last executing test programs: 1m7.762379464s ago: executing program 32 (id=16): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40095) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8}, 0x94) 1m2.963303893s ago: executing program 33 (id=54): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x470001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1032, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x911, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x2, 0x5, 0x18, 0x9, 0x2000006, 0x5]}) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x470001, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1032, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x911, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x2, 0x5, 0x18, 0x9, 0x2000006, 0x5]}) (async) 59.224602058s ago: executing program 34 (id=73): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) 58.001532502s ago: executing program 35 (id=78): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x1, 0x82, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="1c005b2fd6a3bb86da38a221e1cf33112df25838660f2bf8221bdec14bc56ee44ecc498175b316be976cd8553f341d899a1084a877a2b0596146fc9ca9c0acf94f4cc1e60966340253de726a40d2aac14faaed17c3d0dc28f6b6a989a8e721e7c990d7cb3aa8a0169340907ad146ffa9c3407c741f85ec8302b34fda000000000000", &(0x7f0000002240)=""/4103, 0x10000, 0x30520cf7f25e0c64, 0x2, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 54.998856477s ago: executing program 36 (id=86): r0 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x130) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x130) openat$iommufd(0xffffffffffffff9c, 0x0, 0x141080, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtfilter={0x8f4, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c8, 0x2, [@TCA_BPF_POLICE={0x8bc, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xf, 0x1, 0x4, {0x1, 0x0, 0x4, 0x2, 0x7, 0x80000000}, {0x8, 0x1, 0xfffa, 0x0, 0x1ff, 0x8}, 0xffff, 0x1, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9d7, 0x1, 0x7, 0x1d, 0x5, 0x1ff, 0xb4fa, 0xd, 0x4800000, 0x6, 0x1ff, 0x1, 0x1, 0x3, 0x8, 0x100, 0x8, 0x9, 0xffffff81, 0x1d29, 0xaeb8, 0x3, 0x9, 0x68, 0x1, 0xffffffff, 0x200, 0x1, 0x1, 0x1, 0xec5, 0x5, 0x82, 0x2, 0x5, 0x4, 0xf, 0x97b, 0x9, 0x4, 0x1800, 0x6, 0x0, 0x7ff, 0x58, 0xd, 0x7ff, 0x280000, 0xe773, 0x1, 0x9, 0x7, 0x80000001, 0x9, 0x0, 0x3, 0x32a, 0x90, 0xa, 0x9, 0x40, 0xecf, 0x3, 0x7, 0x5, 0x59, 0x0, 0x1000, 0x9, 0x6, 0x4, 0xffffffff, 0xd1c6, 0x2, 0x0, 0x6, 0x400, 0xaace, 0x9, 0x3, 0x80, 0x1, 0x70, 0x200, 0x8, 0x7ff, 0x6, 0x8, 0x7, 0x3, 0xd51, 0x4, 0x9, 0x5, 0x5, 0x9, 0x3, 0x7, 0x101, 0x0, 0x1, 0x4000, 0x3, 0x48bdb379, 0x9, 0x7ff, 0x1, 0xd35b, 0x3, 0x7fff, 0xfffffffb, 0x9, 0x4, 0x1, 0x6, 0x9d9a, 0x2, 0x6, 0x6, 0x10001, 0x6c79, 0x7, 0x8, 0x5dde, 0xfffff5e8, 0xfffffffd, 0x8000, 0x80, 0x1, 0x5, 0x6, 0x1, 0x9, 0x2, 0x0, 0x2, 0x4, 0xffffffff, 0x80, 0xe, 0xc087, 0x0, 0xb, 0x7, 0x1, 0x5, 0xc, 0x2, 0x5, 0x8, 0x1, 0x5, 0x3, 0x5, 0x7, 0x2, 0x1, 0x80000001, 0x6, 0x7f, 0x200, 0x1, 0x3, 0xffff, 0xa7e, 0xeb2, 0x7ff, 0x8, 0x7fffffff, 0xd, 0x83, 0x1, 0x0, 0xf, 0x2, 0x9, 0x0, 0x1, 0x401, 0x6, 0x4, 0xfffffff8, 0x3, 0xfc2, 0x800, 0xfffffff9, 0xe, 0x0, 0x6, 0x9, 0x7, 0x30ed, 0x5567, 0x80000001, 0x1, 0xc5, 0x400, 0x4, 0x9, 0x2ae, 0x9, 0x6, 0x0, 0x3, 0x0, 0xffff0001, 0x4, 0x0, 0xfffff801, 0xa10000, 0x6, 0xcd, 0x1ff, 0x9, 0x3, 0xe, 0x8, 0x3, 0x0, 0x81, 0x3, 0x5, 0x7f, 0xfffffffa, 0x1, 0x5, 0x8001, 0x8, 0xc7, 0x10, 0xfffffffb, 0x30, 0xa, 0xe4d5, 0x9, 0x9, 0x5bd, 0x0, 0x1, 0xf9cb, 0x9, 0x7, 0x9, 0x1, 0x6, 0xff, 0x5, 0x3ff, 0x3, 0xa9f, 0x58e3, 0x80000001, 0x9, 0x8, 0x3, 0xd4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x501a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x7, 0x0, 0x1, 0x2, 0x78000000, 0x2, 0x1, 0x81, 0x3, 0x2, 0x1, 0x1ff, 0x5, 0x6, 0xf, 0xfffffff0, 0x1ff, 0x80, 0x1bb3, 0x9, 0x1, 0x4, 0x89d44019, 0x9, 0xfffffffc, 0x6992, 0x17, 0x7fffffff, 0x800, 0x2, 0x9, 0x46d9b0ba, 0x0, 0xffffff7f, 0x0, 0x800, 0x8, 0x9, 0x2, 0x7, 0xfffffffc, 0x6, 0xdf, 0xd, 0x3, 0x4, 0x6, 0x5, 0x9, 0x8000, 0x0, 0x6, 0xeb, 0x9, 0x1, 0x80000001, 0x7878, 0x2, 0x6fab44b5, 0xc, 0xfffffffb, 0x2, 0x8, 0x2, 0x8, 0x8, 0x9, 0x8000, 0x9, 0x80, 0x0, 0x1, 0xfffffff9, 0x9, 0x80000000, 0x9, 0x521, 0xfffffff8, 0x2, 0x100, 0x57, 0x4, 0x59f3df30, 0x1000, 0x2, 0x800, 0x3, 0xf, 0xfffffff1, 0xacc6, 0x7ff, 0x7fff, 0xfffffff6, 0x3, 0x6, 0x1, 0x4, 0x80000000, 0x6, 0x6, 0x7, 0x86, 0x15c0, 0x18fd, 0x0, 0xad4, 0xc, 0x7fff, 0x8af525ee, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x8001, 0x3, 0x10001, 0x6, 0x1, 0x1ff, 0x8, 0x2, 0x7, 0x400, 0x1, 0x4, 0x3d, 0x2, 0x7, 0x3, 0x38000000, 0x9, 0x6951, 0x4, 0x5, 0x95fc4d1, 0xb1a9, 0xdf5, 0x2, 0xffff8001, 0x6, 0x200, 0xcdf2, 0x1, 0x2, 0x97cf, 0x13, 0x4, 0x9, 0xfff, 0x0, 0x57a4aaab, 0xfffffffa, 0xe0, 0x1, 0x7, 0x6, 0xacf0, 0x8, 0x0, 0x3, 0x3, 0x5, 0xf, 0x6, 0x0, 0x800, 0x8, 0x8, 0x3, 0x9, 0x3ff, 0x8, 0x8cf, 0x0, 0x3ff, 0x7fffffff, 0x8000, 0xe5, 0x7dc, 0xcb7, 0x2, 0x7, 0xfffffffe, 0xdd, 0x7, 0x8, 0x4521, 0x47fe8cb4, 0x3, 0x1, 0x9b3c, 0xef30, 0x6, 0x4, 0x1000, 0x7fff, 0x6, 0xffff25b5, 0x85e, 0x7a, 0x56, 0x1, 0x1, 0xffc, 0xda5a, 0x6, 0xd9bb, 0x3, 0x80, 0x40, 0x80000001, 0x8, 0x6, 0x2, 0x80000001, 0x7ff, 0x7ff, 0x4, 0x5, 0x7, 0x2, 0x9, 0x1, 0x7ec, 0x3, 0x9, 0x8e, 0x0, 0x0, 0x9, 0x200, 0xa, 0x6, 0x40, 0x897, 0x62c, 0xa3, 0x7ff, 0x40, 0x8476, 0x1, 0x0, 0x6, 0x9, 0x0, 0x3, 0x61, 0x1, 0x1, 0x7, 0x4, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xb, 0x80000001, 0x8000, {0x8, 0x0, 0x9, 0x0, 0x8, 0x7}, {0x6, 0x0, 0x2603, 0x4779, 0x8000, 0x86}, 0x5, 0x9, 0x80000001}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='secure\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='secure\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 54.010771655s ago: executing program 2 (id=91): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r2 = accept(r0, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000001c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000300)={0xd8, 0x9, 0x8, 0x3, 0x70bd26, 0x25dfdbfb, {0x6, 0x0, 0xa}, [@generic, @nested={0xbf, 0x102, 0x0, 0x1, [@generic="1d987dbc873d434b9946e96fcea460a9e11ef91db8ee83a68722747028e2b3ab076baa180b80415d7a19e2e122ab48c05bbdfa369fcdf6afe56252865da4bfc8e11f30e13cdae658154bc1fbb99c87471680b54beabc9e77e650103df555f9f86b0af83e54e544ae6e2d9118ad6a57947a9eec14453519380a393c78674fee6cdab6299e6ff928acad88b92ca7fa352d8292f03e6d9781fb238f86ad163582b25b118394046efbdcb0d7503edc6c54e60e35c126c128cc9f6cd431"]}, @generic='`&']}, 0xd8}, 0x1, 0x0, 0x0, 0x24004040}, 0x48800) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r6, 0x29, 0x4e, 0x0, 0x3a) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, r1, 0xb496be12fe179219, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 53.923980078s ago: executing program 37 (id=91): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r2 = accept(r0, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000001c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000300)={0xd8, 0x9, 0x8, 0x3, 0x70bd26, 0x25dfdbfb, {0x6, 0x0, 0xa}, [@generic, @nested={0xbf, 0x102, 0x0, 0x1, [@generic="1d987dbc873d434b9946e96fcea460a9e11ef91db8ee83a68722747028e2b3ab076baa180b80415d7a19e2e122ab48c05bbdfa369fcdf6afe56252865da4bfc8e11f30e13cdae658154bc1fbb99c87471680b54beabc9e77e650103df555f9f86b0af83e54e544ae6e2d9118ad6a57947a9eec14453519380a393c78674fee6cdab6299e6ff928acad88b92ca7fa352d8292f03e6d9781fb238f86ad163582b25b118394046efbdcb0d7503edc6c54e60e35c126c128cc9f6cd431"]}, @generic='`&']}, 0xd8}, 0x1, 0x0, 0x0, 0x24004040}, 0x48800) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r6, 0x29, 0x4e, 0x0, 0x3a) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, r1, 0xb496be12fe179219, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 48.391866802s ago: executing program 38 (id=106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc010000210000000400000000000000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 46.723612391s ago: executing program 39 (id=118): mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) fsopen(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x6, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x6}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e65746465", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r1}, &(0x7f0000000280)=""/91, 0x5b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x103fb, 0x0, 0x58000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) ioctl$KVM_RUN(r0, 0xae80, 0x0) r8 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) mkdirat(r4, &(0x7f00000001c0)='./tracefs\x00', 0x100) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85) creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) 34.75644699s ago: executing program 40 (id=214): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x180000000) 34.520083516s ago: executing program 9 (id=220): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblc\x00', 0x1, 0xa8a, 0x34}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0xa, 0x19, "9855f824bee0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$inet_int(r0, 0x0, 0x3c, &(0x7f00000000c0)=0x2, 0x4) 34.239640171s ago: executing program 9 (id=221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl(r2, 0xc4c85512, &(0x7f0000000200)) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x494, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x468, 0x2, [@TCA_BPF_ACT={0x464, 0x1, [@m_bpf={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x434, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0xbe26, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 33.441155639s ago: executing program 41 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) (async) wait4(r1, 0x0, 0x40000000, 0x0) capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0xfffffffb, 0x85, 0x3, 0x4, 0x835}) fallocate(r0, 0x0, 0x0, 0x8ffff) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x1e9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r2, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async, rerun: 32) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) recvmmsg(r3, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x2000, 0x0) (async) cachestat(r0, &(0x7f0000000040)={0x6, 0x167}, &(0x7f0000000000), 0x0) 32.900670603s ago: executing program 9 (id=228): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7ff, 0x0, 0x8000000000000001, 0x9}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x3}, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000100)={'full', 0x20, 0xf, 0x20, 0x8001}, 0x2f) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES64=r5, @ANYRES32=r5, @ANYRES16=0x0, @ANYBLOB=',g']) setns(0xc9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="080088a200040600000e8100400088"], 0x4a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="dc230000", @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf257500000008000300", @ANYRES32=r10, @ANYBLOB], 0x23dc}}, 0x4) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6af0, 0x45}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 32.20856179s ago: executing program 9 (id=229): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='+5', 0x2) 32.060735705s ago: executing program 9 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0x3431, 0x4000, 0x5, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 31.550487531s ago: executing program 9 (id=232): syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{0x9}}}}, 0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x201, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001300)={0x14, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x2, 0x1000000}], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) 31.414412325s ago: executing program 42 (id=232): syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{0x9}}}}, 0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x201, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001300)={0x14, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x2, 0x1000000}], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) 30.823395015s ago: executing program 3 (id=234): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = getpgid(r3) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 30.36179532s ago: executing program 3 (id=235): socket$unix(0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffff', 0x2f) 30.104773315s ago: executing program 3 (id=236): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\b\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) process_vm_readv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/263, 0xff}], 0x1, &(0x7f0000000040)=[{&(0x7f0000002600)=""/4112, 0xd37}], 0x1, 0x0) 29.019465356s ago: executing program 3 (id=237): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 28.961910943s ago: executing program 3 (id=238): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./proc\x00', 0x1ff) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) 28.565817492s ago: executing program 3 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f4251316b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b36c45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f3f4bd03710005994eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38c96b89aa3f24ce0728f16539744b7867e19c856e670e8b799d52da435bb07beea683a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b8f9fffffff1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013c80a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f200"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) (async) r6 = getpgid(0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xe, &(0x7f0000000000)=0x9cc0, 0x4) (async) r8 = fsmount(0xffffffffffffffff, 0x1, 0x73) sendmsg$IPCTNL_MSG_EXP_GET(r8, 0x0, 0x4080) (async) fcntl$lock(r8, 0x5, &(0x7f0000000080)={0x2, 0x2, 0x200000000004, 0x682, r6}) (async) clock_settime(0x17, &(0x7f0000000040)) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f00000005c0)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000380)='net/sctp\x00') writev(r10, &(0x7f0000001ac0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="d857442d", 0x4}, {&(0x7f0000001b80)="206b9259d221138779fdd3322f8083e319c4a86b0878a72cd055822ffa208bdf071ac2405406b8fdc0839bf0e498273df7836a8814e86b274a29547ec1720d2716c0abef50430e69927b54c541fc18a24e3071eb43ba8434d4115a87cd891fbd6d423f5b3c31", 0x66}, {&(0x7f00000016c0)="85551a4822c4439bff3f781860893d873609d1b38d971645e6867aa72cb7bd36782063da799f682937f49c993131858f18fe643c64458c4473cfdb03fa877873b2d39202910fad086bec1eda9ed716", 0x4f}, {&(0x7f0000001740)="df6d68c92d58fd4760ee5301b5a4af6898975a0d695a34de3c2e3b4c0bba6aea6ad8b4fac5c2e37e2a4d10d2cb78a54e9cf2d9a5e8289e948db77b6e26fd5d6ae3694b7c3ecb8a356a3d172c49a95204b79c05f7d139360853fca8d1533727af300aa88996", 0x65}, {&(0x7f00000017c0)="7a10bf871b4ee541a2b2d148e2af2e9c5e4d41f5843bdf9adf453d35338db1ebaff656726aad4546618eb93e3cff05f09ae4149ab967283a81a6f3a5766aebb79272a0e35690d3c1e6591f62d9ba4d5877284fdd9044c8954fa1dd06f6c3e8", 0x5f}, {&(0x7f0000001840)="20ca58fc79af4ea03d5d3458461c0eaa7f62a3f8b3552ea7c6132c8e69385faef0cf1d229ff4ac484d62ed871825", 0x2e}, {&(0x7f0000001880)="4da7bb752ebff2463ba53c4680d84c66fe9909cccde9cbbe0e2246a66ac370ac178289433e0bce5b5d2b20754760c86cf027dea69bced99a566f5518840c73a327cbec330db16a0661dcc26ff18077eba863d9dc3804e88f8023f87060f0f3ba91946683023b2d65e7b308f6beeb424f408a396fec90449301b17208", 0x7c}, {&(0x7f0000001900)="933fcdb35735bb5ec69299d88f326bb8abac444e95abafc8b8865138adf8d38c85657742058a7397cd205ea7915ec2bcf89b14b63a5b690129d6be3b1256c00a19cdb4ab1303bb07e5ff69f47d8dad7ee14d9e14e0b979e7c81afe792e71e05e9947148150f871c1ae6574f404356d51b8e9f51f4c78962ac068615cff557c1a3225a32f7c26c236680bd030c7736138adc49d2c119076e2b78ad6a57bbe9938d5a385cf139e807762d45409cc2111f027694efaaaa718856dc38662", 0xbc}, {&(0x7f00000019c0)="92f9f17f40dd0ad7331e269ae225f48806fb1c9b7dbfc60f4379b46948ae8dcc1f4f02f9ba3fbca56db2bdd82140d14f43f5703643cf1c99953ace41e8e732ed268e5bfbf524dac5443f59c395f13274488f5fb77302f3279403aebb386d1ceae626d2a9a1b97815fb44f652db6d1735ebb9cf0eca47bc26798f9f5995b0e55b6b8e4cd23c666a66128bbfe5019b8d678091351c99edb5b68d50c7af9890dbdbee7465887eafc0ffb61dfba8af65de6736d104f55ac8b2862bffea6579e59e1a81ec72501d59cd1e89d036d24d1492c71dfe89b577f06380e29841c51d883e9c", 0xe0}], 0xa) 28.512331875s ago: executing program 43 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) (async) r6 = getpgid(0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xe, &(0x7f0000000000)=0x9cc0, 0x4) (async) r8 = fsmount(0xffffffffffffffff, 0x1, 0x73) sendmsg$IPCTNL_MSG_EXP_GET(r8, 0x0, 0x4080) (async) fcntl$lock(r8, 0x5, &(0x7f0000000080)={0x2, 0x2, 0x200000000004, 0x682, r6}) (async) clock_settime(0x17, &(0x7f0000000040)) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f00000005c0)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000380)='net/sctp\x00') writev(r10, &(0x7f0000001ac0)=[{&(0x7f0000000600)="3a4fee8a2a28c68fb1cd3c4e9afe25b1b1d7aa4c4d383b623dc0091cff79cb81203dd7dc85e557c5ed5d55f249e1e3cd34726d9db4f678216df5104b1ed5c13857a2b196b0ca15149be63576815b21b660c6b2ac49767dee2f47667516487a54c451b5860ed55bb7da830c843558434b39503538cce8cb02485e9d46c20d00595712298dd4b397028c8d1591826fa9d438e0ab964170fa7bfae04812ee2a609eda5a22416e34536474bc18a1b0039a404c6eb31fab972d679ce20d9186df47059977bbef87425a2641a86f348234f1c94835c87b3de4d956c545db82db6b0bbbcc20b6803e5b4085ea7126df09eb90f44c116dd492876ceacfcdae40f0ea6630134e15f7aeaed047f73343ee347db40985372c1f371a85ce9dff1ecb5154838fe03abf916c83874d1bf91b18ab7c58283a0a853d7420bab7f55905d8a1c651fa3d6513ab9a986dec8d36c535f5bc979c18970221b233d82cefc5b9ad3ec5addb1374341cce7ae0f0d90fc84fd88a35dada122000b26f674dff87445c8609b734e16897ee121ca0aeeb320df9d9c63c425135cd3a161d1b1c102b8d703aabac0c37456306ec59435038c1edce04b3c68f4169e4a29a91138f18fd1eaf2b55200d3ff75f8fe042e6cd0503c7cb87901433bd9f99e7340e023f8810768972cfdc32575b5a0d198a56fe8eee73eddcac3e1db992aa134f173c0e6776ea815984923df9e3590dd67aa4cfda501fc5c1ec41a12f26327c1ab2dc292fbeb1be08f686e601907813c74d880b8e75ed82c9144165316f5173927701a63e86601b344dc2e99fc2d604a3f9a934d384ddc4014e3be30834de9fdb76d1ae0baab89514fadcd2ec07222c4978c289fa2b1454ab64765fb2bec082550add1eb1e32cc8c8a40c5618b1efa6e6093455aa547a8e3d6ad7eba64e054be58b3e0ea3fc7e2bce9afe93e403cb7d052b31b70245a10ecc5b610dd3e9f1ac7c6a4873989f3703177f078ae1f6f0f378f648ed13258253086ea15a5e74302b77ac442f2ca34a89d888ea6b46e62c6d9bcb118ecd9ea1f8f81ca3141203f29b7e140651dfd60161173d4a1878dbd31848a27bb0ca80189b84f4c5dfabac0304a503e240b1e7e1a6a408f1da18eb15b9bf74d81ed19ef333f3fac0cf1cca0cb6f7a0a34e5169f7c8edd4cf0d86e7ef8fcfd2fceb1765656906c4410ffa0d96698b0fe4790281c5ceae677e4e321e2b8c4eacbdc8e24e98ec12c904610918265a47cf46608918f765a82ff3579a724f2c05dd58f818ccfbd84421cc46619eef63c6a1c12aaeb02d1b548f641451baf99fe45378cb44693173e86637172be6247db1dd57207dbcf3e0d47a3675810706c0275d5b228360ee108e4c5ae19c01f7a362df4347755782085dbfa282c2f5634248185b3061399c234f14ca3ba01321428bb7e821b95a0edba3a528da59760adff5c2653e13cca40614ddcd8c825c7e6da95b3294ade83043f1a50204d70b3be4478bd0e74378b26936b83cae7ab2d24ac8c1b3612e48286602cf2c182b76d725414e9f313dc457d4752cf289a030fb3ea70be1646202e6bfee99023af2531b6de32fdfbec9224786baf008ae75649b463f2ad5ed87930da1e399b006f1822beea7d0dbd4d5769bc07ae99524c6ebe6e2a40684967e78e73025060a6c0937a2925d70d694af8b742e6a90736d483059d516b5018376fcfe466ec438231f4d136ef67366524c91109e444bdae93341895cca047c0c05af28b7b49aa373938ba7dead9734ee9befe5c07234ab49d1c84049ce8626fe2cdf646bbe4ea8af3f6c91266dbc6eeb665b69db3705b3fbc44b2287493d35fdde4bd0bb851c68ae837350f663f24845ba2f3c38b192ff60790837b2918cbafc8b8d028bf221248295a6206d16d95080ffd0402182a6e43e1c1d12563a479f7e073e266e12c0456a64734943e122bcabe57a9e6bb4b379aee6f657c070c57090a5abc8eb8faccb21998b1e5aba1748a78b7bc6009ba368ccd0fe38238e4b1f2c3ecc3f89954af71b0cb57bb5b5a0f29bfbe4e2eef5661604799fa02da241e9d81674592395e8dfa58b74bca782d47ee3d10ee9110f7225413c46a85b3e3dd3f06b44f7b9ce38a2745c836e8e3922fc95d901876dd981e0041182ef6e7f6ec2e29ec90b3a4fd749fd03cb67249c46526a675e534dd1f566d39663ea4203c5ddeca7593c3d556e7a3403cb0b4ae5a45fb85dcd5b5f08e0fd05b07b16b2d6a739bd9d3c3899f85415c255dd4b7fcaecbc1c3628b151a0bc5dc496b6e9ab24fefa0adb0eace3c7ab803eb426fd07189f86b24bac453b4cdf4cc7c7e3e1f29e13b76a9315be8f10b6b751ba22da9e4b40adb4095715ffa4cb5a45d36cd5e71c6d7877efb4e1c9d0c7bb9342a72379712e7c5cf195a1b5b587d3974b07f422c19605549ee1a3d088f8a10857940d845d81ffb2fb5dfa14139e96540a26bafbd257c10677deafccaabf7817c36834502b1912a966060471a3635c685f42651295bdb87b0ec131ad74e3edea3cb4154cde5502716e12f775cac244922d5ca17eda9ec9c86666a4c11109198521a9d2e0b66a182a7db8f880882f58ad768c27d64e61b1656886840ff9ac5391915859c34a0b95d5ad83fcabcda49de78a96261905f1ebe8fc9b936fa0486c9c3128dd576893ea616544e9e3e97aa7458ad7ae46454e9c64fd1c68cb57b58ed03b17da45e5e759719ad04e702110173059f1d46b2a063d38410be30721c84defecf4daecc06dee78472fd5636fb505d7b154fe5dc010ac849b1704b375faf2380b954bd5457d41eacf3c4c588401a788feaf547d49ce12a45ec44989c0dfbf30df298175131bfe4d813ddf4a6f138b4915fc8bc29b4b465076a68f99bb9a7f691edbf71ab38759b35ff0af27148ae8678adde2b88ec72e18e5c7358d5ea968d006ea04235258829bd64f77b334374b55cbca05101d8a5a836e7571c7b92aa3b430e51b60f84bf78a66f0f35e90dab0651380c7d9310cee339eb8bd4c8217a2a0b2f2bbc25f585b52474fe86465061c02001b6be01c467f91bba1823e5163afaa10962193eba506fa31587b71ab55ba3f4b51cab1ec1ea4f6aed36947c537d26c0da4709f57e7237460f25d83c47e8de4a6d59fffebbb77ca87f3139d0ff0f3bafeae5c17fd47c3f830e1535192c2c2b91bed87e9e9fce8d5ff8ecb5d0f3b5261aad84ea0bef7821cfc73c3ed551a24939cb5109ee38c92ee016207b0112ba6cef13975fcf118a837e6175b45218f32cb7012fdb9b0b9dcf89503c13720b59240fb97613f398d7a2a76e0dc492bf5fe72f6c1e6d77b145ff97a861b2273ad4e0fbd001a312a2f33c18973e6142a159303f696f8b11eb1c7054b989d67417dc4ed1929cda52f347e5c46962e880fc7a9d0fd547195612820c2b9eb10fa6e7e8c3dacd2fb214b3470fd49b3220a6eaa112537376c70f59c0a6f80b668751dffe64b97a51515bc82f4517aaa7e37eb621e5d0334bd769042d01f0ff362fdcc301abe0c832c0892d51cdd0e70d7fc17b6357e92acf5a16599abc11499acaa062192fdd1f5336dd0426e83a54efeed6d266cac527f4479a7fc2fc327df7be4b5a30a118776a1d00bd104da1ed7c6776517025822ef97360d9d9d444febcad13f13c73e60bbe84337f2a3ac34e25b4539c73e91ef5014ab0d4c32d9eebf6a9c29eb25de9b7837faf27a61e03759d18b35fff6640b49c3b67c7180a968190da2afaa7fb1deeeb0ac39776526f5fbbfb1f12ae44ecafbe15b6d5e4d63247c238c317797b0bb0277c3eee3c4f712319f4431bad45807b1e219aca6b7df72bb7bdb35115e410b539865bcec27705f7314f84fcd65facc5e7f4722abb6930a37f7014e8e03d150bef71dceec95176ef758c704e8321bd97764494e1266d77f90af295fc6604614b43fe1476b94dd1a900a5700c160de4f9ca6208c75391c560f95c32540937a50c31f9c60ca7090b684633f634387b0e627768c8b829c8bce3175d56859d201077f06947ed096ce25a23d5d9301cde22ce8a5d1401fc7a33a00406a818c28e86a3ef1d2a28f682e4db2acbfb74e7fc293ac171a86856863423e0ae2b6dccee79d8145b4cf24a867c1c35e2e32e275f0c4dca76165166ffb29b732df66846ae0e52c3b1ae9e888c34401c64f8130ea8e72a1daf3d74ddc3e7d2e5313f17fc9915822e20d48df67415259cfa6f1c91455d70304b71683f17209fcdb567614bb7e239a04ae7ca008fc2938c006c9f85e0125c1545846eeaf4f027ef2c7459125deedd499af7ebf0fb08ba19b1ed370ec987e8025347e51da149482052757e60cf88364b163a280c6b3c7d5468126439e96ae0e39b0df30e97f8418822f707e019433122f0861a85faafca52e8c8b9ed764adfc206b2e2992aa67d14d447e25fe9fd85f557613aea26df139eead91ee387b68aeb798ced253900ec8976263c15f0639347d22ec8b60863b09b670fab935f1d634b853516c68f8528c949d41f920d5abac1fde5309c2a4dd85fd6ba7a5155a31f9d749671bc27782af9def3ba70e8606a99ccc6d392d14984eb98912e7e4d5da1bd85f7ec889cf5a5ffc7e50707af34488b03e2e7caae76dc8adcd805b62857a04f6720dc9042d784dc5f27e60a819049d85423c0ae6c180a2c3238119e92d90d0ed4555359e826b067dd12f32b2f7eb16e6e120a5c23988a97b55f5bce0d95703acd40f5913d1ebbed7950f2a15ee54a62c089c74475777dce08717a299da0c975c7d1bc87fdf3bacce8e53ece4ec18edde67d7c207ac3b71294d05de044d3b7f80e1eb4dcbf97c87fd13ee2469893e874b17623e620a157108faa5ea72452eafc109a588172eb8b0de1ec9ccba3c70ddc93624e73a8d9b90e9289f0fdb4dbe517e5ffe1bacfda51df07ff8cf8d809822cc7ad9d0490f292f6e543dba6aa1321ec32252d59c7053a2317066e0ce815620cfa88327304b93b98e2e60c5603fcfecea15549e77d39fa0a81451ea3b48b2b51fdf5b958c482e3f9c472268ee1abbde905c90194863efd4b5b4a34bab415072dd3625bd77f1dc3bac6f9a44878afbf0cefc651218cb3664fff169b03b03745bb1287417553d0aabc4a08d6e2b3ab0a8fe72f74cc44ad669a425183d8186afa647da3d2b780a80d6cba1ff3f84626c3d225cb9b2d79b2e4099803412d788b2ede32362b20092cec30824578dba179878372a474bbee72397a07879a77fa6585db823b1053214d3e63d6abca13168399049f860b692a25ee9d4684e9eaeb4ac13c7920ea1899e3693cb816d304af62f4fba9b4d2c6057d8c092d2169cc0a3d6af40afadb25cd87909122b299bd1a5b60f732114ec1f83d72856cf27819b0ceceecb3e1e174355599c0c4fb967446d428aff86fb1d0c0ff7cb2ed8ee30eff5c357aafd96be2de0b2a85ec89c8721865d28d15bffaf8cd251d8b9fcdf1537cc13ab2ffd7910f98694e331804ccc36b5076acebef17944ce8acf9d4200368730d835eb3b7cdd0d44ec998c253f016a11579deb9c10dcade411fea8fbd3b1367079521f43027cec6044a9968e3d14ec2e8b5fc1f27c7583eb51a559184e6c7c0fbec480d49f8fa335c4031eb71b12828b3eb4dbd3eb31e46ec1a2749056a08d495617f820bb6762ce148837da4652ecea332df5b3dfda9a052534a6baa5d6ba897d7a671cdab03675c8e1bb37bd88e2ef5397b9e538c4e014885827dcf8e4d74182804598094f7abb13c050f6df03ce5a5e6a4ec959cb14e872491c041f47e8dd", 0x1000}, {&(0x7f0000001600)="d857442d", 0x4}, {&(0x7f0000001b80)="206b9259d221138779fdd3322f8083e319c4a86b0878a72cd055822ffa208bdf071ac2405406b8fdc0839bf0e498273df7836a8814e86b274a29547ec1720d2716c0abef50430e69927b54c541fc18a24e3071eb43ba8434d4115a87cd891fbd6d423f5b3c31", 0x66}, {&(0x7f00000016c0)="85551a4822c4439bff3f781860893d873609d1b38d971645e6867aa72cb7bd36782063da799f682937f49c993131858f18fe643c64458c4473cfdb03fa877873b2d39202910fad086bec1eda9ed716", 0x4f}, {&(0x7f0000001740)="df6d68c92d58fd4760ee5301b5a4af6898975a0d695a34de3c2e3b4c0bba6aea6ad8b4fac5c2e37e2a4d10d2cb78a54e9cf2d9a5e8289e948db77b6e26fd5d6ae3694b7c3ecb8a356a3d172c49a95204b79c05f7d139360853fca8d1533727af300aa88996", 0x65}, {&(0x7f00000017c0)="7a10bf871b4ee541a2b2d148e2af2e9c5e4d41f5843bdf9adf453d35338db1ebaff656726aad4546618eb93e3cff05f09ae4149ab967283a81a6f3a5766aebb79272a0e35690d3c1e6591f62d9ba4d5877284fdd9044c8954fa1dd06f6c3e8", 0x5f}, {&(0x7f0000001840)="20ca58fc79af4ea03d5d3458461c0eaa7f62a3f8b3552ea7c6132c8e69385faef0cf1d229ff4ac484d62ed871825", 0x2e}, {&(0x7f0000001880)="4da7bb752ebff2463ba53c4680d84c66fe9909cccde9cbbe0e2246a66ac370ac178289433e0bce5b5d2b20754760c86cf027dea69bced99a566f5518840c73a327cbec330db16a0661dcc26ff18077eba863d9dc3804e88f8023f87060f0f3ba91946683023b2d65e7b308f6beeb424f408a396fec90449301b17208", 0x7c}, {&(0x7f0000001900)="933fcdb35735bb5ec69299d88f326bb8abac444e95abafc8b8865138adf8d38c85657742058a7397cd205ea7915ec2bcf89b14b63a5b690129d6be3b1256c00a19cdb4ab1303bb07e5ff69f47d8dad7ee14d9e14e0b979e7c81afe792e71e05e9947148150f871c1ae6574f404356d51b8e9f51f4c78962ac068615cff557c1a3225a32f7c26c236680bd030c7736138adc49d2c119076e2b78ad6a57bbe9938d5a385cf139e807762d45409cc2111f027694efaaaa718856dc38662", 0xbc}, {&(0x7f00000019c0)="92f9f17f40dd0ad7331e269ae225f48806fb1c9b7dbfc60f4379b46948ae8dcc1f4f02f9ba3fbca56db2bdd82140d14f43f5703643cf1c99953ace41e8e732ed268e5bfbf524dac5443f59c395f13274488f5fb77302f3279403aebb386d1ceae626d2a9a1b97815fb44f652db6d1735ebb9cf0eca47bc26798f9f5995b0e55b6b8e4cd23c666a66128bbfe5019b8d678091351c99edb5b68d50c7af9890dbdbee7465887eafc0ffb61dfba8af65de6736d104f55ac8b2862bffea6579e59e1a81ec72501d59cd1e89d036d24d1492c71dfe89b577f06380e29841c51d883e9c", 0xe0}], 0xa) 26.015484334s ago: executing program 0 (id=216): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x800) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f00000003c0)=""/149, 0x95}], 0x5, &(0x7f0000000500)=""/202, 0xca}, 0x1}, {{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/106, 0x6a}, {&(0x7f0000001780)=""/23, 0x17}, {&(0x7f00000017c0)=""/170, 0xaa}, {&(0x7f0000001880)=""/44, 0x2c}, {&(0x7f00000018c0)=""/109, 0x6d}], 0x7, &(0x7f00000019c0)=""/186, 0xba}, 0x8}], 0x2, 0x40002100, 0x0) fsetxattr(r0, &(0x7f0000001b00)=@random={'security.', '--{-[.*%+,&\x00'}, &(0x7f0000001b40)='-#R(\x02\x00', 0x6, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001b80), 0x121080, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f0000001c00)) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000001d80)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000001f00)=0xe8) r7 = getgid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001f40)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0, 0x0}, &(0x7f0000001fc0)=0xc) fcntl$getownex(r2, 0x10, &(0x7f0000002000)={0x0, 0x0}) getresgid(&(0x7f0000002040)=0x0, &(0x7f0000002080), &(0x7f00000020c0)) sendmsg$netlink(r3, &(0x7f0000002180)={&(0x7f0000001c40)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc, &(0x7f0000001d40)=[{&(0x7f0000001c80)={0x90, 0x24, 0x400, 0x70bd27, 0x25dfdbff, "", [@typed={0xc, 0x9d, 0x0, 0x0, @u64=0x10001}, @generic="2a66290e17799380be57a00adb05b368dd39b201a96ad772a60603db837287504d32194b6fe626136a1d1c0002440919836af8a12ea9947a0b25bfeeca4baadc07277954d164bd825ff0fd4f03a8d382f45a6c6af6eee02f0d7b88b824242a8b9b261e792c70138e64734eacad5a25ee6ab4c4bb"]}, 0x90}], 0x1, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}], 0x60, 0x800}, 0x8000) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000021c0)) ioctl$MEMWRITEOOB64(r3, 0xc0184d15, &(0x7f0000002240)={0x9, 0x0, 0x1, &(0x7f0000002200)="8b"}) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002280), 0x210401, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000022c0), 0x4) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000002300)={0x81, 0x0, 0x2}) r13 = syz_genetlink_get_family_id$fou(&(0x7f00000023c0), r12) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002400)={'team0\x00', 0x0}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x4c, r13, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_ifreq(r3, 0x8919, &(0x7f0000002540)={'ip6tnl0\x00', @ifru_ivalue=0x5}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000002580)={0x7, 0x0, [{0x4, 0x2, 0x1, 0x0, @sint={0x7fffffff}}, {0x7, 0x5, 0x0, 0x0, @irqchip={0xffffffff, 0x35}}, {0x2, 0x4, 0x1, 0x0, @sint={0x1ff, 0x2}}, {0x7cd, 0x4, 0x1, 0x0, @irqchip={0x4, 0x5}}, {0xb, 0xa7bc3eb3dfee679a, 0x1, 0x0, @adapter={0x4010, 0x9, 0x3, 0x1, 0x23}}, {0x5, 0x1, 0x1, 0x0, @adapter={0x2, 0x3, 0x1000, 0xaa2, 0xb}}, {0x1b74, 0x0, 0x1, 0x0, @msi={0x6, 0x8, 0x9, 0x5}}]}) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) mount$bind(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)='./file0\x00', &(0x7f0000002780), 0x324090, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002840)={{r12, 0xffffffffffffffff}, &(0x7f00000027c0), &(0x7f0000002800)=r3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d00)={r3, 0xe0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000002b00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002b40), &(0x7f0000002b80), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000002bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x4, 0xc, &(0x7f0000002880)=@raw=[@jmp={0x5, 0x0, 0x0, 0x7, 0x5, 0x20, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}, @generic={0xff, 0xc, 0x1, 0x3, 0xffff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000002900)='syzkaller\x00', 0x9, 0x47, &(0x7f0000002940)=""/71, 0x0, 0x10, '\x00', r5, @fallback=0x19, r3, 0x8, &(0x7f00000029c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002a00)={0x0, 0x10, 0x6b}, 0x10, r16, r3, 0x0, &(0x7f0000002d40)=[r12, r3], 0x0, 0x10, 0x5}, 0x94) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 25.919785032s ago: executing program 0 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = socket(0x11, 0x2, 0xfffffffc) setsockopt(r1, 0x107, 0x1000, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x501900, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private1, 0x10000}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000000003, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000600)={0x1, @pix={0x6, 0x87ff, 0x43564548, 0x6, 0x4000000b, 0x1ff, 0x7, 0x7, 0x1, 0x3, 0x1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r3, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r7, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) close_range(r6, 0xffffffffffffffff, 0x0) 25.825844551s ago: executing program 0 (id=242): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\b\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) process_vm_readv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/263, 0xff}], 0x1, &(0x7f0000000040)=[{&(0x7f0000002600)=""/4112, 0xd37}], 0x1, 0x0) 24.896213725s ago: executing program 0 (id=243): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 24.772849509s ago: executing program 0 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x3, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0x601, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x5}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @private=0xa010101}]}}]}, 0x4c}}, 0x0) 24.553118346s ago: executing program 4 (id=226): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x180000000) 24.488758664s ago: executing program 4 (id=245): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c0002"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000050)={@remote, 0x81, 0x2}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 24.420226025s ago: executing program 4 (id=246): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) r1 = fanotify_init(0x4, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x641, 0x1028, r2, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x5500070f) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x1010, r3, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x1010, r3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 24.411417244s ago: executing program 0 (id=247): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x42a2c0, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000280)={0xfc000000, &(0x7f0000000240)=[{}, {}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc4000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000ffffffff00000000000000000000000000000000000000000a00"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c"], 0x178}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4e4}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000700)=0x1c) sendto$inet6(r5, &(0x7f0000000740)="4892f078fa7a456167c00ac3d8f8cf831a33cafed0a69ee71cb292c7c5e3d1f0d405456b81e525c0417819feed05ad7f27797658c792b4dacff032f6d1eb7731601ebc7a3034343ac0d87f594fd5f0268a819749d3c3365aa4de9d5a45ef3d9219a7784379121624ca1836e76f51e6669a50c2d238023568afac6378d23b20", 0x7f, 0x20000005, &(0x7f00000007c0)={0xa, 0x4e22, 0xeb, @mcast1, 0x3}, 0x1c) add_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f0000000180)="6e0bd8b805", 0x5, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002980)={0x2020}, 0x2020) r7 = syz_pidfd_open(r2, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)=""/200, 0xc8) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x3e000, 0x1000, 0x0, 0x6}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 24.181497761s ago: executing program 44 (id=247): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x42a2c0, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000280)={0xfc000000, &(0x7f0000000240)=[{}, {}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc4000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000ffffffff00000000000000000000000000000000000000000a00"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c"], 0x178}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4e4}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000700)=0x1c) sendto$inet6(r5, &(0x7f0000000740)="4892f078fa7a456167c00ac3d8f8cf831a33cafed0a69ee71cb292c7c5e3d1f0d405456b81e525c0417819feed05ad7f27797658c792b4dacff032f6d1eb7731601ebc7a3034343ac0d87f594fd5f0268a819749d3c3365aa4de9d5a45ef3d9219a7784379121624ca1836e76f51e6669a50c2d238023568afac6378d23b20", 0x7f, 0x20000005, &(0x7f00000007c0)={0xa, 0x4e22, 0xeb, @mcast1, 0x3}, 0x1c) add_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f0000000180)="6e0bd8b805", 0x5, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002980)={0x2020}, 0x2020) r7 = syz_pidfd_open(r2, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)=""/200, 0xc8) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x3e000, 0x1000, 0x0, 0x6}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 24.130210052s ago: executing program 4 (id=249): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 23.920576586s ago: executing program 4 (id=250): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\b\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) process_vm_readv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/263, 0xff}], 0x1, &(0x7f0000000040)=[{&(0x7f0000002600)=""/4112, 0xd37}], 0x1, 0x0) 23.349969243s ago: executing program 4 (id=251): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x180000000) 23.260856352s ago: executing program 45 (id=251): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x180000000) 22.216016044s ago: executing program 2 (id=240): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x71}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x40, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048014}, 0x880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x20000000) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x99, 0x48, &(0x7f0000000380)="115660eaf03c0793ceddb41806612181414ce3dea34fd585d82ae6ae780cc412ee524b4188a2ea7731ecc5d2b5777128e7691d057ad58970c5648b4b8271d08b5a6c6fe79d02e7345f549b7941e6e1af6a20ed19e60d53cc8606e3f4bc3d989ebbd76575ea474858377bd43e3e39445741ffdb74f7b6eeecd16274d71919f2bce2eab3de75ea056dc95fe2d32ce1500315a3650200a5b4bb80", &(0x7f0000000440)=""/72, 0x200, 0x0, 0xfb, 0xf7, &(0x7f00000004c0)="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", &(0x7f00000005c0)="c4851e8e793852b103c4e110cd3e67a1e2d71650eed33c8340ab235f3370cafda5d24dc805fc4bb83f94dc3d2d4b6b4400fe4f500aea5e955af738d47bd07dfc0ca0092f7d10fb1da99c6a2857a51370e24cf05e64ff4ab5856fc6a619303bfb8a896c9cfed91aba8d5bbf012e68c6e718671ebbc970739254d8b09a6d21e9d5cbaf9ba5d46bc2f498f75ffdede674f9fdec534887a1b36aca6ba1361a310ec3a42a54648cffc16258c9fa24d0e2e4e8062336cbfd5aa05fab5d7d63bd03d79f95865cd8a7cd9854068c0ecd4259d89579d557f40a1f2d73bc46a1a741ad351ceb6728149ffa5427a379a26091ca564a44a13fd6a6af51", 0x0, 0x0, 0xffff8001}, 0x50) bind(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010100}, 0x3, 0x1, 0x0, 0x3}}, 0x80) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), 0xffffffffffffffff) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x82}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008044}, 0x40060c0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000a80)={0x14}, 0x14) ioctl$XFS_IOC_GET_RESBLKS(r6, 0x80105873, &(0x7f0000000ac0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'vlan0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000c40)={0x0, "66e7125cb0d9a0a5a4e58ed83684075c"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001c40)={r7, 0xb, 0xf, 0x1}) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x3c, r5, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004885}, 0x800) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002140), 0x881, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f00000021c0)={0x1, &(0x7f0000002180)=[{0x602, 0x8, 0x5, 0xe8}]}) r9 = socket$rds(0x15, 0x5, 0x0) connect$rds(r9, &(0x7f0000002200)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000002280)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0xc010) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000023c0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x44, r11, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 21.900237925s ago: executing program 2 (id=253): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) (async) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x2000) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x2000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21.379828611s ago: executing program 2 (id=255): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 21.267850329s ago: executing program 2 (id=256): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\b\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) process_vm_readv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/263, 0xff}], 0x1, &(0x7f0000000040)=[{&(0x7f0000002600)=""/4112, 0xd37}], 0x1, 0x0) 21.267649962s ago: executing program 5 (id=257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)=0x4004, 0x4) r2 = open(&(0x7f0000000040)='./file0\x00', 0xa000, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='.\x00', 0x0, r2) 21.129461282s ago: executing program 5 (id=258): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x18a, 0x4}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/73, 0x49}], 0x1) (async) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) (async) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0) r8 = epoll_create1(0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000200)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r6, r7, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@release], 0x0, 0x0, 0x0}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002d80)={0xe, {"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", 0x1000}}, 0x1006) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, r12, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000240), 0x0, 0xec6d, 0x0, 0x1}}, 0x40) (async) accept4(0xffffffffffffffff, &(0x7f0000000240)=@ieee802154, &(0x7f00000002c0)=0x80, 0x80800) 21.060355582s ago: executing program 5 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={0x0, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd69000000002829"], 0x62) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r4, 0x20, &(0x7f0000000540)={&(0x7f0000000340)=""/239, 0xef, 0x0, &(0x7f0000000440)=""/236, 0xec}}, 0x10) r11 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000000)=ANY=[@ANYRESOCT=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r9, @ANYRES32=r12, @ANYBLOB='.\x00\x00'], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r8, {0xd, 0x9}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 20.809477002s ago: executing program 2 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c6173740000000004000280400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x7, 0x7, 0x6, 0x8}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/ports/1\x00', 0x200) 20.730696657s ago: executing program 46 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c6173740000000004000280400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x7, 0x7, 0x6, 0x8}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/ports/1\x00', 0x200) 20.680588602s ago: executing program 5 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 20.590190415s ago: executing program 5 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) r5 = socket$packet(0x11, 0x3, 0x300) close_range(r3, r2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd706b00dbdf255c000000080003", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe, 0xfffffffd}]}}]}, 0x38}}, 0x20000800) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{&(0x7f0000000700)=@ieee802154={0x24, @short={0x2, 0xffff, 0xffff}}, 0x80, &(0x7f0000004c40)=[{&(0x7f00000000c0)='C', 0x1}], 0x1}}], 0x1, 0x34000081) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x4c002, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r11, &(0x7f0000000000)='3', 0x4e) close(0x3) 20.010992886s ago: executing program 5 (id=264): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80, 0x4}, 'port1\x00', 0xe3, 0xb1837, 0xf35, 0xd, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x3b}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 19.910459873s ago: executing program 47 (id=264): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80, 0x4}, 'port1\x00', 0xe3, 0xb1837, 0xf35, 0xd, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x3b}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.789548679s ago: executing program 8 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.force_empty\x00', 0x30002, 0x184) write(r1, &(0x7f0000000000)='\na', 0x2) setns(0xc9, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 7.982351436s ago: executing program 8 (id=320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc02000000000000000000000000000100000000000000000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000052000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x158}}, 0x0) 7.869136892s ago: executing program 8 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 7.769850871s ago: executing program 8 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) r3 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000003c0)) socket$netlink(0x10, 0x3, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x41}, 0x94) socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000780)="76cca308b2feb0fc845bef98e410c038002b7501374e16f18af81cedc4b00e6f073c37e376e94ed1b0b4f096df22ad2aedb16564dc9c9ab4e77a5522680ffcdca6ebdeaa80d3eaf61e7186263ead5c88cbe596dd0d7eebac78238376b9bd97d067d2f23155b5770e770154bb6f4d521ed751373d3d9122bb834597aef75b58c3c55d5556c51d0e83fae48b94a26c49cf8eeed581ede87991627167a120d0d1180feab8bc3aeb97fed288015b85e7d7282231bd5f872b8bb6d433cf6e2825af2fab11899f8d7adb4c3621bd7646e842c0896bd22df79950d684b6ea0d", 0xdc, 0xc5, &(0x7f00000008c0)={0x11, 0x19, r7, 0x1, 0x9, 0x6, @multicast}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f0000000640)="f09858c930331d5905252bb55122373da5d42d1a724a877d844dce1d0b9b157cd8e60a6bf4ad186e825982c407d4ad12e862f3a508eed1e19e0df5a2293dd21d47e250efa01ef41650ef8118a6b72b539c5bafd208bebbeba7c975a48b4871cbc0bf399b5d9e45f1511e2d60132dc842fa9d14b98fbd18254c0979bc5f3fa2158deae9c6c2b72538e20eb33524d37a39a0b40d6632883aa2f6e21a19154ffbeb8ae5280fdfce6166f10194b146ed96eb56e010618fe4adbdf65e6387458e62b75fe9ea4f102fd9c2f1d46712cf34e115eaab36270799bea3175d5b", 0xdb) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 7.356545906s ago: executing program 8 (id=328): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022d000100000000090400000203000000092100000001221800090581030000000000090502030800000000b3657e2cb1d88687aab773530013ed4efc39900ee28dd066"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022190040000501150025bf0904a2473209c0c00143ffa333509e1a536ae9ba71168dff9fcb9b9af912e47d00"/55], 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRES16=r0, @ANYRES32=r3], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4004801) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/memory/memory2/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='offline', 0x7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r6) r8 = syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$ARCH_SET_GS(0x1e, r8, 0x0, 0x1001) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100b1bd7000fbdbdf252500400005002b005cd02376a7c294c3", @ANYRES32=r9, @ANYBLOB="05002a0003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x20000014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYBLOB="000127bd70000900000017000000040030800c000600020000000200000008000300", @ANYRES32=r10, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4046000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 5.750732037s ago: executing program 8 (id=346): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x400402, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002a40)={0x50, 0x0, r2, {0x7, 0x2d, 0xfffffffc, 0x8000000, 0x40, 0x42, 0xa6d, 0xfffffffc, 0x0, 0x0, 0x10}}, 0x50) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2010, 0xcd02e5b54e96c93}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd}, 0x94) 2.719357124s ago: executing program 6 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20201, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="e160"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x28}}, 0x0) (async) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000b40)) (async, rerun: 64) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xfefc, 0x0, &(0x7f00000003c0)="04dde1152379be503e95606624f06a37", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x280, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x254, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x91d4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4eab293f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xdf}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9c5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff071}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a92}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x84c}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x74, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3eb95169}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x252a69f4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x455bdd67}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}]}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3fc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100025bd7000fbdbdf251c0000000800030097011738ec93e6968f18ae7d4d83d061312db9d854a344ff1ec78df25fb31fb0887b9b722591", @ANYRES32, @ANYBLOB="0c0099000700000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x1) (rerun: 64) 2.494002611s ago: executing program 7 (id=369): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x150}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x150}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) (async) listen(r2, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) (async) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 2.427507165s ago: executing program 6 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 2.278461104s ago: executing program 1 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x8000, 0x31) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") (async) ioctl(r0, 0xc138fd0a, &(0x7f0000000000)) 2.198702087s ago: executing program 6 (id=373): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="8f4c1e94dcc0"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x1c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x400c0) mount(&(0x7f0000000080)=@filename='127.0.0.1:1:/\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)='mount_timeout=1,osd_idle_ttl=1,osd_request_timeout=1\x00') socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="8f4c1e94dcc0"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x1c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x400c0) (async) mount(&(0x7f0000000080)=@filename='127.0.0.1:1:/\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)='mount_timeout=1,osd_idle_ttl=1,osd_request_timeout=1\x00') (async) 2.198572434s ago: executing program 1 (id=374): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) 2.117363787s ago: executing program 7 (id=375): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x80, 0x0, @generic}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) close(r1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0xfffff801}, 0x4) ioctl$SNDCTL_TMR_START(r1, 0x5402) 2.016462226s ago: executing program 1 (id=376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) r7 = socket$inet(0x2, 0x801, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r8 = socket$inet6(0xa, 0x4, 0x9) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000040)=0x3, 0x4) sendto$inet(r7, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r7, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.015764306s ago: executing program 7 (id=377): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = syz_open_dev$ublk_chdev(&(0x7f00000002c0), r4, 0xa040) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x818f, 0x400, 0x2100, 0x10000002, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x80, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x2a, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x262000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x4040) 1.658940243s ago: executing program 1 (id=378): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x0, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x800, 0x0, 0x3, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x5c}}}, &(0x7f0000000300)) 1.569892298s ago: executing program 1 (id=379): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000)='\x00', &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000001500)=ANY=[@ANYBLOB="120100030000002030144b4740000102030109021f00010104900509040000010103930409050500000000094004250131", @ANYRESDEC=r6, @ANYRES8=r0, @ANYRES32=r6], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x9, [{0xad, &(0x7f0000001580)=@string={0xad, 0x3, "57216367e1ba2d048f9223718a15b9bc8b13f1d7aacc3c252222172e47fdcf4cfcb78f1b2925bb78d556120b33016eb3799f630b6507116ca2d0fd8714b8129d37921a3e0c45ec517020a00191009ff5b3e848f658d35bcc44734a4ce2c5aac9a9cacef86bfd55bb650c522cb1e1603a1c67678dd5a8ee362cf69c5df38e8928e79ea895b98a4c51ffb7af2584c6b25efe0ba056987c1a9e873a87ed2a740b06f0c71251200e097d41d987"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x41e}}]}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r7, &(0x7f00000004c0)={0x8, {"28141de5f7b45946259406838ecaf3fb8befc68e286e172252c8181a397a93ab7d2c3d0fe96736c1652f22d3033957e849865711569399bb70f3d8a61d1ae4087900742fbe6b03e287c2cc354cabc27c838d84cd6436b04ca74efe749138a8985a7b81846de6ad7e3305eea9401508479492e015bca03aeb97e9529f49cc8bce1fae2b0facc595855730960f3e8aa7aa08f2b3739e23a4004e7db731e8b4c07c7554cff749fa57a3eef4f6954357e2e6a95209a5fc9141d7cbff5e38edb91e89e10ebd06cb046a608bdd052ba39ba4059f78aac0df86da81b967671689bbe43e71f7812b0ed148d3cfafc8acbdebccbc55796fb9fef13f9ab4489e1eabe353c4cc33c7002fe539a452c8e3744317e2d19b9f1b75177b5a422f3da6f7eea053054401d555f50c9a5e206a00a9f80dbf2c1f7fcd4cbbf1192aca2f9d16c4eaf7a8b04da5679445e7877e54565e54a7e79ec853c565e53707e3cd794140f780b869de287c92789032f588ee714b558d11be83ca58f86136ea2c44051cafe1a75a6629e651df26f8d1e285328cab5f4160c5b839218324b69569866d48735e7717ce22810176e701a1e5c6b1dd4a312e06b97adf7261b3c6faaf2d443287134e712c05eff085315de0f0557370c9d2ad0e3ecb67dfa11007ed7d237db44e46e669bbe214cd39cbf3f149ae9e35e7bbf36d25e6ff20d08906127de98ab58e16356c822ce01089fc7735c385a00920e350773b6c41a1d95cff6081c82c4bfca9cb563bbc97b1c0f9cfa2a9a87bcd7f34bccd8115dc41dcbf6eeacbd1e166c3a9cf81b686a551bd96e772275c60dcf577de20df0dd0ec799238826c35de0a379e353410b2e638bd193f7e2d77d3fdcf0beb7c4359a5b7a4008fb384bea008aac5e9398febc0d9426097f8505c66d820e93990a4ed80f8a773bfb342d55ed8a9c6444adac62d69e0ee27991d2c53a2941e21f39b5ba64e66ac984d4834c5266e83d9c66035fb63df4861452db51cee729c1b9506bfe504ac266b4878daa812ba955e7c2decf7768c67a58c44aeba8df3d8ed9071ae96876b5d70f440c665d01d9b7c70e37ab6f76acbe0aa0172e020f9e5f81c15d536860d1a3e4e00c2e3d9f6da02d959492a486cddc760eb5ece57ef974dd1f6b466579047d3515b110f91573a19fb3f78960850ae0841b97b998d23ae768cd62ff55f4fafd5812670fa7f87d8cba2ec13d5d01b5ecbdcd53518524e4f8007d0afce5b4f397381ad6a1ecaec705ef0c0452efaacb19beed3eebe4901b78515580eb80c95337ac1c37ff97d9d0ae1e140f193e88cec5b4732962cbc2d51aee2132d8b924e18f50b66966d939a15d78ad1c3d839c7f6df8ed537a5107bfb94984a2b8df4c416328d8a33d2cbd01af782beec10c42ba5f84ecdaa665472fbf52335660d7a9a42fd0e13b2f62dec6aefbcb3f3af0c6f6dfe56baf2a3b0014ba235eac2ec18aa31c590d746a467334757252104c6bcb76afb2fa47433adaca4e840a5c029cb5873cb448369131c9ed60009b40a81a02284381cfff946f74d4aa83ee13e99669156c0862b433028a3591af9b9b7407f5cc7e49907c7791b63d850060f2eb4ae2c1abf4da5018014fc19a6bcc367618e541fdb1d2928379effa83ee0059d870bba1a9b67bfb45581f3d1393b9bfe6075a37ca5a11d245ceff57b2bc1ef10dd0c7bc46ec77c10a1645a6385be95f96549ac8d96228239933d9e85911be3767a7c3957a9644c754050d6653523830a05cf555b0e83eaf10cf2b509aa9b703fe4b737eb593a242b82101ab646cfe962cfee68c2db1a3b66558b4b0d5d8a18594115b908ba478a7f181233db12036be625cc600c77f345f33417044fdd5de4060973e223b373094d86ed420a21152c9c37b633fe0010f23ef706f48c6672b74a92edfd937879e365ca6493c9bb8bb8973504317200c1f80b642a0e9c7530ceef3d4d999a16e55ceaa170f565b1a9503976218cf47aabac735970ac49eb9c702abef2d62870362f39ba8ed918a37d589ca5d7b9c25b54e2594278306a5d0f6a915eaf2579fecc1218a3e4c7c01e17d4c4e0f96b47a143fc9563efb4db6a566e6354b5821f0f438da1047faefd7551611271262dd5457d520bbf41085c7a8d323c179a03cf1dd203e36eaafd96ebeb8c032770a492328bd151e8af61c99959fd75f51e065ecd41b0a8f9efa023982f4ef093090c9897907e3090940ec7735c2ef8dbe9e2939a012617bf0531fbd19c4af5cb3418db71801d70a1f8e9372d577c3a16d1f9300d13c2e96be370e4481a656757025afce9336b8715ccaf35ffa54ea5afe035f702d7079c72977166c1963494abf5b895c9ba598f974d15dea656697a05ce945839fe14bf8ff746ac53a0a7f2cae1760e457030753007d9815785bbf202372e7a4887981382e6d24b6316c7aa10ba77091205948b3307bc17c72e4688730d142a9446457daa5f095b982ebdcff2a8d45e3d386cc43f0328ecdd7aefe81d2b41c93c0532a78db3124197168c92b2ba17a8713bf65fd363262857dafb6a10a235135aaf9c73b54212e7872e5263bea1ab9d80507b44e69875323e7ba6c96dcc60b6fce306be8067f943ebf76733c83045f11684f23309740edc9641db2ead021f711696aca080bcaf2f0717b94b297f94d44a487a1774b7f1ce6f6174a77c100b154374b3839a49a7c2386a8c737110ecacea47cb3cb476e64fc4a69d3e078e186b09d207df7dda5837f3d2f3a13038cd94682c3c0bc58483ad1f0bea3adfc875ef8728d5fbd9c4d1940d101cf1f734a92e3b4092fc3d9082487b310504f8aa558dee6ff035fc296d6ec11867bca9ff018fd540b99eee56a9f5f809587bc2c8d145946c722653181ccb69361695c0d7ee9d1d1f5f7520bd1d6f5101a7ea42d7331575835399439a24443f2c9fdc647be9d656574400626a1e7d3df692a61841c1bae00df17fc49495ea849f8e17f09ba1a5344feec50089c374d11d347ececbff62c3196860dd060bfac82344029e519552fde7e79550e2854888048caf6a2fdd6116fbf1740714da89fdbe5207b089a9a2a6c2a54318a8101b1f6763675d53a386ae115f8a41e672b7eb0e9b687220698aec2742a9d86612868e6f0d0a722a69daa82b15a8ef3669ccc78472413c39c45e22f3b0ebc789f9d03a5bb5ccd12c2bab0643dd0594aff644deb0c6b0f9b13f1e4747fe8883120713c52a926d8b3e573b8deaff49963403fd959ffb235d38d716b6c5e2a32e2d9a7350242919ccee513624b632e15bf308808518acb8a4b9e1461a090f87a100b2eb7286b412e978a67e1d9cd5ef606cc5b6abfbc5844fed9ffff34cd23183ec8073657388ab433164deab66f77c7912ca5b8a5dafe639e574719eb9793bc4032e62d4c38e54a5d464ef019a5a9dd763ca0d77da684b5115cc5eb2923fd70d7c461905a387bfd3113fa685ac8126ab11ecfb12869a2c97a345b90aa04568ff50c209f9c63c486b92917f2099c7c3658895199d48bb368907feb3222342895fe004d82e3c2cef52474f07d3d5764a346e4b323bc7cf27ddbed916f3d27f917b7afebaeb7beece3e121c49f14f277c62db49fbe6b8cbc3a658d3c067caf6c5ce1ae2220880d9daebd2285e3e8bc0bb67ffc2a7846d16204e761c8c77b6b37072de3b84b28b1da562f946cfb50a3f0cb00f6e7303da425e12eb077cbed73ac3460a61bdbf0376874d2033346c66732649a0b7e9a97c08488332cf82fd0adb183996821c5d3247f1be6dfaeaf4f153bcd6e8486e8e74a0f2d08faabb47459bbd07f6e007030980808c12d0ad6ba411036ba367cab993bb785a75b773f5747281af6f85bd19460468f8970508d37201226f0a4a8b2c3ec9db9a00e48f67082e18a5ead11e1e2af72566676915ae13974a9e3a6a01978043dd78fbe9f5c978198ef3458a6a999e2e2c7b80458728525dc178ee32e9c886e461eea89d097034f900e27461d86bf4c23eed0f337ceb7d73e5fb37e7aaa77bc21614b0314b51ef76884461d0fd02393ae84c7a2223d055bb471f68231934793c1756a2188e17b493c21eb723339e9647ce9d6a279567be20d1f84908f75dba26d4c02436e9f94e09a153e313080ed395d537d468f3382fec370b4217083509eaecaa9fb415f30478f4bc88d4bbf443878a6a770dc8571c35fb2accac8b02c88ed06e2b12c4fa3ed595efeb16cc3e423fffaabf5362daedf0eb947aca101ac82d3e4e6c08a3c14cadc5269e6d1f4ebb936faffff0e52ac2a5067c6ff749f88675493b33c51ba7edeaa4c6e5546fa51e4017eeb8a26fa14a9fc5a0df419df134cbc6cfc03a50286dbb5c123bf72cb005cf4ff48027bda238f75e89788eff20272b4c45ecc2559f2e07d2c6001015e6d46a145e63b80520c83aabf790930cc4d16017a7269016f54fe737c11d230e9522477b2972eb09dd3f31f59e68b30aec6a5aee26702a8e5f5d84efebda6b1077379512a7e9837575ba0970a1158b977625f3e44c5461dfaaeb9f5e1546c6c99352af4de5f16e6920331028042bfcd79637a2997571f4cc9f92df7b068b8a6b8f7950dbf0a15f7e2a6e641e35a7d5c048468bc2317941516db6052a811697274362baebab4956fd95150983ad6f0dfc94eead64fe5aba372bc57facfc5c77fa537907025c0ce131bfb9f156472daf0e0260979b8ca52b98e414cc4e34269d5ae4f69dc35ed5c90dc229902b675dc6236a79e06a4fd80f8ec6d0509d495a96ac29184d91b3ae0271693778a50d3001a89629b1e3104859827d3a572df081fb2dabf3fedc97ecaeb96852115f26f307ec957a843623c67c5b3dd73f1369ff401efeafa948fd59ec160cd2438027d385138c394da9c2d834d464ec424ed172138ed1b00d405e6f7731356632bfc73860fa42cf6905effe7f861eb3f62fe0275f9b6ede0540039d065b8bc063d7c40e82e726b64e1100278b59cc3410b80249afe493de1cc296996d798059ed106c981fcc302e4e658a5f5e4a010d0ac60c812b02401b7918db0b22115361c1a979a9e87ac3e149762e6ed1db6f944fe0425efaee50415f415ae0080585d5ff60c9fe36b7221134eb2f67798a5a70eeb7cad47c14dffee98f693fbe3a506bd7cc0d41a38e339f6188c478caa95f54db3f8a61a0a6c6d640a09bb2b7fbcc1dfff70c311eec6176b9ce9cd13cd62624af239a1d20b7f164c978b64a841e933535c88bf7ff614529fbef34c0af8c4413a5098037e86be7f64eab0d7add559d9e9739df657fd76032c7b466ef856c811c9ef3ddea46f61d8a4a9378da075dc54fa8949893314b05c8cc2cb02e2b66b80faf4eb2301ffa1ebbc8f5fa839c0013d6a4b1ce8de1250986c36916f879186520b803573362b21ee07b3456f9c97f7e12360ef10959c13ae3b4ef8acfd8c2a433dcc735031478f414bd3a178decfb49d3b38588171e4335db0490ba9b3176bc8bff817760257a1addfcdf3486640ea063f49b26d8d111038c62e7ea2377eaffd017d429853bf6083ba1bd95a6a9896350aa236d3a6fa2075e72cd46c64b9c0f996b331ea98b02e3fe3917a365dfffffb74f168060418a31d1ce1951c6d94aefe4d37e2321a4287a92bbaf9e363118c3bdb8b23a82df7f9598da5ef466fc5b8ff5cc88bbda922aca5e0e5fa015a8edbf927bc4e7e4d6dc70a2c06e59f435453405631294d8b22ffaae10c9869d443739fb8fd6223744ab336c658bcd2f5801ed56247624e11bb3d617c621d88d2aae7e97df7f3bb82ea58287e5", 0x1000}}, 0x1006) 1.09887794s ago: executing program 7 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, '\t\x00'}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_usbip_server_init(0x5) 1.098107732s ago: executing program 6 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='+5', 0x2) 879.939223ms ago: executing program 6 (id=382): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e05070b20"], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bdad, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x820, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x400, 0x4}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4000844) r2 = dup2(r1, r1) read$msr(r2, &(0x7f0000000000)=""/206, 0xce) 659.50487ms ago: executing program 6 (id=383): r0 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080)) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_REG_RULES={0x74, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xad}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x8, 0x81, 0x4, 0x0, 0x8, 0x2, 0x5, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0x0, 0x0, 0x7, 0x6}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r4, 0x8}, &(0x7f00000003c0)=0x8) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000cc0)=[{&(0x7f0000000600)={&(0x7f00000004c0)={0x0, &(0x7f0000000400)="24b6b21eb0d66d6f9a6ee43b29bdc23c883103b0f61c2d667073850631a74998595ad2c2a7cfc36e24dbd38ebb8c910dd8aea425e1ab9e08ec1ae4b64c2c806c193602e47a2893499c37c6e29429a81cb1de4ededc135747cb08f15df80293189aca49286eb134e312f2a4fa5afffadbd3b442caa4775335c04de14e96feb4b82876647a3eb8ef51a9cd6ba82e4535b4c22b6187d175fc897e273089f16c57b83d632df7a0be37d860205c9d717d4805fcacfa", 0x1, 0xb3}, &(0x7f0000000500)="666742704c2df57bd9d9a698b4e04097c4e8f952ebf78ce33729c2c04a01b27e7ac439b9e072f06f4654a227b76a966716bdb027a0852751211dbc288e5915ed9fe4a289e1ca4c72199f6b003b6b002127b73aa6e185327af3a4c28b8e086fe3bddc28293f4639279efc252de77e6e7d4b0993c5efe1727783aedf87e939558bfdf430c7d04d7b76e6d17296cda2b8e4952d0b4aa484a64605bc4bedf653af03e1c57b8f2f151f1d565e45730211583997477374b9405bbb69b3228545ca02fda6c4487393002a1b13c4e18eab38082c1f", 0x2, 0xd1}, &(0x7f0000000640)="7bc9f3eb6c0b19deffb8e59ea3f55aabcc61673cb87f3023", 0x2, 0x18}, {&(0x7f0000000800)={&(0x7f0000000700)={0x0, &(0x7f0000000680)="d9426f3d29e8a6f6caf5674a845c38b947b38c0b88c7b056ad3d3eb449485b65b1f227fb4fec0f010045de28b24b1b9a3887d620131db124adad9b5077b89a4d7bdf134a69f01ea92d9460", 0x1, 0x4b}, &(0x7f0000000740)="1779c4a34db39b129449eb83365b8a1810693ee20ab7ee13b7d0defc84ea01ca1a3facd52856797822a94c9673fe2d6098a62f91df751b5e105f9f1246e84fe5a4c7f9f0aa886e58f70099b8cc89c5a4bf71bf6e5b37c5f6dc29ba876438ea2c9f87b7176019cf13728cabe375965f6b3f910bcd13131d62397791a9219e91b93356564b42", 0x2, 0x85}, &(0x7f0000000840)="1cbe784ceb4b8723c2fc31400f128f2233edae08a7d5977df2d436bf24a83244aadc2925666f646a5536b658778995f9f0d49d6f3705bb5a389599df9dba1d869b96498bc041ef27ba277cf7a39af129d059216c3103af3b63871754253bca43cbc2794277cc5a1552a54d5a874f19baaa195091926eeccaa33e30d9b98db96f05b859c787c5f298c98d74b92cfdcbc3cd2072116254366fedef18d5781bdfaf0264c503d31f1fc5979dcd1b4961b62cdb15eb11bf47b4b93196381b39eef828338834872e", 0x0, 0xc5}, {0x0, &(0x7f0000000940)="04b9eeb07ddf655345a1d52a6ab968b8c3f747f5c755c9c7fe5188b8cb38a0732a52f2e268fe0580ec408b96cb42c060cafeac9b86e9fa26a4c6b8", 0x2, 0x3b}, {0x0, &(0x7f0000000980)="ec839690cf2d69c8b97c2e05663f2615b32997d7eab69a49327c3226b98a7e41249c9920b0bf25beead8ddbd5498f79799e6e2cb06e6764c597a6d49f225b2ba0128f9ad0107ddd3a245ea8f07fd42af58da52cfa7a4950f5478bb61f44a73ee96d00c16d8685cf9e8f3dd8f9bf2fd19567a793965b7bf0b88b536f147012291c4e28e381b9fd60841bd0187637db6f41bc1fe725636b5cc17cb2193b51836d885d9208444cc7333ee45d3e3af320cee5f", 0x1, 0xb1}, {&(0x7f0000000b80)={&(0x7f0000000ac0)={0x0, &(0x7f0000000a40)="1ab99fad4cd1f678d7303556b07b71604306c1e61d485dfc8fe9e23a97653caef9120f06019eef54ca01da758536e7287f537a0e2e9660625beaa72be1d3a7b34d923f4ee3ebd02c351183", 0x0, 0x4b}, &(0x7f0000000b00)="5e4304eb06f260a4e237b66a9e2a53b53ae1af380485aebcbe27169b50e9e980b6a86733c3dd88f8626986def22ab1caef3d2e0dac36730bbc64e80e0ee42a06ed7380d1c4040e13b2587ab23beaf0b800afe94c9a78ccce7820eea69f279d13fc4071802d9e13515f7c72898bc79b88", 0x2, 0x70}, &(0x7f0000000bc0)="266f5477e2976c1d84237e60d6c752ffe558f3b134d6d8614dc5adadb9becc213d07ebd780dab01afca57a9a9672c18e7595ec9e594b5d80f2c3eda893207e6bada053132704748026723f6abf054ce962547b3f3f80b517243b54b74beba8be5a5577143e13be15e225206387f2981c23d73c63c23d6b643a55e35091f99406e01adafbda3c811a6df7a827edce42d67b5e0dc8ebc6752dd6b188a5c1315d1a0d9bfaadb293f1a87e01df01c0bc50e75c3151688d3352e8853795a7bf5aa9cab8c334858b8db19bc516e1f5c63858e361ecf01bb9c0d0ae9d7d43ae3a8cbd8b42b7bebad8509d1a50d8", 0x1, 0xea}], 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) ioctl(r5, 0x1, &(0x7f0000000e00)="6b59871b0beba5d3586f62792a9d9995163225853ea96a98ea7460f1f3e42fb2b31c6d5242c81244dd9efb364b6f708027127de3f78f5ab46b0530df9c73a1d8f92b28a5679fa933a19fe75436b9c8560f5f8ede40c7460aebeab8f9f5349b771696918a6d180374dfee0b8f4b16989736676aedd6bbe0deef07866e70b19dbf65") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000000}, 0x200c880) r9 = syz_io_uring_setup(0x7784, &(0x7f0000001080)={0x0, 0xa8a0, 0x200, 0x3, 0x242}, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, &(0x7f0000001240)={0xff, 0x0, &(0x7f0000001200)=[r7, r0, r3, r10]}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcfa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xf8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000007) r13 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r13, &(0x7f0000001400)=@id, &(0x7f0000001440)=0x10, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000001480)={0xef3, 0x9, 0x4, 0x0, 0x42}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000014c0)={@rand_addr=0x64010100, @local, 0x0, 0x4, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast]}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000001540)={0x4292, 0x100, 0x5, {0x9, 0x8}, 0x1, 0x5}) 451.207989ms ago: executing program 48 (id=383): r0 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080)) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_REG_RULES={0x74, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xad}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x8, 0x81, 0x4, 0x0, 0x8, 0x2, 0x5, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0x0, 0x0, 0x7, 0x6}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r4, 0x8}, &(0x7f00000003c0)=0x8) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000cc0)=[{&(0x7f0000000600)={&(0x7f00000004c0)={0x0, &(0x7f0000000400)="24b6b21eb0d66d6f9a6ee43b29bdc23c883103b0f61c2d667073850631a74998595ad2c2a7cfc36e24dbd38ebb8c910dd8aea425e1ab9e08ec1ae4b64c2c806c193602e47a2893499c37c6e29429a81cb1de4ededc135747cb08f15df80293189aca49286eb134e312f2a4fa5afffadbd3b442caa4775335c04de14e96feb4b82876647a3eb8ef51a9cd6ba82e4535b4c22b6187d175fc897e273089f16c57b83d632df7a0be37d860205c9d717d4805fcacfa", 0x1, 0xb3}, &(0x7f0000000500)="666742704c2df57bd9d9a698b4e04097c4e8f952ebf78ce33729c2c04a01b27e7ac439b9e072f06f4654a227b76a966716bdb027a0852751211dbc288e5915ed9fe4a289e1ca4c72199f6b003b6b002127b73aa6e185327af3a4c28b8e086fe3bddc28293f4639279efc252de77e6e7d4b0993c5efe1727783aedf87e939558bfdf430c7d04d7b76e6d17296cda2b8e4952d0b4aa484a64605bc4bedf653af03e1c57b8f2f151f1d565e45730211583997477374b9405bbb69b3228545ca02fda6c4487393002a1b13c4e18eab38082c1f", 0x2, 0xd1}, &(0x7f0000000640)="7bc9f3eb6c0b19deffb8e59ea3f55aabcc61673cb87f3023", 0x2, 0x18}, {&(0x7f0000000800)={&(0x7f0000000700)={0x0, &(0x7f0000000680)="d9426f3d29e8a6f6caf5674a845c38b947b38c0b88c7b056ad3d3eb449485b65b1f227fb4fec0f010045de28b24b1b9a3887d620131db124adad9b5077b89a4d7bdf134a69f01ea92d9460", 0x1, 0x4b}, &(0x7f0000000740)="1779c4a34db39b129449eb83365b8a1810693ee20ab7ee13b7d0defc84ea01ca1a3facd52856797822a94c9673fe2d6098a62f91df751b5e105f9f1246e84fe5a4c7f9f0aa886e58f70099b8cc89c5a4bf71bf6e5b37c5f6dc29ba876438ea2c9f87b7176019cf13728cabe375965f6b3f910bcd13131d62397791a9219e91b93356564b42", 0x2, 0x85}, &(0x7f0000000840)="1cbe784ceb4b8723c2fc31400f128f2233edae08a7d5977df2d436bf24a83244aadc2925666f646a5536b658778995f9f0d49d6f3705bb5a389599df9dba1d869b96498bc041ef27ba277cf7a39af129d059216c3103af3b63871754253bca43cbc2794277cc5a1552a54d5a874f19baaa195091926eeccaa33e30d9b98db96f05b859c787c5f298c98d74b92cfdcbc3cd2072116254366fedef18d5781bdfaf0264c503d31f1fc5979dcd1b4961b62cdb15eb11bf47b4b93196381b39eef828338834872e", 0x0, 0xc5}, {0x0, &(0x7f0000000940)="04b9eeb07ddf655345a1d52a6ab968b8c3f747f5c755c9c7fe5188b8cb38a0732a52f2e268fe0580ec408b96cb42c060cafeac9b86e9fa26a4c6b8", 0x2, 0x3b}, {0x0, &(0x7f0000000980)="ec839690cf2d69c8b97c2e05663f2615b32997d7eab69a49327c3226b98a7e41249c9920b0bf25beead8ddbd5498f79799e6e2cb06e6764c597a6d49f225b2ba0128f9ad0107ddd3a245ea8f07fd42af58da52cfa7a4950f5478bb61f44a73ee96d00c16d8685cf9e8f3dd8f9bf2fd19567a793965b7bf0b88b536f147012291c4e28e381b9fd60841bd0187637db6f41bc1fe725636b5cc17cb2193b51836d885d9208444cc7333ee45d3e3af320cee5f", 0x1, 0xb1}, {&(0x7f0000000b80)={&(0x7f0000000ac0)={0x0, &(0x7f0000000a40)="1ab99fad4cd1f678d7303556b07b71604306c1e61d485dfc8fe9e23a97653caef9120f06019eef54ca01da758536e7287f537a0e2e9660625beaa72be1d3a7b34d923f4ee3ebd02c351183", 0x0, 0x4b}, &(0x7f0000000b00)="5e4304eb06f260a4e237b66a9e2a53b53ae1af380485aebcbe27169b50e9e980b6a86733c3dd88f8626986def22ab1caef3d2e0dac36730bbc64e80e0ee42a06ed7380d1c4040e13b2587ab23beaf0b800afe94c9a78ccce7820eea69f279d13fc4071802d9e13515f7c72898bc79b88", 0x2, 0x70}, &(0x7f0000000bc0)="266f5477e2976c1d84237e60d6c752ffe558f3b134d6d8614dc5adadb9becc213d07ebd780dab01afca57a9a9672c18e7595ec9e594b5d80f2c3eda893207e6bada053132704748026723f6abf054ce962547b3f3f80b517243b54b74beba8be5a5577143e13be15e225206387f2981c23d73c63c23d6b643a55e35091f99406e01adafbda3c811a6df7a827edce42d67b5e0dc8ebc6752dd6b188a5c1315d1a0d9bfaadb293f1a87e01df01c0bc50e75c3151688d3352e8853795a7bf5aa9cab8c334858b8db19bc516e1f5c63858e361ecf01bb9c0d0ae9d7d43ae3a8cbd8b42b7bebad8509d1a50d8", 0x1, 0xea}], 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) ioctl(r5, 0x1, &(0x7f0000000e00)="6b59871b0beba5d3586f62792a9d9995163225853ea96a98ea7460f1f3e42fb2b31c6d5242c81244dd9efb364b6f708027127de3f78f5ab46b0530df9c73a1d8f92b28a5679fa933a19fe75436b9c8560f5f8ede40c7460aebeab8f9f5349b771696918a6d180374dfee0b8f4b16989736676aedd6bbe0deef07866e70b19dbf65") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000000}, 0x200c880) r9 = syz_io_uring_setup(0x7784, &(0x7f0000001080)={0x0, 0xa8a0, 0x200, 0x3, 0x242}, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, &(0x7f0000001240)={0xff, 0x0, &(0x7f0000001200)=[r7, r0, r3, r10]}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcfa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xf8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000007) r13 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r13, &(0x7f0000001400)=@id, &(0x7f0000001440)=0x10, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000001480)={0xef3, 0x9, 0x4, 0x0, 0x42}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000014c0)={@rand_addr=0x64010100, @local, 0x0, 0x4, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast]}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000001540)={0x4292, 0x100, 0x5, {0x9, 0x8}, 0x1, 0x5}) 341.641004ms ago: executing program 7 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010000000000000000000000000000000000000000000c0003006272696467653000140012800b000200627269646765000000000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020001000000080003000100000008000400", @ANYRES32=r1], 0x54}}, 0x0) r2 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000003c001a8006000000020000002c0005802800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50129bd7000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="000300009800000100"/24], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r5 = socket$inet(0x2, 0x6, 0x4) getsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4) 179.298267ms ago: executing program 1 (id=386): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x20008059) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000340)={0xfffffffe, 0x8001, 0x7, 0x8000000000000000, 0x4, 0x4}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x6, 0x401, 0xfe226735, 0xc000, 0xe9, r6}, 0x20) sendmmsg$inet_sctp(r2, &(0x7f0000004600)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)='?', 0x1}, {&(0x7f0000000480)="76c6f1ea707578373d9c8cd4db65bf1526556738b35aea4a3eb503385ab9a54f3a6a73d94da142a964e8a2733b", 0x2d}], 0x2, &(0x7f0000000340), 0x0, 0x44000}], 0x1, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000002c0)="9bcb90063a90c73f0427710a9f19db3e69d85b5ae105f26e9d8b32335c74abbe1557e67c46e37922ed12086da8d7e221cd5c003978543d8c8e171f435b665c14d4c9253c0e263b3c479bb1a88dd619082e05e43dd87689a78c1f3d6b3981282f5a5c15d96585f116d17da07965") mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e23, 0x3, @private1, 0x27b198bb}}, 0x0, 0x8}, &(0x7f0000000640)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000680)={r6, 0x2, 0x40, 0xfff7, 0x9, 0x4, 0x0, 0x8000, {r12, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x1}}, 0x4, 0xffff, 0x5480, 0x1, 0x6}}, &(0x7f0000000740)=0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r13 = openat(r11, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x20001, 0x0) write$cgroup_pid(r13, &(0x7f00000001c0), 0x12) 0s ago: executing program 7 (id=387): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000a80)={0x0, 0x50}, 0x8) r2 = dup(r0) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000280), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=virtio,nodevmap,fowner=', @ANYRESDEC=0x0, @ANYBLOB="25d4"]) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40001) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000180)={0x0, 0x7, 0x100c}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0x2020) socket(0x29, 0xa, 0xfffffff9) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000300)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r2, 0x2cb25000) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) ioctl$KVM_CAP_X86_GUEST_MODE(r5, 0x4068aea3, &(0x7f0000000140)) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff81, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1fffc000, 0xb, 0x5}}}}]}, 0xffffffffffffff53}}, 0x0) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000240)={0xc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) socket(0x27, 0x4, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='udf\x00', 0x0) socket(0xa, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 88][ T5843] dw2102: i2c transfer failed. [ 83.595092][ T5843] dvb-usb: MAC address: 02:02:02:02:02:02 [ 83.636630][ T7298] __nla_validate_parse: 58 callbacks suppressed [ 83.636722][ T7298] netlink: 80 bytes leftover after parsing attributes in process `syz.3.193'. [ 83.649177][ T5807] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 83.649219][ T5807] (id 0x00) [ 83.694547][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.768953][ T7283] dvb-usb: bulk message failed: -22 (5/0) [ 83.769011][ T7283] dw2102: i2c transfer failed. [ 83.781815][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 83.793254][ T5843] dw2102: command 0x0e transfer failed. [ 83.793288][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 83.793310][ T5843] dw2102: command 0x0e transfer failed. [ 83.828752][ T5807] rc_core: IR keymap rc-imon-pad not found [ 83.828792][ T5807] Registered IR keymap rc-empty [ 83.828946][ T5807] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 83.828978][ T5807] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 83.859334][ T5807] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 83.866284][ T5807] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input9 [ 83.912969][ T5807] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:6> initialized [ 84.042995][ T5821] usb 12-1: USB disconnect, device number 6 [ 84.110938][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 84.110984][ T5843] dw2102: command 0x0e transfer failed. [ 84.111009][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 84.111017][ T5843] dw2102: command 0x0e transfer failed. [ 84.111021][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 84.111027][ T5843] dw2102: command 0x51 transfer failed. [ 84.218804][ T7319] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 84.225161][ T5843] DVB: Unable to find symbol ds3000_attach() [ 84.225211][ T5843] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 84.231636][ T7319] jffs2: notice: (7319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.298925][ T5843] rc_core: IR keymap rc-su3000 not found [ 84.298979][ T5843] Registered IR keymap rc-empty [ 84.299856][ T5843] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 84.310433][ T5843] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input10 [ 84.333030][ T5843] dvb-usb: schedule remote query interval to 150 msecs. [ 84.338381][ T5843] dw2102: su3000_power_ctrl: 0, initialized 1 [ 84.339002][ T5843] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 84.345642][ T5843] usb 14-1: USB disconnect, device number 3 [ 84.454359][ T5843] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 84.761850][ T7349] fuse: fd is not a fuse device [ 84.764818][ T7349] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.775807][ T7349] fuse: fd is not a fuse device [ 84.779192][ T7349] fuse: fd is not a fuse device [ 84.781220][ T7349] bpf: Bad value for 'gid' [ 84.782999][ T7349] bpf: Bad value for 'gid' [ 84.878710][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.9.206'. [ 84.910646][ T7352] bond0: entered allmulticast mode [ 84.910694][ T7352] bond_slave_0: entered allmulticast mode [ 84.910733][ T7352] bond_slave_1: entered allmulticast mode [ 85.002813][ T7361] fuse: fd is not a fuse device [ 85.076859][ T5806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.122956][ T5442] 8021q: adding VLAN 0 to HW filter on device eth30 [ 85.307116][ T5806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.320595][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.211'. [ 85.339940][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 85.339994][ T43] audit: type=1400 audit(1788731623.832:605): avc: denied { write } for pid=7374 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.519420][ T43] audit: type=1400 audit(1788731624.022:606): avc: denied { write } for pid=7378 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.525599][ T43] audit: type=1400 audit(1788731624.022:607): avc: denied { getopt } for pid=7378 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.538682][ T5806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.631273][ T43] audit: type=1400 audit(1788731624.132:608): avc: denied { write } for pid=7382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.662239][ T5806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.669238][ T43] audit: type=1400 audit(1788731624.172:609): avc: denied { write } for pid=7384 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.675731][ T43] audit: type=1400 audit(1788731624.172:610): avc: denied { mounton } for pid=7384 comm="syz.3.215" path="/22/security" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 85.683578][ T43] audit: type=1400 audit(1788731624.172:611): avc: denied { read } for pid=7384 comm="syz.3.215" dev="sockfs" ino=24221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.710117][ T43] audit: type=1400 audit(1788731624.212:612): avc: denied { write } for pid=7388 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.973274][ T5806] bridge_slave_1: left allmulticast mode [ 85.973311][ T5806] bridge_slave_1: left promiscuous mode [ 85.973436][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.980570][ T43] audit: type=1400 audit(1788731624.482:613): avc: denied { write } for pid=7396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.996962][ T5806] bridge_slave_0: left allmulticast mode [ 85.997011][ T5806] bridge_slave_0: left promiscuous mode [ 85.997135][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.057723][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.059665][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.062682][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.078365][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.085535][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.094089][ T6331] IPVS: starting estimator thread 0... [ 86.215299][ T43] audit: type=1400 audit(1788731624.712:614): avc: denied { write } for pid=7411 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.226649][ T7408] IPVS: using max 44 ests per chain, 105600 per kthread [ 86.341416][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.351986][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.361029][ T5806] bond0 (unregistering): Released all slaves [ 86.369983][ T5442] 8021q: adding VLAN 0 to HW filter on device eth31 [ 86.403516][ T7400] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.427401][ T7400] validate_nla: 55 callbacks suppressed [ 86.427464][ T7400] netlink: 'syz.3.219': attribute type 8 has an invalid length. [ 86.578752][ T851] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 86.694743][ T5442] 8021q: adding VLAN 0 to HW filter on device eth32 [ 86.728972][ T851] usb 14-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 86.733284][ T851] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 86.733321][ T851] usb 14-1: config 1 has no interface number 0 [ 86.741072][ T851] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.741106][ T851] usb 14-1: Product: syz [ 86.741135][ T851] usb 14-1: Manufacturer: syz [ 86.741156][ T851] usb 14-1: SerialNumber: syz [ 86.757676][ T851] usb 14-1: 3:1 : does not exist [ 86.759877][ T851] usb 14-1: 3:2 : does not exist [ 86.775399][ T5806] hsr_slave_0: left promiscuous mode [ 86.780670][ T5806] hsr_slave_1: left promiscuous mode [ 86.782204][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.782217][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.783846][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.783857][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.801174][ T5806] veth1_macvtap: left promiscuous mode [ 86.801257][ T5806] veth0_macvtap: left promiscuous mode [ 86.801344][ T5806] veth1_vlan: left promiscuous mode [ 86.801377][ T5806] veth0_vlan: left promiscuous mode [ 87.089148][ T5977] usb 14-1: USB disconnect, device number 4 [ 87.204958][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 87.215059][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 87.254876][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.260750][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.264067][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.267016][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.270555][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.709342][ T7481] FAULT_INJECTION: forcing a failure. [ 87.709342][ T7481] name fail_futex, interval 1, probability 0, space 0, times 0 [ 87.709415][ T7481] CPU: 0 UID: 0 PID: 7481 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT(full) [ 87.709450][ T7481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.709462][ T7481] Call Trace: [ 87.709470][ T7481] [ 87.709477][ T7481] dump_stack_lvl+0x100/0x190 [ 87.709508][ T7481] should_fail_ex.cold+0x5/0xa [ 87.709533][ T7481] get_futex_key+0x1d0/0x14f0 [ 87.709557][ T7481] ? __pfx_get_futex_key+0x10/0x10 [ 87.709576][ T7481] ? __pfx_futex_hash+0x10/0x10 [ 87.709596][ T7481] ? get_pid_task+0xfc/0x250 [ 87.709618][ T7481] ? get_pid_task+0xfc/0x250 [ 87.709644][ T7481] futex_wake+0xf4/0x5e0 [ 87.709672][ T7481] ? find_held_lock+0x2b/0x80 [ 87.709721][ T7481] ? __pfx_futex_wake+0x10/0x10 [ 87.709750][ T7481] ? lock_acquire+0x1d1/0x380 [ 87.709768][ T7481] ? __fget_files+0x34/0x3d0 [ 87.709790][ T7481] ? find_held_lock+0x2b/0x80 [ 87.709819][ T7481] do_futex+0x2b2/0x440 [ 87.709858][ T7481] ? __pfx_do_futex+0x10/0x10 [ 87.709893][ T7481] __x64_sys_futex+0x34f/0x4d0 [ 87.709917][ T7481] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 87.709938][ T7481] ? __pfx___x64_sys_futex+0x10/0x10 [ 87.709971][ T7481] do_syscall_64+0x123/0x790 [ 87.709995][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.710014][ T7481] RIP: 0033:0x7feaf399e159 [ 87.710029][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.710046][ T7481] RSP: 002b:00007feaf1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.710064][ T7481] RAX: ffffffffffffffda RBX: 00007feaf3c26098 RCX: 00007feaf399e159 [ 87.710074][ T7481] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feaf3c2609c [ 87.710085][ T7481] RBP: 00007feaf3c26090 R08: 0000000000000001 R09: 0000000000000000 [ 87.710096][ T7481] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 87.710107][ T7481] R13: 00007feaf3c26128 R14: 00007ffc649d1910 R15: 00007ffc649d19f8 [ 87.710131][ T7481] [ 88.026201][ T7501] netlink: 9152 bytes leftover after parsing attributes in process `syz.9.228'. [ 88.057250][ T5806] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.070018][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.070156][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.070503][ T7402] bridge_slave_0: entered allmulticast mode [ 88.071205][ T7402] bridge_slave_0: entered promiscuous mode [ 88.072572][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.072612][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.072664][ T7402] bridge_slave_1: entered allmulticast mode [ 88.073474][ T7402] bridge_slave_1: entered promiscuous mode [ 88.096221][ T7505] jffs2: notice: (7505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 88.129084][ T5735] Bluetooth: hci1: command tx timeout [ 88.134775][ T7402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.142106][ T7402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.195030][ T5806] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.291395][ T7402] team0: Port device team_slave_0 added [ 88.298265][ T7402] team0: Port device team_slave_1 added [ 88.337764][ T5806] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.483426][ T5806] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.497045][ T5735] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 88.497081][ T5735] CPU: 2 UID: 0 PID: 5735 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 88.497107][ T5735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.497132][ T5735] Workqueue: hci3 hci_rx_work [ 88.497154][ T5735] Call Trace: [ 88.497161][ T5735] [ 88.497168][ T5735] dump_stack_lvl+0x100/0x190 [ 88.497199][ T5735] sysfs_warn_dup.cold+0x1c/0x28 [ 88.497228][ T5735] sysfs_create_dir_ns+0x24b/0x2b0 [ 88.497253][ T5735] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 88.497276][ T5735] ? find_held_lock+0x2b/0x80 [ 88.497301][ T5735] ? kobject_add_internal+0x25f/0x930 [ 88.497329][ T5735] ? kobject_add_internal+0x25f/0x930 [ 88.497357][ T5735] ? do_raw_spin_unlock+0x145/0x1e0 [ 88.497381][ T5735] kobject_add_internal+0x2c8/0x930 [ 88.497412][ T5735] kobject_add+0x16a/0x1e0 [ 88.497438][ T5735] ? __pfx_kobject_add+0x10/0x10 [ 88.497460][ T5735] ? class_to_subsys+0x10f/0x150 [ 88.497489][ T5735] ? kobject_put+0xb9/0x640 [ 88.497513][ T5735] ? _raw_spin_unlock+0x28/0x50 [ 88.497538][ T5735] device_add+0x294/0x1970 [ 88.497560][ T5735] ? __pfx_dev_set_name+0x10/0x10 [ 88.497584][ T5735] ? __pfx_device_add+0x10/0x10 [ 88.497607][ T5735] ? mgmt_send_event_skb+0x2fb/0x460 [ 88.497634][ T5735] hci_conn_add_sysfs+0x1a3/0x260 [ 88.497658][ T5735] le_conn_complete_evt+0x122f/0x2130 [ 88.497711][ T5735] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 88.497731][ T5735] ? hci_event_packet+0x186/0xcd0 [ 88.497757][ T5735] hci_le_conn_complete_evt+0x23c/0x3a0 [ 88.497785][ T5735] ? skb_pull_data+0x15f/0x1e0 [ 88.497814][ T5735] hci_le_meta_evt+0x34a/0x5f0 [ 88.497836][ T5735] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 88.497859][ T5735] hci_event_packet+0x51c/0xcd0 [ 88.497878][ T5735] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 88.497899][ T5735] ? __pfx_hci_event_packet+0x10/0x10 [ 88.497922][ T5735] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.497950][ T5735] hci_rx_work+0x451/0xfc0 [ 88.497974][ T5735] process_one_work+0xac7/0x1b10 [ 88.498015][ T5735] ? __pfx_process_one_work+0x10/0x10 [ 88.498045][ T5735] ? lock_acquire+0x1d1/0x380 [ 88.498072][ T5735] ? __pfx_hci_rx_work+0x10/0x10 [ 88.498094][ T5735] worker_thread+0x5ef/0xe50 [ 88.498129][ T5735] ? __pfx_worker_thread+0x10/0x10 [ 88.498159][ T5735] ? kthread+0x13a/0x450 [ 88.498179][ T5735] ? __pfx_worker_thread+0x10/0x10 [ 88.498204][ T5735] kthread+0x373/0x450 [ 88.498228][ T5735] ? __pfx_kthread+0x10/0x10 [ 88.498252][ T5735] ret_from_fork+0x730/0xd60 [ 88.498273][ T5735] ? __pfx_ret_from_fork+0x10/0x10 [ 88.498294][ T5735] ? __switch_to+0x800/0x10f0 [ 88.498319][ T5735] ? __pfx_kthread+0x10/0x10 [ 88.498339][ T5735] ret_from_fork_asm+0x1a/0x30 [ 88.498358][ T5735] [ 88.499223][ T5735] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.506126][ T5735] Bluetooth: hci3: failed to register connection device [ 88.569196][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 88.577322][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.577332][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.577345][ T7402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.585343][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.585358][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.585372][ T7402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.774228][ T7402] hsr_slave_0: entered promiscuous mode [ 88.777484][ T7402] hsr_slave_1: entered promiscuous mode [ 88.791646][ T7521] ======================================================= [ 88.791646][ T7521] WARNING: The mand mount option has been deprecated and [ 88.791646][ T7521] and is ignored by this kernel. Remove the mand [ 88.791646][ T7521] option from the mount to silence this warning. [ 88.791646][ T7521] ======================================================= [ 88.976681][ T5806] bridge_slave_1: left allmulticast mode [ 88.979257][ T5806] bridge_slave_1: left promiscuous mode [ 88.979483][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.993383][ T5806] bridge_slave_0: left allmulticast mode [ 88.997495][ T5806] bridge_slave_0: left promiscuous mode [ 88.997724][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.233905][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.243417][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.252373][ T5806] bond0 (unregistering): Released all slaves [ 89.267542][ T5731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.275822][ T5731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.280075][ T5731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.282163][ T5731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.292013][ T5731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.329013][ T5737] Bluetooth: hci0: command tx timeout [ 89.644223][ T5806] hsr_slave_0: left promiscuous mode [ 89.651010][ T5806] hsr_slave_1: left promiscuous mode [ 89.651436][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.651448][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.656213][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.656227][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.686071][ T5806] veth1_macvtap: left promiscuous mode [ 89.686139][ T5806] veth0_macvtap: left promiscuous mode [ 89.686285][ T5806] veth1_vlan: left promiscuous mode [ 89.686372][ T5806] veth0_vlan: left promiscuous mode [ 89.985395][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 90.016644][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 90.162130][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.163156][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.163249][ T7468] bridge_slave_0: entered allmulticast mode [ 90.167433][ T7468] bridge_slave_0: entered promiscuous mode [ 90.171958][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.171999][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.172070][ T7468] bridge_slave_1: entered allmulticast mode [ 90.172803][ T7468] bridge_slave_1: entered promiscuous mode [ 90.218661][ T7528] Bluetooth: hci1: command tx timeout [ 90.267386][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.276648][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.411345][ T7468] team0: Port device team_slave_0 added [ 90.446211][ T7468] team0: Port device team_slave_1 added [ 90.524624][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.524666][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.524698][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.525568][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.525576][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.525588][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.540909][ T5088] Bluetooth: hci3: command 0x2016 tx timeout [ 90.636762][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 90.636832][ T43] audit: type=1400 audit(1788731629.132:632): avc: denied { write } for pid=7568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.724659][ T7468] hsr_slave_0: entered promiscuous mode [ 90.725164][ T7468] hsr_slave_1: entered promiscuous mode [ 90.725460][ T7468] debugfs: 'hsr0' already exists in 'hsr' [ 90.725471][ T7468] Cannot create hsr debugfs directory [ 90.763931][ T43] audit: type=1400 audit(1788731629.262:633): avc: denied { write } for pid=7572 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.792259][ T43] audit: type=1400 audit(1788731629.292:634): avc: denied { write } for pid=7565 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.802117][ T7574] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 90.807052][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 90.812545][ T7574] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 90.812595][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 90.812681][ T7574] iwpm_send_hello: Unable to send a nlmsg [ 90.896999][ T5806] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.914583][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.994386][ T5806] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.075890][ T5806] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.155448][ T5806] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.210922][ T7402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.225771][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.226557][ T7402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.231703][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.243309][ T7402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.253118][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.254751][ T7402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.263932][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.339399][ T5088] Bluetooth: hci2: command tx timeout [ 91.369162][ T7566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.369262][ T7566] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.407057][ T7566] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.409567][ T5088] Bluetooth: hci0: command tx timeout [ 91.421065][ T7566] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.425091][ T7566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.425190][ T7566] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.433876][ T7566] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.443611][ T7566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.443799][ T7566] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.452972][ T5806] bridge_slave_1: left allmulticast mode [ 91.453022][ T5806] bridge_slave_1: left promiscuous mode [ 91.453136][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.459740][ T5806] bridge_slave_0: left allmulticast mode [ 91.459755][ T5806] bridge_slave_0: left promiscuous mode [ 91.459852][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.462139][ T7566] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.467966][ T7566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.468014][ T7566] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.484441][ T7566] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.582457][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.585652][ T5806] bond_slave_0: left allmulticast mode [ 91.590400][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.594987][ T5806] bond_slave_1: left allmulticast mode [ 91.597485][ T5806] bond0 (unregistering): Released all slaves [ 91.678356][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.759337][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.771292][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.771360][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.777453][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.777519][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.873522][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.873679][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.873737][ T7526] bridge_slave_0: entered allmulticast mode [ 91.874733][ T7526] bridge_slave_0: entered promiscuous mode [ 91.876181][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.876222][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.876273][ T7526] bridge_slave_1: entered allmulticast mode [ 91.876990][ T7526] bridge_slave_1: entered promiscuous mode [ 91.920607][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.922344][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.937097][ T5806] hsr_slave_0: left promiscuous mode [ 91.939602][ T5806] hsr_slave_1: left promiscuous mode [ 91.941898][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.944192][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.946963][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.950490][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.955319][ T5806] veth1_macvtap: left promiscuous mode [ 91.957092][ T5806] veth0_macvtap: left promiscuous mode [ 91.959065][ T5806] veth1_vlan: left promiscuous mode [ 91.960705][ T5806] veth0_vlan: left promiscuous mode [ 92.107812][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 92.126553][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 92.142142][ T7528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.148774][ T7528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.156649][ T7528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.157834][ T7528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.158217][ T7528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.214893][ T7526] team0: Port device team_slave_0 added [ 92.217490][ T7526] team0: Port device team_slave_1 added [ 92.256011][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.256057][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.256567][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.259449][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.259457][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.259469][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.285322][ T7526] hsr_slave_0: entered promiscuous mode [ 92.285743][ T7526] hsr_slave_1: entered promiscuous mode [ 92.286075][ T7526] debugfs: 'hsr0' already exists in 'hsr' [ 92.286086][ T7526] Cannot create hsr debugfs directory [ 92.507219][ T5806] IPVS: stop unused estimator thread 0... [ 92.612314][ T5806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.730121][ T5806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.751683][ T43] audit: type=1400 audit(1788731631.252:635): avc: denied { write } for pid=7611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.822785][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.843265][ T5806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.866995][ T43] audit: type=1400 audit(1788731631.362:636): avc: denied { write } for pid=7617 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.944999][ T5806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.958129][ T43] audit: type=1400 audit(1788731631.452:637): avc: denied { write } for pid=7619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.958361][ T7468] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.972189][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.972631][ T7468] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.976481][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.006609][ T43] audit: type=1400 audit(1788731631.502:638): avc: denied { write } for pid=7623 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.066060][ T7468] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.073768][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.105635][ T7468] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.113731][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.125166][ T7402] veth0_vlan: entered promiscuous mode [ 93.169895][ T43] audit: type=1400 audit(1788731631.672:639): avc: denied { write } for pid=7626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.244944][ T43] audit: type=1400 audit(1788731631.742:640): avc: denied { write } for pid=7635 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.280310][ T7402] veth1_vlan: entered promiscuous mode [ 93.343447][ T5806] bridge_slave_1: left allmulticast mode [ 93.343508][ T5806] bridge_slave_1: left promiscuous mode [ 93.343630][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.351461][ T5806] bridge_slave_0: left allmulticast mode [ 93.351510][ T5806] bridge_slave_0: left promiscuous mode [ 93.351649][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.391607][ T43] audit: type=1400 audit(1788731631.892:641): avc: denied { write } for pid=7638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.466727][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.472156][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.475954][ T5806] bond0 (unregistering): Released all slaves [ 93.488818][ T7528] Bluetooth: hci0: command 0x0419 tx timeout [ 93.489843][ T7528] Bluetooth: hci1: command 0x0419 tx timeout [ 93.489906][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 93.538335][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.538897][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.538958][ T7593] bridge_slave_0: entered allmulticast mode [ 93.539658][ T7593] bridge_slave_0: entered promiscuous mode [ 93.544224][ T7402] veth0_macvtap: entered promiscuous mode [ 93.544946][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.545004][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.545056][ T7593] bridge_slave_1: entered allmulticast mode [ 93.545749][ T7593] bridge_slave_1: entered promiscuous mode [ 93.549986][ T7402] veth1_macvtap: entered promiscuous mode [ 93.583770][ T7593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.597063][ T7593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.640115][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.641318][ T7593] team0: Port device team_slave_0 added [ 93.651963][ T7593] team0: Port device team_slave_1 added [ 93.692157][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.712020][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.727019][ T7593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.727079][ T7593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.727115][ T7593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.729452][ T7593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.729462][ T7593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.729474][ T7593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.783338][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.849982][ T7593] hsr_slave_0: entered promiscuous mode [ 93.852289][ T7593] hsr_slave_1: entered promiscuous mode [ 93.854521][ T7593] debugfs: 'hsr0' already exists in 'hsr' [ 93.856891][ T7593] Cannot create hsr debugfs directory [ 93.868869][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.869971][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.869994][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.870013][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.871478][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.871523][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.962860][ T5806] hsr_slave_0: left promiscuous mode [ 93.964800][ T5806] hsr_slave_1: left promiscuous mode [ 93.965389][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.965400][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.967431][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.967440][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.975176][ T5806] veth1_macvtap: left promiscuous mode [ 93.975209][ T5806] veth0_macvtap: left promiscuous mode [ 93.975251][ T5806] veth1_vlan: left promiscuous mode [ 93.975282][ T5806] veth0_vlan: left promiscuous mode [ 94.144485][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 94.157566][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 94.209542][ T5088] Bluetooth: hci3: command tx timeout [ 94.217567][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.217641][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.261772][ T4888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.263653][ T4888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.450322][ T4888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.450357][ T4888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.495378][ T7468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.683086][ T7682] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 94.920214][ T7696] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 94.951310][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 94.956142][ T7696] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 94.959733][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 94.963591][ T7696] iwpm_send_hello: Unable to send a nlmsg [ 95.064741][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.121237][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 95.250737][ T7526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.275242][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.275662][ T7526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.290145][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.306539][ T7526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.312280][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.315926][ T7526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.321453][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.412026][ T7593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.418319][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.429104][ T7593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.434748][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.435208][ T7593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.439552][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.445467][ T7593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.451524][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.472425][ T7468] veth0_vlan: entered promiscuous mode [ 95.492511][ T7468] veth1_vlan: entered promiscuous mode [ 95.554388][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.568921][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 95.568992][ T5088] Bluetooth: hci0: command 0x0419 tx timeout [ 95.586857][ T7468] veth0_macvtap: entered promiscuous mode [ 95.605483][ T7468] veth1_macvtap: entered promiscuous mode [ 95.610024][ T7526] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.623274][ T7688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.623486][ T7688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.623634][ T7688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.623751][ T7688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.623799][ T7688] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.628362][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.628405][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.634581][ T7688] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.645443][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.645524][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.671381][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.705750][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.737164][ T7593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.740348][ T5779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.740407][ T5779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.786200][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 95.786249][ T43] audit: type=1400 audit(1788731634.282:661): avc: denied { write } for pid=7747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.791992][ T7593] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.799688][ T6632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799739][ T6632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.828179][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.828265][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.886280][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.886370][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.899859][ T43] audit: type=1400 audit(1788731634.402:662): avc: denied { write } for pid=7752 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.930524][ T4888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.930564][ T4888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.974900][ T4888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.974935][ T4888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.070015][ T7764] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.245'. [ 96.073404][ T7764] openvswitch: netlink: Message has 512 unknown bytes. [ 96.111559][ T43] audit: type=1400 audit(1788731634.612:663): avc: denied { write } for pid=7758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.172966][ T43] audit: type=1400 audit(1788731634.672:664): avc: denied { watch watch_reads } for pid=7769 comm="syz.4.246" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 96.175090][ T5806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.186377][ T43] audit: type=1400 audit(1788731634.682:665): avc: denied { map } for pid=7769 comm="syz.4.246" path="socket:[28007]" dev="sockfs" ino=28007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 96.186526][ T43] audit: type=1400 audit(1788731634.682:666): avc: denied { accept } for pid=7769 comm="syz.4.246" path="socket:[28007]" dev="sockfs" ino=28007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 96.233615][ T43] audit: type=1400 audit(1788731634.732:667): avc: denied { write } for pid=7772 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.302433][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 96.361609][ T5806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.386689][ T7526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.429379][ T43] audit: type=1400 audit(1788731634.922:668): avc: denied { write } for pid=7781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.485577][ T5806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.503250][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.504843][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.506334][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.506804][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.507063][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.603556][ T43] audit: type=1400 audit(1788731635.102:669): avc: denied { write } for pid=7796 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.637342][ T5806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.734007][ T7593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.756475][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 96.813555][ T7526] veth0_vlan: entered promiscuous mode [ 96.840346][ T7526] veth1_vlan: entered promiscuous mode [ 96.864264][ T7593] veth0_vlan: entered promiscuous mode [ 96.899290][ T5806] bridge_slave_1: left allmulticast mode [ 96.901189][ T5806] bridge_slave_1: left promiscuous mode [ 96.903176][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.909291][ T5806] bridge_slave_0: left allmulticast mode [ 96.911114][ T5806] bridge_slave_0: left promiscuous mode [ 96.912938][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.934167][ T43] audit: type=1400 audit(1788731635.432:670): avc: denied { write } for pid=7810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.027001][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.036310][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.044184][ T5806] bond0 (unregistering): Released all slaves [ 97.063028][ T7593] veth1_vlan: entered promiscuous mode [ 97.073187][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 97.100475][ T7526] veth0_macvtap: entered promiscuous mode [ 97.175865][ T7526] veth1_macvtap: entered promiscuous mode [ 97.266527][ T7593] veth0_macvtap: entered promiscuous mode [ 97.300497][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.336784][ T7593] veth1_macvtap: entered promiscuous mode [ 97.359975][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.423972][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.432846][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.436143][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.441200][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.444747][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.466208][ T7593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.474783][ T5806] hsr_slave_0: left promiscuous mode [ 97.477746][ T5806] hsr_slave_1: left promiscuous mode [ 97.481031][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.484369][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.488042][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.495005][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.502706][ T5806] veth1_macvtap: left promiscuous mode [ 97.505101][ T5806] veth0_macvtap: left promiscuous mode [ 97.507568][ T5806] veth1_vlan: left promiscuous mode [ 97.510179][ T5806] veth0_vlan: left promiscuous mode [ 97.648776][ T5088] Bluetooth: hci3: command 0x040f tx timeout [ 97.648847][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 97.725291][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 97.731506][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 97.795573][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 97.801998][ T7593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.850865][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.850912][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.850951][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.850984][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.851017][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.881189][ T6632] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.998701][ T6632] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.998861][ T6632] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.091798][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.091832][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.134127][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 98.172687][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.172723][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.265957][ T5806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.285065][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.285097][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.291824][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.294151][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.296489][ T7791] bridge_slave_0: entered allmulticast mode [ 98.299309][ T7791] bridge_slave_0: entered promiscuous mode [ 98.305156][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.310715][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.314982][ T7791] bridge_slave_1: entered allmulticast mode [ 98.317999][ T7791] bridge_slave_1: entered promiscuous mode [ 98.361073][ T6331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.361119][ T6331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.416316][ T5806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.431282][ T7791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.449959][ T5442] 8021q: adding VLAN 0 to HW filter on device eth33 [ 98.455305][ T7791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.489868][ T7791] team0: Port device team_slave_0 added [ 98.498839][ T7791] team0: Port device team_slave_1 added [ 98.516469][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.523213][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.532772][ T7791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.533869][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.533894][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.533921][ T7791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.613144][ T66] Bluetooth: hci1: command tx timeout [ 98.635439][ T5806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.711447][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.715138][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.725438][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.730103][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.734465][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.739799][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.757512][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.762188][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.773312][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 98.779291][ T5806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.787719][ T7791] hsr_slave_0: entered promiscuous mode [ 98.790245][ T7791] hsr_slave_1: entered promiscuous mode [ 99.122305][ T5806] bridge_slave_1: left allmulticast mode [ 99.122358][ T5806] bridge_slave_1: left promiscuous mode [ 99.122509][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.139568][ T5806] bridge_slave_0: left allmulticast mode [ 99.139608][ T5806] bridge_slave_0: left promiscuous mode [ 99.139756][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.317810][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.325648][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.330731][ T5806] bond0 (unregistering): Released all slaves [ 99.333294][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.333337][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.333400][ T7827] bridge_slave_0: entered allmulticast mode [ 99.334199][ T7827] bridge_slave_0: entered promiscuous mode [ 99.447010][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.447075][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.447164][ T7827] bridge_slave_1: entered allmulticast mode [ 99.447912][ T7827] bridge_slave_1: entered promiscuous mode [ 99.467084][ T7906] binder: 7905:7906 ioctl c0306201 200000000080 returned -14 [ 99.482054][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.488999][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.498861][ T66] Bluetooth: hci0: command tx timeout [ 99.530701][ T7827] team0: Port device team_slave_0 added [ 99.532262][ T7827] team0: Port device team_slave_1 added [ 99.548093][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.548133][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.550536][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.551395][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.551403][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.551416][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.608388][ T7827] hsr_slave_0: entered promiscuous mode [ 99.609375][ T7827] hsr_slave_1: entered promiscuous mode [ 99.609915][ T7827] debugfs: 'hsr0' already exists in 'hsr' [ 99.609932][ T7827] Cannot create hsr debugfs directory [ 99.729239][ T66] Bluetooth: hci2: command 0x040f tx timeout [ 99.784892][ T5806] hsr_slave_0: left promiscuous mode [ 99.788378][ T5806] hsr_slave_1: left promiscuous mode [ 99.788928][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.788953][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.800569][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.800615][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.811753][ T5806] veth1_macvtap: left promiscuous mode [ 99.811847][ T5806] veth0_macvtap: left promiscuous mode [ 99.812180][ T5806] veth1_vlan: left promiscuous mode [ 99.812233][ T5806] veth0_vlan: left promiscuous mode [ 99.942925][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.947478][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.954137][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.960115][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.966307][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.036757][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 100.045673][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 100.507440][ T7791] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.515462][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.619421][ T5806] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.625281][ T7791] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.630327][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.639988][ T7791] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.654371][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.699499][ T5088] Bluetooth: hci1: command tx timeout [ 100.702696][ T7791] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.708718][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.751003][ T5806] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.802714][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.808205][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.811972][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.817686][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.818003][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.879768][ T5806] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.961332][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.963724][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.963789][ T7914] bridge_slave_0: entered allmulticast mode [ 100.964597][ T7914] bridge_slave_0: entered promiscuous mode [ 101.001311][ T5806] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.010126][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.010189][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.010277][ T7914] bridge_slave_1: entered allmulticast mode [ 101.011099][ T7914] bridge_slave_1: entered promiscuous mode [ 101.020346][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 101.020405][ T43] audit: type=1400 audit(1788731639.512:684): avc: denied { write } for pid=7944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.052729][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.062094][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.094876][ T7914] team0: Port device team_slave_0 added [ 101.104688][ T7914] team0: Port device team_slave_1 added [ 101.106534][ T43] audit: type=1400 audit(1788731639.602:685): avc: denied { write } for pid=7948 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.141542][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.141589][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.141641][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.197215][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.197275][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.197309][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.246550][ T43] audit: type=1400 audit(1788731639.742:686): avc: denied { write } for pid=7952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.262062][ T7914] hsr_slave_0: entered promiscuous mode [ 101.262585][ T7914] hsr_slave_1: entered promiscuous mode [ 101.262913][ T7914] debugfs: 'hsr0' already exists in 'hsr' [ 101.262924][ T7914] Cannot create hsr debugfs directory [ 101.306416][ T43] audit: type=1400 audit(1788731639.802:687): avc: denied { write } for pid=7956 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.379543][ T7791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.379732][ T7827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 101.384728][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.389321][ T43] audit: type=1400 audit(1788731639.892:688): avc: denied { write } for pid=7958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.407498][ T7827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 101.412811][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.440492][ T5806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.452270][ T7827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 101.456084][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.460966][ T43] audit: type=1400 audit(1788731639.962:689): avc: denied { write } for pid=7961 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.469490][ T7827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 101.476107][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.522836][ T7791] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.569446][ T66] Bluetooth: hci0: command tx timeout [ 101.570465][ T5806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.576304][ T43] audit: type=1400 audit(1788731640.072:690): avc: denied { write } for pid=7968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.600723][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.600816][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.621122][ T5806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.654357][ T43] audit: type=1400 audit(1788731640.152:691): avc: denied { write } for pid=7974 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.693189][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.693269][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.721478][ T5806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.763010][ T43] audit: type=1400 audit(1788731640.262:692): avc: denied { write } for pid=7976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.816894][ T43] audit: type=1400 audit(1788731640.312:693): avc: denied { write } for pid=7981 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.016118][ T5806] bridge_slave_1: left allmulticast mode [ 102.016166][ T5806] bridge_slave_1: left promiscuous mode [ 102.016281][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.022092][ T5806] bridge_slave_0: left allmulticast mode [ 102.022107][ T5806] bridge_slave_0: left promiscuous mode [ 102.022233][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.035676][ T5806] bridge_slave_1: left allmulticast mode [ 102.035765][ T5806] bridge_slave_1: left promiscuous mode [ 102.035883][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.041102][ T5806] bridge_slave_0: left allmulticast mode [ 102.041117][ T5806] bridge_slave_0: left promiscuous mode [ 102.041215][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.052609][ T66] Bluetooth: hci3: command tx timeout [ 102.154126][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.158328][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.165908][ T5806] bond0 (unregistering): Released all slaves [ 102.225955][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.236020][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.241011][ T5806] bond0 (unregistering): Released all slaves [ 102.268057][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.268239][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.268327][ T7935] bridge_slave_0: entered allmulticast mode [ 102.269923][ T7935] bridge_slave_0: entered promiscuous mode [ 102.273580][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.273936][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.273996][ T7935] bridge_slave_1: entered allmulticast mode [ 102.274798][ T7935] bridge_slave_1: entered promiscuous mode [ 102.304328][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.336675][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.342495][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.409792][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.412376][ T7935] team0: Port device team_slave_0 added [ 102.443274][ T7935] team0: Port device team_slave_1 added [ 102.459608][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.459674][ T4888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.485596][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.485675][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.485708][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.502386][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.502457][ T4888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.515611][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.515675][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.515708][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.555006][ T7791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.580471][ T7935] hsr_slave_0: entered promiscuous mode [ 102.580937][ T7935] hsr_slave_1: entered promiscuous mode [ 102.581406][ T7935] debugfs: 'hsr0' already exists in 'hsr' [ 102.581417][ T7935] Cannot create hsr debugfs directory [ 102.721352][ T5806] hsr_slave_0: left promiscuous mode [ 102.724865][ T5806] hsr_slave_1: left promiscuous mode [ 102.725264][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.725288][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.734718][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.737985][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.750606][ T5806] hsr_slave_0: left promiscuous mode [ 102.752719][ T5806] hsr_slave_1: left promiscuous mode [ 102.754858][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.757204][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.761403][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.763880][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.770454][ T66] Bluetooth: hci1: command tx timeout [ 102.776133][ T5806] veth1_macvtap: left promiscuous mode [ 102.777863][ T5806] veth0_macvtap: left promiscuous mode [ 102.779818][ T5806] veth1_vlan: left promiscuous mode [ 102.781870][ T5806] veth0_vlan: left promiscuous mode [ 102.785404][ T5806] veth1_macvtap: left promiscuous mode [ 102.787188][ T5806] veth0_macvtap: left promiscuous mode [ 102.790212][ T5806] veth1_vlan: left promiscuous mode [ 102.792578][ T5806] veth0_vlan: left promiscuous mode [ 102.860220][ T66] Bluetooth: hci2: command tx timeout [ 102.993031][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 102.997289][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 103.185002][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 103.214441][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 103.609087][ T7914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.617914][ T7914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.648569][ T66] Bluetooth: hci0: command tx timeout [ 103.705690][ T7914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.712851][ T7914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.713376][ T7914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.722697][ T7914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.728066][ T7791] veth0_vlan: entered promiscuous mode [ 103.730461][ T7914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.739931][ T7914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.794621][ T7791] veth1_vlan: entered promiscuous mode [ 103.864985][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.949409][ T7791] veth0_macvtap: entered promiscuous mode [ 103.955712][ T7791] veth1_macvtap: entered promiscuous mode [ 104.023822][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.028762][ T7791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.034708][ T7791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.065325][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.090527][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.090624][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.110501][ T6632] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.110603][ T6632] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.110623][ T6632] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.110641][ T6632] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.117007][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.117083][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.132892][ T66] Bluetooth: hci3: command tx timeout [ 104.211210][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.211271][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.286441][ T7935] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.289151][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.292389][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.296802][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.300633][ T7935] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.306873][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.309696][ T7827] veth0_vlan: entered promiscuous mode [ 104.317677][ T7935] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.321518][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.326358][ T7935] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.330039][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.348942][ T7827] veth1_vlan: entered promiscuous mode [ 104.472548][ T7827] veth0_macvtap: entered promiscuous mode [ 104.481939][ T7827] veth1_macvtap: entered promiscuous mode [ 104.526633][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.538353][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.570260][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.582253][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.615257][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.615331][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.634333][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.634463][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.692399][ T6632] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.692978][ T6632] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.693085][ T6632] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.693197][ T6632] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.806735][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.806813][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.849218][ T66] Bluetooth: hci1: command tx timeout [ 104.906896][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.906956][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.913050][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 104.929097][ T66] Bluetooth: hci2: command tx timeout [ 105.046939][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.136923][ T7914] veth0_vlan: entered promiscuous mode [ 105.143666][ T7914] veth1_vlan: entered promiscuous mode [ 105.158066][ T7914] veth0_macvtap: entered promiscuous mode [ 105.166845][ T7914] veth1_macvtap: entered promiscuous mode [ 105.183005][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.195935][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.255647][ T8117] netlink: 'syz.6.266': attribute type 1 has an invalid length. [ 105.255716][ T8117] __nla_validate_parse: 57 callbacks suppressed [ 105.255752][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.266'. [ 105.255773][ T8117] netlink: 'syz.6.266': attribute type 1 has an invalid length. [ 105.255782][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.266'. [ 105.255808][ T8117] iwpm_send_hello: Unable to send a nlmsg [ 105.291638][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.292763][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.292976][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.293010][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.382843][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.616581][ T7935] veth0_vlan: entered promiscuous mode [ 105.624857][ T7935] veth1_vlan: entered promiscuous mode [ 105.656676][ T7935] veth0_macvtap: entered promiscuous mode [ 105.671626][ T7935] veth1_macvtap: entered promiscuous mode [ 105.685356][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.690747][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.728581][ T66] Bluetooth: hci0: command tx timeout [ 105.744622][ T8099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.744694][ T8099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.764246][ T5806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.764426][ T5806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.764614][ T5806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.764633][ T5806] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.766144][ T8099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.773318][ T8099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.773366][ T8099] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.780626][ T8099] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.781007][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 105.785647][ T8099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.785695][ T8099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.792681][ T8099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.802841][ T8099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.811498][ T8099] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.819078][ T8099] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.987787][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.987863][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.022712][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.022789][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.033548][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 106.033643][ T43] audit: type=1400 audit(1788731644.532:724): avc: denied { write } for pid=8155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.064510][ T5843] hsr0: entered promiscuous mode [ 106.089031][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.089097][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.175067][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.175167][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.187659][ T8165] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 106.187687][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.187726][ T43] audit: type=1400 audit(1788731644.682:725): avc: denied { write } for pid=8163 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.208130][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 106.232796][ T8166] usbip_core: unknown command [ 106.232867][ T8166] vhci_hcd: unknown pdu 16384 [ 106.232901][ T8166] usbip_core: unknown command [ 106.247261][ T6632] vhci_hcd vhci_hcd.8: stop threads [ 106.247756][ T6632] vhci_hcd vhci_hcd.8: release socket [ 106.263354][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 106.264298][ T6632] vhci_hcd vhci_hcd.8: disconnect device [ 106.359394][ T43] audit: type=1400 audit(1788731644.852:726): avc: denied { write } for pid=8175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.415795][ T43] audit: type=1400 audit(1788731644.912:727): avc: denied { write } for pid=8182 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.457333][ T43] audit: type=1400 audit(1788731644.952:728): avc: denied { shutdown } for pid=8172 comm="syz.7.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.463339][ T66] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 106.466685][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 106.523497][ T43] audit: type=1400 audit(1788731645.022:729): avc: denied { setopt } for pid=8195 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.584134][ T43] audit: type=1400 audit(1788731645.082:730): avc: denied { write } for pid=8194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.673143][ T43] audit: type=1400 audit(1788731645.172:731): avc: denied { write } for pid=8206 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.742233][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 106.783962][ T43] audit: type=1400 audit(1788731645.282:732): avc: denied { ioctl } for pid=8213 comm="syz.1.280" path="socket:[32296]" dev="sockfs" ino=32296 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.799495][ T6549] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 106.805291][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.814595][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.823329][ T43] audit: type=1400 audit(1788731645.322:733): avc: denied { nlmsg_read } for pid=8213 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.861372][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.279'. [ 106.939125][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.276'. [ 106.940230][ T8224] netlink: 36 bytes leftover after parsing attributes in process `syz.6.276'. [ 106.959152][ T6549] usb 12-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 106.962845][ T6549] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.962899][ T6549] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.972079][ T6549] usb 12-1: config 0 descriptor?? [ 107.028986][ T5807] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.168819][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.179250][ T5807] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 107.183046][ T5807] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 107.183078][ T5807] usb 6-1: config 1 has no interface number 0 [ 107.183592][ T5807] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 107.183618][ T5807] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 107.183644][ T5807] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 174, changing to 11 [ 107.230334][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.231016][ T5807] usb 6-1: Product: syz [ 107.231057][ T5807] usb 6-1: Manufacturer: syz [ 107.231086][ T5807] usb 6-1: SerialNumber: syz [ 107.283729][ T8214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.283842][ T8214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.294276][ T5807] usb 6-1: Error in usbnet_get_endpoints (-22) [ 107.470105][ T6549] input: HID 0458:5005 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5005.0004/input/input11 [ 107.491592][ T851] usb 6-1: USB disconnect, device number 3 [ 107.559637][ T6549] input: HID 0458:5005 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5005.0004/input/input12 [ 107.603968][ T8246] fuse: fd is not a fuse device [ 107.607260][ T8246] fuse: fd is not a fuse device [ 107.637892][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.638298][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.770907][ T8246] ref_ctr increment failed for inode: 0x30 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880380472c0 [ 107.785277][ T8245] uprobe: syz.6.282:8245 failed to unregister, leaking uprobe [ 107.812109][ T66] Bluetooth: hci3: command 0x0419 tx timeout [ 107.812176][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.828350][ T6549] kye 0003:0458:5005.0004: input,hiddev0,hidraw1: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.7-1/input0 [ 107.953477][ T8200] retu-mfd 0-0001: could not read Retu revision: -6 [ 107.975616][ T8200] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 108.049361][ T8251] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 108.094592][ T8251] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 108.105427][ T851] usb 12-1: USB disconnect, device number 7 [ 108.283910][ T8273] loop4: detected capacity change from 0 to 2640 [ 108.289099][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.292700][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.295851][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.300679][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.303928][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.308893][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.312239][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.315483][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.320171][ T8273] ldm_validate_partition_table(): Disk read failed. [ 108.322949][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.326118][ T8273] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.328820][ T8273] Dev loop4: unable to read RDB block 0 [ 108.330769][ T8273] loop4: unable to read partition table [ 108.333201][ T8273] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾ìûœ) failed (rc=-5) [ 108.630679][ T6632] syzkaller0: tun_net_xmit 76 [ 108.630822][ T6632] syzkaller0: tun_net_xmit 48 [ 108.652776][ T5815] syzkaller0: tun_net_xmit 76 [ 108.655256][ T5442] 8021q: adding VLAN 0 to HW filter on device eth16 [ 108.702471][ T8287] netlink: 40 bytes leftover after parsing attributes in process `syz.8.288'. [ 108.714706][ T66] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 108.767218][ T8289] Bluetooth: MGMT ver 1.23 [ 108.771762][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.8.288'. [ 108.774880][ T66] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 108.788140][ T8289] cgroup: noprefix used incorrectly [ 109.180133][ T5139] ldm_validate_partition_table(): Disk read failed. [ 109.180195][ T5139] Dev loop4: unable to read RDB block 0 [ 109.180306][ T5139] loop4: unable to read partition table [ 109.254276][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.892214][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.899750][ T66] Bluetooth: hci3: command 0x0419 tx timeout [ 110.179570][ T8309] fuse: fd is not a fuse device [ 110.182283][ T8309] netlink: 'syz.7.292': attribute type 10 has an invalid length. [ 110.399291][ T5442] 8021q: adding VLAN 0 to HW filter on device eth17 [ 110.504945][ T8309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.520250][ T8309] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 110.586528][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.586615][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588376][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588486][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588536][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588583][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588633][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588684][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588734][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.588780][ T8319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8319 comm=syz.6.293 [ 110.624106][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.624265][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.624395][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.624518][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.624629][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.624752][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.624868][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.624978][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.625088][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.625226][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.625380][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.625492][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.628389][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.628991][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629107][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629217][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629327][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629437][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629546][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629694][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629838][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.629952][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.632857][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.632981][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.633098][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.633213][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.633324][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.633875][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.633996][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.640745][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.640929][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.641046][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.641173][ T8320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.861655][ T8317] syzkaller0: entered promiscuous mode [ 110.861727][ T8317] syzkaller0: entered allmulticast mode [ 111.048079][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 111.048126][ T43] audit: type=1400 audit(1788731650.545:770): avc: denied { write } for pid=8340 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.124835][ T43] audit: type=1400 audit(1788731650.625:771): avc: denied { write } for pid=8342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.158690][ T6549] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 111.182973][ T43] audit: type=1400 audit(1788731650.685:772): avc: denied { write } for pid=8353 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.276189][ T43] audit: type=1400 audit(1788731650.775:773): avc: denied { write } for pid=8357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.288586][ T6549] usb 12-1: device descriptor read/64, error -71 [ 111.292851][ T8362] fuseblk: fd is not a fuse device [ 111.298289][ T43] audit: type=1400 audit(1788731650.795:774): avc: denied { create } for pid=8361 comm="syz.8.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.330204][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.337958][ T43] audit: type=1400 audit(1788731650.835:775): avc: denied { write } for pid=8364 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.464683][ T43] audit: type=1400 audit(1788731650.965:776): avc: denied { write } for pid=8367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.554077][ T6549] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 111.580283][ T43] audit: type=1400 audit(1788731651.085:777): avc: denied { write } for pid=8374 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.678775][ T6549] usb 12-1: device descriptor read/64, error -71 [ 111.691249][ T43] audit: type=1400 audit(1788731651.195:778): avc: denied { bind } for pid=8376 comm="syz.8.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.697143][ T8380] Bluetooth: MGMT ver 1.23 [ 111.703789][ T43] audit: type=1400 audit(1788731651.205:779): avc: denied { connect } for pid=8376 comm="syz.8.305" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.800022][ T6549] usb usb12-port1: attempt power cycle [ 111.835517][ T8390] fuse: Unknown parameter 'DÍC�¸¡2÷iÆ^B™0x0000000000000005' [ 111.978552][ T66] Bluetooth: hci3: command 0x0419 tx timeout [ 111.978614][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.083241][ T8411] FAULT_INJECTION: forcing a failure. [ 112.083241][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 112.083369][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.6.312 Not tainted syzkaller #0 PREEMPT(full) [ 112.083393][ T8411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.083401][ T8411] Call Trace: [ 112.083405][ T8411] [ 112.083409][ T8411] dump_stack_lvl+0x100/0x190 [ 112.083439][ T8411] should_fail_ex.cold+0x5/0xa [ 112.083456][ T8411] should_failslab+0xc2/0x120 [ 112.083473][ T8411] kmem_cache_alloc_noprof+0x92/0x6a0 [ 112.083484][ T8411] ? __pfx_map_id_range_down+0x10/0x10 [ 112.083495][ T8411] ? trace_kmem_cache_alloc+0xdd/0x100 [ 112.083508][ T8411] ? security_inode_alloc+0x3b/0x2c0 [ 112.083540][ T8411] security_inode_alloc+0x3b/0x2c0 [ 112.083558][ T8411] inode_init_always_gfp+0xc6f/0xfb0 [ 112.083573][ T8411] alloc_inode+0x8e/0x250 [ 112.083590][ T8411] new_inode+0x22/0x1c0 [ 112.083609][ T8411] hugetlbfs_get_inode+0x39a/0x700 [ 112.083621][ T8411] ? do_raw_spin_lock+0x128/0x260 [ 112.083636][ T8411] hugetlb_file_setup+0x15b/0x5b0 [ 112.083650][ T8411] memfd_alloc_file+0xc2/0x610 [ 112.083664][ T8411] ? _raw_spin_unlock+0x28/0x50 [ 112.083680][ T8411] ? __pfx_memfd_alloc_file+0x10/0x10 [ 112.083700][ T8411] __do_sys_memfd_create+0x236/0x3d0 [ 112.083716][ T8411] do_syscall_64+0x123/0x790 [ 112.083730][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.083742][ T8411] RIP: 0033:0x7f55ed79e159 [ 112.083752][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.083763][ T8411] RSP: 002b:00007f55ee699028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 112.083775][ T8411] RAX: ffffffffffffffda RBX: 00007f55eda25fa0 RCX: 00007f55ed79e159 [ 112.083783][ T8411] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 112.083789][ T8411] RBP: 00007f55ed835024 R08: 0000000000000000 R09: 0000000000000000 [ 112.083796][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.083802][ T8411] R13: 00007f55eda26038 R14: 00007f55eda25fa0 R15: 00007ffcf11c6fa8 [ 112.083816][ T8411] [ 112.148941][ T6549] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 112.170047][ T6549] usb 12-1: device descriptor read/8, error -71 [ 112.439255][ T6549] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 112.460665][ T6549] usb 12-1: device descriptor read/8, error -71 [ 112.478123][ T8433] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 1, id = 0 [ 112.580837][ T6549] usb usb12-port1: unable to enumerate USB device [ 112.587414][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 112.640919][ T8440] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 112.654090][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.320'. [ 112.771329][ T8451] netlink: 'syz.6.321': attribute type 1 has an invalid length. [ 112.822847][ T8456] FAULT_INJECTION: forcing a failure. [ 112.822847][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 112.826729][ T8456] CPU: 2 UID: 0 PID: 8456 Comm: syz.8.324 Not tainted syzkaller #0 PREEMPT(full) [ 112.826756][ T8456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.826765][ T8456] Call Trace: [ 112.826770][ T8456] [ 112.826776][ T8456] dump_stack_lvl+0x100/0x190 [ 112.826795][ T8456] should_fail_ex.cold+0x5/0xa [ 112.826813][ T8456] should_failslab+0xc2/0x120 [ 112.826827][ T8456] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 112.826840][ T8456] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 112.826854][ T8456] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 112.826864][ T8456] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 112.826877][ T8456] alloc_inode+0x68/0x250 [ 112.826894][ T8456] new_inode+0x22/0x1c0 [ 112.826911][ T8456] hugetlbfs_get_inode+0x39a/0x700 [ 112.826922][ T8456] ? do_raw_spin_lock+0x128/0x260 [ 112.826938][ T8456] hugetlb_file_setup+0x15b/0x5b0 [ 112.826952][ T8456] memfd_alloc_file+0xc2/0x610 [ 112.826966][ T8456] ? _raw_spin_unlock+0x28/0x50 [ 112.826977][ T8456] ? __pfx_memfd_alloc_file+0x10/0x10 [ 112.826996][ T8456] __do_sys_memfd_create+0x236/0x3d0 [ 112.827012][ T8456] do_syscall_64+0x123/0x790 [ 112.827026][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.827037][ T8456] RIP: 0033:0x7fd65639e159 [ 112.827047][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.827058][ T8456] RSP: 002b:00007fd6572d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 112.827069][ T8456] RAX: ffffffffffffffda RBX: 00007fd656625fa0 RCX: 00007fd65639e159 [ 112.827077][ T8456] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 112.827084][ T8456] RBP: 00007fd656435024 R08: 0000000000000000 R09: 0000000000000000 [ 112.827090][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.827097][ T8456] R13: 00007fd656626038 R14: 00007fd656625fa0 R15: 00007ffd76954b78 [ 112.827115][ T8456] [ 112.827786][ T8451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.890035][ T8451] md: loop0 has zero or unknown size, marking faulty! [ 113.175137][ T8474] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 113.308551][ T5807] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 113.344746][ T8485] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 113.482030][ T5807] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 113.483341][ T5807] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.487192][ T5807] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.489331][ T5807] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.489351][ T5807] usb 11-1: Product: syz [ 113.489362][ T5807] usb 11-1: Manufacturer: syz [ 113.489374][ T5807] usb 11-1: SerialNumber: syz [ 113.505549][ T5807] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 113.513859][ T5807] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 113.520134][ T6653] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 113.521709][ T5807] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 113.603160][ T8499] overlayfs: cannot append lower layer [ 113.678724][ T6653] usb 13-1: Using ep0 maxpacket: 32 [ 113.684073][ T6653] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 113.685156][ T6653] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.685168][ T6653] usb 13-1: config 0 has no interface number 0 [ 113.688532][ T6653] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.688552][ T6653] usb 13-1: Product: syz [ 113.688563][ T6653] usb 13-1: Manufacturer: syz [ 113.688574][ T6653] usb 13-1: SerialNumber: syz [ 113.691985][ T6653] usb 13-1: config 0 descriptor?? [ 113.697322][ T6653] usb 13-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 113.697335][ T6653] usb 13-1: selecting invalid altsetting 1 [ 113.697343][ T6653] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 113.705921][ T6653] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.706068][ T6653] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 113.706090][ T6653] usb 13-1: media controller created [ 113.716279][ T6653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.740072][ T5807] usb 11-1: USB disconnect, device number 2 [ 113.760379][ T5807] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 113.764903][ T5807] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 113.766847][ T5807] ti_usb_3410_5052 11-1:2.0: device disconnected [ 113.868253][ T8511] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 113.948271][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.949020][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.990400][ T8520] FAULT_INJECTION: forcing a failure. [ 113.990400][ T8520] name failslab, interval 1, probability 0, space 0, times 0 [ 113.994630][ T8520] CPU: 2 UID: 0 PID: 8520 Comm: syz.1.336 Not tainted syzkaller #0 PREEMPT(full) [ 113.994657][ T8520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.994666][ T8520] Call Trace: [ 113.994671][ T8520] [ 113.994676][ T8520] dump_stack_lvl+0x100/0x190 [ 113.994696][ T8520] should_fail_ex.cold+0x5/0xa [ 113.994713][ T8520] should_failslab+0xc2/0x120 [ 113.994727][ T8520] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 113.994740][ T8520] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 113.994754][ T8520] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 113.994766][ T8520] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 113.994778][ T8520] alloc_inode+0x68/0x250 [ 113.994795][ T8520] new_inode+0x22/0x1c0 [ 113.994812][ T8520] hugetlbfs_get_inode+0x39a/0x700 [ 113.994824][ T8520] ? do_raw_spin_lock+0x128/0x260 [ 113.994839][ T8520] hugetlb_file_setup+0x15b/0x5b0 [ 113.994853][ T8520] memfd_alloc_file+0xc2/0x610 [ 113.994868][ T8520] ? _raw_spin_unlock+0x28/0x50 [ 113.994879][ T8520] ? __pfx_memfd_alloc_file+0x10/0x10 [ 113.994897][ T8520] __do_sys_memfd_create+0x236/0x3d0 [ 113.994913][ T8520] do_syscall_64+0x123/0x790 [ 113.994931][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.994948][ T8520] RIP: 0033:0x7f2a37b9e159 [ 113.994963][ T8520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.994982][ T8520] RSP: 002b:00007f2a38b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 113.995002][ T8520] RAX: ffffffffffffffda RBX: 00007f2a37e25fa0 RCX: 00007f2a37b9e159 [ 113.995014][ T8520] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 113.995025][ T8520] RBP: 00007f2a37c35024 R08: 0000000000000000 R09: 0000000000000000 [ 113.995037][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.995047][ T8520] R13: 00007f2a37e26038 R14: 00007f2a37e25fa0 R15: 00007ffd76411888 [ 113.995063][ T8520] [ 114.050593][ T66] Bluetooth: hci3: command 0x0419 tx timeout [ 114.067286][ T8517] FAULT_INJECTION: forcing a failure. [ 114.067286][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 114.067305][ T8517] CPU: 0 UID: 0 PID: 8517 Comm: syz.7.334 Not tainted syzkaller #0 PREEMPT(full) [ 114.067330][ T8517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.067337][ T8517] Call Trace: [ 114.067341][ T8517] [ 114.067346][ T8517] dump_stack_lvl+0x100/0x190 [ 114.067365][ T8517] should_fail_ex.cold+0x5/0xa [ 114.067381][ T8517] should_failslab+0xc2/0x120 [ 114.067395][ T8517] __kmalloc_cache_noprof+0x91/0x6d0 [ 114.067411][ T8517] ? alloc_fs_context+0x57/0xf40 [ 114.067430][ T8517] alloc_fs_context+0x57/0xf40 [ 114.067445][ T8517] ? __get_fs_type+0xe3/0x200 [ 114.067462][ T8517] __x64_sys_fsopen+0xed/0x220 [ 114.067473][ T8517] do_syscall_64+0x123/0x790 [ 114.067487][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.067499][ T8517] RIP: 0033:0x7f98a179e159 [ 114.067508][ T8517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.067518][ T8517] RSP: 002b:00007f98a2707028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 114.067529][ T8517] RAX: ffffffffffffffda RBX: 00007f98a1a26090 RCX: 00007f98a179e159 [ 114.067536][ T8517] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 114.067543][ T8517] RBP: 00007f98a1835024 R08: 0000000000000000 R09: 0000000000000000 [ 114.067549][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.067555][ T8517] R13: 00007f98a1a26128 R14: 00007f98a1a26090 R15: 00007fff59ebfaa8 [ 114.067569][ T8517] [ 114.193816][ T8481] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 114.193860][ T8481] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 114.193898][ T8481] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 114.193923][ T8481] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 114.193943][ T8481] page dumped because: unmovable page [ 114.193962][ T8481] page_owner info is not present (never set?) [ 114.233612][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.8.328'. [ 114.279388][ T8526] netlink: 88 bytes leftover after parsing attributes in process `syz.6.338'. [ 114.339220][ T8531] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 114.476676][ T8534] xt_hashlimit: size too large, truncated to 1048576 [ 114.644265][ T8547] overlayfs: failed to resolve '': -2 [ 114.771086][ T6653] usb 13-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 114.771137][ T6653] zl10353_read_register: readreg error (reg=127, ret==-110) [ 114.945015][ T8567] warning: `syz.1.348' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.199734][ T851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 115.221014][ T8586] FAULT_INJECTION: forcing a failure. [ 115.221014][ T8586] name failslab, interval 1, probability 0, space 0, times 0 [ 115.221106][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.7.352 Not tainted syzkaller #0 PREEMPT(full) [ 115.221131][ T8586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.221140][ T8586] Call Trace: [ 115.221144][ T8586] [ 115.221149][ T8586] dump_stack_lvl+0x100/0x190 [ 115.221171][ T8586] should_fail_ex.cold+0x5/0xa [ 115.221188][ T8586] should_failslab+0xc2/0x120 [ 115.221207][ T8586] kmem_cache_alloc_noprof+0x92/0x6a0 [ 115.221219][ T8586] ? __pfx_map_id_range_down+0x10/0x10 [ 115.221231][ T8586] ? trace_kmem_cache_alloc+0xdd/0x100 [ 115.221246][ T8586] ? security_inode_alloc+0x3b/0x2c0 [ 115.221267][ T8586] security_inode_alloc+0x3b/0x2c0 [ 115.221285][ T8586] inode_init_always_gfp+0xc6f/0xfb0 [ 115.221301][ T8586] alloc_inode+0x8e/0x250 [ 115.221317][ T8586] new_inode+0x22/0x1c0 [ 115.221334][ T8586] hugetlbfs_get_inode+0x39a/0x700 [ 115.221366][ T8586] ? do_raw_spin_lock+0x128/0x260 [ 115.221388][ T8586] hugetlb_file_setup+0x15b/0x5b0 [ 115.221409][ T8586] memfd_alloc_file+0xc2/0x610 [ 115.221431][ T8586] ? _raw_spin_unlock+0x28/0x50 [ 115.221448][ T8586] ? __pfx_memfd_alloc_file+0x10/0x10 [ 115.221467][ T8586] __do_sys_memfd_create+0x236/0x3d0 [ 115.221483][ T8586] do_syscall_64+0x123/0x790 [ 115.221499][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.221512][ T8586] RIP: 0033:0x7f98a179e159 [ 115.221522][ T8586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.221534][ T8586] RSP: 002b:00007f98a2728028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 115.221546][ T8586] RAX: ffffffffffffffda RBX: 00007f98a1a25fa0 RCX: 00007f98a179e159 [ 115.221573][ T8586] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 115.221581][ T8586] RBP: 00007f98a1835024 R08: 0000000000000000 R09: 0000000000000000 [ 115.221589][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.221596][ T8586] R13: 00007f98a1a26038 R14: 00007f98a1a25fa0 R15: 00007fff59ebfaa8 [ 115.221611][ T8586] [ 115.359283][ T851] usb 6-1: device descriptor read/64, error -71 [ 115.599007][ T851] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 115.728576][ T851] usb 6-1: device descriptor read/64, error -71 [ 115.838750][ T851] usb usb6-port1: attempt power cycle [ 116.052355][ T5442] 8021q: adding VLAN 0 to HW filter on device eth14 [ 116.178958][ T851] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.200304][ T851] usb 6-1: device descriptor read/8, error -71 [ 116.438891][ T851] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 116.459959][ T851] usb 6-1: device descriptor read/8, error -71 [ 116.568651][ T851] usb usb6-port1: unable to enumerate USB device [ 116.659303][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 116.659365][ T43] audit: type=1400 audit(1788731656.155:836): avc: denied { write } for pid=8636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.891624][ T43] audit: type=1400 audit(1788731656.395:837): avc: denied { write } for pid=8650 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.905841][ T43] audit: type=1400 audit(1788731656.405:838): avc: denied { read } for pid=8651 comm="syz.7.357" path="socket:[34646]" dev="sockfs" ino=34646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.955723][ T8651] mmap: syz.7.357 (8651): VmData 37593088 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 116.967234][ T43] audit: type=1400 audit(1788731656.465:839): avc: denied { read } for pid=8657 comm="syz.6.359" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 116.967323][ T43] audit: type=1400 audit(1788731656.465:840): avc: denied { open } for pid=8657 comm="syz.6.359" path="/31/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 116.975827][ T43] audit: type=1400 audit(1788731656.485:841): avc: denied { ioctl } for pid=8657 comm="syz.6.359" path="/31/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 116.987849][ T8658] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 116.987861][ T8658] device-mapper: raid: Choosing default region size of 4MiB [ 117.012028][ T8658] device-mapper: table: 248:0: raid: Component device(s) too small (-EINVAL) [ 117.012076][ T8658] device-mapper: ioctl: error adding target to table [ 117.041265][ T43] audit: type=1400 audit(1788731656.545:842): avc: denied { write } for pid=8656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.094220][ T43] audit: type=1400 audit(1788731656.595:843): avc: denied { write } for pid=8664 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.170873][ T8662] selinux_netlink_send: 23 callbacks suppressed [ 117.170934][ T8662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8662 comm=syz.7.360 [ 117.271214][ T43] audit: type=1400 audit(1788731656.775:844): avc: denied { write } for pid=8672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.351279][ T43] audit: type=1400 audit(1788731656.855:845): avc: denied { write } for pid=8680 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.365797][ T8678] netlink: 256 bytes leftover after parsing attributes in process `syz.7.363'. [ 117.366084][ T8678] unsupported nlmsg_type 40 [ 117.426212][ T8683] FAULT_INJECTION: forcing a failure. [ 117.426212][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 117.426260][ T8683] CPU: 2 UID: 0 PID: 8683 Comm: syz.6.364 Not tainted syzkaller #0 PREEMPT(full) [ 117.426284][ T8683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.426292][ T8683] Call Trace: [ 117.426297][ T8683] [ 117.426302][ T8683] dump_stack_lvl+0x100/0x190 [ 117.426321][ T8683] should_fail_ex.cold+0x5/0xa [ 117.426339][ T8683] should_failslab+0xc2/0x120 [ 117.426353][ T8683] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 117.426366][ T8683] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 117.426381][ T8683] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 117.426392][ T8683] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 117.426403][ T8683] alloc_inode+0x68/0x250 [ 117.426420][ T8683] new_inode+0x22/0x1c0 [ 117.426437][ T8683] hugetlbfs_get_inode+0x39a/0x700 [ 117.426448][ T8683] ? do_raw_spin_lock+0x128/0x260 [ 117.426465][ T8683] hugetlb_file_setup+0x15b/0x5b0 [ 117.426479][ T8683] memfd_alloc_file+0xc2/0x610 [ 117.426492][ T8683] ? _raw_spin_unlock+0x28/0x50 [ 117.426503][ T8683] ? __pfx_memfd_alloc_file+0x10/0x10 [ 117.426521][ T8683] __do_sys_memfd_create+0x236/0x3d0 [ 117.426537][ T8683] do_syscall_64+0x123/0x790 [ 117.426551][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.426563][ T8683] RIP: 0033:0x7f55ed79e159 [ 117.426573][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.426583][ T8683] RSP: 002b:00007f55ee699028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 117.426594][ T8683] RAX: ffffffffffffffda RBX: 00007f55eda25fa0 RCX: 00007f55ed79e159 [ 117.426601][ T8683] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 117.426608][ T8683] RBP: 00007f55ed835024 R08: 0000000000000000 R09: 0000000000000000 [ 117.426614][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.426621][ T8683] R13: 00007f55eda26038 R14: 00007f55eda25fa0 R15: 00007ffcf11c6fa8 [ 117.426634][ T8683] [ 117.564299][ T8679] null_blk: disk nullb1 created [ 117.739827][ T8697] macvtap1: entered promiscuous mode [ 117.750311][ T8697] vlan0: entered promiscuous mode [ 117.753026][ T8697] team0: Device macvtap1 failed to register rx_handler [ 117.762803][ T8697] vlan0: left promiscuous mode [ 117.854936][ T8704] macvtap1: entered promiscuous mode [ 117.855309][ T8704] vlan0: entered promiscuous mode [ 117.892779][ T8704] team0: Device macvtap1 failed to register rx_handler [ 117.900616][ T8704] vlan0: left promiscuous mode [ 118.171853][ T8718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.368'. [ 118.448001][ T8745] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 118.532659][ T8755] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 118.600463][ T6654] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 118.606996][ T6654] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 118.635774][ T851] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 118.876106][ T5807] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 118.899077][ T851] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 119.124784][ T8789] netlink: 260 bytes leftover after parsing attributes in process `syz.1.379'. [ 119.277335][ T8755] ceph: No mds server is up or the cluster is laggy [ 119.277368][ T8745] ceph: No mds server is up or the cluster is laggy [ 119.380442][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 119.380498][ T5807] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 119.538939][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 119.545493][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 119.545604][ T25] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 119.555083][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.566752][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.570368][ T25] usb 6-1: Product: á�„ [ 119.572255][ T25] usb 6-1: Manufacturer: ã°Š [ 119.574282][ T25] usb 6-1: SerialNumber: ည [ 119.603351][ T8798] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 119.603379][ T8798] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.603505][ T8798] vhci_hcd vhci_hcd.0: Device attached [ 119.612305][ T8803] vhci_hcd: connection closed [ 119.612590][ T6632] vhci_hcd vhci_hcd.7: stop threads [ 119.612639][ T6632] vhci_hcd vhci_hcd.7: release socket [ 119.612669][ T6632] vhci_hcd vhci_hcd.7: disconnect device [ 119.804034][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.818579][ T25] usb 6-1: MIDIStreaming interface descriptor not found [ 119.859674][ T25] usb 6-1: USB disconnect, device number 8 [ 120.052713][ T5806] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.253488][ T5806] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.335405][ T8824] netlink: 32 bytes leftover after parsing attributes in process `syz.7.385'. [ 120.344806][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.352495][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.355030][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.364960][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.372018][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.465068][ T5806] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.500736][ T8832] dvmrp0: entered allmulticast mode [ 120.570930][ T5806] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.731205][ ** replaying previous printk message ** [ 120.731205][ T8846] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x82604 pfn:0x25da2 [ 120.731255][ T8846] memcg:ffff888057946e00 [ 120.731280][ T8846] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 120.731298][ T8846] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 120.731308][ T8846] raw: 0000000000082604 0000000000000000 00000001ffffffff ffff888057946e00 [ 120.731314][ T8846] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 120.731321][ T8846] page_owner tracks the page as allocated [ 120.731325][ T8846] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8846, tgid 8840 (syz.7.387), ts 120731179729 [ 120.731344][ T8846] post_alloc_hook+0xfd/0x120 [ 120.731362][ T8846] get_page_from_freelist+0x110d/0x35d0 [ 120.731377][ T8846] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 120.731392][ T8846] alloc_pages_mpol+0x201/0x550 [ 120.731405][ T8846] folio_alloc_noprof+0x22/0x250 [ 120.731419][ T8846] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 120.731437][ T8846] filemap_alloc_folio_noprof+0x5e/0x80 [ 120.731453][ T8846] page_cache_ra_order+0x539/0xed0 [ 120.731465][ T8846] filemap_fault+0x1943/0x3130 [ 120.731479][ T8846] __do_fault+0x10b/0x440 [ 120.731489][ T8846] do_fault+0xb3f/0x1830 [ 120.731500][ T8846] __handle_mm_fault+0x150b/0x2f60 [ 120.731513][ T8846] handle_mm_fault+0x363/0xa20 [ 120.731526][ T8846] __get_user_pages+0x8ae/0x2c30 [ 120.731536][ T8846] populate_vma_page_range+0x267/0x3f0 [ 120.731548][ T8846] __mm_populate+0x107/0x3a0 [ 120.731558][ T8846] page last free pid 15 tgid 15 ts 120728824689 stack trace: [ 120.731566][ T8846] __free_frozen_pages+0x79f/0x10f0 [ 120.731578][ T8846] rcu_core+0x5f0/0x1260 [ 120.731589][ T8846] handle_softirqs+0x1e6/0x9d0 [ 120.731599][ T8846] run_ksoftirqd+0x38/0x60 [ 120.731609][ T8846] smpboot_thread_fn+0x3d3/0xab0 [ 120.731622][ T8846] kthread+0x373/0x450 [ 120.731635][ T8846] ret_from_fork+0x730/0xd60 [ 120.731646][ T8846] ret_from_fork_asm+0x1a/0x30 [ 120.731740][ T8846] ------------[ cut here ]------------ [ 120.731746][ T8846] kernel BUG at mm/filemap.c:858! [ 120.731758][ T8846] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 120.804802][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.7.387 Not tainted syzkaller #0 PREEMPT(full) [ 120.809492][ T8846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.812747][ T8846] RIP: 0010:__filemap_add_folio+0x108b/0x1370 [ 120.814725][ T8846] Code: 79 bf ff 48 c7 c6 40 cb fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 c5 79 bf ff 48 c7 c6 a0 cb fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 ae 79 bf ff 48 c7 c6 20 cc fe 8b 4c 89 ef e8 0f fc 12 00 [ 120.821129][ T8846] RSP: 0018:ffffc90005737398 EFLAGS: 00010287 [ 120.823057][ T8846] RAX: 00000000000138a9 RBX: 0000000000000000 RCX: ffffc900079b1000 [ 120.825566][ T8846] RDX: 0000000000080000 RSI: ffffffff825f8308 RDI: ffff888056af04c4 [ 120.828923][ T8846] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000000 [ 120.832368][ T8846] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 120.835338][ T8846] R13: ffffea0000976880 R14: 0000000000000000 R15: 1ffff92000ae6e9f [ 120.837873][ T8846] FS: 00007f98a27076c0(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 120.840745][ T8846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.842869][ T8846] CR2: 00005610256b2e28 CR3: 000000005c926000 CR4: 0000000000352ef0 [ 120.845485][ T8846] Call Trace: [ 120.846615][ T8846] [ 120.847613][ T8846] ? lock_acquire+0x1d1/0x380 [ 120.849126][ T8846] ? __pfx___filemap_add_folio+0x10/0x10 [ 120.850938][ T8846] filemap_add_folio+0x1d8/0x6a0 [ 120.852552][ T8846] ? __pfx_filemap_add_folio+0x10/0x10 [ 120.854418][ T8846] ? __pfx___css_rstat_updated+0x10/0x10 [ 120.856172][ T8846] page_cache_ra_order+0x602/0xed0 [ 120.857858][ T8846] filemap_fault+0x1943/0x3130 [ 120.859467][ T8846] ? __pfx_filemap_fault+0x10/0x10 [ 120.861153][ T8846] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 120.863091][ T8846] ? find_held_lock+0x2b/0x80 [ 120.864806][ T8846] ? __pfx_filemap_map_pages+0x10/0x10 [ 120.866613][ T8846] __do_fault+0x10b/0x440 [ 120.868052][ T8846] do_fault+0xb3f/0x1830 [ 120.869584][ T8846] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 120.871609][ T8846] ? __pfx_do_fault+0x10/0x10 [ 120.873137][ T8846] ? pgd_none+0x9f/0xe0 [ 120.874504][ T8846] ? __pfx_pgd_none+0x10/0x10 [ 120.876032][ T8846] ? find_held_lock+0x2b/0x80 [ 120.877596][ T8846] __handle_mm_fault+0x150b/0x2f60 [ 120.879421][ T8846] ? __pfx___handle_mm_fault+0x10/0x10 [ 120.881222][ T8846] ? __pfx_mt_find+0x10/0x10 [ 120.882744][ T8846] handle_mm_fault+0x363/0xa20 [ 120.884345][ T8846] __get_user_pages+0x8ae/0x2c30 [ 120.886012][ T8846] ? __pfx_mt_find+0x10/0x10 [ 120.887950][ T8846] ? __pfx___get_user_pages+0x10/0x10 [ 120.889989][ T8846] populate_vma_page_range+0x267/0x3f0 [ 120.891706][ T8846] ? __pfx_populate_vma_page_range+0x10/0x10 [ 120.893731][ T8846] ? __pfx_find_vma_intersection+0x10/0x10 [ 120.895602][ T8846] __mm_populate+0x107/0x3a0 [ 120.897088][ T8846] ? __pfx___mm_populate+0x10/0x10 [ 120.899043][ T8846] ? up_write+0x2dc/0x5b0 [ 120.900567][ T8846] vm_mmap_pgoff+0x441/0x470 [ 120.902108][ T8846] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 120.903786][ T8846] ? __fget_files+0x215/0x3d0 [ 120.905347][ T8846] ? __fget_files+0x21f/0x3d0 [ 120.906880][ T8846] ksys_mmap_pgoff+0x3cb/0x610 [ 120.908630][ T8846] ? kcov_ioctl+0x17a/0x760 [ 120.910467][ T8846] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 120.912323][ T8846] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.914285][ T8846] __x64_sys_mmap+0x125/0x190 [ 120.915834][ T8846] do_syscall_64+0x123/0x790 [ 120.917348][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.919370][ T8846] RIP: 0033:0x7f98a179e159 [ 120.920829][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.927036][ T8846] RSP: 002b:00007f98a2707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.929995][ T8846] RAX: ffffffffffffffda RBX: 00007f98a1a26090 RCX: 00007f98a179e159 [ 120.932582][ T8846] RDX: 0000000000000007 RSI: 0000000000b36000 RDI: 0000200000000000 [ 120.935079][ T8846] RBP: 00007f98a1835024 R08: 0000000000000005 R09: 000000002cb25000 [ 120.937633][ T8846] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 120.940165][ T8846] R13: 00007f98a1a26128 R14: 00007f98a1a26090 R15: 00007fff59ebfaa8 [ 120.942754][ T8846] [ 120.943812][ T8846] Modules linked in: [ 120.945849][ T8846] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.976386][ T5806] bridge_slave_1: left allmulticast mode [ 120.976431][ T5806] bridge_slave_1: left promiscuous mode [ 120.976570][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.988856][ T5806] bridge_slave_0: left allmulticast mode [ 120.990855][ T5806] bridge_slave_0: left promiscuous mode [ 120.993130][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ ** replaying previous printk message ** [ 121.114324][ T8846] RIP: 0010:__filemap_add_folio+0x108b/0x1370 [ 121.114406][ T8846] Code: 79 bf ff 48 c7 c6 40 cb fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 c5 79 bf ff 48 c7 c6 a0 cb fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 ae 79 bf ff 48 c7 c6 20 cc fe 8b 4c 89 ef e8 0f fc 12 00 [ 121.114425][ T8846] RSP: 0018:ffffc90005737398 EFLAGS: 00010287 [ 121.114441][ T8846] RAX: 00000000000138a9 RBX: 0000000000000000 RCX: ffffc900079b1000 [ 121.114454][ T8846] RDX: 0000000000080000 RSI: ffffffff825f8308 RDI: ffff888056af04c4 [ 121.114466][ T8846] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000000 [ 121.114477][ T8846] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 121.114487][ T8846] R13: ffffea0000976880 R14: 0000000000000000 R15: 1ffff92000ae6e9f [ 121.114498][ T8846] FS: 00007f98a27076c0(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 121.114532][ T8846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.114545][ T8846] CR2: 0000200000006000 CR3: 000000005c926000 CR4: 0000000000352ef0 [ 121.114559][ T8846] Kernel panic - not syncing: Fatal exception [ 121.162654][ T8846] Kernel Offset: disabled [ 121.164563][ T8846] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:54:19 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85b01a20 RDI=ffffffff9bc65ca0 RBP=ffffffff9bc65c60 RSP=ffffc90005736ba0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=1ffff92000ae6d7e R14=0000000000000067 R15=0000000000000000 RIP=ffffffff85b01a47 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f98a27076c0 ffffffff 00c00000 GS =0000 ffff8880d5b5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005610256b2e28 CR3=000000005c926000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd76951c10 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 387a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd76955066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd76955066 00007ffd7695506c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd656435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd656435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6564357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd656435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f69cb00 RSI=ffffffff81b6be9e RDI=ffff88801f69cb00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f80cacfc286 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000000 Opmask02=0000000011000303 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0f0e 0d0c0b0a09080706 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0f0e 0d0c0b0a09080706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e6f991ce8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6970006e69622f72 73752f3a6e69622f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007f80cabf742d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e6f983520 0000560e6f983520 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e6f98e4d0 0000560e6f9812c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e6f00662d 0000560e6f991ce8 0000560e6f991d08 665f65676e006d72 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e6f00662d 0000560e6f991ce8 0000560e6f991d08 665f65676e006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e40004902 0000560e40991cc7 0000560e40991d08 495f4a484100425d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e6f98e0b8 0000000000000000 000000000000000f 0000560e6f00873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e6f988918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000001 RBX=0000000000000000 RCX=ffffffff81ea3466 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88801eee8000 RBP=ffffc90000137da8 RSP=ffffc90000137a40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=6572203a65676170 R12=0000000000000000 R13=1ffff92000026f53 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820bf8f1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa1e8636fe8 CR3=0000000026beb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 696d5f6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003d8 0000000000005c28 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f698000 RSI=ffffffff81b6be9e RDI=ffff88801f698000 RBP=0000000000000003 RSP=ffffc900001a7df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3aea757e20 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbad95d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe54327156 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe54327156 00007ffe5432715c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbacc35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbacc35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbacc357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbacc35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbacdf2600 00007fdbacdf25e0 00007fdbacdf25e8 00007fdbacdf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbacdf25f8 00007fdbacdf25c8 00007fdbacdf2600 00007fdbacdf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000