841.310:3096): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 175.255207][ T40] audit: type=1400 audit(1759450841.330:3097): avc: denied { read write } for pid=5954 comm="syz-executor" name="loop2" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.262897][ T40] audit: type=1400 audit(1759450841.330:3098): avc: denied { open } for pid=5954 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.272195][ T40] audit: type=1400 audit(1759450841.330:3099): avc: denied { ioctl } for pid=5954 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.275956][T10810] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 175.314227][ T40] audit: type=1400 audit(1759450841.390:3100): avc: denied { create } for pid=10814 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.329261][ T10] usb 8-1: device not accepting address 30, error -71 [ 175.377560][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 175.380653][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 175.383757][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 175.399083][ T40] audit: type=1400 audit(1759450841.470:3101): avc: denied { name_bind } for pid=10820 comm="syz.3.1704" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 175.400298][T10821] tmpfs: Cannot disable swap on remount [ 175.407992][ T40] audit: type=1400 audit(1759450841.470:3102): avc: denied { node_bind } for pid=10820 comm="syz.3.1704" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 175.419014][T10824] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 175.419014][T10824] program syz.2.1705 not setting count and/or reply_len properly [ 175.419329][ T40] audit: type=1400 audit(1759450841.480:3103): avc: denied { mount } for pid=10820 comm="syz.3.1704" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.435711][ T40] audit: type=1400 audit(1759450841.480:3104): avc: denied { read write } for pid=10823 comm="syz.2.1705" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.507695][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.511787][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.085052][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 176.088320][T10831] netlink: 'syz.2.1708': attribute type 11 has an invalid length. [ 176.095586][T10831] netlink: 'syz.2.1708': attribute type 11 has an invalid length. [ 176.252791][T10840] sctp: [Deprecated]: syz.2.1712 (pid 10840) Use of int in max_burst socket option deprecated. [ 176.252791][T10840] Use struct sctp_assoc_value instead [ 176.270781][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.274171][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.277278][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.284602][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.288333][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.294869][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.297945][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.301416][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.304382][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.307707][ T2212] hid-generic 8000:D11D:009B.000D: unknown main item tag 0x0 [ 176.327670][ T2212] hid-generic 8000:D11D:009B.000D: hidraw1: HID v1.ff Device [syz1] on syz0 [ 176.408974][T10852] fido_id[10852]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.439357][T10858] program syz.0.1719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.473869][T10842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.489491][T10868] binder: BINDER_SET_CONTEXT_MGR already set [ 176.492890][T10868] binder: 10864:10868 ioctl 4018620d 200000000040 returned -16 [ 176.766339][T10886] syz.3.1726 (10886): drop_caches: 2 [ 177.182709][ T92] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.262408][ T92] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.361069][ T92] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.366834][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.377984][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.382307][T10936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10936 comm=syz.1.1742 [ 177.383371][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.391972][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.395386][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.457481][ T92] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.501243][T10947] sctp: [Deprecated]: syz.2.1746 (pid 10947) Use of int in maxseg socket option. [ 177.501243][T10947] Use struct sctp_assoc_value instead [ 177.607892][T10937] chnl_net:caif_netlink_parms(): no params data found [ 178.617130][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.622881][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.627708][ T92] bond0 (unregistering): Released all slaves [ 178.750603][ T92] bond1 (unregistering): Released all slaves [ 178.884340][ T92] tipc: Disabling bearer [ 178.886891][ T92] tipc: Left network mode [ 178.890346][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.893157][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.896571][T10937] bridge_slave_0: entered allmulticast mode [ 178.901510][T10937] bridge_slave_0: entered promiscuous mode [ 178.906807][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.909422][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.911772][T10937] bridge_slave_1: entered allmulticast mode [ 178.914653][T10937] bridge_slave_1: entered promiscuous mode [ 179.001723][T10937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.007437][T10937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.060019][T10937] team0: Port device team_slave_0 added [ 179.065286][T10937] team0: Port device team_slave_1 added [ 179.128579][T10937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.130900][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.143769][T10937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.150161][T10937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.152985][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.166021][T10937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.223178][T10937] hsr_slave_0: entered promiscuous mode [ 179.226153][T10937] hsr_slave_1: entered promiscuous mode [ 179.228766][T10937] debugfs: 'hsr0' already exists in 'hsr' [ 179.232370][T10937] Cannot create hsr debugfs directory [ 179.280667][ T92] hsr_slave_0: left promiscuous mode [ 179.283102][ T92] hsr_slave_1: left promiscuous mode [ 179.285666][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.288900][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.293793][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.297515][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.334395][ T92] veth1_macvtap: left promiscuous mode [ 179.337136][ T92] veth0_macvtap: left promiscuous mode [ 179.339752][ T92] veth1_vlan: left promiscuous mode [ 179.342178][ T92] veth0_vlan: left promiscuous mode [ 179.480341][ T5952] Bluetooth: hci1: command tx timeout [ 179.498763][T10995] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 180.079370][T11012] sg_write: data in/out 92/66 bytes for SCSI command 0xfd-- guessing data in; [ 180.079370][T11012] program syz.0.1767 not setting count and/or reply_len properly [ 180.152699][ T40] kauditd_printk_skb: 165 callbacks suppressed [ 180.152716][ T40] audit: type=1400 audit(1759450846.230:3270): avc: denied { prog_load } for pid=11022 comm="syz.0.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.206865][ T40] audit: type=1400 audit(1759450846.280:3271): avc: denied { append } for pid=11022 comm="syz.0.1768" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 180.215505][ T40] audit: type=1400 audit(1759450846.280:3272): avc: denied { setopt } for pid=11022 comm="syz.0.1768" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.261693][ T40] audit: type=1400 audit(1759450846.340:3273): avc: denied { allowed } for pid=11022 comm="syz.0.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.303719][ T92] team0 (unregistering): Port device team_slave_1 removed [ 180.324162][T11026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11026 comm=syz.0.1768 [ 180.331210][ T40] audit: type=1400 audit(1759450846.400:3274): avc: denied { execute } for pid=11022 comm="syz.0.1768" path="/401/cpu.stat" dev="tmpfs" ino=2141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.404475][ T92] team0 (unregistering): Port device team_slave_0 removed [ 181.138060][ T40] audit: type=1400 audit(1759450847.210:3275): avc: denied { map_create } for pid=11029 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.146772][ T40] audit: type=1400 audit(1759450847.210:3276): avc: denied { map_read map_write } for pid=11029 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.157822][ T40] audit: type=1400 audit(1759450847.210:3277): avc: denied { create } for pid=11029 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 181.168026][ T40] audit: type=1400 audit(1759450847.220:3278): avc: denied { ioctl } for pid=11029 comm="syz.1.1770" path="socket:[39363]" dev="sockfs" ino=39363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 181.222674][ T40] audit: type=1400 audit(1759450847.300:3279): avc: denied { create } for pid=11033 comm="syz.1.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.305648][T10937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.311338][T10937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.316039][T10937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.322730][T10937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.326225][T11038] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 181.331259][T11038] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.410943][T10937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.418818][T11048] __nla_validate_parse: 5 callbacks suppressed [ 181.418833][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1775'. [ 181.432466][T10937] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.441028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.443816][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.455332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.460053][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.477653][ T92] IPVS: stop unused estimator thread 0... [ 181.559314][ T5952] Bluetooth: hci1: command tx timeout [ 181.646583][ T1336] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 181.672762][T11059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11059 comm=syz.0.1777 [ 181.699092][T10937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.915466][T10937] veth0_vlan: entered promiscuous mode [ 181.924983][T10937] veth1_vlan: entered promiscuous mode [ 181.953433][T10937] veth0_macvtap: entered promiscuous mode [ 181.963650][T10937] veth1_macvtap: entered promiscuous mode [ 181.975267][T10937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.984641][T10937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.993497][ T92] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.997621][ T92] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.005606][ T92] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.010287][ T92] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.063765][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 182.067317][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 182.067820][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.071981][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 182.074690][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.113211][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.117946][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.673234][T11088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11088 comm=syz.2.1785 [ 182.855268][T11105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1789'. [ 182.914135][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1789'. [ 182.914218][T11115] netlink: 'syz.2.1792': attribute type 10 has an invalid length. [ 182.918050][T11114] nbd: nbd64 already in use [ 182.926570][T11115] team0: Device ipvlan1 failed to register rx_handler [ 183.003568][ T6274] udevd[6274]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 183.343767][T11136] kvm: kvm [11135]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 183.639728][ T5952] Bluetooth: hci1: command tx timeout [ 183.651752][T11163] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1805'. [ 183.762941][T11165] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.139684][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1809'. [ 184.174425][ T5952] Bluetooth: hci1: Malformed LE Event: 0x0d [ 184.484628][T11202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11202 comm=syz.1.1818 [ 184.735051][T11232] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 184.738560][T11232] batadv_slave_0: left promiscuous mode [ 184.741227][T11232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.748318][T11232] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 184.823423][T11243] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 184.827754][T11243] VFS: Can't find a romfs filesystem on dev nullb0. [ 184.827754][T11243] [ 184.896785][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.905665][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.941190][T11258] netlink: 'syz.4.1833': attribute type 3 has an invalid length. [ 184.944656][T11258] netlink: 'syz.4.1833': attribute type 3 has an invalid length. [ 185.181287][T11272] netlink: 'syz.4.1839': attribute type 2 has an invalid length. [ 185.185657][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 185.185732][ T40] audit: type=1400 audit(1759450851.260:3435): avc: denied { write } for pid=11271 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.186443][T11272] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1839'. [ 185.188671][ T40] audit: type=1400 audit(1759450851.260:3436): avc: denied { read } for pid=11271 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.236392][ T40] audit: type=1400 audit(1759450851.310:3437): avc: denied { setopt } for pid=11276 comm="syz.4.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.237544][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 185.386731][ T40] audit: type=1400 audit(1759450851.460:3438): avc: denied { create } for pid=11283 comm="syz.4.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.388272][T11292] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 185.388272][T11292] program syz.4.1842 not setting count and/or reply_len properly [ 185.394132][ T40] audit: type=1400 audit(1759450851.460:3439): avc: denied { setopt } for pid=11283 comm="syz.4.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.408792][ T40] audit: type=1400 audit(1759450851.470:3440): avc: denied { name_bind } for pid=11293 comm="syz.2.1845" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 185.417526][ T40] audit: type=1400 audit(1759450851.480:3441): avc: denied { node_bind } for pid=11293 comm="syz.2.1845" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 185.534960][ T40] audit: type=1400 audit(1759450851.610:3442): avc: denied { append } for pid=11295 comm="syz.4.1846" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.542747][ T40] audit: type=1400 audit(1759450851.620:3443): avc: denied { allowed } for pid=11295 comm="syz.4.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 185.547610][T11298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11298 comm=syz.4.1846 [ 185.560822][ T40] audit: type=1400 audit(1759450851.640:3444): avc: denied { execute } for pid=11295 comm="syz.4.1846" path="/18/cpu.stat" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.717892][T11317] netlink: 'syz.0.1854': attribute type 10 has an invalid length. [ 185.721412][ T5952] Bluetooth: hci1: command tx timeout [ 185.733000][T11317] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.915950][ T5952] Bluetooth: hci1: Malformed LE Event: 0x0d [ 185.917922][T11341] trusted_key: encrypted_key: master key parameter is missing [ 186.259240][ T6017] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 186.411045][ T6017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.414267][ T6017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.419377][ T6017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.422556][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.615972][T11366] __nla_validate_parse: 3 callbacks suppressed [ 186.615986][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 186.629260][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 186.630938][ T6017] usb 5-1: usb_control_msg returned -71 [ 186.632611][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 186.633922][ T6017] usbtmc 5-1:16.0: can't read capabilities [ 186.657254][ T6017] usb 5-1: USB disconnect, device number 25 [ 186.751195][T11375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11375 comm=syz.1.1875 [ 186.818918][T11377] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 186.835524][T11382] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 187.180333][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1889'. [ 187.246006][T11422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11422 comm=syz.0.1889 [ 187.268551][T11422] geneve2: entered allmulticast mode [ 187.523792][T11452] binder_alloc: 11451: binder_alloc_buf, no vma [ 187.623194][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1900'. [ 187.661171][T11465] overlay: Bad value for 'workdir' [ 187.809383][ T6017] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 187.972333][ T6017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.976792][ T6017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.982537][ T6017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.985904][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.198758][ T6017] usb 5-1: usb_control_msg returned -71 [ 188.208110][ T6017] usbtmc 5-1:16.0: can't read capabilities [ 188.217701][ T6017] usb 5-1: USB disconnect, device number 26 [ 188.235658][T11487] netlink: 210612 bytes leftover after parsing attributes in process `syz.4.1911'. [ 188.267847][T11492] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.281029][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.286575][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.389052][T11498] netlink: 'syz.4.1915': attribute type 9 has an invalid length. [ 188.400251][T11502] overlayfs: failed to resolve './file0': -2 [ 188.405885][T11502] overlayfs: failed to resolve './file0': -2 [ 188.409356][T11502] overlayfs: failed to resolve './file0': -2 [ 188.413183][T11502] overlayfs: failed to resolve './file0': -2 [ 188.415715][T11502] overlayfs: failed to resolve './file0': -2 [ 188.418221][T11502] overlayfs: failed to resolve './file0': -2 [ 188.420701][T11502] overlayfs: failed to resolve './file0': -2 [ 188.423626][T11502] overlayfs: failed to resolve './file0': -2 [ 188.427975][T11502] overlayfs: failed to resolve './file0': -2 [ 188.430757][T11502] overlayfs: failed to resolve './file0': -2 [ 188.433124][T11502] overlayfs: failed to resolve './file0': -2 [ 188.436347][T11502] overlayfs: failed to resolve './file0': -2 [ 188.441150][T11502] overlayfs: failed to resolve './file0': -2 [ 188.443571][T11502] overlayfs: failed to resolve './file0': -2 [ 188.446583][T11502] overlayfs: failed to resolve './file0': -2 [ 188.449684][T11502] overlayfs: failed to resolve './file0': -2 [ 188.453457][T11502] overlayfs: failed to resolve './file0': -2 [ 188.456478][T11502] overlayfs: failed to resolve './file0': -2 [ 188.459502][T11502] overlayfs: failed to resolve './file0': -2 [ 188.463018][T11502] overlayfs: failed to resolve './file0': -2 [ 188.465752][T11502] overlayfs: failed to resolve './file0': -2 [ 188.470897][T11502] overlayfs: failed to resolve './file0': -2 [ 188.473849][T11502] overlayfs: failed to resolve './file0': -2 [ 188.476570][T11502] overlayfs: failed to resolve './file0': -2 [ 188.480516][T11502] overlayfs: failed to resolve './file0': -2 [ 188.484072][T11502] overlayfs: failed to resolve './file0': -2 [ 188.487299][T11502] overlayfs: failed to resolve './file0': -2 [ 188.491683][T11502] overlayfs: failed to resolve './file0': -2 [ 188.495250][T11502] overlayfs: failed to resolve './file0': -2 [ 188.498960][T11502] overlayfs: failed to resolve './file0': -2 [ 188.503117][T11502] overlayfs: failed to resolve './file0': -2 [ 188.506464][T11502] overlayfs: failed to resolve './file0': -2 [ 188.510066][T11502] overlayfs: failed to resolve './file0': -2 [ 188.513190][T11502] overlayfs: failed to resolve './file0': -2 [ 188.516978][T11502] overlayfs: failed to resolve './file0': -2 [ 188.522231][T11502] overlayfs: failed to resolve './file0': -2 [ 188.526993][T11502] overlayfs: failed to resolve './file0': -2 [ 188.533384][T11502] overlayfs: failed to resolve './file0': -2 [ 188.536209][T11502] overlayfs: failed to resolve './file0': -2 [ 188.539418][T11502] overlayfs: failed to resolve './file0': -2 [ 188.540040][T11507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=122 sclass=netlink_tcpdiag_socket pid=11507 comm=syz.2.1917 [ 188.546664][T11502] overlayfs: failed to resolve './file0': -2 [ 188.549274][T11502] overlayfs: failed to resolve './file0': -2 [ 188.551522][T11502] overlayfs: failed to resolve './file0': -2 [ 188.554023][T11502] overlayfs: failed to resolve './file0': -2 [ 188.556602][T11502] overlayfs: failed to resolve './file0': -2 [ 188.559992][T11502] overlayfs: failed to resolve './file0': -2 [ 188.562864][T11502] overlayfs: failed to resolve './file0': -2 [ 188.567258][T11502] overlayfs: failed to resolve './file0': -2 [ 188.570305][T11502] overlayfs: failed to resolve './file0': -2 [ 188.572815][T11502] overlayfs: failed to resolve './file0': -2 [ 188.575254][T11502] overlayfs: failed to resolve './file0': -2 [ 188.578065][T11502] overlayfs: failed to resolve './file0': -2 [ 188.582194][T11502] overlayfs: failed to resolve './file0': -2 [ 188.584702][T11502] overlayfs: failed to resolve './file0': -2 [ 188.587095][T11502] overlayfs: failed to resolve './file0': -2 [ 188.589530][T11502] overlayfs: failed to resolve './file0': -2 [ 188.592172][T11502] overlayfs: failed to resolve './file0': -2 [ 188.595021][T11502] overlayfs: failed to resolve './file0': -2 [ 188.597954][T11502] overlayfs: failed to resolve './file0': -2 [ 188.602274][T11502] overlayfs: failed to resolve './file0': -2 [ 188.605273][T11502] overlayfs: failed to resolve './file0': -2 [ 188.607768][T11502] overlayfs: failed to resolve './file0': -2 [ 188.611962][T11502] overlayfs: failed to resolve './file0': -2 [ 188.615161][T11502] overlayfs: failed to resolve './file0': -2 [ 188.618153][T11502] overlayfs: failed to resolve './file0': -2 [ 188.628597][T11511] ubi31: attaching mtd0 [ 188.636299][T11511] ubi31: scanning is finished [ 188.638566][T11511] ubi31: empty MTD device detected [ 188.759534][T11511] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 188.762353][T11511] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 188.765161][T11511] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 188.767714][T11511] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 188.772592][T11511] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 188.775934][T11511] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 188.780546][T11511] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1417927021 [ 188.784891][T11511] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 188.790614][T11519] ubi31: background thread "ubi_bgt31d" started, PID 11519 [ 188.919602][ T836] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 189.004519][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 189.062843][T11526] could not allocate digest TFM handle hmac(streebog512) [ 189.063211][T11527] could not allocate digest TFM handle hmac(streebog512) [ 189.082630][ T836] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.086166][ T836] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.092488][ T836] usb 9-1: config 0 has no interface number 0 [ 189.095245][ T836] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.100468][ T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.109231][ T836] usb 9-1: config 0 descriptor?? [ 189.114374][ T836] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 189.122500][T11539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1925'. [ 189.127270][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1925'. [ 189.201309][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'. [ 189.206996][T11545] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 189.211358][T11545] overlayfs: unescaped trailing colons in lowerdir mount option. [ 189.267557][T11547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11547 comm=syz.1.1929 [ 189.353373][ T2212] usb 9-1: USB disconnect, device number 2 [ 189.570138][T11564] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 189.674839][T11568] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.687040][T11568] netlink: 'syz.0.1937': attribute type 2 has an invalid length. [ 190.236433][ T40] kauditd_printk_skb: 260 callbacks suppressed [ 190.236453][ T40] audit: type=1400 audit(1759450856.310:3705): avc: denied { create } for pid=11592 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.248007][ T40] audit: type=1400 audit(1759450856.320:3706): avc: denied { write } for pid=11592 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.254648][ T40] audit: type=1400 audit(1759450856.320:3707): avc: denied { read } for pid=11592 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.263530][ T40] audit: type=1400 audit(1759450856.320:3708): avc: denied { create } for pid=11592 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.270651][ T40] audit: type=1400 audit(1759450856.320:3709): avc: denied { bind } for pid=11592 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.277267][ T40] audit: type=1400 audit(1759450856.320:3710): avc: denied { accept } for pid=11592 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.282075][T11595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11595 comm=syz.4.1947 [ 190.286956][ T40] audit: type=1400 audit(1759450856.320:3711): avc: denied { read } for pid=11592 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.299271][ T40] audit: type=1400 audit(1759450856.360:3712): avc: denied { create } for pid=11594 comm="syz.4.1947" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.306920][ T40] audit: type=1400 audit(1759450856.360:3713): avc: denied { ioctl } for pid=11594 comm="syz.4.1947" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=42433 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.317075][ T40] audit: type=1400 audit(1759450856.370:3714): avc: denied { read } for pid=11594 comm="syz.4.1947" dev="nsfs" ino=4026533438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 190.343870][T11597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11597 comm=syz.4.1948 [ 190.591100][T11615] nfs4: Unknown parameter 'ÿÿÿÿ' [ 190.631646][T11622] netlink: 'syz.4.1957': attribute type 20 has an invalid length. [ 190.642550][T11622] netlink: 'syz.4.1957': attribute type 20 has an invalid length. [ 190.645720][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.647838][T11622] sctp: [Deprecated]: syz.4.1957 (pid 11622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.647838][T11622] Use struct sctp_sack_info instead [ 190.649514][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.649557][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.649586][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.009639][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 191.173066][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.176475][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.180176][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.183450][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.187759][ T10] usb 5-1: config 0 descriptor?? [ 191.247334][T11654] netlink: 'syz.4.1967': attribute type 12 has an invalid length. [ 191.348686][ T2212] hid_parser_main: 233 callbacks suppressed [ 191.348699][ T2212] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 191.356533][ T2212] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 191.398812][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 191.401875][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.413254][ T10] usb 5-1: USB disconnect, device number 27 [ 191.627153][T11670] netlink: 'syz.4.1971': attribute type 21 has an invalid length. [ 191.630229][T11670] __nla_validate_parse: 8 callbacks suppressed [ 191.630241][T11670] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1971'. [ 191.659498][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 191.702427][T11679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11679 comm=syz.1.1974 [ 191.941987][ T55] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 192.103123][ T55] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.106546][ T55] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.110160][ T55] usb 9-1: config 0 has no interface number 0 [ 192.112171][ T55] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.115858][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.121680][ T55] usb 9-1: config 0 descriptor?? [ 192.126778][ T55] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 192.334683][ T10] usb 9-1: USB disconnect, device number 3 [ 193.124469][T11762] binder: binder_mmap: 11761 200000ffc000-200001000000 bad vm_flags failed -1 [ 193.258292][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1990'. [ 193.290523][T11780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11780 comm=syz.1.1992 [ 193.480466][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.485264][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.491416][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.496498][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.500256][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.539215][ T55] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 193.630736][T11788] chnl_net:caif_netlink_parms(): no params data found [ 193.690577][ T55] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.693637][ T55] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.696819][ T55] usb 9-1: config 0 has no interface number 0 [ 193.698837][ T55] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.702390][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.706836][ T55] usb 9-1: config 0 descriptor?? [ 193.712360][ T55] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 193.731754][T11788] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.734884][T11788] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.738095][T11788] bridge_slave_0: entered allmulticast mode [ 193.741501][T11788] bridge_slave_0: entered promiscuous mode [ 193.744845][T11788] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.747175][T11788] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.751087][T11788] bridge_slave_1: entered allmulticast mode [ 193.754686][T11788] bridge_slave_1: entered promiscuous mode [ 193.790279][T11788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.795702][T11788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.832464][T11788] team0: Port device team_slave_0 added [ 193.837106][T11788] team0: Port device team_slave_1 added [ 193.884727][T11788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.887557][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.898297][T11788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.904580][T11788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.907402][T11788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.918502][T11788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.924909][T11796] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 193.943042][ T10] usb 9-1: USB disconnect, device number 4 [ 194.005868][T11788] hsr_slave_0: entered promiscuous mode [ 194.009049][T11788] hsr_slave_1: entered promiscuous mode [ 194.174132][T11788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.179553][T11788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.298737][T11788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.304699][T11788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.392271][T11788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.395957][T11788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.493213][T11788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.497486][T11788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.826854][T11788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.836016][T11788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.846443][T11788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.851830][T11788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.932523][T11788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.950908][T11788] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.964734][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.967446][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.975397][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.978179][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.013730][T11855] netlink: 'syz.4.2009': attribute type 10 has an invalid length. [ 195.036665][T11855] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 195.044829][T11855] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2009'. [ 195.095291][T11859] netlink: 'syz.0.2010': attribute type 2 has an invalid length. [ 195.104285][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2010'. [ 195.200442][T11788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.204357][T11872] netlink: 'syz.0.2014': attribute type 1 has an invalid length. [ 195.208058][T11872] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2014'. [ 195.263443][T11788] veth0_vlan: entered promiscuous mode [ 195.271614][T11788] veth1_vlan: entered promiscuous mode [ 195.279519][ T40] kauditd_printk_skb: 219 callbacks suppressed [ 195.279535][ T40] audit: type=1400 audit(2000000001.090:3934): avc: denied { write } for pid=11875 comm="syz.4.2015" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.293822][ T40] audit: type=1400 audit(2000000001.090:3935): avc: denied { open } for pid=11875 comm="syz.4.2015" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.305297][ T40] audit: type=1400 audit(2000000001.090:3936): avc: denied { ioctl } for pid=11875 comm="syz.4.2015" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.317610][ T40] audit: type=1400 audit(2000000001.090:3937): avc: denied { read } for pid=11875 comm="syz.4.2015" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.328733][ T40] audit: type=1400 audit(2000000001.100:3938): avc: denied { map } for pid=11875 comm="syz.4.2015" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.336296][T11788] veth0_macvtap: entered promiscuous mode [ 195.342884][ T40] audit: type=1400 audit(2000000001.120:3939): avc: denied { map_read map_write } for pid=11877 comm="syz.0.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.346916][T11788] veth1_macvtap: entered promiscuous mode [ 195.352073][ T40] audit: type=1400 audit(2000000001.150:3940): avc: denied { append } for pid=11879 comm="syz.4.2017" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 195.356583][T11880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11880 comm=syz.4.2017 [ 195.363536][ T40] audit: type=1400 audit(2000000001.160:3941): avc: denied { allowed } for pid=11879 comm="syz.4.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 195.366715][T11788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.380883][ T40] audit: type=1400 audit(2000000001.160:3942): avc: denied { create } for pid=11879 comm="syz.4.2017" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.383726][T11788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.390897][ T40] audit: type=1400 audit(2000000001.160:3943): avc: denied { map } for pid=11879 comm="syz.4.2017" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.404173][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.408842][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.414524][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.417941][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.472247][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.476254][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.481794][T11888] fuse: Unknown parameter 'œgê¾{§ã6ä°†ÃðR!Œ‚5 ä ßïM„‚©¨ŠbŒ7Ú¡T8:zxl©;·W€' [ 195.506906][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.510393][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.560591][ T5952] Bluetooth: hci3: command tx timeout [ 195.670252][T11896] openvswitch: netlink: Unknown key attributes 2 [ 195.839528][T11901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.279243][ T1336] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 196.430356][ T1336] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.433519][ T1336] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.438608][ T1336] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.442684][ T1336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.649187][ T1336] usb 6-1: GET_CAPABILITIES returned 0 [ 196.651645][ T1336] usbtmc 6-1:16.0: can't read capabilities [ 196.742411][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054607400: rx timeout, send abort [ 196.747473][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054607400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.850733][T11905] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 196.858822][ T2212] usb 6-1: USB disconnect, device number 19 [ 197.423277][T11909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11909 comm=syz.1.2027 [ 197.649423][ T5952] Bluetooth: hci3: command tx timeout [ 197.704177][T11925] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.746629][T11929] netlink: 'syz.1.2036': attribute type 4 has an invalid length. [ 197.786490][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'. [ 198.014790][T11949] 9pnet_fd: Insufficient options for proto=fd [ 198.034689][T11954] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 198.147253][T11967] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2051'. [ 198.203540][T11974] autofs4:pid:11974:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 198.249325][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 198.324003][T11981] tipc: Started in network mode [ 198.325731][T11981] tipc: Node identity 82479d71d782, cluster identity 4711 [ 198.327987][T11981] tipc: Enabled bearer , priority 0 [ 198.330846][T11981] syzkaller0: entered promiscuous mode [ 198.332838][T11981] syzkaller0: entered allmulticast mode [ 198.346810][T11981] tipc: Resetting bearer [ 198.353361][T11980] tipc: Resetting bearer [ 198.365875][T11980] tipc: Disabling bearer [ 198.497555][T11995] binder: BC_ATTEMPT_ACQUIRE not supported [ 198.500962][T11995] binder: 11990:11995 ioctl c0306201 200000000300 returned -22 [ 198.571245][T12004] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 198.579493][T12006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2066'. [ 198.609485][T12006] overlayfs: conflicting options: userxattr,redirect_dir=on [ 198.832606][T12021] can0: slcan on ttyS3. [ 198.889728][T12020] can0 (unregistered): slcan off ttyS3. [ 199.007408][T12031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12031 comm=syz.4.2075 [ 199.109602][T12035] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 199.157465][T12037] PKCS8: Unsupported PKCS#8 version [ 199.229576][T12040] binder: 12039:12040 ioctl c0306201 200000000640 returned -22 [ 199.285389][T12041] binder: 12039:12041 ioctl 8933 2000000000c0 returned -22 [ 199.404201][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.719119][ T5952] Bluetooth: hci3: command tx timeout [ 199.941852][T12052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12052 comm=syz.0.2082 [ 200.501219][T12060] FAULT_INJECTION: forcing a failure. [ 200.501219][T12060] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 200.506359][T12060] CPU: 3 UID: 0 PID: 12060 Comm: syz.4.2085 Not tainted syzkaller #0 PREEMPT(full) [ 200.506383][T12060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.506394][T12060] Call Trace: [ 200.506401][T12060] [ 200.506408][T12060] dump_stack_lvl+0x16c/0x1f0 [ 200.506463][T12060] should_fail_ex+0x512/0x640 [ 200.506499][T12060] should_fail_alloc_page+0xe7/0x130 [ 200.506519][T12060] prepare_alloc_pages+0x3c2/0x610 [ 200.506546][T12060] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 200.506579][T12060] ? find_held_lock+0x2b/0x80 [ 200.506605][T12060] ? is_bpf_text_address+0x8a/0x1a0 [ 200.506628][T12060] ? bpf_ksym_find+0x127/0x1c0 [ 200.506653][T12060] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.506680][T12060] ? is_bpf_text_address+0x94/0x1a0 [ 200.506702][T12060] ? kernel_text_address+0x8d/0x100 [ 200.506724][T12060] ? __kernel_text_address+0xd/0x40 [ 200.506755][T12060] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.506781][T12060] ? policy_nodemask+0xea/0x4e0 [ 200.506802][T12060] alloc_pages_mpol+0x1fb/0x550 [ 200.506821][T12060] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.506840][T12060] ? __lock_acquire+0x62e/0x1ce0 [ 200.506859][T12060] folio_alloc_mpol_noprof+0x36/0x2f0 [ 200.506879][T12060] vma_alloc_folio_noprof+0xed/0x1e0 [ 200.506901][T12060] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 200.506932][T12060] do_pte_missing+0x2230/0x3ba0 [ 200.506949][T12060] ? find_held_lock+0x2b/0x80 [ 200.506968][T12060] __handle_mm_fault+0x152a/0x2a50 [ 200.506987][T12060] ? __pfx___handle_mm_fault+0x10/0x10 [ 200.507004][T12060] ? lock_vma_under_rcu+0x1eb/0x530 [ 200.507024][T12060] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 200.507043][T12060] handle_mm_fault+0x589/0xd10 [ 200.507058][T12060] ? __pkru_allows_pkey+0x31/0xb0 [ 200.507074][T12060] do_user_addr_fault+0x60c/0x1370 [ 200.507089][T12060] ? rcu_is_watching+0x12/0xc0 [ 200.507107][T12060] exc_page_fault+0x5c/0xb0 [ 200.507120][T12060] asm_exc_page_fault+0x26/0x30 [ 200.507131][T12060] RIP: 0033:0x7f20c36603f6 [ 200.507141][T12060] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d fa 2f 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 3c de fe ff 4d 85 f6 0f 84 46 0a 00 [ 200.507152][T12060] RSP: 002b:00007f20c46e8f70 EFLAGS: 00010202 [ 200.507162][T12060] RAX: 0000000000000000 RBX: 00007f20c39e5fa0 RCX: 0000000000000000 [ 200.507168][T12060] RDX: 00002000000007c0 RSI: 00002000000007c0 RDI: 00007f20c38133e7 [ 200.507175][T12060] RBP: 00007f20c46eb090 R08: 00007f20c364e5c0 R09: 0000000000000000 [ 200.507181][T12060] R10: 0000000000000002 R11: 00002000000007c0 R12: 0000000000000002 [ 200.507187][T12060] R13: 000000000000003f R14: 00002000000007c0 R15: 00007ffe7626c938 [ 200.507201][T12060] [ 200.507385][T12060] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 200.603112][ T40] kauditd_printk_skb: 213 callbacks suppressed [ 200.603123][ T40] audit: type=1400 audit(2000000006.420:4157): avc: denied { read write } for pid=12059 comm="syz.4.2085" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.613935][ T40] audit: type=1400 audit(2000000006.420:4158): avc: denied { open } for pid=12059 comm="syz.4.2085" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.064676][ T40] audit: type=1400 audit(2000000006.880:4159): avc: denied { read } for pid=12061 comm="syz.0.2086" name="card1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.072905][ T40] audit: type=1400 audit(2000000006.880:4160): avc: denied { open } for pid=12061 comm="syz.0.2086" path="/dev/dri/card1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.080309][ T40] audit: type=1400 audit(2000000006.880:4161): avc: denied { ioctl } for pid=12061 comm="syz.0.2086" path="/dev/dri/card1" dev="devtmpfs" ino=635 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.094162][ T40] audit: type=1400 audit(2000000006.880:4162): avc: denied { create } for pid=12061 comm="syz.0.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.198914][T12067] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2088'. [ 201.204717][T12067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=12067 comm=syz.4.2088 [ 201.334630][ T40] audit: type=1400 audit(2000000007.150:4163): avc: denied { ioctl } for pid=12074 comm="syz.4.2092" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.578969][ T1336] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 201.752902][ T1336] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.756892][ T1336] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.762525][ T1336] usb 9-1: config 0 has no interface number 0 [ 201.765106][ T1336] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.770344][ T1336] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.774736][ T1336] usb 9-1: config 0 descriptor?? [ 201.778427][ T1336] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 201.788802][ T40] audit: type=1400 audit(2000000007.600:4164): avc: denied { read write } for pid=11788 comm="syz-executor" name="loop1" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.798029][ T40] audit: type=1400 audit(2000000007.600:4165): avc: denied { open } for pid=11788 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.799297][ T5952] Bluetooth: hci3: command tx timeout [ 201.810023][ T40] audit: type=1400 audit(2000000007.600:4166): avc: denied { ioctl } for pid=11788 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.984126][ T6037] usb 9-1: USB disconnect, device number 5 [ 201.997877][T12084] fuse: Bad value for 'fd' [ 202.154044][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 202.222546][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 202.527509][T12111] batman_adv: batadv0: Adding interface: dummy0 [ 202.530225][T12111] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.539199][T12111] batman_adv: batadv0: Interface activated: dummy0 [ 202.544108][T12112] batadv0: mtu less than device minimum [ 202.546979][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.552101][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.556173][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.560281][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.563964][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.568529][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.572979][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.576564][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.581089][T12112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.760362][T12118] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2107'. [ 202.773536][T12118] vlan0: entered promiscuous mode [ 202.775478][T12118] vlan0: entered allmulticast mode [ 202.777327][T12118] hsr_slave_1: entered allmulticast mode [ 202.820579][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 202.823939][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 202.831975][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 202.836123][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 202.841442][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 202.844617][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 203.244588][T12145] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2117'. [ 203.280822][ T1336] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 203.287625][T12147] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.312708][T12149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 203.446357][ T1336] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.449595][ T1336] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.454307][ T1336] usb 9-1: config 0 has no interface number 0 [ 203.457402][ T1336] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 203.461884][ T1336] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.468035][ T1336] usb 9-1: config 0 descriptor?? [ 203.472865][ T1336] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 203.580312][ T6017] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 203.681319][ T2212] usb 9-1: USB disconnect, device number 6 [ 203.708757][ T6017] usb 6-1: device descriptor read/64, error -71 [ 203.975797][ T6017] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 204.108816][ T6017] usb 6-1: device descriptor read/64, error -71 [ 204.198034][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 204.222488][ T6017] usb usb6-port1: attempt power cycle [ 204.300154][ T6004] usb 7-1: USB disconnect, device number 12 [ 204.440624][ T5960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.445556][ T5960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.453686][ T5960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.458470][ T5960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.461197][ T5960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.559403][ T6017] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 204.579306][ T6017] usb 6-1: device descriptor read/8, error -71 [ 204.705266][T12191] chnl_net:caif_netlink_parms(): no params data found [ 204.797459][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 204.804848][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 204.817574][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.821951][T12191] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.825100][T12191] bridge_slave_0: entered allmulticast mode [ 204.828646][ T6017] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 204.829737][T12191] bridge_slave_0: entered promiscuous mode [ 204.837211][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.840055][T12191] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.842526][T12191] bridge_slave_1: entered allmulticast mode [ 204.845430][T12191] bridge_slave_1: entered promiscuous mode [ 204.851350][ T6017] usb 6-1: device descriptor read/8, error -71 [ 204.881820][T12191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.888714][T12191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.931021][T12191] team0: Port device team_slave_0 added [ 204.934408][T12191] team0: Port device team_slave_1 added [ 204.960433][ T6017] usb usb6-port1: unable to enumerate USB device [ 204.983751][T12191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.986795][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.998664][T12191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.005531][T12191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.009666][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.018379][T12191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.071421][T12191] hsr_slave_0: entered promiscuous mode [ 205.074408][T12191] hsr_slave_1: entered promiscuous mode [ 205.076681][T12191] debugfs: 'hsr0' already exists in 'hsr' [ 205.079472][T12191] Cannot create hsr debugfs directory [ 205.240202][T12191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.249791][T12191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.257970][T12191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.267425][T12191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.293531][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.297260][T12191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.301018][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.304073][T12191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.362315][T12191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.376060][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.382249][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.400557][T12191] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.410781][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.413079][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.423025][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.425473][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.595597][T12191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.612150][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 205.612162][ T40] audit: type=1400 audit(2000000011.430:4300): avc: denied { ioctl } for pid=12227 comm="syz.4.2140" path="/dev/vbi6" dev="devtmpfs" ino=1015 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 205.628634][ T40] audit: type=1400 audit(2000000011.430:4301): avc: denied { write } for pid=12227 comm="syz.4.2140" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.660557][ T40] audit: type=1400 audit(2000000011.480:4302): avc: denied { map_create } for pid=12233 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.666239][T12235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12235 comm=syz.4.2141 [ 205.669134][ T40] audit: type=1400 audit(2000000011.480:4303): avc: denied { map_read map_write } for pid=12233 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.686398][ T40] audit: type=1400 audit(2000000011.490:4304): avc: denied { create } for pid=12233 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.695803][ T40] audit: type=1400 audit(2000000011.490:4305): avc: denied { getopt } for pid=12233 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.781788][T12191] veth0_vlan: entered promiscuous mode [ 205.794815][T12191] veth1_vlan: entered promiscuous mode [ 205.821392][T12191] veth0_macvtap: entered promiscuous mode [ 205.827713][T12191] veth1_macvtap: entered promiscuous mode [ 205.845303][T12191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.855796][T12191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.865896][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.871500][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.877166][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.881138][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.927613][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.931243][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.949211][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.952670][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.954993][ T40] audit: type=1400 audit(2000000011.770:4306): avc: denied { create } for pid=12247 comm="syz.4.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.964138][ T40] audit: type=1400 audit(2000000011.770:4307): avc: denied { mounton } for pid=12191 comm="syz-executor" path="/syzkaller.AOcOfR/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 205.972097][ T40] audit: type=1400 audit(2000000011.780:4308): avc: denied { mount } for pid=12191 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 205.980032][ T40] audit: type=1400 audit(2000000011.780:4309): avc: denied { mounton } for pid=12191 comm="syz-executor" path="/syzkaller.AOcOfR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 206.011644][T12250] Process accounting resumed [ 206.501553][T12275] netlink: 'syz.1.2152': attribute type 13 has an invalid length. [ 206.520639][ T5952] Bluetooth: hci4: command tx timeout [ 206.875048][T12301] misc userio: The device must be registered before sending interrupts [ 207.174825][T12318] input: syz0 as /devices/virtual/input/input19 [ 207.183625][T12319] kvm: kvm [12317]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4e220085 [ 207.371069][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.377206][T12331] batadv_slave_0: entered promiscuous mode [ 207.380748][T12331] batadv_slave_0: entered allmulticast mode [ 207.534301][T12345] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 207.542188][T12346] [U]  [ 207.741301][T12359] net_ratelimit: 10 callbacks suppressed [ 207.741312][T12359] openvswitch: netlink: Multiple metadata blocks provided [ 207.786221][T12364] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 207.894368][T12378] __nla_validate_parse: 10 callbacks suppressed [ 207.894380][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2185'. [ 207.900021][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2185'. [ 207.902806][T12378] netlink: 'syz.5.2185': attribute type 11 has an invalid length. [ 207.905446][T12378] netlink: 'syz.5.2185': attribute type 13 has an invalid length. [ 207.974023][T12382] fuse: Bad value for 'fd' [ 208.301122][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2196'. [ 208.305827][T12407] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 208.310147][T12407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.383426][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2199'. [ 208.391360][T12413] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 208.395881][T12413] overlayfs: overlapping lowerdir path [ 208.400969][T12413] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2199'. [ 208.598468][ T5952] Bluetooth: hci4: command tx timeout [ 208.668403][ T2212] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 208.801592][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 208.805519][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 208.808428][ T2212] usb 10-1: device descriptor read/64, error -71 [ 208.812615][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 208.835805][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 209.045932][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2211'. [ 209.058695][ T2212] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 209.208788][ T2212] usb 10-1: device descriptor read/64, error -71 [ 209.248392][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 209.248410][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.254160][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 209.328997][ T2212] usb usb10-port1: attempt power cycle [ 209.688404][ T2212] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 209.709095][ T2212] usb 10-1: device descriptor read/8, error -71 [ 209.867769][T12475] (syz.1.2217,12475,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 209.872659][T12475] (syz.1.2217,12475,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 209.970036][ T2212] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 209.989957][ T2212] usb 10-1: device descriptor read/8, error -71 [ 210.108816][ T2212] usb usb10-port1: unable to enumerate USB device [ 210.181992][ T6004] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 210.185206][ T6004] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 210.188869][ T6004] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 210.194396][ T6004] hid-generic 0003:0004:0000.000F: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 210.418588][ T53] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 210.571586][ T53] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 210.576324][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.580401][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.585122][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.591165][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.595094][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.600478][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.604536][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.608543][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.613732][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.617794][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.621862][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.626744][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.631158][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.635287][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.640316][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.644414][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.649310][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.654825][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.657985][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.661203][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.664794][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.667867][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.672973][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 24, changing to 8 [ 210.676525][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 210.680676][ T53] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.683959][ T53] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.684028][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 210.684045][ T40] audit: type=1400 audit(2000000016.500:4568): avc: denied { create } for pid=12492 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.686958][ T53] usb 6-1: Product: syz [ 210.686977][ T53] usb 6-1: Manufacturer: syz [ 210.692942][ T5952] Bluetooth: hci4: command tx timeout [ 210.696301][ T53] usb 6-1: SerialNumber: syz [ 210.704945][ T53] usb 6-1: config 0 descriptor?? [ 210.709466][ T40] audit: type=1400 audit(2000000016.530:4569): avc: denied { ioctl } for pid=12489 comm="syz.1.2223" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.718507][ T53] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 210.749419][ T40] audit: type=1400 audit(2000000016.570:4570): avc: denied { read write } for pid=12494 comm="syz.0.2225" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.760711][ T40] audit: type=1400 audit(2000000016.570:4571): avc: denied { open } for pid=12494 comm="syz.0.2225" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.988420][ T2212] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 211.019808][ T40] audit: type=1400 audit(2000000016.840:4572): avc: denied { allowed } for pid=12489 comm="syz.1.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 211.118460][ T2212] usb 5-1: device descriptor read/64, error -71 [ 211.318427][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.318868][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 211.324282][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 211.358465][ T2212] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 211.443066][ T40] audit: type=1400 audit(2000000017.260:4573): avc: denied { read write } for pid=12191 comm="syz-executor" name="loop5" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.454243][ T40] audit: type=1400 audit(2000000017.260:4574): avc: denied { open } for pid=12191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.468672][ T40] audit: type=1400 audit(2000000017.260:4575): avc: denied { ioctl } for pid=12191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.490514][ T2212] usb 5-1: device descriptor read/64, error -71 [ 211.521301][T12504] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 211.525230][T12504] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 211.537496][ T40] audit: type=1400 audit(2000000017.350:4576): avc: denied { setopt } for pid=12503 comm="syz.5.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.599047][ T2212] usb usb5-port1: attempt power cycle [ 211.620311][ T40] audit: type=1400 audit(2000000017.440:4577): avc: denied { mounton } for pid=12506 comm="syz.5.2228" path="/23/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.797415][T12513] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.801064][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.873043][ T53] IPVS: starting estimator thread 0... [ 211.948344][ T2212] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 211.968642][T12516] IPVS: using max 21 ests per chain, 50400 per kthread [ 211.973321][ T2212] usb 5-1: device descriptor read/8, error -71 [ 212.208346][ T2212] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 212.229006][ T2212] usb 5-1: device descriptor read/8, error -71 [ 212.338454][ T2212] usb usb5-port1: unable to enumerate USB device [ 212.758291][ T5952] Bluetooth: hci4: command tx timeout [ 212.918637][ C3] usb 6-1: yurex_control_callback - control failed: -2 [ 212.925990][ C3] usb 6-1: yurex_control_callback - control failed: -32 [ 212.934091][ T6017] usb 6-1: USB disconnect, device number 24 [ 212.940681][ T6017] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 212.947562][T12523] __nla_validate_parse: 7 callbacks suppressed [ 212.947580][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'. [ 212.955095][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'. [ 212.960724][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'. [ 213.061188][T12527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12527 comm=syz.5.2237 [ 213.398243][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 213.400888][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 213.532358][T12535] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.536888][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.740029][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.744366][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.837144][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.842770][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.884795][T12543] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2244'. [ 213.889231][T12543] program syz.0.2244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.899576][T12545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12545 comm=syz.1.2246 [ 213.926971][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.931943][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.949938][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 214.000295][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.004523][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.013282][T12551] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.013451][T12553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2250'. [ 214.031260][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.036402][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.044597][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.050631][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.056384][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.056570][T12557] max out of range [ 214.072516][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.077079][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.084163][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.095178][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.100281][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.167152][ T13] bridge_slave_1: left allmulticast mode [ 214.169572][ T13] bridge_slave_1: left promiscuous mode [ 214.173614][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.180588][ T13] bridge_slave_0: left allmulticast mode [ 214.182427][ T13] bridge_slave_0: left promiscuous mode [ 214.184272][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.208638][ T2212] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 214.384100][ T2212] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.387448][ T2212] usb 6-1: config 0 has no interface number 0 [ 214.389966][ T2212] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 214.393847][ T2212] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 214.397624][ T2212] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.401291][ T2212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.406364][ T2212] usb 6-1: config 0 descriptor?? [ 214.409703][T12549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.417294][ T2212] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 214.420461][T12568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12568 comm=syz.5.2254 [ 214.646055][ T10] usb 6-1: USB disconnect, device number 25 [ 214.649672][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 214.699408][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.704958][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.710894][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 214.714556][ T13] bond0 (unregistering): Released all slaves [ 214.807128][ T13] tipc: Left network mode [ 214.902370][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2256'. [ 214.906570][T12574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2256'. [ 214.911095][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2256'. [ 214.914646][T12574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2256'. [ 214.943634][T12554] chnl_net:caif_netlink_parms(): no params data found [ 215.130557][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.134560][T12554] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.137395][T12554] bridge_slave_0: entered allmulticast mode [ 215.142255][T12554] bridge_slave_0: entered promiscuous mode [ 215.147877][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.151433][T12554] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.154156][T12554] bridge_slave_1: entered allmulticast mode [ 215.157516][T12554] bridge_slave_1: entered promiscuous mode [ 215.187613][ T13] hsr_slave_0: left promiscuous mode [ 215.192180][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.195122][ T13] batadv0: mtu less than device minimum [ 215.198163][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.204285][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.208767][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.213977][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.221113][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.226612][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.232433][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.238157][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.243183][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.254316][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.258799][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.273182][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.276601][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 215.279629][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 215.306151][ T13] veth1_macvtap: left promiscuous mode [ 215.308176][ T13] veth0_macvtap: left promiscuous mode [ 215.638904][ T2212] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 215.799671][ T2212] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.803325][ T2212] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.809241][ T2212] usb 10-1: config 0 has no interface number 0 [ 215.811858][ T2212] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.815662][ T2212] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.823243][ T2212] usb 10-1: config 0 descriptor?? [ 215.827639][ T2212] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 216.121281][ T5960] Bluetooth: hci1: command tx timeout [ 216.156045][ T13] team0 (unregistering): Port device team_slave_1 removed [ 216.270133][ T13] team0 (unregistering): Port device team_slave_0 removed [ 217.049690][T12583] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.106986][T12554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.107734][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 217.107751][ T40] audit: type=1400 audit(2000000022.921:4666): avc: denied { create } for pid=12595 comm="syz.0.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 217.108503][ T2212] usb 10-1: USB disconnect, device number 6 [ 217.115937][T12554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.128003][ T40] audit: type=1400 audit(2000000022.931:4667): avc: denied { bind } for pid=12595 comm="syz.0.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 217.137580][ T40] audit: type=1400 audit(2000000022.931:4668): avc: denied { module_request } for pid=12595 comm="syz.0.2261" kmod="crypto-essiv(cbc(aes),sha256)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 217.166117][ T40] audit: type=1400 audit(2000000022.981:4669): avc: denied { create } for pid=12595 comm="syz.0.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.174834][ T40] audit: type=1400 audit(2000000022.991:4670): avc: denied { ioctl } for pid=12595 comm="syz.0.2261" path="socket:[48870]" dev="sockfs" ino=48870 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.222289][ T40] audit: type=1400 audit(2000000023.041:4671): avc: denied { prog_load } for pid=12601 comm="syz.0.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 217.230003][ T40] audit: type=1400 audit(2000000023.041:4672): avc: denied { bpf } for pid=12601 comm="syz.0.2263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.237653][ T40] audit: type=1400 audit(2000000023.041:4673): avc: denied { perfmon } for pid=12601 comm="syz.0.2263" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.246388][ T40] audit: type=1400 audit(2000000023.041:4674): avc: denied { prog_run } for pid=12601 comm="syz.0.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 217.254859][ T40] audit: type=1400 audit(2000000023.061:4675): avc: denied { name_bind } for pid=12603 comm="syz.1.2264" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 217.265416][T12554] team0: Port device team_slave_0 added [ 217.270788][T12554] team0: Port device team_slave_1 added [ 217.323855][T12554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.326140][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.337444][T12554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.342486][T12554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.344797][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.353174][T12554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.405549][T12554] hsr_slave_0: entered promiscuous mode [ 217.410338][T12554] hsr_slave_1: entered promiscuous mode [ 217.413409][T12554] debugfs: 'hsr0' already exists in 'hsr' [ 217.415950][T12554] Cannot create hsr debugfs directory [ 217.607588][T12554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 217.619807][T12554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 217.630665][T12554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 217.638692][T12554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 217.664880][T12613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12613 comm=syz.5.2267 [ 217.718291][T12554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.721410][T12620] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.751948][T12554] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.763855][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.767361][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.782467][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.786443][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.882400][T12632] o2cb: This node has not been configured. [ 217.884747][T12632] o2cb: Cluster check failed. Fix errors before retrying. [ 217.887341][T12632] (syz.0.2272,12632,0):user_dlm_register:674 ERROR: status = -22 [ 217.891191][T12632] (syz.0.2272,12632,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 217.987138][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.145512][T12646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12646 comm=syz.0.2275 [ 218.199175][ T5960] Bluetooth: hci1: command tx timeout [ 218.230178][T12554] veth0_vlan: entered promiscuous mode [ 218.239156][T12554] veth1_vlan: entered promiscuous mode [ 218.259771][T12554] veth0_macvtap: entered promiscuous mode [ 218.265076][T12554] veth1_macvtap: entered promiscuous mode [ 218.274823][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.285055][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.292534][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.296718][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.301954][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.305461][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.413180][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.415856][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.429707][ T2212] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 218.456841][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.461113][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.552781][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.556649][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.566392][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.577113][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.582391][ T2212] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.596499][ T2212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.607295][ T2212] usb 6-1: config 0 has no interface number 0 [ 218.613069][ T2212] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.617077][ T2212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.639299][ T2212] usb 6-1: config 0 descriptor?? [ 218.649001][ T2212] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 218.675419][T12671] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.778062][ T1336] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 218.915531][ T6973] usb 6-1: USB disconnect, device number 26 [ 218.929262][ T1336] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.936565][ T1336] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.948012][ T1336] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.952581][ T1336] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.956467][ T1336] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.960961][ T1336] usb 11-1: config 0 descriptor?? [ 218.987930][ T53] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 219.154359][ T53] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 219.158512][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 219.163692][ T53] usb 10-1: Product: syz [ 219.165837][ T53] usb 10-1: Manufacturer: syz [ 219.169249][ T53] usb 10-1: SerialNumber: syz [ 219.174917][ T1336] usbhid 11-1:0.0: can't add hid device: -71 [ 219.177560][ T1336] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 219.183330][ T53] usb 10-1: config 0 descriptor?? [ 219.185029][ T1336] usb 11-1: USB disconnect, device number 2 [ 219.189382][ T53] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 219.189926][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 219.199490][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.204685][ T53] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 219.208362][ T53] usb 10-1: media controller created [ 219.227503][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.466561][T12675] cxusb: i2c rd: len=124 is too big! [ 219.466561][T12675] [ 219.554216][T12692] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2289'. [ 219.570772][ T53] cxusb: set interface failed [ 219.583431][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 219.646249][ T53] DVB: Unable to find symbol mt352_attach() [ 219.658096][ T53] dvb-usb: bulk message failed: -22 (5/0) [ 219.660947][ T53] zl10353_read_register: readreg error (reg=127, ret==-121) [ 219.666433][ T53] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 219.744942][T12710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12710 comm=syz.1.2295 [ 219.749105][ T53] rc_core: IR keymap rc-dvico-mce not found [ 219.753988][ T53] Registered IR keymap rc-empty [ 219.757072][ T53] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 219.761571][ T53] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input20 [ 219.768471][ T53] dvb-usb: schedule remote query interval to 100 msecs. [ 219.771989][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 219.777709][ T53] usb 10-1: USB disconnect, device number 7 [ 219.802195][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 219.812306][T12712] ref_ctr_offset mismatch. inode: 0x17 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 219.875581][T12716] tipc: Started in network mode [ 219.881383][T12716] tipc: Node identity fab849c8236c, cluster identity 4711 [ 219.884527][T12716] tipc: Enabled bearer , priority 0 [ 219.892642][T12712] syzkaller0: entered promiscuous mode [ 219.895262][T12712] syzkaller0: entered allmulticast mode [ 219.922081][T12721] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2298'. [ 220.018202][T12709] tipc: Resetting bearer [ 220.037478][T12709] tipc: Disabling bearer [ 220.091077][T12731] kvm: pic: non byte write [ 220.223927][T12738] IPVS: persistence engine module ip_vs_pe_s not found [ 220.266332][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2306'. [ 220.287977][ T5960] Bluetooth: hci1: command tx timeout [ 220.445843][T12751] can0: slcan on ptm0. [ 220.455398][T12748] kvm: kvm [12747]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 220.459136][T12748] kvm: kvm [12747]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 220.486322][T12748] kvm: kvm [12747]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 220.504213][T12756] syzkaller1: entered promiscuous mode [ 220.505839][T12756] syzkaller1: entered allmulticast mode [ 220.511880][T12748] kvm: kvm [12747]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 220.516446][T12748] kvm: kvm [12747]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 220.543990][T12748] kvm_intel: kvm [12747]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 220.570764][T12750] can0 (unregistered): slcan off ptm0. [ 220.694320][T12766] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 220.701800][T12766] SELinux: failed to load policy [ 220.745753][T12769] binder: BC_ACQUIRE_RESULT not supported [ 220.750068][T12769] binder: 12768:12769 ioctl c0306201 2000000001c0 returned -22 [ 220.750678][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 220.755327][T12771] 9pnet: Found fid 0 not clunked [ 220.758965][T12770] net_ratelimit: 30 callbacks suppressed [ 220.758979][T12770] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 220.766533][T12770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.309891][T12800] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 221.351670][T12803] 9pnet_virtio: no channels available for device syz [ 221.355896][T12803] 9pnet_virtio: no channels available for device syz [ 221.360198][T12803] 9pnet_virtio: no channels available for device syz [ 221.362959][T12803] 9pnet_virtio: no channels available for device syz [ 221.365612][T12803] 9pnet_virtio: no channels available for device syz [ 221.368949][T12803] 9pnet_virtio: no channels available for device syz [ 221.371443][T12803] 9pnet_virtio: no channels available for device syz [ 221.374142][T12803] 9pnet_virtio: no channels available for device syz [ 221.376767][T12803] 9pnet_virtio: no channels available for device syz [ 221.380039][T12803] 9pnet_virtio: no channels available for device syz [ 221.382574][T12803] 9pnet_virtio: no channels available for device syz [ 221.385736][T12803] 9pnet_virtio: no channels available for device syz [ 221.389374][T12803] 9pnet_virtio: no channels available for device syz [ 221.392973][T12803] 9pnet_virtio: no channels available for device syz [ 221.396444][T12803] 9pnet_virtio: no channels available for device syz [ 221.399425][T12803] 9pnet_virtio: no channels available for device syz [ 221.401863][T12803] 9pnet_virtio: no channels available for device syz [ 221.408145][T12803] 9pnet_virtio: no channels available for device syz [ 221.412186][T12803] 9pnet_virtio: no channels available for device syz [ 221.415817][T12803] 9pnet_virtio: no channels available for device syz [ 221.418717][T12803] 9pnet_virtio: no channels available for device syz [ 221.421467][T12803] 9pnet_virtio: no channels available for device syz [ 221.424502][T12803] 9pnet_virtio: no channels available for device syz [ 221.428390][T12803] 9pnet_virtio: no channels available for device syz [ 221.431499][T12803] 9pnet_virtio: no channels available for device syz [ 221.434098][T12803] 9pnet_virtio: no channels available for device syz [ 221.436492][T12803] 9pnet_virtio: no channels available for device syz [ 221.439482][T12803] 9pnet_virtio: no channels available for device syz [ 221.444467][T12803] 9pnet_virtio: no channels available for device syz [ 221.447646][T12803] 9pnet_virtio: no channels available for device syz [ 221.451255][T12803] 9pnet_virtio: no channels available for device syz [ 221.454313][T12803] 9pnet_virtio: no channels available for device syz [ 221.457042][T12803] 9pnet_virtio: no channels available for device syz [ 221.460145][T12803] 9pnet_virtio: no channels available for device syz [ 221.462694][T12803] 9pnet_virtio: no channels available for device syz [ 221.465580][T12803] 9pnet_virtio: no channels available for device syz [ 221.469439][T12803] 9pnet_virtio: no channels available for device syz [ 221.473601][T12803] 9pnet_virtio: no channels available for device syz [ 221.476400][T12803] 9pnet_virtio: no channels available for device syz [ 221.479413][T12803] 9pnet_virtio: no channels available for device syz [ 221.482734][T12803] 9pnet_virtio: no channels available for device syz [ 221.486076][T12803] 9pnet_virtio: no channels available for device syz [ 221.490033][T12803] 9pnet_virtio: no channels available for device syz [ 221.493110][T12803] 9pnet_virtio: no channels available for device syz [ 221.496463][T12803] 9pnet_virtio: no channels available for device syz [ 221.499739][T12803] 9pnet_virtio: no channels available for device syz [ 221.502150][T12803] 9pnet_virtio: no channels available for device syz [ 221.504557][T12803] 9pnet_virtio: no channels available for device syz [ 221.507069][T12803] 9pnet_virtio: no channels available for device syz [ 221.511152][T12803] 9pnet_virtio: no channels available for device syz [ 221.514202][T12803] 9pnet_virtio: no channels available for device syz [ 221.517143][T12803] 9pnet_virtio: no channels available for device syz [ 221.520394][T12803] 9pnet_virtio: no channels available for device syz [ 221.523234][T12803] 9pnet_virtio: no channels available for device syz [ 221.526260][T12803] 9pnet_virtio: no channels available for device syz [ 221.529818][T12803] 9pnet_virtio: no channels available for device syz [ 221.533505][T12803] 9pnet_virtio: no channels available for device syz [ 221.536579][T12803] 9pnet_virtio: no channels available for device syz [ 221.539461][T12803] 9pnet_virtio: no channels available for device syz [ 221.542355][T12803] 9pnet_virtio: no channels available for device syz [ 221.545042][T12803] 9pnet_virtio: no channels available for device syz [ 221.547456][T12803] 9pnet_virtio: no channels available for device syz [ 221.547953][ T836] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 221.551177][T12803] 9pnet_virtio: no channels available for device syz [ 221.552944][T12808] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2331'. [ 221.560771][T12803] 9pnet_virtio: no channels available for device syz [ 221.695648][T12814] IPVS: persistence engine module ip_vs_pe_s not found [ 221.732264][ T836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.735947][ T836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.742815][ T836] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.747537][ T836] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.751261][ T836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.768346][ T836] usb 10-1: config 0 descriptor?? [ 221.811857][T12822] ------------[ cut here ]------------ [ 221.814035][T12822] WARNING: CPU: 0 PID: 12822 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xb9d/0x10d0 [ 221.818558][T12822] Modules linked in: [ 221.820087][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.1.2335 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.825461][T12822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.831802][T12822] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 221.835467][T12822] Code: 24 20 48 8b 6c 24 38 e8 11 44 d2 fa e8 0c 44 d2 fa 89 de 44 89 ef e8 82 3e d2 fa 41 39 dd 0f 84 cb fd ff ff e8 f4 43 d2 fa 90 <0f> 0b 90 e9 bd fd ff ff e8 e6 43 d2 fa 48 8d 7d 38 be 01 00 00 00 [ 221.844608][T12822] RSP: 0018:ffffc9000436f138 EFLAGS: 00010293 [ 221.847432][T12822] RAX: 0000000000000000 RBX: ffff8880396b0c2c RCX: 0000000000000000 [ 221.851328][T12822] RDX: ffff8880261fc900 RSI: ffffffff86e8e50c RDI: ffff8880396b0c18 [ 221.855440][T12822] RBP: ffff888037136000 R08: 0000000000000005 R09: 0000000000000000 [ 221.860435][T12822] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000436f290 [ 221.864182][T12822] R13: 0000000000000001 R14: ffff888025995500 R15: ffff8880396b0c00 [ 221.867926][T12822] FS: 00007f1d2496b6c0(0000) GS:ffff8880d6e55000(0000) knlGS:0000000000000000 [ 221.872145][T12822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.875236][T12822] CR2: 00007f1d24949f98 CR3: 00000000614de000 CR4: 0000000000352ef0 [ 221.880343][T12822] Call Trace: [ 221.882540][T12822] [ 221.884677][T12822] notifier_call_chain+0xbc/0x410 [ 221.887200][T12822] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 221.889926][T12822] atomic_notifier_call_chain+0x71/0x1c0 [ 221.892179][T12822] call_fib_notifiers+0x33/0x70 [ 221.894379][T12822] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 221.897483][T12822] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 221.901048][T12822] ? find_held_lock+0x2b/0x80 [ 221.903750][T12822] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 221.907113][T12822] ip6_route_multipath_add+0xb4f/0x1bd0 [ 221.910197][T12822] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 221.912957][T12822] ? avc_has_perm_noaudit+0x117/0x3b0 [ 221.915631][T12822] ? avc_has_perm_noaudit+0x149/0x3b0 [ 221.918872][T12822] ? inet6_rtm_newroute+0xe4/0x1a0 [ 221.921935][T12822] inet6_rtm_newroute+0xe4/0x1a0 [ 221.924304][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 221.926924][T12822] ? __lock_acquire+0x62e/0x1ce0 [ 221.929268][T12822] ? find_held_lock+0x2b/0x80 [ 221.931591][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 221.934195][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 221.937670][T12822] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 221.940899][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 221.944172][T12822] rtnetlink_rcv_msg+0x95e/0xe90 [ 221.946599][T12822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.949225][T12822] ? ref_tracker_free+0x37c/0x830 [ 221.952117][T12822] netlink_rcv_skb+0x158/0x420 [ 221.954609][T12822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.957269][T12822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.959881][T12822] ? netlink_deliver_tap+0x1ae/0xd30 [ 221.962505][T12822] netlink_unicast+0x5a7/0x870 [ 221.965039][T12822] ? __pfx_netlink_unicast+0x10/0x10 [ 221.968035][T12822] netlink_sendmsg+0x8d1/0xdd0 [ 221.970416][T12822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.972970][T12822] ____sys_sendmsg+0xa98/0xc70 [ 221.975290][T12822] ? copy_msghdr_from_user+0x10a/0x160 [ 221.978038][T12822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.981041][T12822] ? kfree+0x24f/0x4d0 [ 221.983314][T12822] ? __pfx_futex_wake_mark+0x10/0x10 [ 221.986114][T12822] ___sys_sendmsg+0x134/0x1d0 [ 221.988334][T12822] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.990885][T12822] __sys_sendmsg+0x16d/0x220 [ 221.993224][T12822] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.995935][T12822] ? __x64_sys_futex+0x1e0/0x4c0 [ 221.998388][T12822] do_syscall_64+0xcd/0x4e0 [ 222.000862][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.003868][T12822] RIP: 0033:0x7f1d23b8eec9 [ 222.005992][T12822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.014598][T12822] RSP: 002b:00007f1d2496b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.018411][T12822] RAX: ffffffffffffffda RBX: 00007f1d23de6090 RCX: 00007f1d23b8eec9 [ 222.022651][T12822] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000009 [ 222.027117][T12822] RBP: 00007f1d23c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.031059][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.034820][T12822] R13: 00007f1d23de6128 R14: 00007f1d23de6090 R15: 00007fff13198148 [ 222.038993][T12822] [ 222.040738][T12822] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.044197][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.1.2335 Not tainted syzkaller #0 PREEMPT(full) [ 222.047571][T12822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.052077][T12822] Call Trace: [ 222.053609][T12822] [ 222.054976][T12822] dump_stack_lvl+0x3d/0x1f0 [ 222.057176][T12822] vpanic+0x6e8/0x7a0 [ 222.058996][T12822] ? __pfx_vpanic+0x10/0x10 [ 222.060980][T12822] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 222.063497][T12822] panic+0xca/0xd0 [ 222.065462][T12822] ? __pfx_panic+0x10/0x10 [ 222.067623][T12822] ? check_panic_on_warn+0x1f/0xb0 [ 222.070038][T12822] check_panic_on_warn+0xab/0xb0 [ 222.072017][T12822] __warn+0xf6/0x3c0 [ 222.073575][T12822] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 222.075324][T12822] report_bug+0x3c3/0x580 [ 222.076804][T12822] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 222.078580][T12822] handle_bug+0x184/0x210 [ 222.080243][T12822] exc_invalid_op+0x17/0x50 [ 222.082596][T12822] asm_exc_invalid_op+0x1a/0x20 [ 222.085347][T12822] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 222.088595][T12822] Code: 24 20 48 8b 6c 24 38 e8 11 44 d2 fa e8 0c 44 d2 fa 89 de 44 89 ef e8 82 3e d2 fa 41 39 dd 0f 84 cb fd ff ff e8 f4 43 d2 fa 90 <0f> 0b 90 e9 bd fd ff ff e8 e6 43 d2 fa 48 8d 7d 38 be 01 00 00 00 [ 222.095219][T12822] RSP: 0018:ffffc9000436f138 EFLAGS: 00010293 [ 222.097303][T12822] RAX: 0000000000000000 RBX: ffff8880396b0c2c RCX: 0000000000000000 [ 222.100460][T12822] RDX: ffff8880261fc900 RSI: ffffffff86e8e50c RDI: ffff8880396b0c18 [ 222.104328][T12822] RBP: ffff888037136000 R08: 0000000000000005 R09: 0000000000000000 [ 222.108932][T12822] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000436f290 [ 222.112978][T12822] R13: 0000000000000001 R14: ffff888025995500 R15: ffff8880396b0c00 [ 222.116520][T12822] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 222.118877][T12822] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 222.121281][T12822] notifier_call_chain+0xbc/0x410 [ 222.123676][T12822] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 222.126180][T12822] atomic_notifier_call_chain+0x71/0x1c0 [ 222.129120][T12822] call_fib_notifiers+0x33/0x70 [ 222.132206][T12822] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 222.135766][T12822] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 222.138873][T12822] ? find_held_lock+0x2b/0x80 [ 222.141098][T12822] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 222.143554][T12822] ip6_route_multipath_add+0xb4f/0x1bd0 [ 222.146144][T12822] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 222.149070][T12822] ? avc_has_perm_noaudit+0x117/0x3b0 [ 222.151830][T12822] ? avc_has_perm_noaudit+0x149/0x3b0 [ 222.154548][T12822] ? inet6_rtm_newroute+0xe4/0x1a0 [ 222.157327][T12822] inet6_rtm_newroute+0xe4/0x1a0 [ 222.159421][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 222.161398][T12822] ? __lock_acquire+0x62e/0x1ce0 [ 222.163102][T12822] ? find_held_lock+0x2b/0x80 [ 222.164723][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 222.166631][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 222.168678][T12822] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 222.170610][T12822] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 222.172938][T12822] rtnetlink_rcv_msg+0x95e/0xe90 [ 222.174824][T12822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.176720][T12822] ? ref_tracker_free+0x37c/0x830 [ 222.178450][T12822] netlink_rcv_skb+0x158/0x420 [ 222.180087][T12822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.181945][T12822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.184230][T12822] ? netlink_deliver_tap+0x1ae/0xd30 [ 222.186382][T12822] netlink_unicast+0x5a7/0x870 [ 222.188161][T12822] ? __pfx_netlink_unicast+0x10/0x10 [ 222.190571][T12822] netlink_sendmsg+0x8d1/0xdd0 [ 222.192684][T12822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.194901][T12822] ____sys_sendmsg+0xa98/0xc70 [ 222.196647][T12822] ? copy_msghdr_from_user+0x10a/0x160 [ 222.198542][T12822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.200627][T12822] ? kfree+0x24f/0x4d0 [ 222.202047][T12822] ? __pfx_futex_wake_mark+0x10/0x10 [ 222.204133][T12822] ___sys_sendmsg+0x134/0x1d0 [ 222.206012][T12822] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.207986][T12822] __sys_sendmsg+0x16d/0x220 [ 222.210121][T12822] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.211947][T12822] ? __x64_sys_futex+0x1e0/0x4c0 [ 222.213744][T12822] do_syscall_64+0xcd/0x4e0 [ 222.215400][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.217502][T12822] RIP: 0033:0x7f1d23b8eec9 [ 222.219159][T12822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.228932][T12822] RSP: 002b:00007f1d2496b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.232521][T12822] RAX: ffffffffffffffda RBX: 00007f1d23de6090 RCX: 00007f1d23b8eec9 [ 222.235934][T12822] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000009 [ 222.239730][T12822] RBP: 00007f1d23c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.243767][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.247132][T12822] R13: 00007f1d23de6128 R14: 00007f1d23de6090 R15: 00007fff13198148 [ 222.251026][T12822] [ 222.253322][T12822] Kernel Offset: disabled [ 222.255153][T12822] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:17:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852064a5 RDI=ffffffff9ab6fae0 RBP=ffffffff9ab6faa0 RSP=ffffc9000436eaa0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9ab6faa0 R15=ffffffff85206440 RIP=ffffffff852064cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1d2496b6c0 ffffffff 00c00000 GS =0000 ffff8880d6e55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1d24949f98 CR3=00000000614de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13198656 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13198656 00007fff1319865c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23db74a8 00007f1d23db74a0 00007f1d23db7498 00007f1d23db7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d2491d100 00007f1d23db7460 00007f1d23db7478 00007f1d23db74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d23db74b8 00007f1d23db74b0 00007f1d23db74a8 00007f1d23db74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffea0000e6cb00 RCX=0000000000000000 RDX=0000000000000014 RSI=ffffffff81f75de1 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90003a1f2f0 R8 =0000000000000005 R9 =00000000ffffffff R10=0000000000000002 R11=0000000000000000 R12=ffff88801cef8048 R13=0000000000000002 R14=0000000000000002 R15=00fff00000020901 RIP=ffffffff81f75e0a RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f124d917d60 CR3=000000000df82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f124cdb76c3 00007f124cdb76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc54f80f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582bf8150 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582bf68f5 0000555582bf5f10 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a010000610000180 8010000284c08004 0c0141d800100001 0000040806201000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 040fffffffffffff 040fffffffffffff 040010000fffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff04048291c0 8010000c0172d622 100002808010000b ee808004060140be ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100001080020a0 1000061000018080 10000284c080040c 0141d80010000100 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004080620100020 8080841000028080 10000ffd8080040c 0141d804800401f2 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88806a83b800 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff822ab056 RDI=ffff88806a83b800 RBP=ffff88806a83b800 RSP=ffffc9000395f2b8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffea0000ee6407 R11=0000000000000000 R12=ffffffff822ab056 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff82229c10 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9e897f36c0 ffffffff 00c00000 GS =0000 ffff8880d7055000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9e897f2f98 CR3=0000000061444000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4cf3c636 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4cf3c636 00007ffd4cf3c63c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88a12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88a12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88a12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88a12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88a1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88a1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88bb74a8 00007f9e88bb74a0 00007f9e88bb7498 00007f9e88bb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e8971d100 00007f9e88bb7460 00007f9e88bb7478 00007f9e88bb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e88bb74b8 00007f9e88bb74b0 00007f9e88bb74a8 00007f9e88bb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffff5200070fea3 RBX=ffff88802267c20c RCX=dffffc0000000000 RDX=ffffc9000387f518 RSI=ffffffff8b4b3bcf RDI=ffffc9000387f500 RBP=00007fdf0552efff RSP=ffffc9000387f3a8 R8 =0000000000000006 R9 =ffffffffffffffff R10=00007fdf0552efff R11=0000000000000000 R12=ffffffffffffffff R13=ffffc9000387f500 R14=0000000000000000 R15=ffffc9000387f53d RIP=ffffffff81bb2900 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7155000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdf054f3440 CR3=0000000050605000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000