last executing test programs: 3m45.949012846s ago: executing program 32 (id=41): r0 = syz_open_dev$I2C(&(0x7f0000002400), 0xa, 0x480) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000002480)={0x0, 0x6, 0x7, &(0x7f0000002440)={0x19, "0e8222606612b745338752553a42f61981a54d27ce3a4313c752f3f77a1c2155bb"}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca58f06ff48ec680e835e75dd8f93283cb0a2dcaaa4b234ff4b0f3df4f6acb709814f10551e1dafebdc2eb668fb61299fde349f6369835385ad6f01175108ebc6e7784a273fe398c930c8d00fb927c0", 0x52}], 0x1}], 0x1, 0x150) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000140)=""/83, 0x53}], 0x2}, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x2201, 0x0) write(r3, &(0x7f0000000280)='0000:00:01.0', 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, &(0x7f00000004c0)) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1af4 1050', 0x9) 3m35.215553226s ago: executing program 0 (id=180): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x300}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x300}) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) socket(0x1d, 0x5, 0x1) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) (async) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x200a0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='/dev/loop0,131072\x00', 0x12) 3m35.097948292s ago: executing program 0 (id=183): bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x5, [@datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0xe, 0x0, 0x4}], "b861"}, @datasec={0x5, 0x7, 0x0, 0xf, 0x3, [{0x1, 0x0, 0x6}, {0x5, 0xff}, {0x4, 0x2}, {0x4, 0x3, 0xaa}, {0x2, 0x4, 0x84}, {0x5, 0x2, 0xe}, {0x1, 0x2, 0x8001}], "41a5cc"}, @datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x7fff, 0x3a5}], "ee5fbe"}, @fwd={0x4}, @volatile={0xd, 0x0, 0x0, 0x9, 0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x7}, @ptr={0x5}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f0000001680)=""/4096, 0xf5, 0x1000, 0x0, 0x80000001}, 0x28) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/71, 0x47, 0x2, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x2c}}, &(0x7f0000000780)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r3, 0x0) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 32) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000280)=0x101, 0x4) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r8 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) read(r8, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001600)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x24}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r10, 0x25, 0x0, @void}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000c00)={&(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0xa}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000c40)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], 0x8, 0x6, 0x4, 0x0, r11}) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 3m35.026871062s ago: executing program 0 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], 0xdc}, 0x1, 0x0, 0x0, 0xc040}, 0x40) fallocate(r0, 0x13, 0xff6, 0x200) 3m35.026212973s ago: executing program 0 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x2d22, &(0x7f00000000c0)={0x0, 0xf056, 0x20000, 0x0, 0x214}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000500)={'veth0_to_team\x00', @local}) (async) write$tun(r6, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "1502162d50e683b140f1ebb9eadd5eabd9112d00dd0ee5a200", "1a6affff0e533d43dbceed833287627c", {"0e62979705f2c4e14fb2dce8dbce947d", "f30a129c69b5c042b2027a7800"}}}}}, 0x86) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r5, 0x300, 0x70bd2d, 0xf, {{}, {@void, @val={0xc, 0x99, {0x2, 0x56}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) (async, rerun: 32) io_uring_enter(r4, 0x674f, 0x782, 0xc8, &(0x7f0000000140)={[0x6]}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000006280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006240)={&(0x7f0000002680)={0x30, r10, 0x5, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x880) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r8, 0xc01864c2, &(0x7f0000001140)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000001180)={0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r8, 0xc01864c2, &(0x7f0000001280)={0x0, 0x0, r8}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000012c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r8, 0xc01864c2, &(0x7f0000001340)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000001380)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r8, 0xc0186443, &(0x7f00000014c0)={0x0, 0x0, {0x30, 0x3, &(0x7f0000001400)=[{0x0, 0x0, 0x200, 0x1, 0x2de50bba, {0x10, 0xa, &(0x7f00000011c0)=[{0x0, 0x0, 0x6}, {0x80000000, 0x0, 0x10}, {0x1, 0x0, 0x100000001}, {0x80000000, 0x0, 0x401}, {0xff, 0x0, 0x8}, {0xff, 0x0, 0x6}, {0x80000001, 0x0, 0x8001}, {0x80000000, 0x0, 0xffffffffffff4ede}, {0x80000000, r11, 0xbd80}, {0x80000000, r12, 0x1}]}}, {0xf0000000, 0x0, 0x3, 0x2, 0x8, {0x10, 0x2, &(0x7f0000001300)=[{0xff, r13, 0x23}, {0xff, r14}]}}, {0x1, 0x0, 0x80, 0xfffffffffffffffb, 0x40, {0x10, 0x2, &(0x7f00000013c0)=[{0x1, r15, 0x5d}, {0xff, r16, 0x2e75}]}}]}}) statx(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x4000, 0x2dd8806920477201, &(0x7f00000003c0)) 3m34.947601554s ago: executing program 0 (id=189): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xc0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0xb1, 0x0, r0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) (rerun: 32) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f0000000100), 0x0}, 0x20) (async) sendmsg$nl_route(r3, 0x0, 0x20044884) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3m34.896719134s ago: executing program 0 (id=191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="140000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040001"]}, 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="140000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040001"]}, 0x58}}, 0x0) (async) 3m19.886426603s ago: executing program 33 (id=191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="140000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040001"]}, 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="140000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040001"]}, 0x58}}, 0x0) (async) 2m51.17733103s ago: executing program 5 (id=673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='grpquota,grpquota_inode_hardlimit=1']) (async) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x5, 0x0, 0x386561e9, 0xe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0xf, 0xb4, 0x0, 0x4, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) (rerun: 64) 2m51.106558949s ago: executing program 5 (id=674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001040)={{r1}, "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"}) r3 = dup3(r1, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001600010326bd7000fcffffff2e000000a4c585f67e5b18d499fef11cf856f0f22071194827e95e08b254aba68e8eab986c5a12921392a5dac07f6065ad1719865b21cc36d31ac3321a353733a1a3cb5d800ac821e5f2d717e3a961e530a179b66ad2a8"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="000001c6", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r13, 0xae9a) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x400, 0x8, 0x80000001, 0x4, 0x7, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 2m50.91711653s ago: executing program 5 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) r2 = io_uring_setup(0x2e07, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000080)="441b4210e08388144ab6ee6325cda6f920ba35176908aa114e471be4848652f1fd7ae8c9a07af3f13af33663ecc1b00662f6879f47bc884dc02c98667d03fc9fbc7f5270704ac89547", &(0x7f0000000100)=""/11, &(0x7f0000000140)="f16aeeeb5b0930d86a76637c02544227a4d1e434d94e7c9d02cdaa3bd4d9600d6d164453bf83a8a9989f06807b008ceb8b4df1e7919d01af44c09f960bfe143f468fa29abe1f4e87998498f3c8a56d09c28ae5d9ea2a07a3bceb75acaf5af8f2ac8a5836ff24fed5ccbf40", &(0x7f0000000480)="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", 0x10, r4}, 0x38) 2m50.866341648s ago: executing program 5 (id=676): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310)="28000000000400000100", 0x0, 0x3e8, 0x0, 0x0, 0x0}) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) 2m50.754755635s ago: executing program 5 (id=678): syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa1) socket$unix(0x1, 0x2, 0x0) 2m50.535311666s ago: executing program 5 (id=680): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 2m50.357278696s ago: executing program 34 (id=680): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 2m22.37543656s ago: executing program 6 (id=958): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)="c118ba7700e3e6be27f1c57f777f82f4d14b331c3116d43437eb22b1313c47e09f1ad3bd511b5bcbb795b980f0698591427f60a1c9f9d837d1816110c1bf8031c274036573faa5e9738c35788a461d49fff2a7a756eeb72c6aeaf8152aee0cd3489e2690cfcec1748a669fc001b9c27ffc5738086f67b9a2b9aa224de893a19109dd4b19f2705e383834fb60d6baa04340617760095cd17102313d47782153f914b37eabc8c1d2bce0f18d494acf27", 0xaf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) write(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0113c1000400000000000000c16f1db769ea0000080003000afad03c02d7e8113b2f566896e4e86069b1ded4d1ba20e20d6c4869166d2f202ebb02258bbeeefa5ad740f1d47127b9085bb4bc84d254e1dc72d62ddb4364dd924da06371f21fddd72fca98baacc6582afde6c953c413f26729ff3b0c58f856a48a55a1273d953f9b0ae7c1cc849708e12446de4f7ec7b648baf73da0", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c00330008300900080211000000ffffffffffff0900e8e320d65e00"], 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000800) 2m22.157185235s ago: executing program 6 (id=961): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x13, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0xa0, 0x3, 0x2) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/raw6\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) poll(&(0x7f0000000380)=[{r1, 0x340}, {r1, 0x8}, {r1, 0x80}, {r1, 0x9}, {r1, 0x1008}, {r2, 0x24}], 0x6, 0x0) process_vm_readv(r0, &(0x7f0000005b00)=[{&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/126, 0x7e}, {&(0x7f0000003880)=""/110, 0x6e}, {&(0x7f0000003900)=""/186, 0xba}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/113, 0x71}, {&(0x7f0000004a40)=""/132, 0x84}, {&(0x7f0000004b00)=""/4096, 0x1000}], 0x9, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/48, 0x30}, {&(0x7f0000005c00)=""/140, 0x8c}], 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f00005a6000/0x3000)=nil, &(0x7f00005ba000/0x4000)=nil, &(0x7f0000ab0000/0x3000)=nil], &(0x7f00000000c0)=[0xc, 0x9230, 0x1, 0x40], &(0x7f0000000100)=[0x0, 0x0], 0x6) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000280)=0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000240)=0x4000, 0x4) 2m22.086038991s ago: executing program 6 (id=963): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async, rerun: 32) r0 = epoll_create1(0x0) (rerun: 32) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r2, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) (async, rerun: 64) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async, rerun: 64) r4 = syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0x7ff}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol\x00\x00\x00\x00d:0-1:N\x00']) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @loopback}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)=@delqdisc={0x378, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {0x7, 0xc}, {0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x40, 0x0, 0xffff8001, 0x0, 0x200, 0x8001, 0x4}}, {0xc, 0x2, [0x101, 0x7fff, 0xfd71, 0x1]}}, {{0x1c, 0x1, {0xce, 0x6, 0x4, 0x88, 0x2, 0xfffffffe, 0x3, 0x5}}, {0xe, 0x2, [0xfa8, 0x2, 0x1, 0x2, 0x7f]}}, {{0x1c, 0x1, {0x80, 0x2, 0x44b, 0x2000, 0x1, 0x5, 0x4, 0x2}}, {0x8, 0x2, [0x101, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0xa, 0x6, 0x1, 0x7, 0x10000, 0x9}}, {0x16, 0x2, [0x7, 0xe8d8, 0x0, 0x3, 0x4, 0x1, 0x5, 0x3, 0x3ff]}}]}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x81}}, @TCA_STAB={0x19c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x40, 0x7, 0xfffffff4, 0x0, 0x3, 0x10, 0x3}}, {0xa, 0x2, [0x3ff, 0x319b, 0x6]}}, {{0x1c, 0x1, {0x99, 0x8, 0x5, 0xf, 0x2, 0xffffffab, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x0, 0xd, 0x8, 0x0, 0x2, 0x0, 0x81, 0x2}}, {0x8, 0x2, [0x1, 0x9]}}, {{0x1c, 0x1, {0xb8, 0x0, 0x4, 0x1, 0x2, 0x1, 0xf, 0x8}}, {0x14, 0x2, [0x3, 0xf33e, 0x0, 0xc, 0x7f, 0x2, 0xfff7, 0x8]}}, {{0x1c, 0x1, {0x5, 0x7, 0x3ff, 0xb, 0x2, 0x5, 0x8, 0x5}}, {0xe, 0x2, [0xffbd, 0x4fd2, 0x8, 0x0, 0x8]}}, {{0x1c, 0x1, {0x8, 0x9, 0x0, 0x6, 0x0, 0x0, 0x38f7, 0x4}}, {0xc, 0x2, [0x4007, 0xa, 0x9, 0x6f]}}, {{0x1c, 0x1, {0x7, 0x0, 0x5, 0x7, 0x2, 0x8f, 0x2, 0x2}}, {0x8, 0x2, [0xb, 0x8]}}, {{0x1c, 0x1, {0xac, 0x10, 0x5, 0x2, 0x1, 0x8, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xff, 0x4, 0x4, 0x1ff, 0x1, 0x30a, 0x9, 0x8}}, {0x14, 0x2, [0x6, 0x0, 0x101, 0x1000, 0x1, 0x8, 0x1, 0x679]}}, {{0x1c, 0x1, {0x26, 0xb, 0x6, 0x3f, 0x1, 0x8, 0x0, 0x5}}, {0xe, 0x2, [0x81, 0x6, 0x6, 0x6, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa8b}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x3, 0xe, 0x2, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x1, 0x839b, 0x8002, 0x0]}}, {{0x1c, 0x1, {0xa0, 0x6, 0x8, 0x5, 0x1, 0x5, 0x9, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x81, 0x7, 0x5, 0x9, 0x2, 0x4845e0e4, 0xfff, 0x8}}, {0x14, 0x2, [0xdfb, 0x8c6, 0x6, 0x4, 0xfffe, 0x0, 0x0, 0x2934]}}, {{0x1c, 0x1, {0x4, 0x6, 0x7, 0x7, 0x2, 0x1, 0x10, 0x7}}, {0x12, 0x2, [0x7fff, 0xd838, 0x4, 0x200, 0x3ff, 0x2, 0x9]}}, {{0x1c, 0x1, {0x3, 0x2, 0x8, 0x5, 0x2, 0x4, 0x200ab}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff48b2}]}, 0x378}, 0x1, 0x0, 0x0, 0x10004}, 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000180)={r4, 0x533d9a23ac87c5ef, 0x3, 0xf, 0x5}, 0x1) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r7 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) (async) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) 2m21.833973215s ago: executing program 6 (id=965): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002a000701fcfffffffddbdf250201"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x11) 2m21.556718015s ago: executing program 6 (id=968): open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x5b, 0x5c}}, 0x40) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x40}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x84000, 0xad70ec8a93fcfab6}, 0x18) readlinkat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/188, 0xbc) 2m21.467356732s ago: executing program 6 (id=969): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400be83", @ANYRES16=r2, @ANYBLOB="0100000300000000000003000000200001800d0001007564703a73797a30000000000c0002800800020010000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e21, @multicast2}, 0x154, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000000c0)='wlan1\x00', 0x3, 0x1, 0x1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x2, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000000000008000000720000014f7ffff0900000009000000af010000a2b9743b905133716e0000010000001000000008000000020000008af7ffff0600000009000000f7090000030000000100000000000000040000000f0000000800000000020000ff01000009000000ff0100004f09000001000000cbd9e573090000000000000009000000f7ffffff0004000005000000ffffff7f0f000000bf00000000010000000000000000010001800000ca00000000010000bbb9080f2e00000003000000080000000800000006000000b10000000700000007000000000000000001000004000000"]) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x7}) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) sendto$inet(r0, &(0x7f0000000040)="af2fb81e40224da21e4bac2951a38e004e88826ebcaf919fa24279a478d60149401be681e167c36bdc49dc7fc6f47554d8978b47ad5cedd4fb6b6162634c20", 0x3f, 0x48000, 0x0, 0x0) 2m13.016119273s ago: executing program 1 (id=1040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x564, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2, 0x0, 0x20}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x564, r1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2, 0x0, 0x20}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) (async) 2m12.934108549s ago: executing program 1 (id=1042): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x2) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x1}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r1, 0x3}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000000140)={0x1164, 0x0, 0x701, 0x70bd26, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3ff}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="4da6c4ea74f5dc52c77a3f8d5e220d17b268788bb73b2e6c378ec062670de2fffb9346db043cab007fdd676b21238d15a8f55dd217b20dd24fbf0778573532befc1cc8e50932c85fd1d1e26380e61282e3d5b33936061d44ff16a5ea7a3e42296e186a6364dd71987a583d0f36ebe1d3646659e442408f57ad197be51bd26608543e3c69a3ed8147f45b42d81e69739976d4899d6059aea48b4d3fed42662c9c54124a45d133d166863983002637797882fb8626bba31bb5c11912ceff8f8a307f37f8dd4a9fd480e8ab31ac9a05b7e61c01de082fdbbea56741280cd50d6e04ba5337909abb2c3ba06b4aeef5048c48550d9ebc20c095ce8e1d816b7161869bc584596548f25225ce40ff9ae5dadbc5846b0a6312543b3009c7a96be081f888fc1ac4dcd3bec54ce690eddbcc59a5a46efc99fc73dbfb7aa65a2c44094d810138b0c7169619bf567a9671f0319409d7b91c5ab03eefa5a67ce6c9e6829011eba4f8bb08e356431ad8a2696872b56d945d905f00cb2c485d899cb8833f3b9ab41c5852369aec655604a99def6913a05fc370f0c0e2a1763fb0e12ad848d9ae401b684134ec4872bf2712da88dd58de89c1eb87c0d424928d516da2c94b66a01304a2c8524c2c5c80a72b089124a0d9a8d74eb2375006c3c7aa917e05826361b09f22913e6691d1ea7a7e1a491337505b7ea590aeb0541082ecc849a7bf1c952293ede30c9c00ee1d3a1c3067d82ef2089512f1710ac7f158693198aa94179944d01e09c5927559fce9646dea269ce980beaed5564b6a488215539199ab1dd845bc3126e1660b875d4f5c1eaade666836665de497355272b19434b02b23f4e8577e7e07cfa61b416d20bb7428088fa8c4541c84724412c27ba89904d07655b56827a36c633d762cc73af007d9a6cd5042aa7a2a69e9a7bfb4160b21f5249bd29c7c8b56faf2ab0148119244abbe5a5c9216cfa1773b098d71d6cdfd54c720814ca22b4fec9e45bd0de68e7cd9b52d3904795d860a93dc840a99221124648aa92ee613b85624d14db722ec6a9d6ef5fdd78528c0f19815355d38ba6c5db03fd3a46ec8eb62e281bb97bb70c96fde3895181d19139eb0b7b6b0364cea2ff7635f71408eef3c11de47da039ade33af4cfeb546ae2739a0511bc13d127043f794a1a4d4f63e701178a6e8ee5f42869d38662d535bed47a2fbd9157ad0c88f0c64012dbbc0c22c8a887741f193cf9505ffb96dc388e11a23e24c4b34c92755a90118a4df18f95831095fa90c9674d12a1bf92365c1a0e03f38f1d2226735112628ce88f37190c182a8fe3a4b88fc53892e738cb9d63c95e998517d2fda79c63cd046008bd1d885ce7e24661440356f0a34b4dedd012c1a18e6a346aa9e12bc144fe1565ccb9420f7f83388b337127b3804ea6c9fd6d49af79b11fe984dc4b2761d361840c65cac3a0ad55d6f12424ab58fc99490f589c086750f0c045e3914d57f4c99bae56c60cb0d385ddc3fde0fcfd10b37c0f2c54043d4a5f16b82a0609710fc9dd8d7ed8dca723b9640575c847a47f01f4a64a5efc421fa92b1370601a3335afa1a3668894890181431aa38a1befe6d963fad31ccf37ce0e073893e63ad9e44898bcc4d748f7dde36afa2b44df19381d752b46e45c37a8b74fd9d2f1fee0361b5548ca206ebc696412f401213778f5f35e6d809c613f559936efbb320477286f10ac0a6e2b12b067139a3028156e4949a1d10441c9791facdff1811acc4bf9ddc824a65699145adde36b277b88a65928cd087357dc8b6ad4994d52c37170aa066f8f5d1c745f9e32291dcf8830dd3af4ce8e23e97b6c87cab2a6d67096a36db6bc0dfe227064482f59b8037ef410f83c5f740f0003c4f17d280ed64429a79fff14b7849ea12908bc8ded51f0f5694e881c599c985a300cf7350acb40cc44eec5fe735c687717fb9b6027ba7e53a384b77142ed51841fe414f611cd92f041e70ad242fe942aa3b56e47b51bdedb0ab548a38b305edc5ab3f1c4820e5ace2933755cd91257fbd69627ad34023cd575530b51142d34402c5db1011f8d01e7779bc1af5a805934e8a364b273d91b81f00df4979ecdacac4fd763a3b60f8ac826e8874b216687625f63a066373e93bc8bee3029d222aa5a28318cf456bc39ee159ee86fe6148b725c6f0f8d19128b5658a96593d348bba60967612fd0aa3345453d43b1ec0670d16db2e90ec60dd713d1f15b96dedf9fb0da98b2c94ad3d4c3e2366e0918b60e7f96fd8cb0993689c4684e59ec820134185238e2415a288962c8cad28482145038f785d3e8592f7699b8de37c5470f54dfc808bbd143c8f7c6487d2065d818ea026795c1e8f3f2ba9000f5530a0ea702d17502dc2661bb254fead482d612541d06001417f74a5a460f3d3b281ba7381e9a1b8fc14b1da42c700b24f4beb79cc1cd51bd90dbb49998e1de410fcc72774f90f2f6baad465a13f57648a6b15c7606a47a33325ddefaeea3f0446db29215b2bf0b16b37a39293d83e2974378e4029166b38c4480f577e3b2d408fd45e07275bad7f595ff484b17027eb7ca01ae3163ce56607b0b6ff8bf918e9edf14b62ddff9e10a82ea8fd0ca131dbfc9703d3568b40ba87c1df0b66c7b1d1af3668c609289da7b96ca136ca7fa7e7ebdd9499e7583a684620010e269569dcd9950b87b9fccb0c2488aced9c62a077f9a45b3797fb927f76273e4c2bd18ce84dc9464d82cbf03e4bdd0bf381c5220001a1a9e9d482bda3180c98852a09e8e62f0dc62aaae4d02f75922c28b168afe0329ab781faf2695a6efe8f58c07c004c2a647ac1910d1a176a3a2995799dad8d92342cb16a1f346614e6fc915252eaaceec21e1bb4261586bf7c46c39b917d775a136d4ea11995522b3f78c75feb2d6fdf857a62852cdb4748d540e076f6b5e95a857c639a76e6e4ca809d853dd1700735f58cf4aedb395ca14310aeac0e68a15da008b4d803f6d8160ba19138d56014dd9aba2e78f90e598acd2da3a947219f57ad97b07e2eef8ea08bfdcaec300a3d4028121f5448efb17b432aa4427ae83d17f7567394cfd7fa9c10e9895eda81b53167915532a5a51dac0bd47b986af4f2c9de55a7347c3bc80955707490c74a089ecac1bd2a5aa54cc72eae201b5795950f782f0c2e3a5c2e6efa2523924df6925d870aaccef773f518833b1fd52404d25287e50962b8877635fa7a553e7aac03be321f9cde816f62287a02aee650ff33da50e75fec152757063321ea238f6430f81486ef3843d19167dd19ba8e609d7dbacafe467e5a47b555041fd96f93dbc5e622acf15caaa5518e9fe53fc59535fa724bbced5ef57f6d827e32bf99eb12af7d86c264dfc8b56210ba9e356a77fed44c6cdae444e431d2a19a24acded688b073b6b5be0c2bae49ee940faf3a141c86de5b0c285b3aaef7613142b69e5b63d62f6359337332e07f28450df62b8fb57d4d353ae8e0735f2cde8b163a43493ba42931a55ed0d223f435ab8b3af437ae35e63364a91564c3eb6cc83cd5b585336e2b1affe808f94780b71ae7c18533c5ef37b9bea2a86076ea1c56cf67f0620d519c99d567d452f6d35341edfb1a617aaea4681bf41e9c24886ec0002cb8ce372e41a07a9243bd449cea325cd353d27096caaf9581e2a19e4090f636da378eadc8e1348c90539972b1f07e9999771c216dfa13d416119110ba388a313891b04124bc90667113747c3fe9c842ce5017626cc2ebd4637d741be1a18882fe2097e6dd59c6cf5f101f2c7aa8e27a9ba393c0e335ef194f35f30f78ca8b1a4d80ab1b517c6a4fba049596503a72e0efc407fdc07737183237690bf78bcad745cb8ba493170863b3e1efcceafa0c2ec08264e99352c0e1238dc061c3803275786afe75ef5ef852b8f105163e2e976d7f4f9ec34b66818d94b8e0f4e490a0a3469b06e9f757c90ef0474d7e22f5f1d267d1e554d630f24109e3101a0028c4b57ec2656919786525464ec4e8ecb61de01c834d6346a671ada8cc9fecb2970f56ef214a65cd1ed55c64785597b6c3cb150cfe3b61004fc73dee48db10a7ab6ad3d813241fe0a019afb39880f438343a39178991e31b74a4ef53863bcc83730ab3655db4475b8149da0ca74f0683bebb42105fbe15a1a8570c4dba57d5827ec8bce92e7e59a705e1e176fada449e17afcadfe2b6a58d9c3858aeb0830219cf6d3179dad7b67b47399bf8fbeccc1bb12aff41bdca5ff0fff2eca79813c16e841eb80d970a145c49077fee4f3b094f588fe2b08c8685534a6b21aef2a0fc786f714d0bdab374f2afc0b500c798601c299d97ced65084372c91b2ee64a77a5dad0c2b16b10d8a7d07d55011dc07054fabb4feaab6719a504cdc0e3bab12b055b4f2f296a2b7bc8f61a659b6a21420a3cd7fd1db23e6399d86dc7705c5ee40b30d9232066e0c8cfd9a242e12403eae64e89965ee398dd2c348bb0dce4fbd0962f93566f1e5c1bf25bcef363210cbd8b6b5d0dd0738cd4b110b17cbbcae458f9679f595799f0c86f7d634e760e72c09c5001761330550ec53badaf8f2070a957c2848e85c9024da621d03aa6b222dc3ebe1113b82913d4479661b9d196d17cd6da433281fd9a3a7b8b7ce52fdc7c58d6a51feba5ba158ee494c6357b4e15fb3d3da72dd625ba7d701be9a26254489f037ea4f601112d874eb2ac7f2ec6ad28fece701e362597ae39c3f8f4593de31917469dbcdae7a9aa0dc3ee9f9ded13dca8582212d69a82b60f9489f94ff40c150dfec2171423465032311ef3a119697f8b14471c66ce20cdd906694cdbf53431036a4e0f904ebc3e2bdefdb2e12225b3fd7289e182854a3a74a296e015c9338a9c080da52ea3f49076696699803d2fc7e70c60bbffe519e9b6ae6677b431245fb52618f0194b5010cd6be1422303bf7d4b52fd4f0755725318c6d6a8d9173fb42cab6625f72ed743f4f060d5631a7efb036f695779837d999c5c341284468739a8b28e74487ddef455010c31c0d559c470b330ee8e9dafa00f32b2dd9518f26fdcb83a552bf19013474391648d6a946a3bfa41cc93be8c953bb24c5bfeed836ee4116e643a02cb96be38f2c36dea7a0a0169322e965b98ff6eae4bed84819db8c221564d2b9ef2d7eab64694e879f3d39bf51392d4cf5a858b2e3c7f002aaf7b4224edb409cbd6743092218833267cea0be43d0f6ab127641ea9240ed0a1928aaea8c2648ce99eef4f42637a9ac6e438d5db27370f4a2fcd8690cf0203b17f3a04bf097e7e2e58b3b21475e6d403253f909e594956fa042ffa7faec26636fe95bbc4f95c3290329e879487b38dd4e7c5e3bff1d544533ad99fc3e3d4066fc80a56606d49caf6683eba4dc8efed789f7091480bd61e49464e61b85f72404395e6148239541ee39c74dbace2420e15b25a226146b02e2e4f4645277e4826b046d3285d0df9e5b792c42bad7c2df2c05a6a492753e061c44d47122b2e12afda3340af1154d7d8abea7d9434d3c73b9a8cdae6795f2c72e61c72f3d458a8f92119074240fb14a3f256994827ad6b35ad43ae39b23323d9a17a103839868ac6263f943099a117e7145b35380d48c1ebe47e3ad2d0cb990f1fafae73c94bb37ea6ebf237a7f24b5a559a51fe9584702b6d20fa4e4bdb704c9efc31ca2b6151ec083438a9de9df98813282ffef8229ff49beaec1845a67bd17cdaa7412e84ad7cc15f83ddf165108938e3b133066d74012637bf16c72c6d2ee4e01edd20c57d2111c854a6ba3825216e6a13aa42fa8"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6735}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe1, 0xa9, @random="9eef598873deef5623446a5fcd16295ab4a3291a4778d63412f105fc000647a09f31cd7ab9c6e40c892581e6ceee7f99eb403efffd365884be9b0570268d03e0a599310ce8b2e12f953c69538d6139d9b44f1940d9ed33087825b9483ac48c91c27bf98166d36a53838492afcf465302030fd62c837638013b9d373eacd5389ad406c292de72801f79a54ca6e243d727a77e74b3ac71ab4db15803b04849acae8632f3c0fd54c23032cc3eba3a47868e2401cd6ee08aaaf7746d912f6f34187169994daaa3355706c19f9b4991f74610a355ef528646aa9067a4202086"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x7, 0xa9, @random="5aa9b8"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x1164}, 0x1, 0x0, 0x0, 0x800}, 0x80) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001340)) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) ppoll(&(0x7f00000013c0)=[{r0, 0x2042}, {r2}, {0xffffffffffffffff, 0xc200}, {r0, 0x1}, {r0, 0x9002}], 0x5, &(0x7f0000001400)={0x0, 0x989680}, &(0x7f0000001440)={[0x100000000]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0x101, 0x8000, 0xfffff561, 0x30a06, r0, 0xc, '\x00', 0x0, r0, 0x0, 0x0, 0x3, 0x0, @void, @value, @value=r0}, 0x50) r4 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x401, 0x1000000, 0x50, r0, 0x20000000) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2000000, 0x10, r0, 0x0) syz_io_uring_setup(0x7ab1, &(0x7f0000001500)={0x0, 0x148b, 0x4000, 0x0, 0x34a, 0x0, r0}, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x0, &(0x7f0000001600)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r10 = io_uring_setup(0x5d93, &(0x7f0000001640)={0x0, 0x272d, 0x100, 0x2, 0x1d3, 0x0, r0}) syz_io_uring_submit(r4, r5, r8, &(0x7f00000016c0)=@IORING_OP_TEE={0x21, 0x64, 0x0, @fd=r0, 0x0, 0x0, 0x8, 0x4, 0x0, {0x0, r9, r10}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r11, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x240000a5) r12 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r3, 0xc602, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001880)) r13 = syz_io_uring_complete(r4, r7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r12, 0x8983, &(0x7f00000018c0)={0x8, 'ipvlan1\x00', {'geneve1\x00'}, 0x8892}) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001a00)={0x1, &(0x7f00000019c0)=[{0x2, 0x91, &(0x7f0000001900)="40433617a37567246a3753c32b4011a7af961f3b3f01d843aba3b4cc042c8a042d8ae6f6e553708c118b9f9782914e03035fe311da8aefc041d913cdcf6e1cc95c857c8c66e9d0b77d8defc2a619582d8981ad7b4eb13c55996fe59c0eaa69a1fd8d240852690fa530ca855fc15d308cedcb8a2ad9db435a6d0e285276a32679b0ffef39644a51a96282da15770cb203b3", 0x0, 0x1}]}) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r0, 0x80207501, &(0x7f0000001a80)={0x0, 0xffff, 0x8, &(0x7f0000001a40)}) syz_io_uring_submit$UBLK(r6, r5, r8, &(0x7f0000001b80)=@ublk_set_params_sqe={0x2e, 0x9, 0x0, r13, 0xc0207508, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {r14, 0xffff, 0x70, &(0x7f0000001b00)={0x70, 0x7, {0x0, 0xa, 0x9, 0x39, 0x9, 0x94, 0x2, 0xfffffffffffff800, 0x9}, {0x100, 0x6, 0x7, 0xe1, 0x8}, {0x6, 0x8, 0x2, 0x54f}, {0x4, 0x3, 0x25d}}}}) ioctl$EVIOCGRAB(r13, 0x40044590, &(0x7f0000001c00)=0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$pppl2tp(r13, &(0x7f0000001c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r15, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e23, 0x17d54466, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}}}, 0x3a) 2m12.754267582s ago: executing program 1 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x220, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private2, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd05}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x621}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x52}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x324, r1, 0x521, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x12}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x2c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "b342a8963208417a7e0c852b4f4e1979a8c70b896114ad98e9b55589042aab043399ce390ec4cbfb0628b8dd9cb4b4dbfe4cefb7b899e9d70b809be8250e877ef5a5e207e18d7394ece742d033735c07996a1881257096733a206deed626e15a0049cdc7ff09bbcb28944f85a0e4bd64a0ead8016fb3277a44a453e55a3d549e1db80f62876f2332ba0aa6a3af5c2d71d828f7c402d6d271050afe75ce266b39f36c7e7a924d3dc643ee6ad071a373a4beaa6ad0c1c50864ddae9f38f231ae"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "dd4f50139e7964ce5c9b67555bb114637a84e94aa270593f297c76a507ebc4b9754cbe4a274bb09c1a49f1efb0c163e883cd39ed0bcc768f4bdfbd85473f1cd5e8c9d33268a790d877c16bde41d1aba2d4356cd5c263ff936205c858b0e70fabb459636b21c01cd63661a4a85b3e3b1aa592154199095949317312b9dd5364012290d0457b56200abdcc293be0bb0856e8dcd59f9dbe02ade6ce3fd0c3ba8c4f88a863eb7708416162303752452a9eeb6ba36a29ad9e03adb02835894838"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!{@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{:@.+{*,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^-,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%%}{(\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}]}, 0x324}}, 0x4040000) 2m12.637412146s ago: executing program 1 (id=1046): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') lseek(r0, 0x2, 0x0) r1 = syz_io_uring_setup(0x1413, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d1000000000fff50000000000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) io_uring_enter(r1, 0x39d7, 0x1, 0x1, 0x0, 0x0) r3 = epoll_create(0x4) epoll_wait(r3, &(0x7f0000000180)=[{}], 0x1, 0x0) 2m12.477231828s ago: executing program 1 (id=1047): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000009c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000840)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000008c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x200, 0x0) 2m12.237673442s ago: executing program 1 (id=1051): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x200, &(0x7f0000000100)={@_ha_fsid={[0x79b5, 0x3]}, {0x101, 0xff7f, 0x400, 0x3}}, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0xe13d}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000001200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 2m6.434538016s ago: executing program 35 (id=969): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400be83", @ANYRES16=r2, @ANYBLOB="0100000300000000000003000000200001800d0001007564703a73797a30000000000c0002800800020010000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e21, @multicast2}, 0x154, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000000c0)='wlan1\x00', 0x3, 0x1, 0x1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x2, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000000000008000000720000014f7ffff0900000009000000af010000a2b9743b905133716e0000010000001000000008000000020000008af7ffff0600000009000000f7090000030000000100000000000000040000000f0000000800000000020000ff01000009000000ff0100004f09000001000000cbd9e573090000000000000009000000f7ffffff0004000005000000ffffff7f0f000000bf00000000010000000000000000010001800000ca00000000010000bbb9080f2e00000003000000080000000800000006000000b10000000700000007000000000000000001000004000000"]) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x7}) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) sendto$inet(r0, &(0x7f0000000040)="af2fb81e40224da21e4bac2951a38e004e88826ebcaf919fa24279a478d60149401be681e167c36bdc49dc7fc6f47554d8978b47ad5cedd4fb6b6162634c20", 0x3f, 0x48000, 0x0, 0x0) 1m57.20833239s ago: executing program 36 (id=1051): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x200, &(0x7f0000000100)={@_ha_fsid={[0x79b5, 0x3]}, {0x101, 0xff7f, 0x400, 0x3}}, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0xe13d}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000001200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 32.764720988s ago: executing program 4 (id=1978): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$sysctl(r1, &(0x7f0000000100)='4\x00', 0x2) (async) write$sysctl(r1, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) fcntl$notify(r2, 0x402, 0x10) (async) fcntl$notify(r2, 0x402, 0x10) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x5, 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1000001, 0x810, r3, 0x26f6e000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e8"], 0xb4}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x4, 0xd9b01) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r6, @ANYRES16=r2, @ANYBLOB="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", @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x44851}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r6, @ANYRES16=r2, @ANYBLOB="df4b23b3c121f3eb05b54aa450e0a6941b361e42a7da62bb2bd68d83e0152b375c59b845d86bf838e828f461391395130838e3db63e8edad50efb371561e31b37cdcd7ec8adb98c7e9372a9f31f86b6f1395ec1a17cf03c9b8fc55ff45ad6ca13b4dc8db190c6cac909faa4bc8c9ddc3184aa0792685685df9cbd6900b6da1ce286b84e4a0e87e877efc298a61b24e3204470455b32a3cc1447dee58648586d67b657c886425cf734147bc1cb43d397e1d9de783020dd1386d993287325cb57d56cb5bf2453de7a9518e93f984fa650894cc949e878fb15326b1a685339d9328b744f8bef2ebddefc988a67fb38c77ca33af32c80586127f3eedbae2da6dfbe7ae6ac238f51e0fee794d46cb703e73f1146fe731b7dc12693238b2b734f36b58a34ede8c4c84fcb56c5fe0f96ee1386f8d239fdef33fdef8257dd29b57d2657a3a412c4878f7d6d740cfdf3b7041938583b6a268bcfddd6e1358629e49cab8b49031b05cc2a5234c49e2ef127ec244c1fb4f5512c6a08ec9350e6cc9af77df4a780ee7fc2a83dfa4d0e6000bc71f0ea8c6c34622d3524e651c46174f8f81e0c5ae354989b56ea926c6d01d2a11b3e924ef2223b3a24a4b2407ffd4f8a41cf4338297a15fb7b226fbe9d51d1e4aaf255cd72c0e8451d311be11739bfceb96bd0864bed423a28d6ee8af939cdcd576c4dbfc957952457c166d07e87e8a1cff58205a3a923f0e9526cf0992fff8fdd08b98acc439727ac2587b7cb6a7194930131f4b2985b03eadc40dd8edf68c6b17860de86202d51122e178203b53dce5c9f3b46dcc39b33079c559152564a6f8fdf862b386df53b6b9501ea15dff917aa61373d1a76a638aafe9e2235dfcb37ef05fd3eaaf73573625604f23d765d028aafaa01bb3952e7dbed976f12a6fa5dd448be7835ce94ae4173130948458562af8d38a849dafd1fe6b19389d47e54847fbf1f35b9a4f6158b93861231cd062d77e552571b7fd3dc00ff7dbc4b14b9cc281e00d7d2311c8e5200f20c7c065288beb7e4dc85c11ae6ccf5b90ba3afdfcae3ac9c14f6914884ddf4eb3659deb01625c4c3f41781ddd7714f058b5c30432c8567e75bd41be954ddfcd93693b1a3154b24de26408b77fb0616ba9090faf2b13ae39a8ecdfc80c40f001ebbe7e732929fe3f3d51e020f4c0ee12aa01c6ba06695c932663a0943e3943f90346d0083e14f3e5a7cc75bed471c5a7ca6be8286fd0ee9828e2b8d821409d191b1bd61530a6e9480322c93bbfdc33daccaf03d1d3b1601a87c3bb92896d5cb6fef3c4c6c77843bfc529afa46242bbee71ff73bfc898bd7d574127066bcedbd92d90ffe52f1300af81240bf612067c068244132e4e251b405075c7c9c3de4ed82ce9307bfa14a1cb581b641f3b4bc4c5e007c7cb2c479a9345110e7fe401bb3577d6d1898d7e8e0077f698f2c9f7f606148482c8fdb44b803b62642cbf28c239f75889bca84fbc89010d5fa1764773dab768865964e17a0f250e728c0853c2207d1da40c9bc2d1b69e67c1036a99afd8b07e5a5b489feeda3bd3cb326671d75c1a937f50d706c17dee61f6e0a2d35f12029646c8050f9f8c926c05e83996c94123801202719fe30de451676817ce05aaf109116280482df63165249e4ce2bdacfa0802e0b79ca5158853fc6ec20332b5cc24586bbec571a5724b08025b1b92da90cffe053a6fac304ffeab8b901bb7befd8a8db2641f72d49a3198632d3767cb295aa9e357f91fbc5b040af54782b7c4c95759d6583f9f894fb505af04537df459645f1df5251b2518e3c0df7d4f1bf3d2bebb1ad1886f825b1146fa4b823058293154e59f7b0971f2f360a2ecce1f9efda9a3267e292fc907241e2787975794a177ceaee54f5fc8d7811f21f9d8ae52dab71aa1bad68b9306077b49504ae8623e4e6a5cbda5ec2d1bb4f0a9aa7a612f11de97b2192e84373b301f8c2d82a1f37b3db0771db75d82f09a2384999b02734a33303e1620d98bf9c41974a907cff068707c3a8b7e876b481185195e3bf468adc1c3084a1430cc7828e83ba805fc36fc9c2c967fb1aa1871e80add7321c25d4578f86dd52808d41307d6cdcb2e34d3d9d39fbe594e6775f6636c573f6012337a2d2c7d95b713a67f17969463a439b6b88e1d204e9bff65b2fe5a67f1c042eff4cc2328b6b3a372663fea2bae58294884d2a4eb2dd238f0a767075800c788b29c3d5fa30abbbc5ae6b9bd24813ba64c882e259e3a20f588e56b445a734c5c379b6942faf67fe3a5d9e6000323b40d2528ac41a81f49d602899efa44414750fde7c11667100925288f80e0afd16db459879b9a3f02d5b785459ad296d4a05c585c0197155897c6829063262bd85bbb7f90ef3fcc00e7d777f2bac7840d58e0806fc3cbc5da7a58c33e1444eb8b35980ffb2d129a0e0b911f2d6e088a0e0818fecd426531a61f3e3d8477d044743d62e6dd577a690db935ec267b70ed9cd0d825dcea351f06874598da1b02b93afd0c0d3c7c0ee31a3bcc9cfa7c865997955a05da10f9dce5bf4172b1bb01b583849ad2bef2d15d9762e4f27012ca7b47661726d31185090a9fa6d3223fca34906892b20d4620b69d2977185ef1af04a638ff70a3e2057ddddaa9443dea1b49adf041b59bfb86382011a4fb8899c67d533fa8dfe4e4c613318ecc3214d09846c771a0792e3ba6b5e31a7a171bef22cd7ef00bb2032bc11969319fbfaa63c2592d2b35fecf2ab07c65b85f9e03b0851f0386ad9637ab91faa28b7add7e6e0418cef6bb1eced91f886ac6a773772ebdee66ec65aaed92e02bc89342cd504dfa350cb0fc943c7dba82e803a12fd7a8fc69df76b1ad190e95908ae6442fb040ef1af56cc041955825c19d8ef28eaa603460f42f65baceff8558f74b0745c4e2b72e5f93cc56a206a7788e90d8b25abb9975d645e1e04bb660a785a036f8fa47e096a97b39f0fa72d0de5772159c368e960a95a29c0ddf39c4b66eb0d0f72ff58513a9dfeeb8fec1025319dc3f5c4397510d09f0df3582be233cebc3840b3b72c574d67d872cb289cff3e5697f73991c29990d50243db68edfb171a07460d1d813a408253d94e028c9fc395fb9842beebe35a68962d1671225a6fc485d388403b3a9d410acd6427954b043798e047c79b2455f1ef3a2e0e54130918fef37f358de8e5b1a46ed4587d2e2018019876822e3ced669085896d3931219af853292fed3d4c49af6429c58db9678625d37ea77c4fd72d5ec2f05611d003bf65131a2ef4bc0968d3e60e7e09a9463896a35b4cd6dc6367792999907374d98cccd5d2a2aff0db3392cbf38c5206d60bb8c5d736b357c6681a115db3092d6669c0bf0b83948d007a2b0d88aed1ddef13b4cca74b54e1ca803e4c9c9f79ee8135a4ff017444dd492a4c29e27541cbb9fd0b6f41d06ed0cdaeda45a3e3792da938c3ca1b26451b902a0023183d7457cdae8b8d25281ddbadc0895e076e5a6a7d6e2a3f76e46376c26e73efdccee4a45b8a044e6d14a8107e87cf090ba088c853f10aca2d415bf79b7009822de869a254a0ca70a2716265d7f67cd491806a13c13a03fc3eb2a7c11fa0c67d8824650f8cb784d88e2181ed75a72302dee2d527e21f240dca6ef8f93f32ef4bb0925e987c6e369c95f5fdeb2acfb372bf3c80b6328a656ba82ae037a76320ccf175489205039fba5052693df8464e645cece56aa53a5eb3c9d62852ae927c3376e01f12f65582ab650ed9a3dff6c5c7ed80f451429f88011ad2be4adb0755986cf70702c78ec0da9abb1b9241a73840e5488fba25bd5c8b03cfe9c978814de9ecd0e16e94da9287330496fe65c9eade16b478db42cabe0e8c8d7948699cbc194a27939c084153fe68fc053415c061dc0bcf02b36093cac7f5997bf57846fa9a31989fc72efbf8346befeafcdc9db3d4fb0bd370cc5be6d79e33bba2f82bcfcad71e202da9bcd256bb2aa60229a5cddcfeaa8ed4c4029b0d18c96c1f3e8064873a642de96f8aff6bc565835efb2e7d1d4a04a557b17b61a5c223eee39cdf2e97cb3c5aa0ce4412ebfdd667ddae37e8ba2a3aa66a3cfd66b8ea4d9fa587a7aa7839ea964ce0db1ddd6b46260f800d657c8988c012d25b689cda59cad30ca3ecd435f72a4a99e942e35df1bf11a25420ef38e06be08f9454937d3abbe6c5e4633bcd375f55b5ee7333b1b717a0319292abace5fe57c865899e1ac791a76880c7638ce88267eef7976549d16f33d897e948a8c40614d1ad305562bdd95e6e61fa44514d9acca06bf31ca8647a4994528cae7daab6390fe2c6135ab0fb7b16dcc0dc127f63912f47d91bffac1f59737189d72931889d8bd3ec594b1ea16860ad95aaabd35eea5ed850f821c0e9da96fd997037c32c81ea6a451cbd216d2ecef4b0aaf5b3b70a087bfc04273489c6da19a3c02835401bead24051ae9597777e74b560ee9f4a2321b1d5f4da7c2b055cbaba795b0f12885c14d8e83c544f65426f49160ed8114c8108f80e92d844e592c0169c00b6ad6cc50f54eb1e3e395684d3112254717270f42f4eb4f5d678b42d1448c028a2a2049014924d09ea09c642adc6098bbc08f4ad4b10fe9ce47b61ae3e48b4e48149d5077708b237f81c3a3b2e30564fbfc6dd939287cb108e501b05a6a2df9cd107b079fcf706dc822de2dae23c797f6f095b03927a0927f1af5144f1bad7909b4aa66bdd56559968f488f62f9ac3febcdd80eeefc255455052b728d289a179be86cf7e29a05691adb652219197cb08c78a5b8dd2aea10c982e39cc82c9abb6d9348355ff438a47d2d781e2a9d48ade4852e9c8cd28fb7c44a7c12d4c41b41b6d640e35bccefebe468b6985b131e4ed88f872035b80ae4dbfa33a83cf7c832ab43fd2c7e2beca3281bbd1b4c157d1c85b677ba0e7eb42c1761be79e6d9d4b5cfaebbf6e5ae838f2858c005bd78c72aaceff92dfade1fd933ff989c3a81a5f925bdedb5015e7eb5857b778058b028eac1ecbd3be4a5a56b3f719ce9e6c1d7936ab905661f835f505dc6525ff78d27006ec26cd9efd30b8bdf4325f756d8dd96f7db6c1b09d2084d0b99917e21c6537c012f339ae0332903708acdd10df78338804d1bf3e1f3535031eaeb1191316daef047b273b713648bb0bf75aa4be301565cf009a3e53e60951f81335168d6edc2b1a6a53cb3f0b3336572c4b037c710dcc66e5eecdb516740a1dad087eb2e6fd876a47c2e686b4f0bf981122671f3169a80a1ad2ec48784dcfaaee623f346a7236e1be385eb3f6d5fecc4895fb688170170877525de13999e858fd9a5c53de7bda971e0d61444fc2a52d8ad8bb0640e781bd475ba7a8961e41d2953bf90cce1927a3986fe448247ac39d3d5a482c171345597b90d313357894fd4daea1af8e61eab91c9485b0ad2bdb8e80923a48390b22b8e0c6d2314a4a92c7ca74fd4b7719956862641cc19bbd694c1b47463ac149b909f7fab0a6c57a985342d7fb5135b7e35ee26551b5da55b36339b457cbe2b3abf6c4e524227812dad8fec23ce127bf747f1a142ca85d1dfb01596836d154ff7775c0d6312194a4ac3ae0127a9e406fcaa9e7c4de900a6bc46cd4d5daf85460ac1e39c5ec96dd469e65fa42b3feda3a31326598a59af974e5ede4aaf4f8e0114b6b651427924e3eb8c64e2b3fdfe36fc869f2301f86ecb5ee802a2ad6ae07f9e94ea543ca30330e0930870099fceb3e607a3f4aa72856d3ddf50d28fb759ff8dd67865042a30256fc7f7ef22baffdef6ebcd52c88ce55f6eeb", @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x44851}, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 32.616996108s ago: executing program 4 (id=1980): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0x4}, {0x4, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x44}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000235000/0x1000)=nil) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x103, 0x1) getdents64(r6, &(0x7f0000003340)=""/48, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES64, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 31.651885626s ago: executing program 4 (id=1985): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="88baa534b10969ec164537f3a6ac7425a6e5", 0x12}, {&(0x7f00000000c0)="a24de7c60e075348e1235c06", 0xc}, {&(0x7f0000000100)="ec4d11aac42f86fb852f07b3102919d9ba04b331f76558", 0x17}, {&(0x7f0000000180)="0ede3748066035d6c1187d7b4035fc60ea3ba4bc9684afe4ba8b7461caa88ed5079cb93ae9db9544d1e3ee171973d13d43e6fba936ef96fc29270a79d10c9eb2e00b1501f362c1bdcffe", 0x4a}, {&(0x7f0000000200)="412132023553ab0901495f51f6c3cd0ca64c42606310eead87ace012725e951cdf3331189775394ed4a40fa47f1c45551721074bce940630b9c7c07f6cacebc662d7136a42629878ae05fb2f57660742978ee97c0f26e3964046e2326d9cb245a147637b74de10b0c8aa29da7ef08b28c8463e5bdc0cc00eedcd65f75bb026e847c8e2df1f2264213360286bdc24c66400ad777f75135a0380199ad49af3cc9528194d16b47419e91a10a2c218e5ebbdd13a87f59297ca049563a72d53cfdc33f2af54ebdf809d91e916379a00a6eee7b2226bbec37123aad317fef718840a6890f5a0cf5c7fa0d18fe49653ad", 0xed}, {&(0x7f0000000300)="e16b74cfe200393f75f07cf428", 0xd}, {&(0x7f0000000340)="448330403ac8cf5bc8470ccac498e3b70a8a1ca234b5b3805b15fc49dc5a8586cbf7d298e5a8b6a3f910e5aeb06096746cfd124829d9b4a7e2e457f7daa46684ae13c04a3959a8da42a5db4cb1f75f4856cdb94e2ffea0c43f240fd6769c2398470a0aac26cce6c18d78b333af6cc2b3a4f586093a0b2cf81d2bec56bde59d9ccbc3b64df9652c2caa13f322bb752a498a39bb5218de7461193fab67749f4056041f796bfbfe64f3baf52e4fdf4c146c667857f0f4ce8986287f", 0xba}], 0x7, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd0}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f39}}, @ip_ttl={{0x14, 0x0, 0x2, 0x952d}}], 0xc0}}], 0x2, 0x0) 31.565448921s ago: executing program 4 (id=1987): fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r3 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r2, &(0x7f0000000000)=0x1, 0x12) io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000980)={0x0, 0x0, r5, r6, 0x1, 0x6, 0x9, 0x5, {0x80, 0x9, 0x5, 0x8, 0x0, 0x5, 0x1, 0x6, 0x1, 0xffff, 0xcb4, 0x8000, 0x0, 0x0, "f89fd0c5012f2cd96528923877617326f3b3c868e4e51b852d5ec0bf94135736"}}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r6, 0xff, 0x3, 0x3, 0x1, [], [0x2, 0x5, 0x9, 0x4], [0x80, 0x200, 0x1, 0xf], [0x0, 0x6, 0x2b4, 0x1]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 0 3f', 0x2a) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='&'], 0x10) pwritev(r3, &(0x7f0000000840)=[{&(0x7f00000000c0)="bba3", 0x2}], 0x1, 0x6, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 31.276668131s ago: executing program 4 (id=1990): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d755ef653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) renameat(r1, &(0x7f0000001400)='./file0/file0\x00', r1, 0x0) (async) getdents64(r1, &(0x7f00000028c0)=""/4092, 0xffc) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r3, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xc}}], 0x1, 0x4000000) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x1, "dc"}, 0x2) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 30.787059503s ago: executing program 4 (id=1995): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40080c4, &(0x7f0000000040)={0xa, 0x4e27, 0x80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x12}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x205, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040854) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) r3 = dup3(r1, r1, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2f) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x10000, 0x2, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000019000300", @ANYRES32=r8, @ANYBLOB="0500530000000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10a9cb8dd47cfd0e}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x4004) (async) socket$inet(0x2, 0x1, 0xccbe) 30.709927364s ago: executing program 37 (id=1995): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40080c4, &(0x7f0000000040)={0xa, 0x4e27, 0x80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x12}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x205, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040854) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) r3 = dup3(r1, r1, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2f) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x10000, 0x2, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000019000300", @ANYRES32=r8, @ANYBLOB="0500530000000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10a9cb8dd47cfd0e}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x4004) (async) socket$inet(0x2, 0x1, 0xccbe) 30.391738723s ago: executing program 8 (id=2001): r0 = syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FITRIM(r1, 0xff0a, 0x0) syz_usb_disconnect(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) read$fb(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 29.58503042s ago: executing program 8 (id=2013): r0 = getpid() mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]}) r1 = syz_pidfd_open(r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) setns(r1, 0x24020000) syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0) 29.415370313s ago: executing program 8 (id=2014): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa0000000000000200"}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xb, 0x13, r1, 0x4b20d000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x32, &(0x7f0000000080), 0x2, 0x8}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 29.41469815s ago: executing program 8 (id=2015): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x5, r2, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000000c0)={'netpci0\x00', {0x2, 0x4e21, @multicast1}}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 29.224120353s ago: executing program 8 (id=2016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="660f38327ab7baa100ec0f01c8f00fb1512f66650f0667f01057850f06653e640f01caba4100ed66b92b0800000f32", 0x2f}], 0x1, 0x3f, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x924, 0xffffffffe9110f65, 0xd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x494000, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000001c0)={0xc684, 0x66eb, 0xecf, 0x800, 0x1, "9995aa1055941dc3b948eee583bc2d81cde519", 0x3, 0x7}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRES32=r6, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f0000000a00), &(0x7f0000001a00)=""/4096}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) getpeername$l2tp6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000700)=0x20) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r10, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="e57f", 0x2}], 0x1}}], 0x1, 0x400c011) syz_clone(0x80120000, &(0x7f0000000380)="9820cda9535ae5a3afe621327693f92f22d28c538e2a2e32ccc315767a28df74c842b642a3b1da1c9fb1f8a4407ef76c4410533c7ed1f073465e4efa66c0598dea4983841cbdcfe6e4fc846b95cfa33b2e64b62056021e0c404182e66241043b1993fbec2a5a913c31964b3f336c858aafd20b0c", 0x74, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000005c0)="87a0c31808a9c22ea62c14a0b065212cc27f80ef8a948ed2e0d890cd5405810c4e89c2c11dbe114df7e3eebf382d02c512f1a72024b4905a3db058e085596b2220b758fa63b0d33a69e5a66ccfdebde51fafdfab9b06ec470354f8354a2b660896b02f31a88dbc3c9a5385136e5f310dc9fbcecb0f937a6b8f75257582e3234a273771e33acc36c5aad0c23d582ae9e87997fd0aaae7020d46be29c00d39b38a3b304fcdd7670e3ddbc730188c46969aa4775e7d170b124ca562628d3923f076993d366a9ec6eadd78c3ae") ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.863274479s ago: executing program 8 (id=2018): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'das16m1\x00', [0x100, 0x9, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x20000004, 0x4, 0xa, 0x2, 0x8, 0x3, 0x0, 0x9, 0xffffffff, 0x3, 0x10008, 0x10006, 0x8, 0xa, 0x9, 0xbffffff9, 0x1000, 0x7f, 0x8, 0x4, 0x0, 0xf5c0, 0x7, 0x7]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x48, 0x0, 0x0, 0x2}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e0027001000000002800000121f73", 0x2f}], 0x1}, 0x4000000) 13.811784128s ago: executing program 38 (id=2018): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'das16m1\x00', [0x100, 0x9, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x20000004, 0x4, 0xa, 0x2, 0x8, 0x3, 0x0, 0x9, 0xffffffff, 0x3, 0x10008, 0x10006, 0x8, 0xa, 0x9, 0xbffffff9, 0x1000, 0x7f, 0x8, 0x4, 0x0, 0xf5c0, 0x7, 0x7]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x48, 0x0, 0x0, 0x2}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e0027001000000002800000121f73", 0x2f}], 0x1}, 0x4000000) 3.014175856s ago: executing program 3 (id=2326): r0 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x1c4) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) read(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) sendmsg(r2, &(0x7f0000004600)={&(0x7f0000000280)=@nfc_llcp={0x27, r3, 0xffffffffffffffff, 0x2, 0x2d, 0x10, "87acbe23e4e4fa75b55ce12f793c72e54270f9c1ce7b2fda5327178d96df0e715bba5c0ee2a9c18c6762001d4be6916b03e879173e381b333a7788d38efb67", 0x4}, 0x80, &(0x7f0000004540)=[{&(0x7f0000002f40)="504d3aefbe6cbda34f8284e401939ad74ec112b2c6402cf7f56944ab22923d47878f1a53fd71ad409d62c65181bf8bda2283b8a4de74ea5d2c4adbbee127037989a590abb586f1bb4b01306e9238c3dbd0a7a0ce8fa47e502724f7fc3889d5614209026954ba40e528a14ef4ac9922cc2847cbba1e364b20889fcdc559a8f9298776bbeb05633a9052d7010f346320e63c9d4e00ac20620708cca10663ca89ffaae8d40cc65b1b34bb17f06894385e546ad2b0e47e8e44dab8138922c9230a060a339913b52296cfb11c0c2a328f59d73dafbf3bb4f8f28fceef518ea6e5bb424b6f26fdd31cf4b94808ca237395ae6d28173171dc0df049f8b551a3c69457388633dd2b7bab9b5c59d275e26af88e3debf90470211202e2b14da996ed3ecf1f6f45d82fcd1908f9bee1cef391b037b9fe2c45c96bb31682e791480b8424c0a9c37d73e3bd0a420465673a0c19a50b326951333a871ba4b3028513daf1179039b1626624f8d541a4b2f62ba368d7cfa56db01d408421bc45a647ffcc3905a185f48100545ad2fbea6287ad204e20ecda74ee795229eb8e5acedd441017eb0587809c541ce4657c14c3be531bfa2aa5a1e02b86e58f3ccd4853417f127d2a0223b5e5abdc506c4c2f57a1b0b2633a2ca878df5dc12d7a0b65b6b8dc3a7baf3fa55fb3902f17fac3034efa1b669aedab653cc8e22a51da21a5b9116207e1c9f7527cd5cc7300095e51f4c07d5677a2f6ed33dd5916540358597f3eb66f581f556f6d653677566383fba37fc9d9714065e7ac0524e6a028d46508a08a8f7ff81337d64913d7346f9b8f9925ca633ebe9c497d5278db316dffeed662cda1bb55535c80a440f2a645bff4358669156e8ceedefac3152d6425cc370ef6a14e35a61e563487041bb132625aa86d99808cc5dfc408ad25dfc9452f28343e468f485199767f049a2ed81aa7d95cff4bd749dbc7d62f206ae4c163b5a439baba8ba4d08ce8aae294da9fcf22f5e9a2352baba0f62b6b81a0c9129c8dd4cf25660a5b5c64b31e34ca6324670a5e3db8c7119d9c957b42adb43d4f7902ccd0ef017f3124ed554e11d4a9856d0fdcbda979f7403f1e61242cba4a0145e316657ee3477a82a80120ccf00e39ebd209768b69e8ffb2f7931f2da0eb6f49f251ebf50e6fbe2c83b157d203f80395e21c6dd2c4fd242e653c4e08baf0e425b99444ebc891f895f7237c5b7ef387ccc958c04b4537994a933f5685156204a8277142df1d56533eac5d24d2f3e2476d1f8b18dcea32fe6c5f1c837a5070cec8b549ecf0781da54c6ea3417c91e2ea0b49958f6e4a6035548403c8b33f224a7dcda95f6fd93deed9147839964563b90207689a645d23627475f998c82319fc5b15c93de96f6f304d25ebac6bd6fa9b0e86f05b7d45b42a4837d8a29786f34eb2c2d93b82c8defca324151797ca99a2cb8ec58a230bfcaad6c5cd80d5f664e553b5621e3cbcf7214263d447d0090ab74d753bb715314681a62a21e17e8d1d89445089c152c5e4973e575746af5cb7e5334c414c065ba85d6a92bf7a39fc55d2253b9c2ed0daa5c71c80e2111a7bbbf94376ad54c2423f33ef832a00d571d2f7df26489777bb9e57efb901a48cfc6bc688a4caf10bb88e97b925586348b9940b1bd2272ca26b6a2a11a43666975284df6a574f6eb654b7dc4196ebf5b957c24fe9fa20f75c1006b688b004a709a5e6670a710330c88548cadcb80e3b4ec3aa88863a155f3cb393ca80cbaa809de3d44b5eb6bd36d669fb3410112e99d14b9f3fcb36bb2ea20c8e06c3beb7dd3cc65e0ef68c1ed8875911b9c3795336827c8bfc5870c78045aeb0cc36be70b015b0953308499f0453686797176dce55e7991ca6452144601e1f8ca3e5594855ace2b18594a28e42886363812dba9a05fbecac30e8ff1d304d868dcc4ac0e1d04ee282c2e102f945a7c71ae5e57da50fcb657d00dd5adc2c3709bcc2dbf0a4f6f0e4aabdc9e89cd4005fba504f82d92f44776bb4b9da8fc0ff7b77bb1a6a7c2b6741bc29ed3840f9f1a09098904df23e218736aa99fe9c3b37474d4cd364124773addf8f1942bb6c3d94aa504ac8068abc6baa8f8e7bb3e24d1fd886763adce02f300a17a81252f2496eb1002a9d4f25d10db29d01a8a2aeaff40e48a3b452aa2ab435ab8960c62a790242e28ac7866a1c5e10dbdca0eb8eb2c547ebce3cb2ea7be5358e04c00a2bde691124422f5739d32eacf149d1868874c399b4bd031a3a2be1352b2c357dc2a6d34ad5dabefbe0dba03164486dde100a676006a543d232d0948f78beae8a403c493063921840b6c6b3c8d678442036029fe85d49bac57518d51dcb751812f25d7e8b62ecfdd223840e6dee0e53a9ef9ae5f7f9a8a7c8898bfc5d9f01fa26961ca8d8e24dd9e4b628bc13e265896610d49667ac19725f0cbadc817a2146535e7d777a3cd0fe65e7b846a4beb661d93227dbeb990a4b6c928628313234596cbf9adcb691abcf9e2599c33b26eacf3ef45db399c3a46003e67756ed1cf45017580266d150de8fa90c02ec031fa5a958223a7fb8cb928f6e901002c51a4ddfd0b413fa8f24a3dc7800ad256ebcc8192046df713392efecb0f41da87a0ba707085df26ff8aac6eb9ceb85ca200161e7641fce35d90e94919b38a63aae27f1674566691c21237ff97954ae5b90e7e8852ed0eeec15662103c856665ce7d11f1849739e693700cb180fac0f347b62edba793012ea2171bc35527e05359401919d953152fd6624b342acc476382c469f1e2b731da97523a22faa3399ab7ff5e45fcf0ed7ee7c4d2abe812a7238dc5fd4fd738b683939562d74f555cc62046ea65336da92e22b3b1be47bb10af2ddea0cc41a6c3a1297d0fc28fa066656ed295e2ac92f94ee4b2a11969f246eae00861b918c4e9f50b2a5b5f0d61dbae17c1d62601595b7e5d00293981a2bfbba92549601c21ed3ec80055f80bda731b83d17cf1a0c69b590725d2f3e128102cf457bb349b6b75201b79b5e1996c69fbb76aa622811de21111764d51bfbb896b7168bc7ddf6f82bb107ef5f32e4f53ae4ea94a8f2b10d3900105796793d9b84134d30a2a6a0bd37371ef403e5523a8d4560a8986a7c1f045cbffb2fb8152e1e369adc6e70aea099b2030c6785757d5805b0ebf4295f67bd4d0d083be3e571e66281f73a0495d1adc04cc507ef349a008f035278e6f0d009f39c2653ff977964395113c24f42d0bf89dbd3e2e46d06ad6892dfe5335a361413f4e5aae1df23c27a3952b2c43b9dc6fc9a649c70a35a00f02821cd6ef009c51a8d83a31ad88f645f9f327e3b933d70a27fdb4eff2ba1532dedc6ae02c05cfa8a7e2cd4fda6576a6cde27e60d0f691d4e5416be332589d7f0ec3acccaa1b81d2351962b072699b3a3da1b53ba4b4c5ddadcaaf444ab0cbb5cd1636b98910af2bbd5abccd732921aa9a1b2aec839907f6d920044466e5a43fe1ff438ab04932d2fe1e4e09fd1d805ae46c190fc894b54dd6b538dcaf0bc68cd5d8b44b4d618bcbad68306e1da23d8e9ec987123fa4d53d3b42f0c03394ccdce33a10f8378333be4c018dd169b44cf7cf1f00cf11702bb2a64585ba67e9daef83ae3b1588195cd26ae8f168fa9e43edaae31fe10a778e08a369614551578ce42701db182d2128c424ac4231e9b1592dd50fc1f40f95843ff70baf79870a4f169ce4685b516251f9cde9abfc9b036933118fa8ac86efb6f925b7a54cf040dae57963d51b03da458697865ac5d579437d87708cb58194109d0c907860225e07b30c03c7c695002322edc6f430e6fa6c64db167652db665f672c0352c897e644a58c070cdba31ee21f1cbc13f57c7702a897ad33eee625694e4ca3ffe766671947c58a9eaa2daab5c6c42406e888387737f5925683aac02c9c4aa36b5ead61408c27d958b2330344e642a4aa8499ebd601bfed647b041af6b5ad9c4fe305129892f248a5a89111b5f7a26941071d59dd349d5a9535ff81a48d13316158b0d01e9efc5a35b5d7764c5ed927179fac7fbdb503aaa22465480d2d90851b457b99ba4952fc8e20f11034cdf25c4ba8f12d5de437c9195c885d6aefb70c17f2dd05e9f2610fd2de5ff830e6377065c33f3c787e7a948028c4d04a1f2ce15d54fb8588460f94476bb62df5b96536d225f9189401b623f780fa7c1a5b1092b6e6fafc3d4b4135f6a268ab1f0749f9533d2e0e9d0297fa77edd244f3d750789f464e09f6117c3479ee0a77f7ae67bf64724101a156f97ac6335ee3885391637841a953ee344e2c4bdfa449ebd9f6f760ee87cf1bea9752c5dc4b3afa1e0656f9016a4e2bc7f1037814b446ede4d3fb964cf0957d8d0f1b487e4d566f9caceb35f012d3d6b31d51a5e2a77b5d51e5439f7efafe5ebd68737c655abcb37791c9e74b24795c90ef14a2e9a7a8f6493f1e6684f9c881896853cbafa12cc2eb138816b382cc0cd18262de9175d53fc5c8a865128110f384e570e0dd45ddf0d44fa8c5b71acc109f7045bcbd49fda47ebb7f13471654a35d55c18857014a5decc504b06920382f20f61e8f58f35c65d834cc8f51fa543f4ecae9e28d821f9434beff46537df8f406667d157bb817cb8b6dbb3e74cf91877d81f8ea0b721b05044ee01f86d048b4ad6ab1416b437216762a85a46f4c15b8b94ac48f174603b117dd49bff8d4cc7497e1942e78fb3d5a06ca1a4c65887ce6b37534f25e3a2d853a98d3d30ca419dd33179db57629032d23b0b3d3ce288a0bcc4563e550a2c41797f550a24ce04b8a8686b125af68af93062c4c4e71370a7b0c8e438fa6f4ae6ea3e57ef17ba7925b73c20e0c6cc157147544648f340d6000aa3c27a8ce131a52430729f125e2afbfefef1b26b853923cda0b67386226d871243a127a21f5572b34f3c6b49ed0d09df659d3f289774618504910bdb1867e2c66fa0f7b07a65e3c1cd45ccf5c57d456904eadb83285c2f5cbb514b2758fe6676eaaf695da5bf236f86cbb1039fa57e79711d964a02967d46a4b1106189f745a6ac152424bd75dcd2708d17c9f6b7950f9ff4176e7c2550afb113076ee0761df1c925981f0bdef04ba7f69609a7f8e8e52f7ef12fcc631cbfcea0d56140e4560c6bdddd10469a156be9739057d1206be59f89133899a9e9e0e8f664f2a1c0c2611d95c8d70ea62bd995d255db8bf62c26c1ff66843fdd293329f7bcbf201252f6a9f1a7c59b320e3c1608a549207e4131dfbe20a4049607c4796a6a8fc14415d18635b8081750709de93e2a26cdb73796038dcfc21daeba05a436a5bbe57525a065a258393a64a213bd85fd4407d935fbed9d890e0ece62404c5496f407d5b693c113f7b0e10769745647adbcd41a075e7b457a3efd7f060e2678ff2268e9db53d589a3075fa8754a97efb7a2650cea5408950ab45983d2601f3982366f39ac82bd3d1def8f75689b9fa5783f4d6fb684589a7d53a18896a6265bdde302c070c005be1ea9517db360add0984266cc2f2cb87ff491486702781344b985182dac0092e87a8898d4bb67b584f5f13e680a407b607c578ae346987b3a99ad625a62637910254a261731d3c166278600bde5837084480955cd054a48534487d1c13b05871d132bd14510871a838e399379ec7e3d998fae921081d361ae263e967568ff7b3c883f0c0398f85d944d5f340b2d62c04668244eacabf65905783e1a07e3d9bd672a6b40b3f292b3ec66f51f02d4b485737f7ce904d4092acaced0295c2c4b00a2e79a936f32564b91c2ed2f72", 0x1000}, {&(0x7f0000003f40)="15b13a7bc02d79dca2cacf0a47d359f4ff4685193d45a0a5eb2f48b4b4a3b16c99c1454cbfd223edeacdd13db4e6a033c1f82213c4f71d72d75f7c888139e1dd9b08213fcfc35812bd31223aab72db42dda3b106243973052a0daf3cae3c4cf5a956f6ade8846c7bbdf2d6685b59d366138088367b2eee8f124340a54a4091e26b3ff2ad43d7ff7396c8676b57ca51614e958fa46a38efbdd8ab16a83da7db8e9b55acd5bb26f87d7e752ff955db0a1306709d55bee917a5b689b235c39c29ffe1c1c71c3637c2ef19546e718702d654680b03565de8c1fffe4f99bc5b39c297de0c2e0247786cfc1e7b283934d35ae93d", 0xf1}, {&(0x7f0000004040)="5aa1be4855f19c8860f230d9d06405484d75d78cf04ca86255122fe2494eec9e1dd3eaffd9e6d2a84042c0f77d0d54537b7e92f43ce0371d6a4864c4634aa24db534296b9ba7a1eb451261e6aefff5a119d31d9672f9c86663d40f6b80a268c9b5195b47c960962f24007b714d91fc35d98559ad88617de9e930fa891299e66c16842312f4fc3f461fdfb16ee3672210cd22554a6cf54601150a454f0114916f61a485cf0cd92f349a8482d155dfdef6a6e24c33775dc443553e39c30923ee819122db7d736fb4980396576b90", 0xcd}, {&(0x7f0000004140)="9b5765513e64eb0d97271639252be8df4e09f82917a0552c570a725b9d7160d15ca830154386215bf861c0e0aa0ade7412ce92ef8b570fa126b311f379ec0fa64f2e036c6f948811f0606d6c620f7108e146d26cda4f81b38fb7d3754b6d9d984a142cf0781701da8c19ff2821e94d08460e317e5b31ff39f11fced843e034a722", 0x81}, {&(0x7f0000004200)="396bd1fe17901304ce489365d3701eaf585f293b30a4c5241dbb1e28f72ef6fd12996bdd027ef47ab7d3aa3a7b7a2a44ddd015318c9a9c944b58e5a63e3a720edfc539f42cc0137366057ae708ea942ca9e97dc73af7e8e15822546033b9b643002f13dba776c65f7507e603301ae87740269a7280a133e31a00d1d706fe9d986f49d80ff1d7fc6beb199476b08ae677947f0a354d2909817917d92bb74d7d8ef27f0cacf6a86cc1f12c16cb0a4b6509c1592f5f02d4f05c3657e0999a0b4c1064ba50647d30c717631741cd9066d4b9f522c94bad1a604f2e2a2ca740a436ecc048c108b5660b3b814fc4fb800c132b4012d4", 0xf3}, {&(0x7f0000004300)="b1de354feb9580b20b50fa836a330d4c090b55d9ae8e48e008b5e4d6f431f0476ae369d391e1daabfc0efb00c17e4e5f870e72095a3cfce12ecfe4e441ab1fc27572880c2626b80d6f662414ee80", 0x4e}, {&(0x7f0000004380)="ffdeeea59bda67a50db580b07e078ea6c2735ca794ba268107267250e19b49626984c0ec097a8e0180a4975e38db22e814f1723dc08889c771d8bd0f83a27a2b467c006ce75b2a109194af90f7efa345e0d20e29619805d4536cdb802040", 0x5e}, {&(0x7f0000004400)="950b863ad03c1d8a6821", 0xa}, {&(0x7f0000004440)="797ac2a1cf22bcae567edd66859c849d3c97f98024d971bb7588bf80195354fbd49b57765e98dd25f5b7121de12f6173", 0x30}, {&(0x7f0000004480)="7b160a7ab138cd4d8c1574191328c1a8ade22020a3b12257b2616dccbed42f5be913c3fd6413a196a7092590e71e4082f86480fdbd4b4d77496ce7e4925eb4ccf3dadb7327ad17d75e7cb4513521d5d27c10a1a45129d2a6e6e6bfcdc51fea965cd5146d35e98bca98234de0a048caa2e01395c75b3a5bdf79867ec80f1a92740a06c27b04", 0x85}], 0xa}, 0x4000000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000a80)=""/175, 0xb2}, {&(0x7f0000001f00)=""/4131, 0x1023}, {&(0x7f0000000c00)=""/205, 0xc3}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000600)=""/186, 0xfffffea9}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f0000000200)=""/19, 0x13}], 0x9}, 0x10040) recvmsg$kcm(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x2818406, &(0x7f0000001980)='dax\x00\x00lwayc') 2.166184005s ago: executing program 2 (id=2344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = gettid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) setpgid(r5, r6) fchdir(r4) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0x9362, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x20040014) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e26, @rand_addr=0x64010100}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd86", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000ae0000000001fcffff1859000007000000000000000000000018230000", @ANYRES32, @ANYBLOB="00000000ff7ff8009500000000000000c7daeaa11a95b5770016c7cc87f6c2fcd1cbf79eaf79100ada200fd0ddd3444ad2b91bbb2cbf25112bcff8155161503a51ebb61aecbbf9d455985b066aa5bead5c077465fa333a40700f26cc454da73028b6e7e1bd138fd39ad4fec6e841ab7c4aef8c965df550017a1395c97cd302cc7724c986f52a970d6652dc6e723c2572a068e1aad8ef32c71dd1aa13c3fe77f215e230e905b93aabdd14ac8b738bd2e445c353e1fa8697d9e5b34a351ed12ee578faa296a684"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x5c, &(0x7f0000000140)=""/92, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x3, 0x6, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, r1, r2, r2], &(0x7f00000002c0)=[{0x0, 0x4, 0x6}], 0x10, 0xa4e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r11, 0x0, 0x50, 0x7d, &(0x7f00000003c0)="cb35db0934c658e6898a9a719beb4eeaf1f979ec6f8c993c22322b95248031b8911dfd2eaa4436ad1438833f5e29a254d2583531335b9647618eb75b67d10d5ae8936626973c6918aedd69ca35ea4d2f", &(0x7f0000000440)=""/125, 0xf69a, 0x0, 0x2e, 0x5c, &(0x7f00000004c0)="333e6ca61c625ae6963d6f859b85ecdce6025f94e35cd48975e8918f66a8ad98a25b9cc3dde566b45a0d9ccf82ea", &(0x7f0000000640)="e4a3cf91c272507cf2f366d33582d4abfcfffefa6b3ab4a5ddedad28dc7b38a4e488697a7461aaa68ee2779786ff71a21993776f185c2e968df8abb8381ab4404ea3dded5df05e98001554e820424e2a5ecdf4397fa74c51b7f3db6f", 0x3, 0x0, 0x7}, 0x50) 2.097059717s ago: executing program 2 (id=2346): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x10001, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) pipe(&(0x7f0000000140)) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x10001, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) (async) 2.093479042s ago: executing program 2 (id=2347): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x8, 0x2, 0x41, @empty, @empty, 0x7800, 0x7800, 0x5, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x26b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0100000000c000001c001280090000000002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8], 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000011200000a000100aaaaaaaaaaaa0000c0b66048548dc8b0f3c9630fe11356e188373e31202468fc9f95a73e45b07291b852aae5410c178f15e5796c70ebe86541d88b45f3fe7b7916b463480daef803bb11de000000802a441dadd84b71417c9159f5a5f0043bc82057acd24f218684634e33f0617226d2bb3b80f653c9e572152cd3e03bef60b6a2d8d696a685196bf05420561bb8362ccea38a04331b6bfc3990dea020f1c2115848e7d73a758c1515a70d027bcf211bad30a2436f2427cebd7d00"], 0x2c}}, 0x0) 1.942808441s ago: executing program 2 (id=2350): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) (async) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000180)=[0x1, 0x1], 0x2) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.883336159s ago: executing program 2 (id=2351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c6f, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @random="0900e8e320d6", {0xe, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r6, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "85e78b2c95df67f0eaf88063f2dbf830384c8a36b9150a4d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "815886896c427697da510540e78b3c4e8527220c9fee98a6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc2f956edd7affcc0975719281d963c208bac905d517968f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1.72425761s ago: executing program 2 (id=2352): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/current_tracer\x00', 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x8000001, 0x0, 0x2, 0x0, 0xbfec, 0x20b6}, 0x20) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000000801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000000, 0x2, 0x2, 0xa, 0x0, 0x3}, 0x20) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = getuid() quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000802, r7, &(0x7f00000001c0)={0x1, 0x3, 0x600, 0x8000000000000001, 0x1, 0x7, 0x400, 0x1e5a, 0x2}) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000d00)={0x0, [{0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x41c1, 0x0}, {0x1, 0x180, 0x2, &(0x7f00000006c0)="d60d68633b1b18c029347e2e846b70857fb53e9d683640c7f062523903fd9faf2c3f1f64ba797431a4ac36d03bc907c2"}, {0x3, 0x0, 0xd5cd, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x18a, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x6e5, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xad56, 0x0}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000002f00090027bd7000060000000000000004001d0007f5585da37870a00791714652233ea5a6acf14bcc14476d520a4698a597a6e3b833a610a3cd7cea2570a461d5b2e1468e7d8a7f98ce9454519dc2427ab393b12c3736ea1de015d9c76576a856b2a725c974afadfb"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) sync_file_range(r6, 0x4f5f, 0x5, 0x6) 1.356634793s ago: executing program 3 (id=2353): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfbcb, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000240)=""/202, 0x0, 0xc, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x9e) 1.355969938s ago: executing program 3 (id=2354): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000140)="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", 0xfc, 0x4040810, &(0x7f0000000340)={0x2, 0x0, @multicast2, 0x4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000000000000000000000bdacfaf8c6b79bb5b5e3f769880000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000031c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@in6_addr=@mcast2}}}]}, 0x38}}, 0x4040) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x340, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*(^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3523cf72}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*%\xf5@$/++\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x54, 0x5, "b3b340e4b08ebdb19bfc817a2bcd84f4e7137acc42ab50ebd0874e4ed86521ff2f5d8d900e21342aa9e19dccfb94d8c08954d01b81781c35d5785cc46e9cbfd95f36bb00f4fa0263e4956ee821ef11e0"}]}, @ETHTOOL_A_WOL_MODES={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xedf}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_MODES={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbf, 0x5, "6160d8db6cdbfdbfc641c87ec60b4779886239725e1c6fa69e6713183cb2ad42ff5c1521eb058908e9914198664ff0fe04e20f68be5fdc2a3b56e9e4255e681c991735b5e73b08f13346079ab05d3b3e157d97ddf7116b9046f9812c0af547edfdc55fa2fd77b18887b8e029690f5addd84c9a52785df1caf65e223fad18db39ca2afdc4c73963e9be8ce580181318793e3aab9f7b911649340e2a36974915f05283eb9912737f57ec5b5e6aa4ed509ff1958903150f94c4d25010"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x65f01fa9}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_SOPASS={0xe5, 0x3, "8d4c7b96ee2149858ad60566440fa48bbc8350679df9b632412e41f7d655d671e5fa88abd5ac71400c284aee50a52154e6e8c9749a9ced3c4abc756cab131df211f30fd7e9b7d271b8e73471b6453dd7af1d9d686a9f8ef097eaef6cf7447f57fd2fa42af93c06528ed20331acfe4a153918e827560a995e01e2ae78a9e2cda6f241a536cb00888ca3163eac3987b03f2ffba01aa784c47076484ef036d7d1f6ee6cd03bc4d2031693b0e5e4df5386c21b25108567dd8e5f7cc9dbb38ab69b735cb8867eb0843a6a4eb5f43696578205017f75cd12b526a57c481c8b3550f68922"}, @ETHTOOL_A_WOL_SOPASS={0x45, 0x3, "8ccf318e2774e3db06dfc145176583c712209539285740ea5a396afb0091d355844d94df0f3f53723748aa63140bf41593a585a11f0f60dadb675eb9ef22ef76ac"}]}, 0x340}, 0x1, 0x0, 0x0, 0x44000}, 0x240440c1) 965.247129ms ago: executing program 9 (id=2358): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990100000000fdffffff14000e001c"], 0x3c}}, 0x10) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)='W', 0x1}], 0x1, 0x8000, 0x7) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x333d01, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40081271, &(0x7f0000000980)=0x4000) (async, rerun: 64) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) (rerun: 64) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r10, 0x0) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sync_file_range(r11, 0x6, 0x800, 0x3) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) (async) r12 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x4b564d00, 0xfee00d00}}], 0x20}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 844.788961ms ago: executing program 7 (id=2361): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) close(0x3) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x81, 0x2, 0x3, 0xff, 0x1, 0x2, 0x7ffd, 0x6, 0x100007f, 0xf, 0x2, 0x10, 0xf6, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x10000401, 0x9, 0x8, 0x4, 0x2f, 0xa, 0x9, 0xffd, 0x200000, 0xfffff800, 0x0, 0x10001fc, 0x0, 0x2]}) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x81, 0x2, 0x3, 0xff, 0x1, 0x2, 0x7ffd, 0x6, 0x100007f, 0xf, 0x2, 0x10, 0xf6, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x10000401, 0x9, 0x8, 0x4, 0x2f, 0xa, 0x9, 0xffd, 0x200000, 0xfffff800, 0x0, 0x10001fc, 0x0, 0x2]}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000480)=0xffff8001) 635.51755ms ago: executing program 9 (id=2362): syz_emit_vhci(0xfffffffffffffffd, 0xb2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 633.767662ms ago: executing program 9 (id=2363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x18, 0x200, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000004800)) 535.43531ms ago: executing program 9 (id=2364): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001908000025bd7000ffdbdf25fe8000000000400004000000000000aa0000000000000000001b636ede020000000000f8ffffff000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff0000000000000000870b0000000000000000000000000002000000000000000000080000b06b6e000001000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nq', 0x7e) close(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100004000000000000020000000002000000070000000900010073797a3000000000140000001000010000"], 0x48}}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) read$FUSE(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000000)={0x0, 0x16, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r6, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x206}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000016c0)={'gre0\x00', &(0x7f0000001680)={'syztnl2\x00', 0x0, 0x1, 0x20, 0xee, 0x2, {{0x6, 0x4, 0x3, 0xe, 0x18, 0x68, 0x0, 0x32, 0x29, 0x0, @private=0xa010101, @multicast1, {[@end]}}}}}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700), 0x4) openat$ndctl0(0xffffffffffffff9c, &(0x7f00000017c0), 0x40, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x13, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x43}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x30, '\x00', r11, @fallback=0x19, r12, 0x8, &(0x7f0000001740)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0xb, 0xfffffe05, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300), &(0x7f00000018c0)=[{0x0, 0x2, 0x2000006, 0x5}, {0x5, 0x5, 0x7, 0xb}], 0x10, 0x30000000}, 0x94) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 426.541924ms ago: executing program 3 (id=2365): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000007000000ac1414aa0000000020000000000000008400000008000000200100000000000000000000000000002000000000000000840000ff0a010100"/88], 0x58, 0x4855}, 0x24000052) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="190000001c000104000000010000000002000000", @ANYRES32=0x0, @ANYBLOB="2007ee000a0001000180c2000000000008000f000100a900bbf7b533a1af87503adc9e853efd5850fddad05f16f99a418bb521182f5c5475c5a31a22ae15bc5afa918afd888d7f8ed4e5c6b0d91bfc965ee99ab69c4b3ca316af96ece2850a4db4662aa644c844840efe2c64b1d1d26e66f03fb14fb9b0b17faa07d6be6c3edde66bc2d0db5c9d3202655b863a8d009bd708ad98c3d164b08bf26041aa6366d31c6933769fb249bd"], 0x30}}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$selinux_load(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9"], 0xa) 425.434454ms ago: executing program 7 (id=2366): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x81, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000100)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x2070, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0x1b0, 0x1, [@m_simple={0xb0, 0x16, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x6, 0xffffffffffffffff, 0x4}}, @TCA_DEF_DATA={0xa, 0x3, 'vcan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x10000000, 0x7f, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xeb, 0x2, 0x401, 0xdd}}]}, {0x2d, 0x6, "6fa6f9ed095cb0677dcafb618347e2f4e0421953df3bc7fc96e095e0d16047b1e3e112809c1f0d81a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xf2f2a92e329a0d7c}}}}, @m_gact={0xfc, 0x8, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x200, 0x6, 0x50000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x450d, 0x5, 0x8, 0xd7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18fe, 0x10000000}}]}, {0x91, 0x6, "698e7a010b79116730d8ead20f176655a05772ed77e8ca5ae8aca49c2a1b0f841e6d024c7239dd357c869b7913596bf5685a4ceefce81575f5fffbd6a929d1eba23ab56f9b2f7ecfe4c21a9a7a73d5b81fc49ffb9370ac5fba9fa8988f053f00507456f6e5a9c83ec4c976be8556e5f04be5bdf8179063f70ec8adf4cedc37e6f8f85977d87f93e163ba78eaea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x238, 0x1, [@m_connmark={0x110, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x95, 0xd, 0x7, 0xe6, 0xe44}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x0, 0x8, 0x5}, 0x8}}]}, {0xa5, 0x6, "89a9b793feacbc2070309386654ec1cd8d37a3299f1028d14b50ca4fcb3c6b184dbb3f2b19df93c02003ef1dc162fc673b31d78922c38e390209a4ced850ddff69e79b57d742bba23d9194ff25ac1b35e604092eeb3569d91200f2a547863e2010b8f9f8b2728de375eff6b819741e2fea21a4349474ddc7ce453a429fd16d01d9288f79077216c999cf69f8a74e8d2326a6664698038e4a282af1b62850ab93e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x124, 0xf, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_BOS={0x5}]}, {0xcd, 0x6, "6c99d4221692e8a7202f405bf29722ea60f4e9d05188599a33424034366972939a09e3cd1374ad30186d705c439a69120128c4936d693ec15cfb1ffe8d9fad26aff76b3a07d50778f0795592fcba74b509db13e1a5560fb8fe847414261cc09169c75720bb2fedf1203a3ba29debbf69e9ee9d84780248c0f36bba0b335cbd2853a5754a08b39d08befee2107ac84b3f0495498ae40c0f8598f0adeb0b087a5d741c29566421ef15c4407732a38c15157deadc117d9954db5cdf5fa6200aa0b45c9fc0945f450c6791"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x1c74, 0x1, [@m_pedit={0x1c70, 0x9, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7f, 0x8, 0x8, 0x2, 0x6}, 0x4, 0xc}, [{0x4, 0x0, 0x0, 0x9, 0x1, 0x7}, {0x1, 0x2, 0x9, 0x2, 0xe, 0x2}, {0x7, 0xbe4a, 0x5, 0x4, 0x297, 0x7}, {0xfffffff8, 0x8, 0x100, 0x5, 0x5, 0x5}, {0xe0, 0x8, 0x0, 0x3, 0x8, 0x10001}, {0x9, 0x4, 0xc8, 0x1, 0x47f1, 0x87}, {0xe, 0x2, 0xfffffff9, 0x8, 0x800, 0x5}, {0x5, 0x6, 0x1, 0x9, 0x10}, {0x2, 0x6, 0x5, 0xc, 0x6, 0x20}, {0x9, 0x3, 0xb8, 0x5, 0x7, 0x81}, {0x777, 0x9, 0x2, 0xc, 0x2, 0x3}, {0x9, 0x8, 0x0, 0x7, 0x28ae}, {0x1, 0x6, 0xffffffff, 0x1ff, 0x5b02dc02, 0x6}, {0x10001, 0x200, 0x1, 0x6c68, 0xb, 0x1000}, {0x2, 0x7, 0x5, 0x1c, 0x100, 0x10000}, {0x1, 0xc4c7, 0x58c5, 0x2, 0x9, 0x4}, {0x5, 0x8a0d, 0x3, 0x80, 0xffff, 0x800}, {0x1, 0x7, 0xde2, 0xf, 0x3, 0x80}, {0x3, 0xf, 0x7, 0xbd, 0xfff, 0x7}, {0x7f, 0x40, 0xe0000000, 0x8, 0xc, 0x10001}, {0x4, 0x77, 0x58e1, 0x31, 0x2, 0x4}, {0x0, 0x9, 0x7, 0x4, 0x800, 0x18}, {0x8000, 0x1, 0x1, 0x800, 0x9, 0x80}, {0xf67e, 0x3, 0x9, 0x76f, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x1, 0xb, 0x8}, {0x7, 0xae1, 0x7ff, 0x61b, 0x63de, 0x29}, {0x9, 0x8000, 0x0, 0xa8, 0x5, 0x5}, {0xd0c5, 0x10000, 0x677, 0x7fffffff, 0x3, 0x1}, {0xa, 0xf, 0x8, 0x7, 0xff, 0x7fffffff}, {0x400, 0x0, 0x4, 0x7, 0xffffffff, 0x7}, {0xd, 0x8, 0x9, 0x282c, 0x6, 0x100}, {0x8, 0x6, 0xfffffffe, 0x5, 0x1, 0x5c}, {0x2, 0x7fff, 0x7, 0x7ff, 0x1, 0x7ff}, {0x40, 0x7, 0x6bc19791, 0x0, 0x3, 0x1}, {0xfffffffc, 0x3, 0x2, 0x6b, 0xe7, 0x1}, {0x1, 0x10, 0x6, 0xdf31, 0x7, 0xfffff148}, {0xdd47, 0x7fffffff, 0x6cd9, 0xfff, 0x3e1d, 0x1}, {0x10001, 0x0, 0x8, 0x7, 0x8b, 0x4}, {0x1, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x8, 0x3, 0x2, 0x0, 0x5d97110b, 0x6}, {0x26, 0x1, 0x80000000, 0x6, 0x80000000}, {0x10, 0x7, 0x6, 0xc6, 0x3, 0x3}, {0x3ff, 0x80, 0x0, 0x100, 0xf85, 0x6}, {0x3, 0xffffffc0, 0x0, 0xff, 0x81}, {0xea, 0x10000, 0xfffffbff, 0x9, 0x4, 0x7}, {0x7ff, 0x1, 0x0, 0x9, 0xf, 0x9}, {0xfffffff8, 0x8, 0x9, 0x80, 0x2}, {0x0, 0x8, 0x0, 0x2, 0x1, 0x4886}, {0x8, 0x94, 0x2, 0x2361, 0x1}, {0x536, 0x6, 0xfffffff7, 0xfff, 0x9, 0x1}, {0x4, 0x8, 0x2b3, 0x7, 0x6, 0x9}, {0xe, 0x4, 0xfffffff1, 0xdea3, 0x1ff, 0x4ac65423}, {0xa, 0x8, 0x8001, 0x6, 0xfffffff7, 0x9}, {0x2000, 0x4, 0x0, 0x4, 0x9, 0xf3f5c6e}, {0x0, 0x81, 0x2, 0x40, 0xffffffff, 0x8}, {0x7, 0xd1d8, 0x7, 0x7ff, 0x3, 0x9}, {0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x4}, {0xf, 0x80000000, 0x1, 0x3, 0x5, 0x8}, {0xd6, 0x5, 0x91, 0x3, 0x66, 0x4}, {0x5, 0xffffff80, 0x9, 0x1054, 0x7, 0x8}, {0x4, 0x7, 0x7, 0x1, 0xba67, 0x7fff}, {0x1, 0xc000000, 0x4, 0xfff, 0x4, 0x3}, {0x4, 0x2, 0x3, 0x2, 0xa, 0x8001}, {0x7fff, 0xb2b9, 0x1000, 0x9, 0x6ec00, 0x5}, {0xa, 0x7, 0x3, 0xffff62bd, 0x800, 0x4}, {0x3, 0xa, 0x6, 0x5, 0x7, 0x889}, {0x1, 0xe, 0x3, 0x945, 0x5, 0x3ff}, {0x400, 0x2, 0x1895, 0xe, 0x8, 0xfff}, {0x6, 0x99, 0x5, 0x4, 0x80, 0x5}, {0x9, 0xc, 0x2, 0x7, 0x8, 0xb245}, {0x73d, 0x10, 0x1, 0xb3, 0x5, 0x919}, {0xffffff35, 0x2, 0xfffffffc, 0x5, 0x1, 0x4945}, {0x6, 0x55, 0x967a, 0xe, 0x3, 0x4}, {0x0, 0x0, 0x75, 0x2, 0x8, 0x5}, {0x7, 0x5, 0x400c0000, 0xffffff81, 0x401, 0x8}, {0x922a, 0x9, 0x3, 0x0, 0x6, 0x81}, {0xf, 0x8, 0x1, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x4411, 0xffffffff, 0x5}, {0x0, 0xa9e, 0x5, 0x800, 0x4000000, 0x8}, {0xffffff80, 0x5, 0x2, 0x8000, 0x80000000, 0x3}, {0x8, 0x8, 0x4, 0x9, 0xfffffff8, 0x9}, {0x80000001, 0xfffffffe, 0x4, 0x4, 0x1, 0x3}, {0x8, 0x9, 0x8, 0x7, 0x2, 0x80}, {0x7f000000, 0x1, 0x2, 0x80, 0x5, 0x7fff}, {0x75, 0x36, 0x9, 0x4, 0xa1c, 0xb}, {0x3, 0x5a02, 0x4, 0x10001, 0x0, 0x3}, {0xfffff000, 0x6, 0x1, 0x5, 0x5, 0x4}, {0x9, 0x7fff, 0x9, 0x2, 0x6, 0xfffffffe}, {0x79e, 0x3, 0x5, 0x9, 0x1, 0x7fff}, {0x2, 0x8, 0x4, 0x2, 0x2, 0x4}, {0xc8, 0x3, 0x0, 0x5, 0x15, 0x5}, {0x3, 0x6, 0x5, 0x100, 0x5f25, 0x2}, {0x3ff, 0x5, 0x10001, 0x8, 0xd32, 0xf}, {0x9, 0x2, 0x2, 0x7, 0x8, 0x401}, {0x9, 0x6, 0x0, 0xb, 0xc70, 0x7}, {0x40, 0x1, 0x9b9a48e0, 0xc5, 0x2, 0x7fffffff}, {0x7, 0x101, 0xeb, 0x800, 0x1, 0xd2e}, {0x6, 0x7f, 0xffff, 0x9, 0x2, 0x5}, {0x7fffffff, 0x7, 0x6, 0x6, 0x8, 0x8}, {0x5, 0xfffffff9, 0x7, 0xffffffff, 0x7, 0xfff}, {0x1ff, 0x9, 0x9, 0x4, 0x0, 0x4}, {0x9, 0x2, 0x7, 0x400, 0x12, 0x6}, {0x4, 0x8d, 0x4, 0x0, 0x9, 0x9}, {0x5, 0x0, 0x4, 0xfffffff7, 0x7, 0x27}, {0x0, 0x10001, 0x1, 0x8, 0x3, 0xe1}, {0x661266f2, 0x6, 0x2, 0x2, 0x3, 0x9}, {0x9, 0x3, 0x40, 0x6, 0x38c8, 0x5}, {0xe5db, 0x7, 0xffffff01, 0x100, 0x1, 0x1000}, {0xf88, 0x5, 0x40, 0x94c, 0x4, 0x200}, {0x10000, 0x0, 0x6, 0x10001, 0x4}, {0x401, 0x4, 0x1, 0x3, 0x9, 0xffffffff}, {0xb702, 0x6, 0x3ff, 0x7, 0x16620000, 0x2}, {0x49, 0x9, 0xfff, 0x9, 0xffffffff, 0x5a}, {0xb, 0x7, 0x1, 0x5, 0xa6c, 0x8}, {0x8, 0x7, 0x6, 0x61e, 0x6ba, 0x4}, {0xd86, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x7, 0x1, 0x7}, {0x6, 0x7f, 0x2000000, 0x4, 0x4, 0x4}, {0x5, 0x7, 0x9e, 0x0, 0x3, 0xfffffffe}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x100, 0x2, 0x1bc, 0x5, 0x4}, {0x4, 0x8, 0x800, 0x8, 0x10000, 0xb6fa}, {0x8000000, 0xff, 0x6, 0x6, 0x5, 0x9}, {0x89f, 0x0, 0x100, 0x5, 0x3, 0xaa30}, {0x2, 0x1, 0x7fffffff, 0x6, 0x10000, 0x2}, {0x0, 0xb, 0x8001, 0x4, 0x8, 0xe0}, {0x4, 0x36, 0x7, 0xb456, 0x4, 0xc0}, {0x7, 0xd, 0xb3, 0x9, 0x3ff, 0xffff}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x167297199c82e075, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x22d443be4ca0236f}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6c, 0x5, 0x8, 0x4c}, 0x5, 0xfb}, [{0x5, 0x6, 0xc, 0x47bf, 0x8, 0x4}, {0x6d, 0x80000000, 0x3, 0x2000, 0x8, 0x7}, {0xa7, 0x200, 0x3, 0xffffffc0, 0x5, 0x7}, {0xfffffffb, 0x7, 0x4, 0x6e, 0x200, 0x1}, {0xe9, 0x9, 0x80000001, 0x1, 0x40, 0x6}, {0x5, 0x9, 0x3, 0x3b1b, 0x9d, 0xbac}, {0xffff, 0xfffffff9, 0x800, 0x1, 0x8000, 0x9}, {0x605d, 0x10, 0x1000, 0x5, 0x3, 0xc}, {0x7, 0x3, 0x9, 0x180000, 0x3, 0x4}, {0xd, 0x2, 0x2, 0x3, 0x3ff, 0x4}, {0x0, 0x74c, 0x5c, 0x8, 0x3ff, 0x7fffffff}, {0x10, 0x3, 0x1, 0x6, 0x6, 0x40}, {0x3, 0x5, 0x4, 0xf, 0x3, 0x100}, {0x3, 0x6f6, 0xdd0d, 0x7, 0x2, 0x9}, {0xffffffff, 0x5, 0x4, 0x4, 0x9, 0xc}, {0x8, 0x3, 0x4, 0x5, 0x2, 0x67}, {0x3, 0x0, 0x800, 0x9, 0xbb, 0x7}, {0xfffffffa, 0x401, 0x80000001, 0x1, 0x8, 0xc}, {0x7, 0x4, 0xffff8000, 0x0, 0x0, 0x2}, {0x2, 0x1, 0x10001, 0x7, 0xe, 0xe}, {0x8, 0xd4, 0xffffff81, 0x1ff, 0x4, 0xafa}, {0x9, 0x8, 0x85, 0x10001, 0x1, 0xe}, {0x9, 0x80000000, 0xfff, 0xfffffffb, 0x1, 0x2}, {0xdb, 0x10, 0x3, 0x6, 0x9, 0x1}, {0x3, 0x6, 0x5, 0x6, 0x5, 0x6}, {0x79, 0x2, 0xa362, 0x10000, 0x6, 0x400}, {0x8, 0x5, 0xf, 0x4, 0x2, 0x2}, {0x401, 0x0, 0xf, 0xb022, 0x9, 0xfffff800}, {0x8, 0x7, 0x7, 0x9, 0xc, 0x9}, {0xffff, 0x9e6, 0xd99, 0x7, 0x3, 0x7}, {0x9a, 0x4, 0x1, 0xc, 0x31e0, 0x5ad}, {0x3, 0x0, 0x5, 0x95, 0xb}, {0xfffffffd, 0x9, 0xbf, 0x5, 0x823, 0x401}, {0x7f, 0x6, 0x40, 0xffffd6e2, 0x8, 0x80000001}, {0x80, 0x3, 0x14, 0x4, 0x9, 0x8}, {0x20c, 0x401, 0x7, 0xfffffff8, 0xd51, 0x9}, {0x9, 0x1, 0x7938, 0xb, 0x6, 0x6da4}, {0x6, 0x0, 0x1, 0xff, 0x9788, 0xfffffff9}, {0x2, 0x2, 0x5, 0x81, 0x64, 0xb8c}, {0x800, 0xfffffff9, 0x4, 0x10000, 0x7, 0x1}, {0x7, 0x4, 0x6, 0x9, 0xfffffffc, 0x7fffffff}, {0x5, 0x1, 0x4c7, 0x4, 0xc62, 0x6}, {0x9, 0xb7, 0x1, 0xffffffff, 0x8, 0x8}, {0x396d, 0xffff, 0x10, 0x6, 0xbc3, 0x32}, {0x3, 0x540, 0x0, 0x9, 0x2, 0x9f}, {0x6, 0x0, 0xb, 0x80000000, 0x4b, 0x7}, {0x4, 0x82, 0x7, 0x195d8d70, 0x81, 0x40000}, {0x3, 0x5, 0x3, 0x1ff, 0x0, 0x1ff}, {0x8001, 0x400, 0xfffffbff, 0xfffffffc, 0x3, 0xfffffff7}, {0xc0, 0x6, 0x1, 0xfffffeff, 0x121, 0x1}, {0xf, 0x0, 0x5, 0x1, 0x9, 0x10}, {0x4, 0x9, 0xffffffff, 0x9, 0x7, 0x4}, {0x1, 0x735, 0x3, 0xb, 0x84, 0xfffffff5}, {0x8001, 0x6, 0x8, 0xf31, 0x7f, 0x6}, {0x9, 0x0, 0x80000000, 0x10000, 0x2}, {0x1, 0x7, 0x1, 0xd6, 0x3, 0x7}, {0x8, 0xfffffffa, 0x0, 0x4, 0x7ff, 0x32e3}, {0x7, 0x7, 0x2, 0x7ff, 0x5, 0x80000001}, {0x2, 0x7, 0x3, 0xddf, 0x5, 0x4}, {0xfffffffb, 0x3, 0x7, 0xb, 0xfffffff8, 0x79c}, {0x2, 0x5, 0x6, 0x7f, 0x4, 0x7}, {0x200, 0x6, 0x2, 0x3, 0x6, 0x8}, {0x3, 0x1, 0xffff, 0x100, 0x2}, {0x800, 0xc7b, 0x7, 0x7, 0x7, 0x5}, {0x3, 0x8, 0x8000, 0xffffffff, 0x6, 0x7}, {0xf95, 0x6, 0xfffeffff, 0x4, 0x2}, {0xa56, 0x9, 0xf5, 0x7, 0xac0, 0x6}, {0x800, 0x2, 0x159, 0x80000000, 0x5, 0x8ad}, {0x8, 0xbb, 0x8000, 0x0, 0x4, 0x2}, {0x81, 0xfffffffb, 0xe, 0x4, 0x4, 0x8}, {0x4c, 0x4, 0x2, 0x1ff, 0x2b8a0150, 0x3}, {0x3, 0x0, 0x9, 0x4, 0xfffffff7, 0x3}, {0x100, 0x3, 0x0, 0x779278c8, 0x2, 0x6}, {0x0, 0x1, 0x3, 0x2, 0x42b, 0x1}, {0x9, 0xe75, 0x5, 0x5, 0x401, 0x3ff}, {0x8, 0x400, 0x0, 0x0, 0xf743c78a, 0x1}, {0x1, 0x8, 0x200, 0x9, 0x5, 0x3}, {0x1, 0x7, 0x74eebe, 0x1000, 0xe3, 0x8}, {0x1, 0x7, 0x10001, 0x5, 0x1000, 0x7}, {0x7, 0x0, 0x2, 0x7, 0xd2c, 0x1}, {0x0, 0xb, 0x5, 0x4, 0x3, 0x8}, {0x8, 0xe21, 0x7, 0x7, 0x101, 0xb}, {0x1ff, 0xffff8001, 0x10, 0x7, 0x401, 0x40}, {0x5, 0x1000, 0x0, 0x5, 0x6, 0x6d0}, {0x4, 0x9, 0xb, 0x1, 0x100, 0x3ff}, {0x9, 0x80000001, 0x0, 0x2, 0x7, 0xfffffff1}, {0x3, 0x8, 0x9, 0x0, 0x80000000, 0xff}, {0x0, 0x4, 0x1, 0x1c, 0x4, 0x3}, {0x7, 0x5, 0xb18, 0xa, 0x8f, 0x400000}, {0x5, 0x4, 0x7, 0x2, 0x6, 0x8115}, {0x4, 0x761b, 0x3, 0x4a8, 0x5, 0x7f}, {0xffffffff, 0x4, 0x8, 0x7, 0x4, 0x9}, {0xf, 0x3, 0x800, 0x9, 0xfffff738, 0x6}, {0x9, 0x0, 0x9, 0x3, 0x0, 0x9}, {0x4, 0xffff, 0xfffffffd, 0x9, 0x5, 0x9}, {0x9, 0x400, 0x6, 0x4, 0x5d0, 0xf5}, {0x4, 0x7, 0x3, 0xfffffff9, 0xf5, 0x6}, {0x5, 0x6, 0x4, 0x8, 0x9, 0xfffffffe}, {0x6, 0x6, 0x694f4cf9, 0x8, 0x80000000, 0x1}, {0xc2, 0x5, 0x0, 0x8, 0x1, 0xeba1}, {0x5, 0xfffffff2, 0x113, 0x6, 0x4, 0x54}, {0x2, 0x23a, 0x7, 0x6, 0x2, 0xfffffffe}, {0x6, 0x80, 0x1, 0x2e5c00, 0xc7f5, 0xed7}, {0x10001, 0x7, 0x16, 0xe57, 0x2592, 0x1ff}, {0x0, 0x1d5a8e2f, 0x1000, 0xb1, 0x3, 0x28000}, {0x6, 0xa, 0x1, 0x789, 0xd, 0x81d}, {0x7fffffff, 0x4, 0x2, 0x1, 0x6, 0x2}, {0xc, 0x800, 0x2, 0xf7d, 0xc1f, 0x3}, {0x1, 0x81, 0x3, 0x5, 0x3, 0x5}, {0x1, 0x7, 0xeb5a, 0x9, 0x8, 0xfffffff7}, {0x40, 0x8, 0xa, 0x61, 0x1, 0x8}, {0xf30, 0x0, 0x0, 0x4, 0x2, 0x2}, {0x7, 0x7503887d, 0x3, 0x200, 0x10000, 0x40}, {0x6, 0xf, 0x30, 0x3, 0x1a, 0x3}, {0x8, 0x7, 0x401, 0x0, 0x200, 0x8}, {0xb, 0x3, 0xdc4, 0x9, 0x5, 0x1}, {0x0, 0x8, 0x2000, 0x2, 0x2, 0xffffffff}, {0xfffff3ad, 0x5, 0x401, 0x9, 0x2000000, 0x400}, {0x6, 0x6, 0x8, 0x1, 0xed, 0x1}, {0x7ff, 0x9, 0x0, 0x6, 0x8, 0x7fff}, {0x8, 0xb, 0x0, 0x8, 0x1, 0x4}, {0x1, 0x2, 0xfffffffd, 0x6, 0xb83, 0x3}, {0x1, 0x2, 0xd24, 0x31, 0x6, 0x400}, {0x7, 0x100, 0x4d9, 0x80e, 0x1, 0xff}, {0xe6, 0x401, 0x5, 0x4, 0xba3, 0x4}, {0xfff, 0x1, 0x8, 0x6, 0x101, 0x1}, {0x9, 0x8, 0xfffffffd, 0x0, 0x8}, {0xd, 0x100, 0x7ff, 0x366c, 0xffffffff, 0x100}], [{0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x5}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {}, {}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xf5f93952d36ccc42}, {0x3}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {}, {0x2}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0xb7ead1eeecda9167}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {}, {0x2}, {0x2}, {0x7, 0x1}, {0x7, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2070}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x90b, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xbc, r5, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7ff}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x3f, 0xac, "d3f61b5b8c555cc42b1cca46c62c5b2cdb4ac468a283e9d1cd0a12b02e7fd01c86c580caa29345c634609459479c461008744222df1fb61528e1b2"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x4}, {0x6c}, {0x2b, 0x1}, {0x4, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x2}, {0xb}, {0x12}, {0x5}, {0xf}, {0x1, 0x1}, {0x2, 0x1}, {0x36}, {0x6c, 0x1}, {0xc}, {0x36, 0x1}, {0x5, 0x1}, {0x2}, {0x48, 0x1}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1d}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x88c1) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x2002040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 357.717602ms ago: executing program 3 (id=2367): openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x2, 0x2, 0x0, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x98}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r5, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r5, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r5, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r5, r5, 0xf, 0xfffffffffffffff8, 0x3fff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r8, 0xface) (async) syz_kvm_assert_syzos_uexit$x86(r3, r8, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r8, 0xffffffffffffffff) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@random="e33110495bfd", @broadcast, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x8, 0x6, 0x0, 0x0, "e832153f4191cb15"}}}}, 0x0) (async) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@random="e33110495bfd", @broadcast, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x8, 0x6, 0x0, 0x0, "e832153f4191cb15"}}}}, 0x0) 344.31333ms ago: executing program 9 (id=2368): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xd}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x9}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x2}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x74}}, 0x440b0) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xd}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x9}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x2}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x74}}, 0x440b0) (async) 286.135723ms ago: executing program 7 (id=2369): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xa, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) unshare(0x2a020480) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffe0}, {0x0, 0x136a71e6de8f005a}}, [@qdisc_kind_options=@q_multiq={{0x400}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') write$binfmt_script(r5, 0x0, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3f9, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) r9 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x8a881, 0xac) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000080)={r10, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000008000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802e4dae4162e43ac61b7ad33", [0x2, 0x8]}}) ioctl$LOOP_CLR_FD(r9, 0x4c01) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x6e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r11 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r11, 0xb) listen(r7, 0x50) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285628, &(0x7f00000001c0)={0x3, 0x1, 0x0, '\x00', 0x0}) 161.708997ms ago: executing program 7 (id=2370): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000003980)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="39b7e9", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x28}}], 0x2, 0x4000044) prlimit64(r0, 0x8, &(0x7f0000000180)={0x5, 0x7}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x19, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)={r4, 0x10, "7be1949f895c4b102a89170ea215c836"}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r4, 0x868}, &(0x7f0000000100)=0x8) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xfff, 0x2003) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet(r1, &(0x7f0000003980)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="39b7e9", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x28}}], 0x2, 0x4000044) (async) prlimit64(r0, 0x8, &(0x7f0000000180)={0x5, 0x7}, 0x0) (async) pipe(&(0x7f0000000000)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) socket$kcm(0x2, 0x5, 0x84) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x19, &(0x7f0000000000), 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)={r4, 0x10, "7be1949f895c4b102a89170ea215c836"}, &(0x7f0000000480)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r4, 0x868}, &(0x7f0000000100)=0x8) (async) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xfff, 0x2003) (async) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) (async) 34.48989ms ago: executing program 7 (id=2371): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c02"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a0000"], 0x80}}, 0x4000000) sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508e", 0x5d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000011400042abd7000fcdbdf25080001000000000008000100020000000800010002000000080001000100000008000100010000000800010000000100000000000000539dd9fcfc316d5d0000"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8010) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendfile(r5, r6, &(0x7f0000000680)=0x74b9, 0x427) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="5bf13e530445d38980ed9d9fe8151058b1ab71a257d9ba5c49dcea6c761213c81da41f834d88fefe4840699d3f6156d102f52059d9f1848e17719333d4846a21c995cf83ba3831be113d36c44652a29f20efe759e8ba3b3fa8e001740fec855e63f6e9f24dc310937c708c33309050131e7e4e30206b75ca516218dfdbea51c365d7ba8bde3b4e22507c92c527e158", 0x8f}, {&(0x7f0000000180)="03c2df41b4ea0c679e7cd014a27e", 0xe}, {&(0x7f00000001c0)="f5ef014c2606365b6b39ef3c73338ff97dcb9104f8f3576febef4aea0208ee9604f2adbb4e1a51f2061805ac85dcdb55c4c88cd9f861844b5389e07af07037abefd80620b9509f2f7e8219f4bc1caef3f33ea4bd80639bd1b1ae4f9214e6166bb6ad797c1942671e59701c784fb09c9d2ad59cebed47c4f92d9d97d8c3356e84cd04c626cf0957804e5de54b83d88bad27b8f39bfe72ab6c196577296449bef962d8f762ba", 0xa5}], 0x3) 34.156031ms ago: executing program 7 (id=2372): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0, 0x1802}]) 20.740767ms ago: executing program 9 (id=2373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x4, 0x0, {0x2, 0x3, 0x0, 0x0, {0xfffc, 0x4e22, [0x2, 0xffffffff], [0x803, 0x0, 0x38, 0x1], 0x0, [0x1, 0x7fffffff]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x200040c4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES32, @ANYBLOB="08000100ac141433080002000a010100080019"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 0s ago: executing program 3 (id=2374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="b888008ec86766c744240080280a3d6766c74424028c0000006766c744240600000000670f011424660f3a408009000036672e0f23850f35660f388123f336f018910e000f019f1dfb0f01c864260f06", 0x50}], 0x1, 0x42, &(0x7f00000001c0), 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setns(0xc9, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000000)={0x6, 0x0, [{0x669, 0x0, 0x39294324}, {0x119, 0x0, 0x10000}, {0x1df, 0x0, 0x8}, {0xa2a, 0x0, 0x6}, {0xb55, 0x0, 0x7}, {0x3b7, 0x0, 0x1}]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x100, 0xdd61, 0x1, {0x2, @pix={0x0, 0x103, 0x3432564e, 0x9, 0x5, 0xffffff81, 0x4, 0x6, 0x1, 0x2, 0x1, 0x1}}, 0xffff0001}) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20000}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r7, 0x80105873, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): descriptor for endpoint 83 [ 170.534272][ T50] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 170.548238][ T50] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 3 [ 170.557075][ T50] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 4 [ 170.563423][ T50] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 86 [ 170.566888][ T50] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 170.587035][ T50] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 170.655173][T10280] usb 12-1: USB disconnect, device number 2 [ 170.666925][T10280] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 170.685057][T10280] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 170.704923][T10280] keyspan 12-1:1.0: device disconnected [ 170.874995][ T5084] Bluetooth: hci1: command tx timeout [ 171.025792][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.032062][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.035968][ T5825] bond0 (unregistering): Released all slaves [ 171.048855][ T5825] bond1 (unregistering): Released all slaves [ 171.083993][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.123573][ T5438] 8021q: adding VLAN 0 to HW filter on device eth14 [ 171.126653][T10445] ªªªªªª: renamed from hsr0 (while UP) [ 171.143106][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.185773][ T5825] tipc: Disabling bearer [ 171.189472][ T5825] tipc: Left network mode [ 171.215055][T10355] team0: Port device team_slave_0 added [ 171.233045][T10355] team0: Port device team_slave_1 added [ 171.271422][T10458] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 171.289467][T10458] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 171.316481][T10355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.331540][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 171.338452][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.364965][T10355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.454478][T10355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.456762][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.465939][T10355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.496267][T10476] netlink: 200 bytes leftover after parsing attributes in process `syz.7.1207'. [ 171.771942][T10355] hsr_slave_0: entered promiscuous mode [ 171.775483][T10355] hsr_slave_1: entered promiscuous mode [ 171.778485][T10355] debugfs: 'hsr0' already exists in 'hsr' [ 171.785097][T10355] Cannot create hsr debugfs directory [ 171.798530][ T5438] 8021q: adding VLAN 0 to HW filter on device eth15 [ 171.814817][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 172.062370][ T5825] hsr_slave_0: left promiscuous mode [ 172.079295][ T5825] hsr_slave_1: left promiscuous mode [ 172.081681][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.087248][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.098222][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.105815][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.156472][ T5825] veth1_macvtap: left allmulticast mode [ 172.165208][ T5825] veth1_macvtap: left promiscuous mode [ 172.167676][ T5825] veth0_macvtap: left promiscuous mode [ 172.173438][ T5825] veth1_vlan: left promiscuous mode [ 172.180895][ T5825] veth0_vlan: left promiscuous mode [ 172.429057][ T50] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 172.522638][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 172.548514][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 172.559349][ T50] usb 12-1: device descriptor read/64, error -71 [ 172.815311][ T50] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 172.951375][ T5084] Bluetooth: hci1: command tx timeout [ 172.985208][ T50] usb 12-1: device descriptor read/64, error -71 [ 173.048742][T10543] key id 00000004 not found [ 173.100067][ T50] usb usb12-port1: attempt power cycle [ 173.176012][T10550] tmpfs: Unknown parameter 'grpquota³… [ 173.176012][T10550] '¯•D®§äTÞ Y´CQ?' [ 173.197645][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1225'. [ 173.209923][T10550] openvswitch: netlink: IPv4 frag type 110 is out of range max 2 [ 173.280851][T10555] tmpfs: Unknown parameter '' [ 173.287100][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 173.287119][ T42] audit: type=1400 audit(2000000018.549:1165): avc: denied { write } for pid=10553 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.345782][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.357451][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.407112][T10566] netlink: Conntrack attr has 8 unknown bytes [ 173.409642][T10566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.431007][ T5438] 8021q: adding VLAN 0 to HW filter on device eth16 [ 173.450280][ T50] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 173.492150][T10355] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 173.502753][ T50] usb 12-1: device descriptor read/8, error -71 [ 173.508689][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.519390][T10355] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 173.526338][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.537143][T10355] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 173.555934][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.569021][ T8743] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 173.569916][T10355] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 173.581875][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.586652][ T42] audit: type=1400 audit(2000000018.849:1166): avc: denied { write } for pid=10573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.691591][ T42] audit: type=1400 audit(2000000018.959:1167): avc: denied { write } for pid=10592 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.723218][ T8743] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.732869][ T8743] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 173.733777][T10355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.738514][ T8743] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 173.746112][ T8743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.753765][ T50] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 173.771128][ T8743] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 173.775806][T10355] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.790108][ T5438] 8021q: adding VLAN 0 to HW filter on device eth17 [ 173.790570][ T50] usb 12-1: device descriptor read/8, error -71 [ 173.797832][ T42] audit: type=1400 audit(2000000019.059:1168): avc: denied { map } for pid=10594 comm="syz.2.1234" path="socket:[36714]" dev="sockfs" ino=36714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 173.798863][ T8743] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 173.815527][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.817906][ T9599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.831607][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.834068][ T9599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.910665][ T50] usb usb12-port1: unable to enumerate USB device [ 174.120221][T10561] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 174.122880][T10561] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 174.125566][T10561] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 174.128090][T10562] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 174.218531][T10561] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 174.240621][ T8743] usb 9-1: USB disconnect, device number 19 [ 174.258747][ T8743] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 174.262733][ T8743] spcp8x5 9-1:1.0: device disconnected [ 174.313752][T10355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.477395][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1238'. [ 174.484119][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1238'. [ 174.557856][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 174.593591][ T42] audit: type=1400 audit(2000000019.859:1169): avc: denied { shutdown } for pid=10622 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.638413][T10355] veth0_vlan: entered promiscuous mode [ 174.638801][T10638] 9pnet_virtio: no channels available for device syz [ 174.667483][T10355] veth1_vlan: entered promiscuous mode [ 174.707183][T10355] veth0_macvtap: entered promiscuous mode [ 174.719968][T10355] veth1_macvtap: entered promiscuous mode [ 174.736289][T10355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.754713][T10355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.799192][ T5800] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.840893][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.872660][ T5800] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.894876][ T5800] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.962879][ T9595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.966213][ T9595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.039406][ T5084] Bluetooth: hci1: command tx timeout [ 175.063578][ T9595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.070038][ T9595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.165899][T10655] 9pnet_virtio: no channels available for device syz [ 175.168787][T10655] nfs: Unknown parameter './file0' [ 175.252272][T10660] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 175.309375][T10657] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 175.335244][T10657] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 175.421948][T10671] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1249'. [ 175.475818][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 175.517667][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1252'. [ 175.616875][T10673] bridge5: entered promiscuous mode [ 175.629901][T10673] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 175.771340][T10699] tmpfs: Bad value for 'mpol' [ 175.777409][ T42] audit: type=1326 audit(2000000021.039:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.2.1255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce1d9e0d9 code=0x0 [ 175.778316][T10700] tmpfs: Bad value for 'mpol' [ 175.845753][T10703] : entered allmulticast mode [ 175.885010][ T42] audit: type=1400 audit(2000000021.149:1171): avc: denied { write } for pid=10705 comm="syz.4.1258" path="socket:[37640]" dev="sockfs" ino=37640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.204086][T10714] netlink: 'syz.8.1261': attribute type 1 has an invalid length. [ 176.207939][ T42] audit: type=1400 audit(2000000021.469:1172): avc: denied { execute } for pid=10713 comm="syz.8.1261" path="/dev/audio1" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 176.606015][T10695] : left allmulticast mode [ 176.678566][ T42] audit: type=1400 audit(2000000021.939:1173): avc: denied { execute_no_trans } for pid=10728 comm="syz.2.1266" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=37775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.723997][T10726] geneve2: entered promiscuous mode [ 176.734437][T10726] geneve2: entered allmulticast mode [ 176.835194][ C2] vcan0: j1939_tp_rxtimer: 0xffff888034ba2000: rx timeout, send abort [ 176.838752][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888034ba2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 176.953155][T10735] cgroup: none used incorrectly [ 176.973598][T10735] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 177.022539][T10739] netlink: 'syz.2.1270': attribute type 10 has an invalid length. [ 177.025565][T10739] syz_tun: entered promiscuous mode [ 177.032462][T10739] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 177.044333][ T42] audit: type=1400 audit(2000000022.309:1174): avc: denied { write } for pid=10736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.109941][ T5084] Bluetooth: hci1: command tx timeout [ 177.166652][T10745] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 177.176457][T10745] netlink: 'syz.2.1272': attribute type 2 has an invalid length. [ 177.184940][T10746] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 177.197038][T10746] netlink: 'syz.2.1272': attribute type 2 has an invalid length. [ 177.212206][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=10745 comm=syz.2.1272 [ 177.241898][T10745] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 177.619804][T10769] tmpfs: Bad value for 'mpol' [ 177.700571][T10771] netlink: 'syz.7.1279': attribute type 1 has an invalid length. [ 177.791251][T10771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.846795][T10777] bond1: (slave geneve2): making interface the new active one [ 177.848419][T10782] fuse: Unknown parameter '00000000000000000000003' [ 177.852144][T10777] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.853626][T10783] fuse: Unknown parameter '00000000000000000000003' [ 177.915058][T10786] __nla_validate_parse: 3 callbacks suppressed [ 177.915082][T10786] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1282'. [ 178.150893][T10795] netlink: Conntrack attr has 8 unknown bytes [ 178.165432][T10795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.279315][ T5810] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 178.470570][ T5810] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.482956][ T5810] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.492799][ T5810] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.512464][ T5810] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.517504][ T5810] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.551801][ T5810] usb 12-1: config 0 descriptor?? [ 178.734776][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 178.734796][ T42] audit: type=1400 audit(2000000023.999:1186): avc: denied { write } for pid=10814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.771009][T10816] overlayfs: failed to resolve './file1': -2 [ 178.806472][ T42] audit: type=1400 audit(2000000024.069:1187): avc: denied { write } for pid=10818 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.853915][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1293'. [ 178.860974][T10821] 9pnet_virtio: no channels available for device syz [ 178.993805][T10831] i2c i2c-1: dtv_property_process_set: SET cmd 0x61746162 undefined [ 178.997234][ T42] audit: type=1400 audit(2000000024.249:1188): avc: denied { write } for pid=10825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.061408][ T5810] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 179.069118][T10824] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 179.071583][T10824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.090943][ T42] audit: type=1400 audit(2000000024.359:1189): avc: denied { write } for pid=10834 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.091001][T10824] vhci_hcd vhci_hcd.0: Device attached [ 179.147345][T10835] vhci_hcd: connection closed [ 179.163208][ T5825] vhci_hcd vhci_hcd.4: stop threads [ 179.168418][ T5825] vhci_hcd vhci_hcd.4: release socket [ 179.174700][ T5825] vhci_hcd vhci_hcd.4: disconnect device [ 179.224822][T10842] libceph: resolve '4' (ret=-3): failed [ 179.443088][ T42] audit: type=1400 audit(2000000024.709:1190): avc: denied { write } for pid=10851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.548870][ T42] audit: type=1326 audit(2000000024.809:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.2.1299" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdce1d9e0d9 code=0x0 [ 179.616115][ T42] audit: type=1400 audit(2000000024.879:1192): avc: denied { write } for pid=10859 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.668753][ T42] audit: type=1400 audit(2000000024.929:1193): avc: denied { name_bind } for pid=10865 comm="syz.8.1300" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 179.686198][T10857] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 179.695638][ T42] audit: type=1804 audit(2000000024.949:1194): pid=10857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1284" name="/newroot/34/file0" dev="tmpfs" ino=201 res=1 errno=0 [ 179.699072][T10857] ref_ctr increment failed for inode: 0xc9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bcd0000 [ 179.713442][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1300'. [ 179.726680][T10857] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 179.730891][T10857] ref_ctr decrement failed for inode: 0xc9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bcd0000 [ 179.756111][T10857] uprobe: syz.7.1284:10857 failed to unregister, leaking uprobe [ 179.787490][ T9] usb 12-1: USB disconnect, device number 7 [ 179.804602][T10875] netlink: 'syz.2.1303': attribute type 12 has an invalid length. [ 179.863975][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1305'. [ 179.879356][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1305'. [ 179.893014][ T42] audit: type=1400 audit(2000000025.149:1195): avc: denied { setopt } for pid=10873 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.899545][T10878] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 180.074090][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1306'. [ 180.089223][T10892] ±ÿ: renamed from lo (while UP) [ 180.182379][T10889] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1308'. [ 180.461339][T10916] 9pnet_virtio: no channels available for device syz [ 180.470854][T10915] Cannot find add_set index 0 as target [ 180.736871][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1321'. [ 180.740913][T10940] tmpfs: Bad value for 'mpol' [ 180.858489][T10950] input: syz0 as /devices/virtual/input/input19 [ 181.483390][T10976] overlayfs: missing 'workdir' [ 181.488066][T10976] hid-generic 0003:0627:0001.0001: pid 10976 passed too short report [ 181.563168][T10980] macsec1: entered allmulticast mode [ 181.565481][T10980] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 181.568363][T10980] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 181.574038][T10980] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 181.576941][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 181.583607][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 181.945427][T10992] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.952259][T10992] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 181.962210][T10992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.980117][T10992] netlink: 'syz.4.1336': attribute type 12 has an invalid length. [ 181.991462][T10992] netlink: 'syz.4.1336': attribute type 12 has an invalid length. [ 182.274506][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.305012][T11013] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.307444][T11013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.372886][ T5438] veth0_vlan: left promiscuous mode [ 182.382421][ T8743] veth0_vlan: entered promiscuous mode [ 182.686474][ T5810] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 182.859483][ T5810] usb 12-1: Using ep0 maxpacket: 8 [ 182.862905][ T5810] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.866581][ T5810] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.876202][ T5810] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.883267][ T5810] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.894353][ T5810] usb 12-1: config 0 descriptor?? [ 183.116909][ T5808] usb 12-1: USB disconnect, device number 8 [ 183.704961][T11073] __nla_validate_parse: 36 callbacks suppressed [ 183.704994][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1356'. [ 183.743623][T11078] Cannot find add_set index 0 as target [ 183.777041][T11080] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 183.853943][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1358'. [ 183.917780][T11086] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1360'. [ 183.934747][T11087] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 183.942605][T11087] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 183.948534][T11087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 183.957320][T11087] overlayfs: overlapping lowerdir path [ 184.011335][T11099] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 184.054740][T11103] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 184.057755][T11103] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 184.112595][T11109] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 184.115731][T11109] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 184.123581][T11109] openvswitch: netlink: Unknown key attributes 20 [ 184.319968][ T5875] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 184.473591][ T5875] usb 13-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.477368][ T5875] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.481326][ T5875] usb 13-1: Product: syz [ 184.483258][ T5875] usb 13-1: Manufacturer: syz [ 184.485159][ T5875] usb 13-1: SerialNumber: syz [ 184.705300][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.710397][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.715953][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.720290][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.724816][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.728480][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.734805][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 184.734824][ T42] audit: type=1400 audit(2000000029.999:1206): avc: denied { accept } for pid=11106 comm="syz.8.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.751344][ T5875] lan78xx 13-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 184.757583][ T5875] lan78xx 13-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 184.762322][ T5875] lan78xx 13-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 184.772978][ T5875] lan78xx 13-1:1.0: probe with driver lan78xx failed with error -71 [ 184.781191][ T5875] usb 13-1: USB disconnect, device number 2 [ 184.829666][ T5808] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 184.979062][ T5808] usb 12-1: Using ep0 maxpacket: 16 [ 184.983273][ T5808] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.987904][ T5808] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.993544][ T5808] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.997692][ T5808] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.003986][ T5808] usb 12-1: config 0 descriptor?? [ 185.358155][T11146] program syz.4.1379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.416089][T11146] ata1.00: invalid transfer count 0 [ 185.424780][T11153] overlayfs: failed to clone upperpath [ 185.437420][T11148] db_root: cannot open: 0 [ 185.520793][ T42] audit: type=1400 audit(2000000030.789:1207): avc: denied { unmount } for pid=6013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 185.588162][T11164] evm: overlay not supported [ 185.627723][ T42] audit: type=1400 audit(2000000030.889:1208): avc: denied { remount } for pid=11163 comm="syz.8.1382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 185.743998][ T42] audit: type=1800 audit(2000000031.009:1209): pid=11172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1385" name="nullb0" dev="tmpfs" ino=1435 res=0 errno=0 [ 185.765768][ T42] audit: type=1400 audit(2000000031.029:1210): avc: denied { map } for pid=11173 comm="syz.8.1386" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.826668][ T42] audit: type=1400 audit(2000000031.089:1211): avc: denied { listen } for pid=11178 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 185.860716][ T5808] usbhid 12-1:0.0: can't add hid device: -71 [ 185.875041][ T5808] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 185.920335][ T5808] usb 12-1: USB disconnect, device number 9 [ 185.975368][T11185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1389'. [ 185.999868][T11185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1389'. [ 186.050543][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1391'. [ 186.161479][T11199] netlink: 'syz.4.1393': attribute type 30 has an invalid length. [ 186.173225][ T42] audit: type=1400 audit(2000000031.439:1212): avc: denied { write } for pid=11191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.377730][ T42] audit: type=1400 audit(2000000031.639:1213): avc: denied { write } for pid=11213 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.457967][T11224] fuse: fd is not a fuse device [ 186.551582][T11233] erspan0: entered promiscuous mode [ 186.555746][ T42] audit: type=1400 audit(2000000031.819:1214): avc: denied { write } for pid=11227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.567133][T11233] erspan0: entered allmulticast mode [ 186.671436][ T42] audit: type=1400 audit(2000000031.939:1215): avc: denied { write } for pid=11235 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.749780][T11243] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 186.751990][T11243] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.759934][T11243] vhci_hcd vhci_hcd.0: Device attached [ 186.828666][T11254] IPVS: length: 18 != 8 [ 186.875784][T11245] vhci_hcd: connection closed [ 186.878528][ T5800] vhci_hcd vhci_hcd.8: stop threads [ 186.892156][ T5800] vhci_hcd vhci_hcd.8: release socket [ 186.905947][T11263] bridge_slave_0: invalid flags given to default FDB implementation [ 186.908546][ T5800] vhci_hcd vhci_hcd.8: disconnect device [ 186.941483][ T5808] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 187.215812][T11288] tmpfs: Bad value for 'mpol' [ 187.218087][T11262] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1406'. [ 187.280198][ T848] e1000 0000:00:06.0 eth0: Reset adapter [ 187.438774][T11285] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 187.450877][T11301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.496820][T11304] netlink: 'syz.7.1414': attribute type 1 has an invalid length. [ 187.499823][T11304] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1414'. [ 187.502915][T11304] netlink: 'syz.7.1414': attribute type 2 has an invalid length. [ 187.505379][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1414'. [ 187.740650][T11320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.922779][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 189.750758][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 190.798994][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 190.799008][ T42] audit: type=1400 audit(2000000036.059:1239): avc: denied { recv } for pid=0 comm="swapper/2" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 193.424352][ T42] audit: type=1400 audit(2000000038.689:1240): avc: denied { write } for pid=11354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.488120][ T42] audit: type=1400 audit(2000000038.749:1241): avc: denied { write } for pid=11357 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.231114][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.364292][ T42] audit: type=1400 audit(2000000039.629:1242): avc: denied { write } for pid=11360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.441013][ T42] audit: type=1400 audit(2000000039.709:1243): avc: denied { write } for pid=11363 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.868051][ T42] audit: type=1400 audit(2000000040.129:1244): avc: denied { write } for pid=11366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.924683][ T42] audit: type=1400 audit(2000000040.189:1245): avc: denied { write } for pid=11369 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.550351][ T42] audit: type=1400 audit(2000000041.819:1246): avc: denied { write } for pid=11372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.629510][ T42] audit: type=1400 audit(2000000041.899:1247): avc: denied { write } for pid=11375 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.839413][ T42] audit: type=1400 audit(2000000045.109:1248): avc: denied { write } for pid=11379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.911755][ T42] audit: type=1400 audit(2000000045.179:1249): avc: denied { write } for pid=11382 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.321342][ T42] audit: type=1400 audit(2000000046.589:1250): avc: denied { ioctl } for pid=11389 comm="syz.4.1421" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 201.436259][T11398] 9pnet_virtio: no channels available for device syz [ 201.444912][T11402] MTD: Couldn't look up 'mtd0/file0': -2 [ 201.484312][T11404] netlink: 'syz.7.1425': attribute type 29 has an invalid length. [ 201.496346][T11404] netlink: 'syz.7.1425': attribute type 29 has an invalid length. [ 201.500685][T11404] netlink: 'syz.7.1425': attribute type 29 has an invalid length. [ 201.545454][T11411] binder: 11410:11411 ioctl 4018620d 0 returned -22 [ 201.551740][T11411] binder: 11410:11411 ioctl c0306201 200000000040 returned -22 [ 201.617830][ T42] audit: type=1400 audit(2000000046.879:1251): avc: denied { setattr } for pid=11415 comm="syz.4.1430" name="NETLINK" dev="sockfs" ino=40455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.738790][ T42] audit: type=1400 audit(2000000046.999:1252): avc: denied { setopt } for pid=11423 comm="syz.8.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.793241][T11430] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 201.797411][T11430] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.800372][T11430] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.852363][T11432] netlink: 'syz.7.1435': attribute type 9 has an invalid length. [ 201.861287][T11432] netlink: 19 bytes leftover after parsing attributes in process `syz.7.1435'. [ 202.053121][T11447] bridge_slave_0: left allmulticast mode [ 202.055614][T11447] bridge_slave_0: left promiscuous mode [ 202.058448][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.076308][T11447] bridge_slave_1: left allmulticast mode [ 202.086673][T11447] bridge_slave_1: left promiscuous mode [ 202.089764][T11447] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.147206][T11447] bond0: (slave bond_slave_0): Releasing backup interface [ 202.176536][T11447] bond0: (slave bond_slave_1): Releasing backup interface [ 202.197088][T11447] team0: Port device team_slave_0 removed [ 202.212702][T11447] team0: Port device team_slave_1 removed [ 202.216273][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.221266][T11447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.226327][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.234265][T11447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.255639][T11447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 202.388174][T11453] netlink: 'syz.7.1441': attribute type 2 has an invalid length. [ 202.456534][T11460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=11460 comm=syz.7.1444 [ 202.486506][ T42] audit: type=1400 audit(2000000047.749:1253): avc: denied { read } for pid=11462 comm="syz.8.1445" name="tracing_on" dev="tracefs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 202.516963][T11466] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 202.525128][T11466] bridge0: entered allmulticast mode [ 202.712671][ T42] audit: type=1400 audit(2000000047.979:1254): avc: denied { write } for pid=11480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.805367][T11488] 9pnet_virtio: no channels available for device syz [ 202.813649][ T42] audit: type=1400 audit(2000000048.079:1255): avc: denied { write } for pid=11486 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.955460][T11502] tipc: New replicast peer: 172.30.0.3 [ 202.968569][ T42] audit: type=1400 audit(2000000048.229:1256): avc: denied { write } for pid=11500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.968575][T11502] tipc: Enabled bearer , priority 10 [ 203.036209][T11508] netlink: 872 bytes leftover after parsing attributes in process `syz.8.1455'. [ 203.039462][T11508] netlink: 872 bytes leftover after parsing attributes in process `syz.8.1455'. [ 203.081600][T11513] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 203.084299][ T42] audit: type=1400 audit(2000000048.349:1257): avc: denied { write } for pid=11511 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.105485][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1456'. [ 203.254369][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 203.264706][T11524] IPv6: sit1: Disabled Multicast RS [ 203.427830][T11530] xt_hashlimit: size too large, truncated to 1048576 [ 203.431739][T11530] xt_hashlimit: invalid rate [ 203.463598][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 203.583326][T11542] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 203.631241][T11539] netlink: 11148 bytes leftover after parsing attributes in process `syz.2.1466'. [ 203.897040][T11555] dlm: non-version read from control device 91 [ 203.957397][ T42] audit: type=1400 audit(2000000049.219:1258): avc: denied { cmd } for pid=11556 comm="iou-wrk-11557" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 204.050411][T11562] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.057143][T11562] netlink: 'syz.8.1474': attribute type 21 has an invalid length. [ 204.062797][T11562] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1474'. [ 204.353847][ T42] audit: type=1400 audit(2000000049.619:1259): avc: denied { getopt } for pid=11571 comm="syz.8.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.402115][ T42] audit: type=1400 audit(2000000049.669:1260): avc: denied { ioctl } for pid=11574 comm="syz.7.1478" path="socket:[40866]" dev="sockfs" ino=40866 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 204.843679][T11592] netlink: 'syz.7.1484': attribute type 39 has an invalid length. [ 204.898117][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1484'. [ 205.173956][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1487'. [ 205.947846][T11636] netlink: 'syz.7.1494': attribute type 1 has an invalid length. [ 206.086059][T11639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.149722][T11639] team0: Port device xfrm0 added [ 206.163988][T11639] tipc: Started in network mode [ 206.167500][T11639] tipc: Node identity , cluster identity 4711 [ 206.176750][T11639] tipc: Failed to obtain node identity [ 206.178719][T11639] tipc: Enabling of bearer rejected, failed to enable media [ 206.257868][T11642] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 206.335599][T11645] ehci-pci 0000:00:1d.7: remove, state 1 [ 206.363944][T11645] usb usb2: USB disconnect, device number 1 [ 206.376881][T11645] usb 2-1: USB disconnect, device number 2 [ 206.755030][T11653] MTD: Couldn't look up './dev/mtdblock0': -2 [ 206.844948][T11645] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 206.915885][T11655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11655 comm=syz.2.1500 [ 207.089161][ T9] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 207.186443][T11667] 9p: Bad value for 'msize' [ 207.255365][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 207.280690][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 207.283691][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 207.287267][ T9] usb 1-1: Product: QEMU USB Tablet [ 207.290614][ T9] usb 1-1: Manufacturer: QEMU [ 207.293216][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 207.383473][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input20 [ 207.453964][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 207.453977][ T42] audit: type=1400 audit(2000000052.719:1265): avc: denied { remount } for pid=11678 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 207.502513][ T9] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 207.545229][T11687] 9pnet_virtio: no channels available for device syz [ 207.593055][T11690] __nla_validate_parse: 2 callbacks suppressed [ 207.593069][T11690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1506'. [ 207.922801][ T42] audit: type=1400 audit(2000000053.189:1266): avc: denied { write } for pid=11711 comm="syz.8.1514" name="core" dev="configfs" ino=5398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.941121][T11712] overlayfs: failed to resolve './config/target/core/ramdisk_0': -2 [ 208.103862][T11726] fuse: Unknown parameter 'õRgp_id900000000000000000000' [ 208.299188][ T5808] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 208.299969][T11741] netlink: 'syz.4.1524': attribute type 1 has an invalid length. [ 208.354977][T11741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.395750][ T42] audit: type=1400 audit(2000000053.659:1267): avc: denied { setopt } for pid=11750 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 208.414369][T11751] netdevsim netdevsim2: Direct firmware load for . [ 208.414369][T11751] failed with error -2 [ 208.432899][ T5808] usb 12-1: device descriptor read/64, error -71 [ 208.451460][T11751] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 208.451460][T11751] [ 208.452158][ T42] audit: type=1400 audit(2000000053.709:1268): avc: denied { firmware_load } for pid=11750 comm="syz.2.1527" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 208.477044][T11741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1524'. [ 208.638793][T11764] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 208.671026][ T5808] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 208.720083][T11767] xt_CT: No such helper "netbios-ns" [ 208.762885][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.765646][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.772305][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.775100][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.777829][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.783798][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.786980][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.791062][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.793926][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.796849][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.799810][ T5808] usb 12-1: device descriptor read/64, error -71 [ 208.802114][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.804273][ T42] audit: type=1400 audit(2000000054.069:1269): avc: denied { read } for pid=11773 comm="syz.4.1533" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 208.804902][T11772] trusted_key: encrypted_key: insufficient parameters specified [ 208.825103][ T42] audit: type=1400 audit(2000000054.079:1270): avc: denied { read } for pid=11773 comm="syz.4.1533" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 208.846977][ T42] audit: type=1400 audit(2000000054.079:1271): avc: denied { open } for pid=11773 comm="syz.4.1533" path="/352/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 208.867290][ T42] audit: type=1400 audit(2000000054.079:1272): avc: denied { read } for pid=11773 comm="syz.4.1533" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 208.886735][ T42] audit: type=1400 audit(2000000054.079:1273): avc: denied { ioctl } for pid=11770 comm="syz.8.1532" path="socket:[43029]" dev="sockfs" ino=43029 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 208.925039][ T5808] usb usb12-port1: attempt power cycle [ 209.269406][ T5808] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 209.302271][ T5808] usb 12-1: device descriptor read/8, error -71 [ 209.344895][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 209.563001][ T5808] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 209.591819][ T5808] usb 12-1: device descriptor read/8, error -71 [ 209.599098][ T5810] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 209.603759][T11792] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1539'. [ 209.614002][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 209.700494][ T5808] usb usb12-port1: unable to enumerate USB device [ 209.750823][ T42] audit: type=1400 audit(2000000055.009:1274): avc: denied { ioctl } for pid=11806 comm="syz.2.1542" path="socket:[43078]" dev="sockfs" ino=43078 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 209.771260][ T5810] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 209.778790][ T5810] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.786563][ T5810] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.793276][ T5810] usb 13-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 209.799124][ T5810] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.828551][T11789] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 209.838206][ T5810] cyberjack 13-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 209.862725][ T5810] usb 13-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 209.928530][T11818] lo: entered allmulticast mode [ 209.934694][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.937992][T11818] mroute: pending queue full, dropping entries [ 209.942895][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.945954][T11818] mroute: pending queue full, dropping entries [ 209.948716][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.951837][T11818] mroute: pending queue full, dropping entries [ 209.958241][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.961429][T11818] mroute: pending queue full, dropping entries [ 209.966622][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.969715][T11818] mroute: pending queue full, dropping entries [ 209.973287][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.976272][T11818] mroute: pending queue full, dropping entries [ 209.979517][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.982690][T11818] mroute: pending queue full, dropping entries [ 209.985460][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.988490][T11818] mroute: pending queue full, dropping entries [ 209.992182][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 209.995016][T11818] mroute: pending queue full, dropping entries [ 209.997341][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.000014][T11818] mroute: pending queue full, dropping entries [ 210.003061][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.006010][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.009463][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.012504][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.015435][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.018417][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.021650][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.024619][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.027647][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.031126][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.034392][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.037992][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.042356][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.047270][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.051791][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.052475][ T5810] usb 13-1: USB disconnect, device number 3 [ 210.055651][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.061509][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.065452][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.067751][ T5810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 210.076362][ T5810] cyberjack 13-1:1.0: device disconnected [ 210.079641][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.088536][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.092797][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.096849][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.101896][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.105958][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.111221][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.114771][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.118780][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.124553][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.128423][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.133678][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.137125][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.141223][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.144789][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.147968][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.151291][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.154578][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.157651][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.160890][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.163919][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.167392][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.171560][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.175474][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.179487][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.183437][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.187415][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.192176][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.196209][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.200582][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.204407][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.208279][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.212568][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.216318][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.220771][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.224744][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.228693][T11818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 210.293119][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1544'. [ 210.674665][T11823] netlink: 'syz.8.1545': attribute type 1 has an invalid length. [ 210.697614][T11823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.725307][T11823] bond1: (slave geneve2): making interface the new active one [ 210.730453][T11823] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 210.863389][T11828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=11828 comm=syz.2.1547 [ 210.956275][T11830] macvlan0: entered allmulticast mode [ 210.958591][T11830] veth1_vlan: entered allmulticast mode [ 211.198150][T11845] x_tables: duplicate underflow at hook 1 [ 212.062328][T11864] binder: 11862:11864 unknown command 0 [ 212.062328][T11865] binder: 11862:11865 unknown command 0 [ 212.062350][T11865] binder: 11862:11865 ioctl c0306201 200000000480 returned -22 [ 212.066091][T11864] binder: 11862:11864 ioctl c0306201 200000000480 returned -22 [ 212.091504][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 212.094465][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 212.094606][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 212.101131][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 212.802784][T11886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1566'. [ 213.177145][T11901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.403745][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 213.403765][ T42] audit: type=1400 audit(2000000058.669:1279): avc: denied { write } for pid=11909 comm="syz.7.1575" name="subsystems" dev="configfs" ino=2643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.405431][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1575'. [ 213.542720][T11913] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 213.549497][T11913] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 213.555606][T11913] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 213.562352][T11913] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 214.659605][T11931] usb usb9: usbfs: process 11931 (syz.4.1580) did not claim interface 0 before use [ 214.670901][ T42] audit: type=1400 audit(2000000059.939:1280): avc: denied { bind } for pid=11932 comm="syz.2.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.699423][ T5810] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 214.813645][T11935] xt_hl: Unknown Hop Limit match mode: 206 [ 214.893630][ T5810] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.903830][ T5810] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.918736][ T5810] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 214.929006][ T5810] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.936816][ T5810] usb 12-1: Product: syz [ 214.938248][ T5810] usb 12-1: Manufacturer: syz [ 214.941487][ T5810] usb 12-1: SerialNumber: syz [ 215.052638][T11942] fuse: Bad value for 'group_id' [ 215.056172][T11942] fuse: Bad value for 'group_id' [ 215.066142][T11942] overlayfs: failed lookup in lower (newroot/368, name='file0', err=-40): overlapping layers [ 215.162788][T11946] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1585'. [ 215.164929][T11947] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1585'. [ 215.190272][ T5875] usb 12-1: USB disconnect, device number 14 [ 215.207123][T11926] 9pnet_virtio: no channels available for device syz [ 215.228560][ T42] audit: type=1400 audit(2000000060.489:1281): avc: denied { accept } for pid=11945 comm="syz.8.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.237993][T11947] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.239084][T11946] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.255215][T11949] ieee802154 phy1 wpan1: encryption failed: -22 [ 215.268022][ T42] audit: type=1400 audit(2000000060.519:1282): avc: denied { create } for pid=11948 comm="syz.4.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.293051][ T42] audit: type=1400 audit(2000000060.519:1283): avc: denied { write } for pid=11948 comm="syz.4.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.432338][ T42] audit: type=1400 audit(2000000060.699:1284): avc: denied { getopt } for pid=11954 comm="syz.8.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.440111][T11960] 9pnet_virtio: no channels available for device syz [ 215.686043][T11979] 9pnet_virtio: no channels available for device syz [ 216.038653][T11994] sctp: [Deprecated]: syz.7.1600 (pid 11994) Use of int in max_burst socket option deprecated. [ 216.038653][T11994] Use struct sctp_assoc_value instead [ 216.061348][T11993] veth0_vlan: entered allmulticast mode [ 216.671656][T12026] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 216.674626][T12026] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 216.814605][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 216.942030][T12044] clocksource: Switched to clocksource acpi_pm [ 216.971178][T12046] clocksource: Switched to clocksource tsc [ 216.974671][T12044] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1616'. [ 216.986484][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1616'. [ 217.122277][ T42] audit: type=1400 audit(2000000062.387:1285): avc: denied { listen } for pid=12051 comm="syz.2.1620" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.364034][T12063] uhci_hcd 0000:00:1d.0: remove, state 1 [ 217.422070][T12063] usb usb1: USB disconnect, device number 1 [ 217.465337][T12063] usb 1-1: USB disconnect, device number 2 [ 217.566408][T12072] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 218.121757][T12080] xt_hashlimit: size too large, truncated to 1048576 [ 218.386629][T12080] xt_hashlimit: size too large, truncated to 1048576 [ 218.437643][ T42] audit: type=1400 audit(2000000063.697:1286): avc: denied { create } for pid=12088 comm="syz.8.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 218.553661][ T42] audit: type=1400 audit(2000000063.817:1287): avc: denied { append } for pid=12095 comm="syz.8.1632" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 218.622313][T12080] xt_hashlimit: size too large, truncated to 1048576 [ 218.722728][T12063] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 218.830704][T12068] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 218.837664][T12080] xt_hashlimit: size too large, truncated to 1048576 [ 218.868718][T12068] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 218.885094][T12068] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 218.898751][T12068] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref] [ 218.950533][T12100] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 218.963151][T12100] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 218.970182][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1633'. [ 219.022980][T12068] pci 0000:00:05.0: Adding to iommu group 5 [ 219.077329][T12068] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 219.085435][T12068] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 219.146650][ T42] audit: type=1400 audit(2000000064.407:1288): avc: denied { map } for pid=12111 comm="syz.8.1636" path="/" dev="ramfs" ino=44226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 219.163643][T12068] pci 0000:00:1d.0: Adding to iommu group 7 [ 219.182059][T12068] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned [ 219.203876][T12068] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 219.230485][T12068] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 219.240390][T12068] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 219.301226][ T5084] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 219.309679][ T42] audit: type=1400 audit(2000000064.567:1289): avc: denied { map } for pid=12116 comm="syz.8.1638" path="socket:[43857]" dev="sockfs" ino=43857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.442237][ T42] audit: type=1400 audit(2000000064.707:1290): avc: denied { mounton } for pid=12121 comm="syz.8.1640" path="/121/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.453345][T12122] FAT-fs (mtdblock0): bogus number of reserved sectors [ 219.464572][T12122] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 219.486387][T12122] sctp: [Deprecated]: syz.8.1640 (pid 12122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.486387][T12122] Use struct sctp_sack_info instead [ 219.607480][ T42] audit: type=1400 audit(2000000064.867:1291): avc: denied { create } for pid=12124 comm="syz.8.1641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.631616][ T42] audit: type=1400 audit(2000000064.877:1292): avc: denied { mounton } for pid=12124 comm="syz.8.1641" path="/122/file0" dev="tmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.652588][ T42] audit: type=1400 audit(2000000064.887:1293): avc: denied { write } for pid=12124 comm="syz.8.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 219.697981][ T42] audit: type=1400 audit(2000000064.957:1294): avc: denied { unlink } for pid=10355 comm="syz-executor" name="file0" dev="tmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.762535][T12068] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 100510 usecs [ 219.802553][T12068] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 219.824959][T12068] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 219.828253][T12068] uhci_hcd 0000:00:1d.0: detected 2 ports [ 219.866373][T12068] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 219.877274][T12068] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 219.880594][T12068] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 219.884867][T12068] usb usb1: Product: UHCI Host Controller [ 219.887253][T12068] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 219.897746][T12068] usb usb1: SerialNumber: 0000:00:1d.0 [ 219.903590][T12132] qrtr: Invalid version 0 [ 219.947877][T12068] hub 1-0:1.0: USB hub found [ 219.952833][T12068] hub 1-0:1.0: 2 ports detected [ 220.094622][T12138] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1644'. [ 220.115257][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 220.194285][T12066] net_ratelimit: 59 callbacks suppressed [ 220.194311][T12066] Set syz1 is full, maxelem 65536 reached [ 220.239452][ T5808] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 220.251744][T12142] syzkaller0: entered promiscuous mode [ 220.253630][T12142] syzkaller0: entered allmulticast mode [ 220.259943][T12146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12146 comm=syz.2.1647 [ 220.302846][T12148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1648'. [ 220.320141][T12148] veth1_macvtap: left allmulticast mode [ 220.341229][T12148] veth1_macvtap: entered allmulticast mode [ 220.345888][T12148] macsec0: left promiscuous mode [ 220.347887][T12148] macsec0: left allmulticast mode [ 220.350694][T12148] veth1_macvtap: left allmulticast mode [ 220.412693][ T5808] usb 1-1: not running at top speed; connect to a high speed hub [ 220.418786][T12161] overlayfs: failed to clone upperpath [ 220.456709][ T5808] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 220.465826][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 220.472397][ T5808] usb 1-1: Product: QEMU USB Tablet [ 220.478103][ T5808] usb 1-1: Manufacturer: QEMU [ 220.480369][ T5808] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 220.539739][ T5808] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0007/input/input21 [ 220.635095][ T5808] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 223.352297][ T5084] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 223.359439][ T5084] Bluetooth: hci4: Injecting HCI hardware error event [ 223.365089][ T5084] Bluetooth: hci4: hardware error 0x00 [ 223.470443][ T42] audit: type=1400 audit(2000000068.727:1295): avc: denied { append } for pid=12170 comm="syz.8.1654" name="pfkey" dev="proc" ino=4026533586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 223.486235][T12174] overlayfs: workdir and upperdir must reside under the same mount [ 223.489835][ T42] audit: type=1400 audit(2000000068.747:1296): avc: denied { mounton } for pid=12173 comm="syz.4.1656" path="/381/file0" dev="ramfs" ino=44321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 223.499773][T12174] netlink: 'syz.4.1656': attribute type 39 has an invalid length. [ 223.826649][T12190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=12190 comm=syz.2.1658 [ 224.043327][T12200] overlayfs: failed to clone upperpath [ 224.318743][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 224.466667][T12207] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 224.554653][T12207] bond8 (unregistering): Released all slaves [ 224.608783][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1662'. [ 224.730297][T12226] syzkaller0: entered promiscuous mode [ 224.740257][T12226] syzkaller0: entered allmulticast mode [ 224.753502][T12226] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 225.127894][T12254] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 225.147993][T12254] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 225.150937][T12265] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 225.297863][T12265] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«E [ 225.309389][T12265] [U] J"—E:ÀÆ" [ 225.317990][T12253] [U] ßÃ/X-Ù¤Y“ Y„>¡‡˜žRˆ“¿W['Á¯U¥\UʈUÕ܉Û>0ÑBœÄ#ßD¬ÉݵšVÊØ Î<•OŠ–ÛÅÃņ’™¶.ÎÝßΦZ$TšÈÏJÕ±M²0C [ 225.422058][T12277] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 225.434093][ T5084] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 225.487080][T12286] Device name not specified. [ 225.487080][T12286] [ 225.630307][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 225.640533][T12295] netlink: 'syz.8.1673': attribute type 2 has an invalid length. [ 225.679605][T12294] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 225.690987][T12294] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 225.762649][T12295] : entered promiscuous mode [ 226.108510][ T42] audit: type=1400 audit(2000000071.367:1297): avc: denied { unmount } for pid=6013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 226.133455][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1679'. [ 226.249588][T12318] nbd0: detected capacity change from 0 to 63 [ 226.274045][ T65] block nbd0: Receive control failed (result -32) [ 226.297351][ T1299] block nbd0: Dead connection, failed to find a fallback [ 226.306585][ T1299] block nbd0: shutting down sockets [ 226.312129][ T1299] blk_print_req_error: 16 callbacks suppressed [ 226.312142][ T1299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.325971][ T1299] buffer_io_error: 350 callbacks suppressed [ 226.325982][ T1299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.333056][ T1299] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 226.337120][ T1299] Buffer I/O error on dev nbd0, logical block 1, async page read [ 226.341137][ T1299] Buffer I/O error on dev nbd0, logical block 2, async page read [ 226.344421][ T1299] Buffer I/O error on dev nbd0, logical block 3, async page read [ 226.352954][ T2131] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.356140][ T2131] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.361745][ T2131] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.365178][ T2131] Buffer I/O error on dev nbd0, logical block 1, async page read [ 226.368037][ T2131] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.371243][ T2131] Buffer I/O error on dev nbd0, logical block 2, async page read [ 226.375606][ T2131] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.378768][ T2131] Buffer I/O error on dev nbd0, logical block 3, async page read [ 226.381796][ T1299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 226.385786][ T1299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.389456][ T1299] Buffer I/O error on dev nbd0, logical block 1, async page read [ 226.395071][ T1299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 226.406848][ T1299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 226.411445][ T1299] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.416558][T11420] ldm_validate_partition_table(): Disk read failed. [ 226.426667][T11420] Dev nbd0: unable to read RDB block 0 [ 226.432813][T11420] nbd0: unable to read partition table [ 226.448093][T11420] ldm_validate_partition_table(): Disk read failed. [ 226.453643][T11420] Dev nbd0: unable to read RDB block 0 [ 226.457161][T11420] nbd0: unable to read partition table [ 226.548633][T12346] 9p: Unknown access argument 18446744073709551615: -34 [ 226.551455][ T42] audit: type=1400 audit(2000000071.807:1298): avc: denied { map } for pid=12344 comm="syz.7.1687" path="socket:[45264]" dev="sockfs" ino=45264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 226.725117][T12358] syzkaller0: entered promiscuous mode [ 226.739095][T12358] syzkaller0: entered allmulticast mode [ 226.762840][ T42] audit: type=1400 audit(2000000072.027:1299): avc: denied { write } for pid=12362 comm="syz.2.1694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 226.771752][ T42] audit: type=1326 audit(2000000072.037:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.2.1694" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdce1d9e0d9 code=0x0 [ 226.898259][T12367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.703674][ T42] audit: type=1326 audit(2000000072.967:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12380 comm="syz.4.1698" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8f39e0d9 code=0x0 [ 227.805223][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.817341][T12391] netlink: 'syz.2.1701': attribute type 7 has an invalid length. [ 227.834344][T12391] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAÀíMù[DòÛs7<¸{ZøZ´” [ 228.019080][ T5808] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 228.146738][ T42] audit: type=1400 audit(2000000073.407:1302): avc: denied { bind } for pid=12404 comm="syz.2.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 228.169115][ T5808] usb 13-1: Using ep0 maxpacket: 8 [ 228.173795][ T5808] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 228.181743][ T5808] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 228.190010][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 228.199053][ T5808] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.209465][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.219235][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.234359][ T5808] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 228.253237][ T5808] usb 13-1: config 168 interface 0 has no altsetting 0 [ 228.260299][ T5808] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 228.265007][ T5808] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 228.275376][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 228.285316][ T5808] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.294928][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.303492][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.307718][ T5808] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 228.313555][ T5808] usb 13-1: config 168 interface 0 has no altsetting 0 [ 228.317336][ T5808] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 228.323382][ T5808] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 228.327692][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 228.333292][ T5808] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.338185][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.346749][ T5808] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.352457][ T5808] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 228.358277][ T5808] usb 13-1: config 168 interface 0 has no altsetting 0 [ 228.375346][ T5808] usb 13-1: string descriptor 0 read error: -22 [ 228.379441][ T5808] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 228.388477][ T5808] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.399193][ T5808] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 228.518380][T12414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.647543][ T42] audit: type=1400 audit(2000000073.907:1303): avc: denied { mounton } for pid=12424 comm="syz.2.1709" path="/565/file0" dev="tmpfs" ino=3144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.647562][T12425] fuse: fd is not a fuse device [ 228.732559][T12431] overlayfs: failed to clone upperpath [ 228.735105][T12431] overlayfs: failed to clone lowerpath [ 228.748780][T12433] binder: BINDER_SET_CONTEXT_MGR already set [ 228.753137][T12433] binder: 12421:12433 ioctl 4018620d 200000000100 returned -16 [ 228.799710][ T42] audit: type=1400 audit(2000000074.057:1304): avc: denied { map } for pid=12434 comm="syz.7.1713" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 228.847376][T12440] fuse: Unknown parameter '$' [ 229.121710][T12477] fuse: fd is not a fuse device [ 229.138029][T12480] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1722'. [ 229.257889][T12487] 9p: Bad value for 'rfdno' [ 229.312846][T12489] MTD: Couldn't look up './bus': -15 [ 229.312939][ T42] audit: type=1400 audit(2000000074.577:1305): avc: denied { mounton } for pid=12488 comm="syz.7.1725" path="/132/bus" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 229.473946][T12494] netlink: 'syz.8.1726': attribute type 4 has an invalid length. [ 229.513170][T12494] netlink: 'syz.8.1726': attribute type 4 has an invalid length. [ 229.703816][T12504] SELinux: policydb version 1748002404 does not match my version range 15-35 [ 229.708015][T12504] SELinux: failed to load policy [ 229.764729][T12507] TCP: TCP_TX_DELAY enabled [ 229.769801][T12499] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1728'. [ 229.773133][T12499] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1728'. [ 229.859395][ T5810] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 229.966333][T12519] FAT-fs (nullb0): bogus number of reserved sectors [ 229.969549][T12519] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 230.035300][ T5810] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.044600][ T5810] usb 12-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 230.052355][ T5810] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.071977][ T5810] as10x_usb: device has been detected [ 230.076614][ T5810] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 230.147412][ T5810] usb 12-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 230.373241][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.426341][ T42] audit: type=1400 audit(2000000075.657:1306): avc: denied { firmware_load } for pid=5810 comm="kworker/2:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 230.441314][ T5810] as10x_usb: error during firmware upload part1 [ 230.444404][ T5810] Registered device Abilis Systems DVB-Titan [ 230.574713][T12548] random: crng reseeded on system resumption [ 230.851980][T12563] sctp: [Deprecated]: syz.8.1746 (pid 12563) Use of int in max_burst socket option. [ 230.851980][T12563] Use struct sctp_assoc_value instead [ 230.926063][T12567] xt_cgroup: xt_cgroup: no path or classid specified [ 230.927262][T12568] xt_cgroup: xt_cgroup: no path or classid specified [ 231.145364][T12578] tls_set_device_offload: netdev not found [ 231.322069][T12604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'. [ 231.361288][ T42] audit: type=1400 audit(2000000076.627:1307): avc: denied { bind } for pid=12606 comm="syz.2.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 231.364660][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 231.428414][T12607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.503315][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 231.548219][ T42] audit: type=1400 audit(2000000076.807:1308): avc: denied { write } for pid=12623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.567952][ T42] audit: type=1400 audit(2000000076.827:1309): avc: denied { listen } for pid=12625 comm="syz.4.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.649465][ T42] audit: type=1400 audit(2000000076.907:1310): avc: denied { write } for pid=12630 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.720151][ T42] audit: type=1400 audit(2000000076.987:1311): avc: denied { write } for pid=12495 comm="syz.7.1727" name="/" dev="9p" ino=83886179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.723834][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1765'. [ 231.733475][ T42] audit: type=1400 audit(2000000077.007:1312): avc: denied { write } for pid=12495 comm="syz.7.1727" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 231.746590][T12638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.788514][T12641] »»»»»»: renamed from vlan0 [ 232.060279][T12662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.002795][ T5808] usb 12-1: USB disconnect, device number 15 [ 233.035942][T12678] syz.4.1776 (12678) used obsolete PPPIOCDETACH ioctl [ 233.120053][ T5808] Unregistered device Abilis Systems DVB-Titan [ 233.121013][ T5808] as10x_usb: device has been disconnected [ 233.167210][T12672] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 233.202444][T12672] team0: Port device veth0 added [ 233.733686][T12706] cgroup: Invalid name [ 233.852600][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 233.852618][ T42] audit: type=1326 audit(2000000079.117:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.1786" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce1d9e0d9 code=0x0 [ 233.955707][T12713] netlink: 'syz.2.1786': attribute type 5 has an invalid length. [ 234.842612][T12731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.861976][T12733] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 234.865268][T12733] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 234.880632][T12733] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 234.883854][T12733] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 234.978335][ T42] audit: type=1400 audit(2000000080.237:1321): avc: denied { write } for pid=12737 comm="syz.4.1797" name="/" dev="9p" ino=83886179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.992573][ T42] audit: type=1400 audit(2000000080.257:1322): avc: denied { write } for pid=12737 comm="syz.4.1797" name="/" dev="9p" ino=83886179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.011422][ T42] audit: type=1400 audit(2000000080.277:1323): avc: denied { rmdir } for pid=12737 comm="syz.4.1797" name="control" dev="9p" ino=83886217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.155036][T12748] xt_hl: Unknown Hop Limit match mode: 206 [ 235.325061][T12763] dummy0: entered allmulticast mode [ 235.340196][ T42] audit: type=1400 audit(2000000080.597:1324): avc: denied { mounton } for pid=12762 comm="syz.4.1803" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 235.386771][T12766] pim6reg1: entered promiscuous mode [ 235.390619][T12766] pim6reg1: entered allmulticast mode [ 235.509061][T12769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1805'. [ 235.523348][T12771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1806'. [ 235.549278][ T9] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 235.569168][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1807'. [ 235.704504][ T9] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 235.711568][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.716945][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.721523][ T9] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 235.728738][ T9] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 235.733602][T12778] gadgetfs: bound to dummy_udc driver [ 235.736693][ T9] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 235.743280][ T9] usb 12-1: Manufacturer: syz [ 235.757857][ T9] usb 12-1: config 0 descriptor?? [ 235.825838][ T42] audit: type=1400 audit(2000000081.087:1325): avc: denied { getopt } for pid=12783 comm="syz.8.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.916717][ T42] audit: type=1400 audit(2000000081.177:1326): avc: denied { write } for pid=12786 comm="syz.8.1811" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 235.931768][T12787] zram: Cannot change disksize for initialized device [ 236.177932][ T9] hid_parser_main: 22 callbacks suppressed [ 236.177957][ T9] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 236.186995][ T9] appleir 0003:05AC:8243.0008: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 236.339571][T12801] overlayfs: failed to resolve './cgroup': -2 [ 236.434155][T12761] netlink: 'syz.7.1802': attribute type 8 has an invalid length. [ 236.586973][ T5808] usb 12-1: USB disconnect, device number 16 [ 236.743950][ T42] audit: type=1400 audit(2000000082.007:1327): avc: denied { write } for pid=12812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.834296][ T5730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.847510][ T5730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.851852][ T5730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.857377][ T5730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.865534][ T5730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.962635][ T42] audit: type=1400 audit(2000000082.227:1328): avc: denied { write } for pid=12822 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.143303][ T42] audit: type=1400 audit(2000000082.407:1329): avc: denied { write } for pid=12828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.605849][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1825'. [ 237.615917][T12853] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1825'. [ 237.960498][T12876] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 238.055443][ T8830] bond0: (slave syz_tun): Releasing backup interface [ 238.167818][T12893] hugetlbfs: Bad value 'x' for mount option 'size' [ 238.167818][T12893] [ 238.269129][T10280] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 238.420392][T12817] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.423427][T12817] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.425650][T10280] usb 9-1: Invalid ep0 maxpacket: 64 [ 238.425889][T12817] bridge_slave_0: entered allmulticast mode [ 238.430471][T12817] bridge_slave_0: entered promiscuous mode [ 238.434202][T12817] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.436615][T12817] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.439236][T12817] bridge_slave_1: entered allmulticast mode [ 238.442200][T12817] bridge_slave_1: entered promiscuous mode [ 238.497036][T12817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.514306][T12817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.568406][T12817] team0: Port device team_slave_0 added [ 238.570164][T10280] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 238.585435][T12817] team0: Port device team_slave_1 added [ 238.626157][T12817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.628464][T12817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.646151][T12817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.655038][T12925] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 238.658734][T12817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.662966][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.667442][T12817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.679392][T12925] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 238.690091][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.695034][T12925] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 238.697581][T12817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.702889][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.748872][T12924] kvm: pic: non byte write [ 238.751612][T10280] usb 9-1: Invalid ep0 maxpacket: 64 [ 238.755712][T10280] usb usb9-port1: attempt power cycle [ 238.772090][T12817] hsr_slave_0: entered promiscuous mode [ 238.776908][T12817] hsr_slave_1: entered promiscuous mode [ 238.780525][T12817] debugfs: 'hsr0' already exists in 'hsr' [ 238.787930][T12817] Cannot create hsr debugfs directory [ 238.949296][ T5084] Bluetooth: hci3: command tx timeout [ 238.966150][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1842'. [ 239.050041][T12817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.055429][T12817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.100267][T10280] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 239.120467][T10280] usb 9-1: Invalid ep0 maxpacket: 64 [ 239.240439][T12817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.249246][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 239.249259][ T42] audit: type=1400 audit(2000000084.517:1341): avc: denied { write } for pid=12935 comm="syz.8.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 239.259124][T10280] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 239.264255][T12817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.281075][T10280] usb 9-1: Invalid ep0 maxpacket: 64 [ 239.290323][T10280] usb usb9-port1: unable to enumerate USB device [ 239.369330][T12817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.372535][T12817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.456890][T12817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.461329][T12817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.782558][T12817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.788376][T12817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.792516][T12817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.797758][T12817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.803187][T12817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.810096][T12817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.813810][T12817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.821514][T12817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.907507][T12817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.925326][T12817] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.933477][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.935832][ T7030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.940400][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.942615][ T7030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.977684][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1850'. [ 239.981630][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1850'. [ 239.986202][T12972] netlink: 'syz.8.1850': attribute type 7 has an invalid length. [ 240.317884][T12817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.363469][T12817] veth0_vlan: entered promiscuous mode [ 240.377531][T12817] veth1_vlan: entered promiscuous mode [ 240.405578][T12817] veth0_macvtap: entered promiscuous mode [ 240.411431][T12817] veth1_macvtap: entered promiscuous mode [ 240.425668][T12817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.435104][T12817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.549631][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.554368][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.605842][ T7030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.610086][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.614440][ T7030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.619168][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.652414][ T7030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.661694][ T7030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.677350][ T42] audit: type=1400 audit(2000000085.937:1342): avc: denied { mounton } for pid=12817 comm="syz-executor" path="/syzkaller.gLRzmr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 240.945591][T13013] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 241.026318][T13019] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 241.040183][ T5084] Bluetooth: hci3: command tx timeout [ 241.044090][T13019] SELinux: failed to load policy [ 241.248439][ T42] audit: type=1804 audit(2000000086.507:1343): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1860" name="/newroot/425/file0" dev="tmpfs" ino=2337 res=1 errno=0 [ 241.588098][T13047] netlink: 'syz.4.1863': attribute type 21 has an invalid length. [ 241.612101][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 241.617967][T13047] netlink: 'syz.4.1863': attribute type 7 has an invalid length. [ 241.619432][ T42] audit: type=1400 audit(2000000086.877:1344): avc: denied { map } for pid=13046 comm="syz.8.1864" path="socket:[48196]" dev="sockfs" ino=48196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.645218][T13033] xfrm1: entered promiscuous mode [ 241.649997][T13033] xfrm1: entered allmulticast mode [ 241.662307][ T42] audit: type=1400 audit(2000000086.877:1345): avc: denied { read } for pid=13046 comm="syz.8.1864" path="socket:[48196]" dev="sockfs" ino=48196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.724188][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.731040][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.738698][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.749401][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.757756][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.767624][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.784390][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.793674][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.804046][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.812898][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: unknown main item tag 0x0 [ 241.889325][ T50] hid-generic 99A1:E260D13B:624ADF33.0009: hidraw1: HID v306f9c.17 Device [] on ¢ã9OÇRù) K÷Ð8çÿÆåS›2c‹›93;mà‡Æç›m•›fš$[gó˜~ó [ 242.021464][T13060] binder: 13059:13060 ioctl f501 0 returned -22 [ 242.026337][T13058] fido_id[13058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.060191][T13064] netlink: 'syz.8.1869': attribute type 1 has an invalid length. [ 242.117284][T13064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.234723][T13068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.241195][T13068] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 242.247626][T13068] bond2: (slave gre1): Error -95 calling set_mac_address [ 242.307086][T13064] gretap1: entered promiscuous mode [ 242.352241][T13064] bond2: (slave gretap1): making interface the new active one [ 242.392049][T13064] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 242.421278][T13076] macvlan3: entered promiscuous mode [ 242.427517][T13076] macvlan3: entered allmulticast mode [ 242.439418][T13076] bond2: entered promiscuous mode [ 242.454579][T13076] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 242.461442][T13076] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 242.481213][T13076] bond2: left promiscuous mode [ 242.485226][T13085] cgroup: Invalid name [ 242.629521][T13088] openvswitch: netlink: ct_state flags 0001010a unsupported [ 242.796886][T13103] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1879'. [ 242.920590][ T10] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 243.013748][ T42] audit: type=1400 audit(2000000088.277:1346): avc: denied { write } for pid=13109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.071048][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.076150][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.086075][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.092822][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.102736][ T42] audit: type=1400 audit(2000000088.367:1347): avc: denied { write } for pid=13113 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.113406][ T5084] Bluetooth: hci3: command tx timeout [ 243.318568][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 243.320714][ T10] usbtmc 9-1:16.0: can't read capabilities [ 243.504166][T13134] cgroup: Invalid name [ 243.535470][ T42] audit: type=1400 audit(2000000088.797:1348): avc: denied { write } for pid=13090 comm="syz.4.1877" name="/" dev="9p" ino=83886179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.564063][ T1038] usb 9-1: USB disconnect, device number 24 [ 243.580262][ T42] audit: type=1800 audit(2000000088.827:1349): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1877" name="file1" dev="9p" ino=83886183 res=0 errno=0 [ 243.593841][T13136] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 243.614664][T13138] fuse: Unknown parameter ';n‡ä4’FOÑXbdK†²mÖô"z’~!°Åö¬Á5£ÿÎ…²12-â0' [ 243.777935][T13149] netlink: 59 bytes leftover after parsing attributes in process `syz.8.1892'. [ 243.785058][T13151] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.838197][T13154] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 243.843195][T13154] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 243.943412][T13165] overlayfs: workdir and upperdir must be separate subtrees [ 244.023562][T13177] overlayfs: failed to resolve './cgroup': -2 [ 244.334121][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1907'. [ 244.363943][ T42] audit: type=1400 audit(2000000089.617:1350): avc: denied { write } for pid=13186 comm="syz.8.1906" name="functions" dev="configfs" ino=11803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.388788][T13196] Config c/1 of g1 needs at least one function. [ 244.391985][T13196] udc dummy_udc.0: failed to start g1: -22 [ 244.394174][T13196] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 244.399411][T13196] UDC core: g1: couldn't find an available UDC or it's busy [ 244.406551][ T42] audit: type=1400 audit(2000000089.647:1351): avc: denied { write } for pid=13186 comm="syz.8.1906" name="configs" dev="configfs" ino=11804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.487634][T13199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16661 sclass=netlink_route_socket pid=13199 comm=syz.4.1908 [ 244.596990][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 244.606323][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 244.871424][ T5773] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.913446][ T5773] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.927864][ T5773] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.942827][ T5773] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.065790][ T5808] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 245.099890][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1910'. [ 245.122091][T13213] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1911'. [ 245.183372][T13215] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.190859][ T5084] Bluetooth: hci3: command tx timeout [ 245.231252][ T5808] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.236845][ T5808] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.245109][ T5808] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 245.248112][ T5808] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.251442][ T5808] usb 12-1: Product: syz [ 245.252970][ T5808] usb 12-1: Manufacturer: syz [ 245.255201][ T5808] usb 12-1: SerialNumber: syz [ 245.255965][ T42] audit: type=1400 audit(2000000090.517:1352): avc: denied { create } for pid=13214 comm="syz.8.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 245.280433][ T5808] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected [ 245.307380][ T5808] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 245.311400][T13221] mac80211_hwsim hwsim28 »»»»»»: renamed from wlan0 (while UP) [ 245.318551][ T5808] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 245.409657][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 245.416936][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 245.682373][T13236] binder: 13232:13236 ioctl c0306201 200000000080 returned -14 [ 245.687200][T13236] binder: 13232:13236 ioctl c0306201 2000000003c0 returned -14 [ 246.134689][T13230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.154385][T13230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.267704][T13259] SELinux: ebitmap start bit (1279) is not a multiple of the map unit size (64) [ 246.283093][T13259] SELinux: invalid class [ 246.297621][T13259] SELinux: failed to load policy [ 246.307396][T13249] comedi comedi2: comedi_config --init_data is deprecated [ 246.473825][ T42] audit: type=1400 audit(2000000091.737:1353): avc: denied { bind } for pid=13265 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.474059][T13266] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 246.506628][T13266] SELinux: failed to load policy [ 246.547043][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.556035][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.619190][ T42] audit: type=1400 audit(2000000091.877:1354): avc: denied { mounton } for pid=13269 comm="syz.4.1928" path="/435/dev/ttyUSB0" dev="devtmpfs" ino=3330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 246.883592][T13286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13286 comm=syz.8.1934 [ 246.955698][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.960867][T13174] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 246.966544][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.971769][ T5808] usb 12-1: USB disconnect, device number 17 [ 246.986037][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.006583][ T5808] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 247.016930][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.018511][T13289] syzkaller0: entered promiscuous mode [ 247.028202][T13289] syzkaller0: entered allmulticast mode [ 247.065116][ T5808] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 247.083455][ T5808] ti_usb_3410_5052 12-1:2.0: device disconnected [ 247.764585][T13303] __nla_validate_parse: 3 callbacks suppressed [ 247.764607][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1937'. [ 247.769974][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1937'. [ 247.961339][T13304] netlink: 'syz.7.1936': attribute type 39 has an invalid length. [ 251.338380][T13329] CIFS mount error: No usable UNC path provided in device string! [ 251.338380][T13329] [ 251.347881][T13329] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.520497][T13346] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 251.576732][T13352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.583422][T13352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.606637][T13356] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 251.610985][T13356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13356 comm=syz.2.1950 [ 251.779157][T12984] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 251.795173][T13365] netlink: 'syz.7.1955': attribute type 5 has an invalid length. [ 251.940352][T12984] usb 9-1: Using ep0 maxpacket: 8 [ 251.943676][T12984] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 251.955165][T12984] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 251.966468][T12984] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.976346][T12984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.007338][T13369] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1956'. [ 252.264090][ T50] usb 9-1: USB disconnect, device number 25 [ 252.369680][T13383] netlink: 'syz.4.1960': attribute type 12 has an invalid length. [ 252.448423][T13390] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 252.459851][T13390] overlayfs: missing 'lowerdir' [ 252.464057][ T42] audit: type=1400 audit(2000000097.727:1355): avc: denied { write } for pid=13385 comm="syz.8.1962" name="functions" dev="configfs" ino=11803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.501316][ T42] audit: type=1400 audit(2000000097.767:1356): avc: denied { write } for pid=13385 comm="syz.8.1962" name="extensions" dev="configfs" ino=50602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.712971][T13400] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 252.715623][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'. [ 252.739142][ T50] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 252.816123][ T42] audit: type=1400 audit(2000000098.077:1357): avc: denied { getopt } for pid=13408 comm="syz.8.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.869777][ T50] usb 12-1: device descriptor read/64, error -71 [ 252.871625][T13418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.887814][T13418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.963053][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1976'. [ 252.968700][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1976'. [ 252.997540][T13425] misc userio: The device must be registered before sending interrupts [ 253.074656][T13423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 253.120153][ T50] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 253.219139][T13440] netlink: 'syz.2.1979': attribute type 39 has an invalid length. [ 253.237680][T13440] hsr_slave_0 (unregistering): left promiscuous mode [ 253.250605][ T50] usb 12-1: device descriptor read/64, error -71 [ 253.360177][ T50] usb usb12-port1: attempt power cycle [ 253.720672][ T50] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 253.735396][T13452] netlink: 'syz.8.1982': attribute type 19 has an invalid length. [ 253.744992][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1982'. [ 253.753522][ T50] usb 12-1: device descriptor read/8, error -71 [ 253.762908][T13452] netlink: 'syz.8.1982': attribute type 19 has an invalid length. [ 253.769360][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1982'. [ 253.990196][ T50] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 254.025528][ T50] usb 12-1: device descriptor read/8, error -71 [ 254.140928][ T50] usb usb12-port1: unable to enumerate USB device [ 254.310542][ T42] audit: type=1400 audit(2000000099.567:1358): avc: denied { connect } for pid=13456 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.332849][ T42] audit: type=1400 audit(2000000099.577:1359): avc: denied { write } for pid=13456 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.390868][ T42] audit: type=1400 audit(2000000099.657:1360): avc: denied { write } for pid=13461 comm="syz.4.1987" name="/" dev="9p" ino=83886179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.399792][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1986'. [ 254.410048][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1986'. [ 254.437281][ T42] audit: type=1400 audit(2000000099.697:1361): avc: denied { ioctl } for pid=13461 comm="syz.4.1987" path="/451/file0/file1" dev="9p" ino=83886183 ioctlcmd=0x64ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.446869][ T42] audit: type=1400 audit(2000000099.707:1362): avc: denied { write } for pid=13461 comm="syz.4.1987" name="/" dev="9p" ino=83886179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.468474][ T9602] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 254.527157][ T9602] i801_smbus 0000:00:1d.7: SMBus base address uninitialized, upgrade BIOS [ 254.685563][T13470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1989'. [ 255.050235][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 255.055860][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 255.064055][T13486] netlink: 'syz.2.1994': attribute type 19 has an invalid length. [ 255.184179][T13489] loop4: detected capacity change from 0 to 7 [ 255.220861][T13489] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 255.222658][T13489] loop4: partition table partially beyond EOD, truncated [ 255.236874][T13489] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 255.301754][T11420] udevd[11420]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 255.345008][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.355972][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.360883][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.365443][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.370981][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.393582][T13499] Attempt to restore checkpoint with obsolete wellknown handles [ 255.449760][T13505] netlink: 'syz.8.2000': attribute type 1 has an invalid length. [ 255.453176][T13505] netlink: 'syz.8.2000': attribute type 1 has an invalid length. [ 255.456898][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2000'. [ 255.555297][ T42] audit: type=1400 audit(2000000100.817:1363): avc: denied { ioctl } for pid=13512 comm="syz.7.2003" path="socket:[51290]" dev="sockfs" ino=51290 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 255.683860][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.704881][ T42] audit: type=1400 audit(2000000100.967:1364): avc: denied { read write } for pid=13506 comm="syz.8.2001" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.991120][ T5810] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 256.090580][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.093037][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.095569][T13491] bridge_slave_0: entered allmulticast mode [ 256.098699][T13491] bridge_slave_0: entered promiscuous mode [ 256.109658][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.112203][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.115081][T13491] bridge_slave_1: entered allmulticast mode [ 256.119515][ T5810] usb 12-1: device descriptor read/64, error -71 [ 256.122526][T13491] bridge_slave_1: entered promiscuous mode [ 256.149875][T13491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.154643][T13491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.173399][T13491] team0: Port device team_slave_0 added [ 256.176796][T13491] team0: Port device team_slave_1 added [ 256.194220][T13491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.196445][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.204598][T13491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.210566][T13491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.213396][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.222533][T13491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.250025][T13491] hsr_slave_0: entered promiscuous mode [ 256.252388][T13491] hsr_slave_1: entered promiscuous mode [ 256.255282][T13491] debugfs: 'hsr0' already exists in 'hsr' [ 256.257187][T13491] Cannot create hsr debugfs directory [ 256.369117][ T1038] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 256.369202][ T5810] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 256.521940][ T5810] usb 12-1: device descriptor read/64, error -71 [ 256.524578][ T1038] usb 7-1: unable to get BOS descriptor or descriptor too short [ 256.530601][ T1038] usb 7-1: not running at top speed; connect to a high speed hub [ 256.541085][ T1038] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.549364][ T1038] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.563685][ T1038] usb 7-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 256.572113][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.574940][ T1038] usb 7-1: Product: syz [ 256.576293][ T1038] usb 7-1: Manufacturer: syz [ 256.577806][ T1038] usb 7-1: SerialNumber: syz [ 256.639915][ T5810] usb usb12-port1: attempt power cycle [ 256.706057][T13491] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 256.711774][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.716753][T13491] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 256.721673][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.726048][T13491] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 256.744752][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.750031][T13491] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 256.761048][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.805404][ T9] usb 7-1: USB disconnect, device number 4 [ 256.921785][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.955793][T13491] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.966491][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.968860][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.984100][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.986484][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.009242][ T5810] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 257.043438][ T5810] usb 12-1: device descriptor read/8, error -71 [ 257.270036][T13600] syz_tun: entered allmulticast mode [ 257.279573][T13600] lo: entered allmulticast mode [ 257.289507][ T5810] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 257.299310][T13600] lo: left allmulticast mode [ 257.310039][T13599] syz_tun: left allmulticast mode [ 257.315399][ T5810] usb 12-1: device descriptor read/8, error -71 [ 257.418516][T13605] usb usb7: usbfs: process 13605 (syz.2.2021) did not claim interface 0 before use [ 257.429584][ T5730] Bluetooth: hci0: command tx timeout [ 257.440840][ T5810] usb usb12-port1: unable to enumerate USB device [ 257.844130][T13491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.855262][T13616] netlink: 'syz.2.2023': attribute type 6 has an invalid length. [ 257.858604][T13616] netlink: 'syz.2.2023': attribute type 5 has an invalid length. [ 257.862755][T13616] netlink: 'syz.2.2023': attribute type 4 has an invalid length. [ 258.138751][T13491] veth0_vlan: entered promiscuous mode [ 258.175449][T13491] veth1_vlan: entered promiscuous mode [ 258.230716][T13491] veth0_macvtap: entered promiscuous mode [ 258.250879][T13491] veth1_macvtap: entered promiscuous mode [ 258.275783][T13491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.288669][T13491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.369642][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.373937][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.413429][ T5800] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.456881][ T7030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.460589][ T7030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.519570][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.524078][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.529489][ T5800] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.746473][T13628] pim6reg1: entered promiscuous mode [ 258.748289][T13628] pim6reg1: entered allmulticast mode [ 258.817616][T13631] SELinux: failed to load policy [ 258.921361][ T5808] usb 14-1: new low-speed USB device number 2 using dummy_hcd [ 259.091978][ T5808] usb 14-1: unable to get BOS descriptor or descriptor too short [ 259.111484][ T5808] usb 14-1: config 100 has an invalid interface number: 173 but max is 0 [ 259.121589][ T5808] usb 14-1: config 100 has no interface number 0 [ 259.131072][ T5808] usb 14-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 259.145453][ T5808] usb 14-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 259.161202][ T5808] usb 14-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.173753][ T5808] usb 14-1: config 100 interface 173 has no altsetting 0 [ 259.184961][ T5808] usb 14-1: string descriptor 0 read error: -22 [ 259.193405][ T5808] usb 14-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 259.203842][ T5808] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.222169][T13626] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 259.264148][ T5808] metro_usb 14-1:100.173: Metrologic USB to Serial converter detected [ 259.308124][ T5808] usb 14-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 259.460592][ T1038] usb 14-1: USB disconnect, device number 2 [ 259.511073][ T5730] Bluetooth: hci0: command tx timeout [ 259.535613][ T1038] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 259.547502][ T1038] metro_usb 14-1:100.173: device disconnected [ 260.095169][T13672] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 260.103294][T13672] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 260.120000][T13672] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 260.154226][T13676] loop6: detected capacity change from 0 to 8 [ 260.155673][T13672] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 260.173292][ T85] rpcbind: server 127.0.0.1 not responding, timed out [ 260.214902][T13676] netlink: 'syz.7.2036': attribute type 1 has an invalid length. [ 260.222073][T13679] loop6: detected capacity change from 8 to 7 [ 260.248475][ C2] blk_print_req_error: 129 callbacks suppressed [ 260.248498][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.255144][ C2] buffer_io_error: 138 callbacks suppressed [ 260.255160][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.271918][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.276064][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.284155][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.288124][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.297524][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.301642][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.306122][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.310117][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.316483][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.320709][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.325903][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.330021][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.334509][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.337769][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.340787][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.344734][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.348470][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.351834][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.354716][T13679] ldm_validate_partition_table(): Disk read failed. [ 260.360516][T13679] Dev loop6: unable to read RDB block 0 [ 260.368178][T13679] loop6: unable to read partition table [ 260.371201][T13679] loop6: partition table beyond EOD, truncated [ 260.382618][T13679] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·¶žMܾ`*ÎîZ´Ç5¡]z(¿Ťî4+hGËpX„Ïgm [ 260.382618][T13679] ü òæôØ.BÊL_seÔ) failed (rc=-5) [ 260.525273][T13685] __nla_validate_parse: 4 callbacks suppressed [ 260.525293][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2039'. [ 260.536091][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2039'. [ 260.564298][ T5730] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 260.572247][ T5730] Bluetooth: Wrong link type (-22) [ 260.678331][ T5808] usb 14-1: new low-speed USB device number 3 using dummy_hcd [ 260.881309][ T5808] usb 14-1: unable to get BOS descriptor or descriptor too short [ 260.896177][ T5808] usb 14-1: config index 0 descriptor too short (expected 50715, got 27) [ 260.915101][ T5808] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.931832][ T5808] usb 14-1: config 1 has no interfaces? [ 260.958710][ T5808] usb 14-1: string descriptor 0 read error: -22 [ 260.961698][ T5808] usb 14-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 260.971611][ T5808] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.291600][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 261.291624][ T42] audit: type=1400 audit(2000000106.547:1368): avc: denied { lock } for pid=13682 comm="syz.9.2038" path="socket:[52809]" dev="sockfs" ino=52809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 261.292148][ T5808] usb 14-1: USB disconnect, device number 3 [ 261.387930][T13716] cgroup: noprefix used incorrectly [ 261.551476][T13725] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 261.575122][T13725] overlayfs: missing 'lowerdir' [ 261.589694][ T5730] Bluetooth: hci0: command tx timeout [ 261.598241][T13729] 9p: Bad value for 'rfdno' [ 261.604038][T13726] futex_wake_op: syz.2.2049 tries to shift op by 144; fix this program [ 261.722184][T13733] gretap0: entered promiscuous mode [ 261.724067][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2052'. [ 261.727830][T13738] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2052'. [ 262.000850][T13751] pimreg: entered allmulticast mode [ 262.417876][T13768] openvswitch: netlink: IPv4 tunnel dst address is zero [ 262.422630][T13768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.435459][T13768] 9p: Bad value for 'wfdno' [ 262.753184][T13748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.757432][T13748] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 262.787016][T13748] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 262.797223][T13748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.802479][T13748] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 262.814245][T13748] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 262.823413][T13748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.841842][T13748] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 262.853893][T13748] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 263.232109][T13794] gfs2: error -5 reading superblock [ 263.442690][T13802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2070'. [ 263.534989][T13809] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 263.538085][T13809] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 263.549370][T13809] overlayfs: workdir and upperdir must reside under the same mount [ 263.968756][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2079'. [ 264.069759][ T5730] Bluetooth: hci1: command 0x0405 tx timeout [ 264.212276][T13844] xt_TCPMSS: Only works on TCP SYN packets [ 264.438305][T13846] cifs: Unknown parameter 'êæ̓‹¶Æ;²m O´ÍK_%YÔæîvóǵ' [ 264.869180][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 264.871351][ T5730] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.107210][T13860] netlink: ct family unspecified [ 265.119080][T13860] openvswitch: netlink: Actions may not be safe on all matching packets [ 265.122956][ T42] audit: type=1400 audit(2000000110.387:1369): avc: denied { search } for pid=13859 comm="syz.9.2090" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 265.145736][ T42] audit: type=1400 audit(2000000110.397:1370): avc: denied { search } for pid=13859 comm="syz.9.2090" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 265.206228][T13865] program syz.9.2092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.353129][ T42] audit: type=1400 audit(2000000110.617:1371): avc: denied { ioctl } for pid=13857 comm="syz.7.2089" path="/205/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 265.536450][T13872] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 265.552427][T13872] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 265.656557][ T42] audit: type=1400 audit(2000000110.917:1372): avc: denied { read write } for pid=13878 comm="syz.7.2096" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 265.685877][ T42] audit: type=1400 audit(2000000110.917:1373): avc: denied { open } for pid=13878 comm="syz.7.2096" path="/206/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 265.865495][ T42] audit: type=1800 audit(2000000111.127:1374): pid=13890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2100" name="num" dev="configfs" ino=53534 res=0 errno=0 [ 265.867763][T13890] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2100'. [ 265.901423][ T42] audit: type=1400 audit(2000000111.147:1375): avc: denied { ioctl } for pid=13889 comm="syz.7.2100" path="/207/config/cluster/mycluster/node/mynode/num" dev="configfs" ino=53534 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 265.934420][ T42] audit: type=1400 audit(2000000111.197:1376): avc: denied { map } for pid=13889 comm="syz.7.2100" path="/proc/627/fdinfo" dev="proc" ino=53537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 266.067196][T13893] ipvlan0: entered promiscuous mode [ 266.072277][T13893] ipvlan0: entered allmulticast mode [ 266.074698][T13893] veth0_vlan: entered allmulticast mode [ 266.150789][ T5730] Bluetooth: hci1: command 0x0405 tx timeout [ 266.351980][ T42] audit: type=1400 audit(2000000111.617:1377): avc: denied { write } for pid=13898 comm="syz.7.2103" name="namespaces" dev="configfs" ino=21834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.365174][T13899] nvmet: adding nsid 1 to subsystem testnqn [ 266.394488][ T42] audit: type=1800 audit(2000000111.657:1378): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2103" name="device_path" dev="configfs" ino=53555 res=0 errno=0 [ 266.415405][ T42] audit: type=1800 audit(2000000111.677:1379): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2103" name="enable" dev="configfs" ino=53556 res=0 errno=0 [ 266.418545][T13899] nvmet: failed to open block device (null): (-22) [ 266.442014][ T42] audit: type=1800 audit(2000000111.707:1380): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2103" name="addr_trtype" dev="configfs" ino=53557 res=0 errno=0 [ 266.464194][ T42] audit: type=1800 audit(2000000111.717:1381): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2103" name="addr_adrfam" dev="configfs" ino=53558 res=0 errno=0 [ 266.472823][T13899] nvmet_tcp: malformed ip/port passed: 127.0.0.1: [ 266.496185][ T42] audit: type=1800 audit(2000000111.727:1382): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2103" name="addr_traddr" dev="configfs" ino=53559 res=0 errno=0 [ 266.511363][ T42] audit: type=1800 audit(2000000111.727:1383): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2103" name="addr_trsvcid" dev="configfs" ino=53560 res=0 errno=0 [ 266.530528][ T42] audit: type=1400 audit(2000000111.727:1384): avc: denied { write } for pid=13898 comm="syz.7.2103" name="subsystems" dev="configfs" ino=21837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.551500][ T42] audit: type=1400 audit(2000000111.727:1385): avc: denied { create } for pid=13898 comm="syz.7.2103" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 266.585760][ T42] audit: type=1400 audit(2000000111.727:1386): avc: denied { write } for pid=13898 comm="syz.7.2103" name="subsystems" dev="configfs" ino=21837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.949278][ T5730] Bluetooth: hci0: command 0x0c1a tx timeout [ 266.951765][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.046613][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2107'. [ 267.486734][T13927] erspan0: entered promiscuous mode [ 267.795868][T13938] netlink: 'syz.9.2116': attribute type 13 has an invalid length. [ 268.113841][T13959] Unable to extract alua_access_type [ 268.229121][ T5730] Bluetooth: hci1: command 0x0405 tx timeout [ 268.631376][T13983] netlink: Conntrack attr has 8 unknown bytes [ 268.639651][T13983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.959147][T10280] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 269.029339][ T5730] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.029836][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.126232][T10280] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.133188][T10280] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 269.144534][T10280] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.212367][T10280] as10x_usb: device has been detected [ 269.220243][T10280] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 269.242601][T14020] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 269.274090][T10280] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 269.326692][T10280] as10x_usb: error during firmware upload part1 [ 269.334685][T14020] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 269.336109][T10280] Registered device Abilis Systems DVB-Titan [ 269.382839][T13990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.388238][T14027] nvme_fabrics: missing parameter 'transport=%s' [ 269.390031][T13990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.400359][T14027] nvme_fabrics: missing parameter 'nqn=%s' [ 269.548806][T14040] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.551866][T14040] block device autoloading is deprecated and will be removed. [ 269.568397][T14037] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 269.571252][T14037] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.578394][T14037] vhci_hcd vhci_hcd.0: Device attached [ 269.585592][T14041] vhci_hcd: connection closed [ 269.599092][ T5800] vhci_hcd vhci_hcd.9: stop threads [ 269.602447][ T5800] vhci_hcd vhci_hcd.9: release socket [ 269.604265][ T5800] vhci_hcd vhci_hcd.9: disconnect device [ 269.756045][T14044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.764827][T14044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.605089][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2146'. [ 270.609204][T14069] openvswitch: netlink: Missing key (keys=40, expected=80) [ 271.093377][T14087] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2150'. [ 271.228071][T14089] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 271.533640][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2154'. [ 271.538175][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2154'. [ 272.214237][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.227887][ T5730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.235365][ T5730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.242278][ T5730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.248029][ T5730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.758453][T14113] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.761587][T14113] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.764613][T14113] bridge_slave_0: entered allmulticast mode [ 272.768688][T14113] bridge_slave_0: entered promiscuous mode [ 272.777976][T14113] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.781219][T14113] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.784512][T14113] bridge_slave_1: entered allmulticast mode [ 272.788665][T14113] bridge_slave_1: entered promiscuous mode [ 272.822746][T14113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.831910][T14113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.856686][T14113] team0: Port device team_slave_0 added [ 272.861864][T14113] team0: Port device team_slave_1 added [ 272.892885][T14113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.895310][T14113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.904833][T14113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.912572][T14113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.915486][T14113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.920987][T14146] gfs2: error -5 reading superblock [ 272.926197][T14113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.942030][T14146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49696 sclass=netlink_route_socket pid=14146 comm=syz.9.2165 [ 272.978585][T14113] hsr_slave_0: entered promiscuous mode [ 272.982351][T14113] hsr_slave_1: entered promiscuous mode [ 272.985326][T14113] debugfs: 'hsr0' already exists in 'hsr' [ 272.987825][T14113] Cannot create hsr debugfs directory [ 273.182732][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 273.182750][ T42] audit: type=1400 audit(2000000118.447:1409): avc: denied { write } for pid=14160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.259237][T14168] smpboot: CPU 1 is now offline [ 273.286699][ T42] audit: type=1400 audit(2000000118.547:1410): avc: denied { write } for pid=14173 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.334523][T14168] smpboot: CPU 3 is now offline [ 273.383622][T14181] fuse: Bad value for 'fd' [ 273.503937][ T42] audit: type=1400 audit(2000000118.767:1411): avc: denied { write } for pid=14187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.585164][ T42] audit: type=1400 audit(2000000118.847:1412): avc: denied { write } for pid=14198 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.683991][ T42] audit: type=1400 audit(2000000118.947:1413): avc: denied { write } for pid=14202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.764967][T14208] netlink: NAT attribute has 5 unknown bytes [ 273.784964][T14208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.788835][ T42] audit: type=1400 audit(2000000119.037:1414): avc: denied { write } for pid=14211 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.987812][ T42] audit: type=1400 audit(2000000119.247:1415): avc: denied { write } for pid=14215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.016150][T14113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.027387][T14113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.041422][T14113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.057140][T14113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.064192][T14113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.080704][T14113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.084175][T14113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.089360][T14113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.096875][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2186'. [ 274.119531][ T42] audit: type=1400 audit(2000000119.387:1416): avc: denied { write } for pid=14224 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.228153][T14113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.247770][T14113] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.292638][ T42] audit: type=1400 audit(2000000119.557:1417): avc: denied { write } for pid=14234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.312157][ T5084] Bluetooth: hci2: command tx timeout [ 274.352570][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.355474][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.388432][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.390688][ T7030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.428397][ T42] audit: type=1400 audit(2000000119.687:1418): avc: denied { write } for pid=14242 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.481464][T14238] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 274.567052][T14250] xt_cgroup: invalid path, errno=-2 [ 274.796068][ T1038] usb 13-1: USB disconnect, device number 4 [ 274.820157][T14261] netlink: 'syz.7.2191': attribute type 21 has an invalid length. [ 274.826981][T14261] netlink: 'syz.7.2191': attribute type 7 has an invalid length. [ 275.046620][T14266] xt_bpf: check failed: parse error [ 275.154925][T14113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.245936][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2193'. [ 275.254285][T14113] veth0_vlan: entered promiscuous mode [ 275.318304][T14113] veth1_vlan: entered promiscuous mode [ 275.416543][T14113] veth0_macvtap: entered promiscuous mode [ 275.437468][T14113] veth1_macvtap: entered promiscuous mode [ 275.505498][T14113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.545709][T14113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.558659][T14281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.580863][ T1038] usb 7-1: USB disconnect, device number 5 [ 275.681082][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.683890][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.686635][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.710717][ T1038] Unregistered device Abilis Systems DVB-Titan [ 275.745011][ T1038] as10x_usb: device has been disconnected [ 276.108928][T14297] syzkaller0: entered promiscuous mode [ 276.124390][T14297] syzkaller0: entered allmulticast mode [ 276.171228][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.363157][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.372501][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.390216][ T5084] Bluetooth: hci2: command tx timeout [ 276.478265][T14317] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 276.482652][T14317] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 276.486349][T14317] F2FS-fs (nullb0): Unable to read 2th superblock [ 276.490008][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.492741][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.940050][T14335] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 276.980666][T14335] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 277.038434][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2205'. [ 277.165146][T14357] fuse: Bad value for 'fd' [ 277.268402][T14371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2212'. [ 277.277355][T14371] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.306263][T14377] sock: sock_set_timeout: `syz.9.2213' (pid 14377) tries to set negative timeout [ 277.369453][T14387] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 277.401386][T14393] 9pnet_virtio: no channels available for device syz [ 277.448613][T14398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14398 comm=syz.2.2215 [ 277.488145][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2220'. [ 277.500870][T14403] netlink: 'syz.3.2220': attribute type 7 has an invalid length. [ 277.503560][T14403] netlink: 'syz.3.2220': attribute type 8 has an invalid length. [ 277.506306][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 277.513299][T14405] netlink: 'syz.7.2221': attribute type 7 has an invalid length. [ 277.524198][T14405] netlink: 'syz.7.2221': attribute type 7 has an invalid length. [ 277.547127][T14411] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 277.555967][T14408] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2222'. [ 277.559502][T14411] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2222'. [ 277.562992][T14408] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2222'. [ 277.750526][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2225'. [ 277.899067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 277.901938][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2231'. [ 277.906267][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2231'. [ 277.931481][ T5800] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.936653][ T5800] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.946067][ T5800] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.960282][ T5800] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.993363][T14455] fuse: fd is not a fuse device [ 278.069356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 278.169022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 278.208583][ T42] kauditd_printk_skb: 704 callbacks suppressed [ 278.208604][ T42] audit: type=1804 audit(2000000123.467:2123): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2234" name="/newroot/10/merge/file" dev="overlay" ino=75 res=1 errno=0 [ 278.450145][ T42] audit: type=1400 audit(2000000123.717:2124): avc: denied { mounton } for pid=14471 comm="syz.9.2237" path="/57/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 278.469149][ T5084] Bluetooth: hci2: command tx timeout [ 278.495272][T14477] netlink: 'syz.9.2238': attribute type 1 has an invalid length. [ 278.503507][T14479] netlink: 'syz.9.2238': attribute type 1 has an invalid length. [ 278.952984][T14501] tipc: Started in network mode [ 278.954723][T14501] tipc: Node identity 4, cluster identity 4711 [ 278.958612][T14501] tipc: Node number set to 4 [ 279.075067][T14509] Console: switching to colour dummy device 80x25 [ 279.656375][T14533] netlink: 'syz.9.2254': attribute type 1 has an invalid length. [ 279.672603][T14533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.683977][T14533] bond1: (slave gretap1): making interface the new active one [ 279.689858][T14533] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 279.824895][T14542] No source specified [ 279.834150][T14544] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 279.854609][T14519] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 279.860278][T14542] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 279.863273][T14542] bond2: entered allmulticast mode [ 279.867480][T14542] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 279.892820][T14519] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 279.896075][T14519] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 279.900569][T14519] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 279.903512][T14519] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 279.906660][T14519] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 279.928831][T14519] pci 0000:00:01.0: Adding to iommu group 1 [ 279.952391][T14519] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 279.955838][T14519] pci 0000:00:01.0: vgaarb: bridge control possible [ 279.958550][T14519] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io,locks=none [ 279.997214][T14554] Bluetooth: MGMT ver 1.23 [ 280.001837][T14519] pci 0000:00:01.0: BAR 0 [mem 0x80800000-0x80ffffff pref]: assigned [ 280.006015][T14519] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 280.007688][T14554] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 280.010702][T14519] pci 0000:00:01.0: BAR 4 [mem 0x80001000-0x80001fff]: assigned [ 280.017664][T14519] virtio-pci 0000:00:01.0: enabling device (0001 -> 0003) [ 280.108113][T14519] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 280.117659][T14519] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 280.126629][T14519] [drm] features: -virgl +edid -resource_blob -host_visible [ 280.126650][T14519] [drm] features: -context_init -blob_alignment [ 280.127018][T14560] gretap0: entered promiscuous mode [ 280.137912][T14560] macvlan2: entered allmulticast mode [ 280.141187][T14560] gretap0: entered allmulticast mode [ 280.180480][T14519] [drm] number of scanouts: 1 [ 280.183099][T14519] [drm] number of cap sets: 0 [ 280.251467][T14519] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 280.420003][T14519] Console: switching to colour frame buffer device 160x50 [ 280.465332][T14581] fuse: fd is not a fuse device [ 280.489192][T14519] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 280.549469][ T5084] Bluetooth: hci2: command tx timeout [ 280.576393][T14581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.853169][T14612] netlink: 'syz.2.2279': attribute type 34 has an invalid length. [ 280.976580][T14619] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 281.000698][T14619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.016014][T14619] bridge1: entered promiscuous mode [ 281.046579][T14619] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 281.329277][ T5800] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.336748][ T5800] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.381665][T14629] CIFS: Attempting to mount //127.0.0.1/share [ 281.388101][T14629] CIFS: VFS: Error connecting to socket. Aborting operation. [ 281.392963][T14629] CIFS: VFS: cifs_mount failed w/return code = -111 [ 281.406651][T14631] netlink: 'syz.7.2287': attribute type 4 has an invalid length. [ 281.425189][T14631] netlink: 'syz.7.2287': attribute type 4 has an invalid length. [ 281.463942][T14635] sctp: [Deprecated]: syz.2.2289 (pid 14635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.463942][T14635] Use struct sctp_sack_info instead [ 281.527573][T14641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.573883][T14645] tmpfs: Bad value for 'mpol' [ 281.894234][T14669] overlayfs: missing 'lowerdir' [ 282.046721][T14672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.057209][T14672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.378183][T14721] __nla_validate_parse: 13 callbacks suppressed [ 282.378196][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 282.384891][T14722] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2311'. [ 282.403390][T14722] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2311'. [ 282.490241][ T42] audit: type=1400 audit(2000000127.757:2125): avc: denied { append } for pid=14736 comm="syz.3.2317" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 282.498174][T14738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2317'. [ 282.506421][T14737] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2317'. [ 282.510584][T14737] openvswitch: netlink: Flow key attr not present in new flow. [ 282.513589][T14738] openvswitch: netlink: Flow key attr not present in new flow. [ 282.517972][ T42] audit: type=1400 audit(2000000127.777:2126): avc: denied { mounton } for pid=14736 comm="syz.3.2317" path="/27/config" dev="configfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.557484][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 282.562143][T14744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2319'. [ 282.565920][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 282.617349][T14750] binder: 14747:14750 ioctl c0286405 200000000100 returned -22 [ 282.617393][T14748] binder: 14747:14748 ioctl c0306201 2000000003c0 returned -22 [ 282.669052][ T5837] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 282.690914][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2322'. [ 282.772323][T14758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14758 comm=syz.2.2322 [ 282.822218][ T42] audit: type=1400 audit(2000000128.087:2127): avc: denied { listen } for pid=14757 comm="syz.2.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 282.840762][ T5837] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.842177][ T42] audit: type=1400 audit(2000000128.097:2128): avc: denied { read } for pid=14757 comm="syz.2.2322" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.850825][ T5837] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.865944][ T42] audit: type=1400 audit(2000000128.097:2129): avc: denied { open } for pid=14757 comm="syz.2.2322" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.870471][ T5837] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.881316][ T42] audit: type=1400 audit(2000000128.097:2130): avc: denied { ioctl } for pid=14757 comm="syz.2.2322" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.902458][ T5837] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 282.907812][ T5837] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.912667][ T5837] usb 14-1: Product: syz [ 282.914534][ T5837] usb 14-1: Manufacturer: syz [ 282.916811][ T5837] usb 14-1: SerialNumber: syz [ 282.922470][ T5837] hub 14-1:1.0: bad descriptor, ignoring hub [ 282.924419][ T5837] hub 14-1:1.0: probe with driver hub failed with error -5 [ 283.121383][T14789] loop5: detected capacity change from 0 to 14 [ 283.123421][ T5837] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 283.127130][T14789] Dev loop5: unable to read RDB block 14 [ 283.132202][T14789] loop5: AHDI p1 [ 283.133846][T14789] loop5: partition table partially beyond EOD, truncated [ 283.152861][T14789] syzkaller1: entered promiscuous mode [ 283.156759][T14789] syzkaller1: entered allmulticast mode [ 283.168833][T14795] overlayfs: failed to clone upperpath [ 283.169261][ T5817] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 283.256009][T14795] macvtap0: entered allmulticast mode [ 283.257949][T14795] veth0_macvtap: entered allmulticast mode [ 283.339068][ T5817] usb 8-1: Using ep0 maxpacket: 32 [ 283.345657][ T5817] usb 8-1: unable to get BOS descriptor or descriptor too short [ 283.362707][ T5817] usb 8-1: string descriptor 0 read error: -22 [ 283.368278][ T5817] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 283.384327][ T42] audit: type=1400 audit(2000000128.647:2131): avc: denied { append } for pid=14725 comm="syz.9.2314" name="card1" dev="devtmpfs" ino=3406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.384686][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 283.407425][T14808] devpts: Bad value for 'max' [ 283.411384][ T5817] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 283.412224][ T42] audit: type=1400 audit(2000000128.677:2132): avc: denied { mounton } for pid=14807 comm="syz.2.2337" path="/140/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 283.415702][ T5817] dw2102: su3000_power_ctrl: 1, initialized 0 [ 283.425179][T14808] afs: Unknown parameter 'obj_role' [ 283.425770][ T5817] dvb-usb: bulk message failed: -22 (2/0) [ 283.440958][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.451068][ T5817] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 283.459742][ T5817] usb 8-1: media controller created [ 283.461951][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 283.464809][ T5817] dw2102: i2c transfer failed. [ 283.474611][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 283.475965][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 283.484951][ T5817] dw2102: i2c transfer failed. [ 283.486226][T14814] loop5: detected capacity change from 0 to 7 [ 283.486555][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 283.491047][ T5817] dw2102: i2c transfer failed. [ 283.492578][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 283.494396][ T5817] dw2102: i2c transfer failed. [ 283.497777][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 283.498039][T14814] Dev loop5: unable to read RDB block 7 [ 283.500734][ T5817] dw2102: i2c transfer failed. [ 283.504814][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 283.506240][T14814] loop5: AHDI p2 [ 283.506642][ T5817] dw2102: i2c transfer failed. [ 283.506650][ T5817] dvb-usb: MAC address: 02:02:02:02:02:02 [ 283.512449][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.513417][T14814] loop5: partition table partially beyond EOD, truncated [ 283.540800][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 283.566671][ T5817] dw2102: command 0x0e transfer failed. [ 283.579241][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 283.581090][ T5817] dw2102: command 0x0e transfer failed. [ 283.669884][T14829] netlink: 'syz.3.2326': attribute type 29 has an invalid length. [ 283.677135][T14829] netlink: 'syz.3.2326': attribute type 29 has an invalid length. [ 283.681571][T14829] netlink: 'syz.3.2326': attribute type 29 has an invalid length. [ 283.686736][T14829] No source specified [ 283.906738][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 283.910844][ T5817] dw2102: command 0x0e transfer failed. [ 283.913339][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 283.915948][ T5817] dw2102: command 0x0e transfer failed. [ 283.918333][ T5817] dvb-usb: bulk message failed: -22 (1/0) [ 283.923590][ T5817] dw2102: command 0x51 transfer failed. [ 283.942236][T14769] dvb-usb: bulk message failed: -22 (4/0) [ 283.947476][T14769] dw2102: i2c transfer failed. [ 283.985486][ T5817] DVB: Unable to find symbol ds3000_attach() [ 283.987306][ T5817] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 284.039112][ T5817] rc_core: IR keymap rc-su3000 not found [ 284.040823][ T5817] Registered IR keymap rc-empty [ 284.045011][ T5817] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 284.054212][ T5817] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input23 [ 284.060661][ T5817] dvb-usb: schedule remote query interval to 150 msecs. [ 284.066044][ T5817] dw2102: su3000_power_ctrl: 0, initialized 1 [ 284.068164][ T5817] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 284.096545][ T5817] usb 8-1: USB disconnect, device number 4 [ 284.153183][ T5817] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 284.267574][ T56] usb 14-1: USB disconnect, device number 4 [ 284.271639][ T56] usblp0: removed [ 285.322909][T14904] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=14904 comm=syz.9.2364 [ 285.398844][T14904] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 285.419814][T14904] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 285.456015][T14910] openvswitch: netlink: Message has 8 unknown bytes. [ 285.461040][T14910] SELinux: policydb string length 0 does not match expected length 8 [ 285.469064][T14910] SELinux: failed to load policy [ 285.608373][T14916] bond3 (unregistering): Released all slaves [ 285.759902][T14865] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 285.765934][ T42] audit: type=1400 audit(2000000131.027:2133): avc: denied { ioctl } for pid=14863 comm="syz.2.2352" path="/148/tracing/current_tracer" dev="tracefs" ino=889 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 285.890459][T14944] netlink: 'syz.7.2372': attribute type 4 has an invalid length. [ 286.301226][T14972] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 286.579294][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 286.742281][ T29] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 286.744976][ T29] usb 8-1: config 1 has no interface number 0 [ 286.746962][ T29] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 286.750105][ T29] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 129, changing to 11 [ 286.755796][ T29] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 286.758710][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.761243][ T29] usb 8-1: Product: syz [ 286.762564][ T29] usb 8-1: Manufacturer: syz [ 286.764042][ T29] usb 8-1: SerialNumber: syz [ 286.768054][T14972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.772203][ T29] usb 8-1: Error in usbnet_get_endpoints (-22) [ 286.976509][T10280] usb 8-1: USB disconnect, device number 5 [ 287.823426][ T5801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.947849][ T5801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.038549][ T5801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.110503][ T5801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.271447][ T5801] bridge_slave_1: left allmulticast mode [ 288.273575][ T5801] bridge_slave_1: left promiscuous mode [ 288.277126][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.284190][ T5801] bridge_slave_0: left allmulticast mode [ 288.286102][ T5801] bridge_slave_0: left promiscuous mode [ 288.288034][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.338822][ T42] audit: type=1400 audit(2000000133.597:2134): avc: denied { write } for pid=14980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.401290][ T42] audit: type=1400 audit(2000000133.667:2135): avc: denied { write } for pid=14983 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.462287][ T5801] gretap0 (unregistering): left allmulticast mode [ 288.494014][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.499907][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.504434][ T5801] bond0 (unregistering): Released all slaves [ 288.512960][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 288.614114][ T42] audit: type=1400 audit(2000000133.857:2136): avc: denied { write } for pid=14986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.681453][ T42] audit: type=1400 audit(2000000133.937:2137): avc: denied { write } for pid=14989 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.736807][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 288.842664][ T42] audit: type=1400 audit(2000000134.107:2138): avc: denied { write } for pid=14992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.894767][ T5801] hsr_slave_0: left promiscuous mode [ 288.897948][ T5801] hsr_slave_1: left promiscuous mode [ 288.905287][ T42] audit: type=1400 audit(2000000134.167:2139): avc: denied { write } for pid=14995 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.920393][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.923389][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.927393][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.930857][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.940251][ T5801] veth1_macvtap: left promiscuous mode [ 288.942645][ T5801] veth0_macvtap: left promiscuous mode [ 288.945065][ T5801] veth1_vlan: left promiscuous mode [ 288.947416][ T5801] veth0_vlan: left promiscuous mode [ 289.129546][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 289.146849][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 289.255467][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 289.335428][ T42] audit: type=1400 audit(2000000134.597:2140): avc: denied { write } for pid=14998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.400519][ T42] audit: type=1400 audit(2000000134.657:2141): avc: denied { write } for pid=15001 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.470413][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5 [ 300.442951][ T42] audit: type=1400 audit(2000000145.707:2142): avc: denied { write } for pid=15019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.488343][ T42] audit: type=1400 audit(2000000145.747:2143): avc: denied { write } for pid=15022 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.794600][ T42] audit: type=1400 audit(2000000146.057:2144): avc: denied { write } for pid=15025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.867181][ T42] audit: type=1400 audit(2000000146.127:2145): avc: denied { write } for pid=15028 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.183687][ T42] audit: type=1400 audit(2000000146.447:2146): avc: denied { write } for pid=15031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.244888][ T42] audit: type=1400 audit(2000000146.507:2147): avc: denied { write } for pid=15034 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.362401][ T42] audit: type=1400 audit(2000000146.627:2148): avc: denied { write } for pid=15037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.420629][ T42] audit: type=1400 audit(2000000146.687:2149): avc: denied { write } for pid=15040 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.215813][ T42] audit: type=1400 audit(2000000152.477:2150): avc: denied { write } for pid=15043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.283686][ T42] audit: type=1400 audit(2000000152.547:2151): avc: denied { write } for pid=15046 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.120272][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.556443][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.175033][ T5800] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 404.177631][ T5800] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 404.182163][ T5800] bridge0: port 3(wlan1) entered disabled state [ 404.185972][ T5800] bridge_slave_1: left promiscuous mode [ 404.188149][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.208238][ T5800] lo: left allmulticast mode [ 404.346633][ T5800] bond7 (unregistering): (slave geneve2): Releasing active interface [ 404.424745][ T5800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.434303][ T5800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.438733][ T5800] bond0 (unregistering): Released all slaves [ 404.447017][ T5800] bond1 (unregistering): Released all slaves [ 404.458666][ T5800] bond2 (unregistering): Released all slaves [ 404.471680][ T5800] bond3 (unregistering): Released all slaves [ 404.486237][ T5800] bond4 (unregistering): Released all slaves [ 404.493397][ T5800] bond5 (unregistering): Released all slaves [ 404.500369][ T5800] bond6 (unregistering): Released all slaves [ 404.508387][ T5800] bond7 (unregistering): Released all slaves [ 404.517348][ T5800] bond8 (unregistering): Released all slaves [ 404.725255][ T5800] tipc: Disabling bearer [ 404.727285][ T5800] tipc: Disabling bearer [ 404.730004][ T5800] tipc: Left network mode [ 405.340932][ T5800] hsr_slave_0: left promiscuous mode [ 405.343206][ T5800] hsr_slave_1: left promiscuous mode [ 405.345183][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.347983][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.457166][ T5800] team0 (unregistering): Port device team_slave_1 removed [ 405.468583][ T5800] team0 (unregistering): Port device team_slave_0 removed [ 405.504648][ T5800] team0 (unregistering): Port device veth0 removed [ 405.532024][ T5800] team0 (unregistering): Port device  removed [ 439.991415][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.390810][T15058] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.395592][T15058] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.520162][T15058] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.524462][T15058] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.618151][T15058] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.622472][T15058] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.703354][T15058] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 496.726145][T15058] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.729591][T15058] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.920275][T15058] bridge_slave_1: left promiscuous mode [ 496.922670][T15058] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.927131][T15058] bridge_slave_0: left allmulticast mode [ 496.929411][T15058] bridge_slave_0: left promiscuous mode [ 496.931724][T15058] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.049150][ T41] SELinux: failure in sel_netif_sid_slow(), invalid network interface (112) [ 497.132917][T15058] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 497.136255][T15058] bridge2 (unregistering): left promiscuous mode [ 497.138474][T15058] bridge2 (unregistering): left allmulticast mode [ 497.157968][T15058] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 497.193375][T15058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.199333][T15058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.205241][T15058] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 497.209963][T15058] bond0 (unregistering): Released all slaves [ 497.217413][T15058] bond1 (unregistering): Released all slaves [ 497.228187][T15058] bond2 (unregistering): Released all slaves [ 497.241171][T15058] bond3 (unregistering): Released all slaves [ 497.256093][T15058] bond4 (unregistering): Released all slaves [ 497.266907][T15058] bond5 (unregistering): Released all slaves [ 497.388478][ T42] audit: type=1400 audit(2000000342.637:2152): avc: denied { write } for pid=15081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.400875][T15058] tipc: Disabling bearer [ 497.404416][T15058] tipc: Left network mode [ 497.443376][ T42] audit: type=1400 audit(2000000342.707:2153): avc: denied { write } for pid=15084 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.550749][ T5438] 8021q: adding VLAN 0 to HW filter on device eth18 [ 497.629979][ T42] audit: type=1400 audit(2000000342.887:2154): avc: denied { write } for pid=15087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.677304][ T42] audit: type=1400 audit(2000000342.937:2155): avc: denied { write } for pid=15090 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.715818][ T5438] 8021q: adding VLAN 0 to HW filter on device eth19 [ 497.782745][T15058] hsr_slave_0: left promiscuous mode [ 497.785141][T15058] hsr_slave_1: left promiscuous mode [ 497.795498][T15058] veth1_macvtap: left promiscuous mode [ 497.797380][T15058] veth0_macvtap: left promiscuous mode [ 497.799477][T15058] veth1_vlan: left promiscuous mode [ 497.801163][T15058] veth0_vlan: left promiscuous mode [ 497.818198][ T42] audit: type=1400 audit(2000000343.077:2156): avc: denied { write } for pid=15093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.889108][ T42] audit: type=1400 audit(2000000343.147:2157): avc: denied { write } for pid=15096 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.016714][T15058] team0 (unregistering): Port device team_slave_1 removed [ 498.028529][T15058] team0 (unregistering): Port device team_slave_0 removed [ 498.074832][T15058] team0 (unregistering): Port device dummy0 removed [ 498.087568][ T5438] 8021q: adding VLAN 0 to HW filter on device eth20 [ 498.199833][ T42] audit: type=1400 audit(2000000343.467:2158): avc: denied { write } for pid=15100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.250405][ T42] audit: type=1400 audit(2000000343.507:2159): avc: denied { write } for pid=15103 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.290137][ T5438] 8021q: adding VLAN 0 to HW filter on device eth21 [ 498.358324][ T42] audit: type=1400 audit(2000000343.617:2160): avc: denied { write } for pid=15105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.407585][ T42] audit: type=1400 audit(2000000343.667:2161): avc: denied { write } for pid=15108 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.431505][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.619744][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 508.619771][ T42] audit: type=1400 audit(2000000353.887:2172): avc: denied { write } for pid=15148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.683709][ T42] audit: type=1400 audit(2000000353.947:2173): avc: denied { write } for pid=15151 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.005106][ T42] audit: type=1400 audit(2000000354.267:2174): avc: denied { write } for pid=15154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.077708][ T42] audit: type=1400 audit(2000000354.337:2175): avc: denied { write } for pid=15157 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.184144][ T42] audit: type=1400 audit(2000000354.447:2176): avc: denied { write } for pid=15160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.246996][ T42] audit: type=1400 audit(2000000354.507:2177): avc: denied { write } for pid=15163 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.424810][ T42] audit: type=1400 audit(2000000356.687:2178): avc: denied { write } for pid=15166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.473852][ T42] audit: type=1400 audit(2000000356.737:2179): avc: denied { write } for pid=15169 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.875052][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 21:57:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8ebe8200 RBP=ffffffff8ebe8200 RSP=ffffc90005e4f5f8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000200 R11=000000000000cfb1 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5f73c RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005601731b1408 CR3=000000000e994000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c07e1e7aad3db525 25b8bc8ec10049fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3762d635c76b5116 26dca2d89c0c8ff8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a94819b7f48e3f0 0c27331f8de41c9d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 abf4367e9e1b3ff5 575cb8dfe0ff58cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61271b1b75caf6c5 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bc3844200000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1033e156cfa4bca3 48dbaa85d1e9cb9e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000087cdbc23 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc4dbeea8ccfa1dd 63794465510efa22 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0181cd6f61063e67 800e0d29af107651 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000070014 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0008000500000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000070014 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a64625f20635f 6267652037312036 6520203233200031 202036650066650a ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000015aa37 RBX=ffff88801eae2540 RCX=ffffffff8bbab335 RDX=0000000000000000 RSI=ffffffff8e1a8d91 RDI=ffffffff8c400380 RBP=ffffed1003d5c4a8 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bba98ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560144b16660 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=000000003f3f3dff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b76e760e473c909f da8fe22043fb3dc2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4036d7a04406e4d 1bccc383e0f68900 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 143d82122cd857ec 925be061b3df4bb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c07ca0e2fd63625d 2794bc8b48629a2f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e4bbe91ccda9ba1 c7ac64a05cf3aaeb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb7bfa70f0b5114e 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1358fdc8247672da 91df97a1b578fc7e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 122353f300000000 fcff4561aa7a8142 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0aa93f68f9b4819 48c1e6340b5e7497 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4b0b1c2dd6a96d0 52379ffde92ddece ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1200545200000000 0000000000000000 0000000000007e01 123e238300060101 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 35e46ef8f99e0c0f 0932010001005634 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1200ff133dd40502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000200000008 0000000800000008 0000000000000008 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000006 RBX=ffff88806a628400 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e1a8d91 RDI=ffffffff8c400380 RBP=0000000000000287 RSP=ffffc9000061fd30 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8e80a100 R13=0000000000000008 R14=0000000000000100 R15=0000000000000002 RIP=ffffffff8bbd9931 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005565cb35ef40 CR3=000000003d6b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=000000000000ffff Opmask02=00000000011fffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81aed3b9 ffffffff81aed648 0000000b00000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae7a57 ffffffff81aeb514 ffffffff81aed520 ffffffff81ae7a79 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae7a93 ffffffff81ae7a4d ffffffff81aed444 ffffffff81aeb4bb ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06016c8e00020007 00080009e0030010 ffffffff89eb365e ffffffff8a98aae1 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8a98aa90 ffffffff8a98ac87 ffffffff89eb33cb ffffffff89eb366d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89eb3689 ffffffff8a98aa81 ffffffff89eb323b ffffffff89eb3356 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8a98ab42 ffffffff89eb31c6 ffffffff8a98add1 ffffffff81aed428 ZMM24=8570a45f8570a45f 8570a45f8570a45f 8570a45f8570a45f 8570a45f8570a45f 8570a45f8570a45f 8570a45f8570a45f 8570a45f8570a45f 8570a45f8570a45f ZMM25=17d53fcb17d53fcb 17d53fcb17d53fcb 17d53fcb17d53fcb 17d53fcb17d53fcb 17d53fcb17d53fcb 17d53fcb17d53fcb 17d53fcb17d53fcb 17d53fcb17d53fcb ZMM26=f3c88a83f3c88a83 f3c88a83f3c88a83 f3c88a83f3c88a83 f3c88a83f3c88a83 f3c88a83f3c88a83 f3c88a83f3c88a83 f3c88a83f3c88a83 f3c88a83f3c88a83 ZMM27=f5ebea5bf5ebea5b f5ebea5bf5ebea5b f5ebea5bf5ebea5b f5ebea5bf5ebea5b f5ebea5bf5ebea5b f5ebea5bf5ebea5b f5ebea5bf5ebea5b f5ebea5bf5ebea5b ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ff0a0000ff0a0000 ff0a0000ff0a0000 ff0a0000ff0a0000 ff0a0000ff0a0000 ff0a0000ff0a0000 ff0a0000ff0a0000 ff0a0000ff0a0000 ff0a0000ff0a0000 info registers vcpu 3 CPU#3 RAX=000000000014c575 RBX=ffff88801eeca540 RCX=ffffffff8bbab335 RDX=0000000000000000 RSI=ffffffff8e1a8d91 RDI=ffffffff8c400380 RBP=ffffed1003dd94a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bba98ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f431be8a6b0 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 83490dd12367f8ca fc049fd32f5fcfc0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 096c1daa1407e731 7e8af9395524f059 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 902c0a6ef5cac1f5 28281e8d7a92d8c3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b1edf501a196f90 43d6822ff0f76321 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5e2c33b320cd5ae d59e1303682495e0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae594d50f8bc8246 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a0420966e9f821d 533d0cc51a7fcb81 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1dd26b4d00000000 88800743a965039c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99f06620dfd7bd82 e897e5f7df0cc981 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 85aa8b43ed28f299 b369b20c855f5fd6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030008000690030f ffffffffffff0406 000000000000000b 0000555000000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000039 0000000000000000 00007f9eb17f2e80 00007f9eb17f2e80 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 088086080000003a b8c6048400000000 02005e032802005c 032802005a0302d8 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080000080000003b 1408060a00000000 0800018003020800 7803039a08007003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 168803020000003c 0016840300000000 8003168004108003 018810000004128e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c9800080010e003 30100010d0030608 0020034808001803 020800100000003f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000400000000 100010b0030fffff ffffffff0410a003 028008000000003e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080016b000000000 16ae030000000000 0000000000000000 01ffffff0000003d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffe5081600000000 020016920303fc02 0016900300048800 168803020000003c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000