last executing test programs: 29.806663573s ago: executing program 1 (id=296): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x52, &(0x7f0000000040)=0x5481, 0x4e) 29.743113389s ago: executing program 1 (id=300): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) listen(r1, 0x2) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) r2 = memfd_create(&(0x7f0000000a80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x20000, 0x1000004}) fcntl$addseals(r2, 0x409, 0xb) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="6163e72125be96ef81b49096532f67a2c55b9e65ed4f544112914f6db0d2e8453ead298dfc11e49dfbc40a0a12e7e9770f4c7bd24600fac5ba07b7ef22e3aaeb3e693ac27c0568e8f76a50da2c563aaaa4ae9603f1f1d78e3684ddaf754a405e321d91d300d1cc932b4ba5e2f7f2b667b7d03538fe753ad8384afccdfb9cda6558387f7a180063f9a1b796836947f0275ea3375c8c238fe79d807fd6dbc4ea4aafbba9a9cfc76fe3a51e86e169034b8b1dccc74f180495f3bdaccc2095360e41153f903e08a32f24c457c4f05f6d513aeea5619077d5aa3986905b1a6140555f2e0d02ae03465dcd0c", @ANYRES8=r1, @ANYRESDEC=r4, @ANYRESDEC=r4, @ANYRESOCT=r1, @ANYRES64=r4, @ANYBLOB="142c1916073dbd3945f1bc55b078cce4da13bea0509146b7730c292d589463a5756c296a06f84eefab6949733466b0c512eafeb4ac15049bcb41f04c46f2a825dfc0ac7ec22649275e360a87af453119562485a93451bf577ce5f442cf3d0bfecb562a334d22a44cbe770fdb4ba95e0459196a39335119d66ca0b53d68f7d1ca1c168e8b75e6ed5e47a756e8ce7ba32c0232106a9f998b41c4cf0727ca5b31a8c74b28235a4bf0109f44d96bbef302313e54a6038641552f809f3c6cacc23683b137549edb295970a45f1735", @ANYBLOB="4736ef429c17253ad58162"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x7fff, 0x4, {0x0, @in={{0x2, 0x4e24, @local}}, 0x1ff, 0x4, 0x1000, 0x6}}, &(0x7f00000000c0)=0xb0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e22, 0x0, @remote, 0x7fff}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r6, 0x1}, 0x5b) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05002bbd700000b53b6b9b00000008000300", @ANYRES32=r10, @ANYBLOB="050034001c000000080035"], 0x2c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001700)='y', 0x1}, {&(0x7f0000000180)="bdaf5e5da289a6df920273221c3ed387bbc61bb5054a603a56effbddf565296295bf34d6847fd0", 0x27}, {&(0x7f0000001d40)="35addf1fb5d1165a60aa8d80c119324c1a885200a07eff69e1c7dc1fbf9f45f836287f60185bc0c4a80b7e7c8b5e63a5a79f4b35d960269a289cecfd40ac9481bdbd1ef80ac06a8a700521a7e437dc86591998dd2b1654adc188a1817bc39b9bda792c1b87caf8baea20e50fb4f875ef75e3eb460d3f2dec162676d792b8cbb9118df558620216edf15b22e8e551b68291b29e119d236ee12071d455c90df7488d2244d4b68517eaf6b207cf1e815617ab1ebd32f392a41fbaf4ad5ccea371aee5a26bd466ef0e21781677e100f5547c528b9a3cf2d9cac08926e786e4f5a35271ffa34af4691ba8", 0xe8}, {&(0x7f00000026c0)="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", 0x3c1}], 0x4}}], 0x1, 0x0) close(r3) 29.484578828s ago: executing program 1 (id=309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x30}}, 0x80000) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x8080) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000180)=""/116) io_setup(0x2, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000814}, 0x11) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000640)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a4, r10, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x38, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x78, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xa0, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20008011}, 0xc0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x80, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfb1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x20008000) read$FUSE(r2, &(0x7f0000000b80)={0x2020}, 0x2020) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x2c, r10, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xff}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000002e40)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0xe008148}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x68, r11, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2f}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40090}, 0x20000010) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000002e80)={0x9, 0x6, 0x4, 0x94, 0x80000001, 0x21}) sendmsg$nl_route(r2, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)=@ipv4_newnexthop={0x60, 0x68, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x80b5c89a32b6bdcb}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x8, 0x2, '}-!\x00'}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010102}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r13 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003040)=0x0) sendmsg$AUDIT_SET(r13, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x3c, 0x3e9, 0x4, 0x70bd26, 0x25dfdbfb, {0x40, 0x0, 0x1, r14, 0x4, 0x10000, 0x8, 0x800, 0x0, 0x401, 0x7f}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40011) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000003140), 0xc, &(0x7f0000003240)={&(0x7f00000031c0)={0x68, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12e}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) 29.308454434s ago: executing program 1 (id=318): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x40140921, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vbi(&(0x7f00000006c0), 0x0, 0x2) read$FUSE(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x4) r5 = fsopen(&(0x7f0000000140)='logfs\x00', 0x1) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000040)=""/119}, {&(0x7f00000001c0)=""/199}, {&(0x7f00000002c0)=""/232}, {&(0x7f00000000c0)=""/14}, {&(0x7f00000003c0)=""/234}, {&(0x7f00000004c0)=""/198}, {&(0x7f00000005c0)=""/145}], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 29.034557468s ago: executing program 1 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x40010}, 0x14000052) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x1, 0x10, 0x2573, 0x6, {{0x30, 0x4, 0x1, 0x1a, 0xc0, 0x64, 0x0, 0xfe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @noop, @timestamp_prespec={0x44, 0x34, 0xd3, 0x3, 0x9, [{@empty, 0x6b}, {@multicast1, 0x80}, {@private=0xa010102, 0x40}, {@broadcast, 0x80}, {@multicast2, 0xfffffffe}, {@local, 0x9}]}, @generic={0x89, 0x2}, @lsrr={0x83, 0x23, 0xeb, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101]}, @generic={0x94, 0xa, "d4a2d2b444ad3622"}, @timestamp={0x44, 0x10, 0xc7, 0x0, 0x0, [0x8000, 0x5, 0x3]}, @timestamp_prespec={0x44, 0x34, 0x49, 0x3, 0x2, [{@local}, {@broadcast, 0xffff8203}, {@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x8000}, {@broadcast, 0x354}]}]}}}}}) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newchain={0xfffffffffffffdbd, 0x64, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0x6}, {0xfff1, 0x4c7a3e7c7420d0fa}, {0xfff1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10012, r4, 0x4000) 28.725246791s ago: executing program 1 (id=328): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x4000014) 28.687856687s ago: executing program 32 (id=328): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x4000014) 8.946617791s ago: executing program 3 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @val=@iter={0x0}}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x3ffffffffffff7c, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x1}) 8.94384229s ago: executing program 3 (id=636): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000340)={[{@dyn}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/245, 0xf5) 8.886657215s ago: executing program 3 (id=638): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8e7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x100, 0xf, 0x9]}, @CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa}, @CTA_TUPLE_MASTER={0x40, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 8.828155952s ago: executing program 3 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000000900000000060015000a0000000c001680080002007f"], 0x30}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00034002"], 0x1c}}, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) sync_file_range(r1, 0x1, 0x5, 0x3) (async) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 8.827252266s ago: executing program 3 (id=643): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0), &(0x7f0000000640)) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0), &(0x7f0000000640)) (async) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) (async) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (async) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002}, 0x0, 0x0) (async) 8.506577271s ago: executing program 3 (id=654): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=']^\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) syz_clone(0x8101000, &(0x7f00000000c0)="3c5448c8bca60e4e07f25915710a352967ca26de62ead3ffe9f2cf2af6ba534e92ad483b640cec276f5ba84d4968bc84ad73be8a5b9590f67900d0ba1fb0232965fa4772a47dba86ebf3199a0f57c31d92cd7546556d0159b39f91d6772cc9f3f6779363cfe2acbee9b24482318f2184db54a3245d0a4402eb5685cb2f1be5964ea297a6f9b97d327b08ea6a5cbd9ab31edf3ca7c50021ba0879adf225f7e17abf22", 0xa2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="4486de88386684d43cd5d44707e73ea1027f6e39d04e49e92ad1218181a877337797fceb64ab7a9b3e23bf6d2c8a917d6c9b4c451ae62dd679e9464330e0694a492635ba756a39228e6482702aa2d733db9a47e3178ad34ae107369fc474defd9742d86723f04a07da2c79530047e75eced03008f8955303a2eb") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}], 0x20) r2 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x13) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x523280, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000500)=""/126, 0x7e}], 0x4, &(0x7f00000005c0)=""/130, 0x82}, 0x7}, {{&(0x7f0000000680)=@vsock, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/24, 0x18}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/127, 0x7f}, {&(0x7f0000000980)=""/54, 0x36}], 0x5}, 0x2}, {{&(0x7f0000000a40)=@isdn, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/189, 0xbd}, 0x3}], 0x3, 0x2062, &(0x7f0000000c80)={0x77359400}) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000cc0)={@mcast1, @mcast1}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, 0x9, 0x76, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000d40)={0x8, 0x2, 0x4, 0xf98, 0xa, 0x0, [{0x8, 0x4, 0x7, '\x00', 0x200}, {0x44d9ff4f, 0x10, 0x1238, '\x00', 0x1000}, {0x6, 0x1, 0x2, '\x00', 0x3902}, {0x9, 0x3, 0x2, '\x00', 0x1}, {0x7, 0x8000000000000000, 0x9, '\x00', 0x200}, {0xc, 0xfffffffffffff23f, 0x6, '\x00', 0x88}, {0xb397, 0x2, 0x7, '\x00', 0x200}, {0xbc4, 0x8001, 0x7, '\x00', 0x1400}, {0xfffffffffffffff7, 0x7, 0x761, '\x00', 0x601}, {0x2, 0x1, 0xb9ee, '\x00', 0x100}]}) r5 = signalfd4(r3, &(0x7f0000000fc0)={[0xffffffffb1db2b7b]}, 0x8, 0x0) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000001000)=0xfc, 0x4) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001040)=[r2, r2, r3], 0x3) r6 = inotify_init() close_range(r6, r4, 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000001080)={{0x8001, 0x101}, 0x100, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000011c0)={0x80, 0x20363059, 0x2, @stepwise={0xb, 0x8001, 0xffffff00, 0x7, 0x5, 0xfffffff8}}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001200)=']^\x00', 0x0, r4) socket$igmp(0x2, 0x3, 0x2) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'syzkaller1\x00'}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000001280)=@IORING_OP_READ_FIXED={0x4, 0x28, 0x4007, @fd_index=0x1, 0x0, 0x2, 0xf8, 0x1d, 0x1, {0x2}}) 8.479893075s ago: executing program 33 (id=654): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=']^\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) syz_clone(0x8101000, &(0x7f00000000c0)="3c5448c8bca60e4e07f25915710a352967ca26de62ead3ffe9f2cf2af6ba534e92ad483b640cec276f5ba84d4968bc84ad73be8a5b9590f67900d0ba1fb0232965fa4772a47dba86ebf3199a0f57c31d92cd7546556d0159b39f91d6772cc9f3f6779363cfe2acbee9b24482318f2184db54a3245d0a4402eb5685cb2f1be5964ea297a6f9b97d327b08ea6a5cbd9ab31edf3ca7c50021ba0879adf225f7e17abf22", 0xa2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="4486de88386684d43cd5d44707e73ea1027f6e39d04e49e92ad1218181a877337797fceb64ab7a9b3e23bf6d2c8a917d6c9b4c451ae62dd679e9464330e0694a492635ba756a39228e6482702aa2d733db9a47e3178ad34ae107369fc474defd9742d86723f04a07da2c79530047e75eced03008f8955303a2eb") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}], 0x20) r2 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x13) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x523280, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000500)=""/126, 0x7e}], 0x4, &(0x7f00000005c0)=""/130, 0x82}, 0x7}, {{&(0x7f0000000680)=@vsock, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/24, 0x18}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/127, 0x7f}, {&(0x7f0000000980)=""/54, 0x36}], 0x5}, 0x2}, {{&(0x7f0000000a40)=@isdn, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/189, 0xbd}, 0x3}], 0x3, 0x2062, &(0x7f0000000c80)={0x77359400}) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000cc0)={@mcast1, @mcast1}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, 0x9, 0x76, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000d40)={0x8, 0x2, 0x4, 0xf98, 0xa, 0x0, [{0x8, 0x4, 0x7, '\x00', 0x200}, {0x44d9ff4f, 0x10, 0x1238, '\x00', 0x1000}, {0x6, 0x1, 0x2, '\x00', 0x3902}, {0x9, 0x3, 0x2, '\x00', 0x1}, {0x7, 0x8000000000000000, 0x9, '\x00', 0x200}, {0xc, 0xfffffffffffff23f, 0x6, '\x00', 0x88}, {0xb397, 0x2, 0x7, '\x00', 0x200}, {0xbc4, 0x8001, 0x7, '\x00', 0x1400}, {0xfffffffffffffff7, 0x7, 0x761, '\x00', 0x601}, {0x2, 0x1, 0xb9ee, '\x00', 0x100}]}) r5 = signalfd4(r3, &(0x7f0000000fc0)={[0xffffffffb1db2b7b]}, 0x8, 0x0) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000001000)=0xfc, 0x4) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001040)=[r2, r2, r3], 0x3) r6 = inotify_init() close_range(r6, r4, 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000001080)={{0x8001, 0x101}, 0x100, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000011c0)={0x80, 0x20363059, 0x2, @stepwise={0xb, 0x8001, 0xffffff00, 0x7, 0x5, 0xfffffff8}}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001200)=']^\x00', 0x0, r4) socket$igmp(0x2, 0x3, 0x2) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'syzkaller1\x00'}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000001280)=@IORING_OP_READ_FIXED={0x4, 0x28, 0x4007, @fd_index=0x1, 0x0, 0x2, 0xf8, 0x1d, 0x1, {0x2}}) 2.616612581s ago: executing program 0 (id=731): r0 = fsopen(&(0x7f0000000000)='incremental-fs\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x7, 0xff]) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000003c0)={{r2}, "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"}) 2.56645381s ago: executing program 0 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) 1.735958176s ago: executing program 0 (id=746): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000001ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r0) add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000a00)="49745af18700f85133dccb477d4a2d277d3faf3ae6fa6bed964c7a67bac9ce1dbd6bb7138ff187395653a715f2d9bafaac4d5f71a4063933675621d854a902d22600e26ac1848f96faee35481a7f5669e81a0cc0221f94a5d1b2a0939f739b228738421b9c4073b8b8d2fe2c07094761a046286bdbd7c31c519e0718c8fa3ede060cd0485e0dbcd633c8f6d010f231f6f62439daf73de69c4fd77195f6ecd973ec1a3de3910a4477fd3e13bc0660ebf195de62dbc811fefdf43eecb37cabb7cf1ecac5b6f3bdbc8fa83548b2", 0xcc, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x0, 0x4, 0x540000, r5}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xe}, @private0, 0x1, 0x6, 0x0, 0x400, 0x4006, 0x800000, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x5, 0x7) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000380)={'wg2\x00'}) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r6, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18e8f03eda782bb4e8a454e1a36b100000000041c50a950ad1767b06d825271fd5b44c729edd"], 0x18}, 0x88814) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000002, 0x13f, 0x0, &(0x7f0000000600)="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", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.546398403s ago: executing program 0 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10d900, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="da0c770f20e035400000000f22e00fc72bc4c1fa7f710cf0819019f00000b2680000640f01ca0f35c401f850ef66f3440f01dff2460f08", 0x37}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.335351018s ago: executing program 2 (id=749): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/245, 0xf5) 1.332987007s ago: executing program 2 (id=750): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0xc, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x2, @desc2}) r2 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r1, r1}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) recvfrom$netrom(r4, &(0x7f0000000240)=""/164, 0xa4, 0x2120, &(0x7f0000000300)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$bt_hci(r4, &(0x7f0000000380)={0x1f, 0x1, 0x1}, 0x6) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='ncpfs\x00', 0x40080, &(0x7f0000000480)='\xe3U\xa7j\x11\xa1\xbe\x18') getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x400}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000540)={r5, 0x6, 0x20}, &(0x7f0000000580)=0xc) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f00000005c0)=0x330) fremovexattr(r0, &(0x7f0000000600)=@known='trusted.syz\x00') ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000640)={0x7, 0x1, 0x1ee1}) getsockname$netrom(r4, &(0x7f0000000680)={{0x3, @netrom}, [@bcast, @bcast, @netrom, @netrom, @default, @bcast, @remote, @bcast]}, &(0x7f0000000700)=0x48) socket$netlink(0x10, 0x3, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/disk', 0x1, 0x18) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) r7 = accept4$x25(r1, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0xc00) bind$x25(r7, &(0x7f0000000800)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r8 = openat$cgroup_ro(r6, &(0x7f0000000840)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000880)=0x8, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/211, 0xd3}, {&(0x7f0000000b00)=""/184, 0xb8}], 0x4, 0x7, 0x1ff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000c00)={0x8, 'pim6reg0\x00', {'vlan0\x00'}}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) 1.226678668s ago: executing program 2 (id=751): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x35) rt_sigaction(0x19, &(0x7f0000000100)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0xf41, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ftruncate(r0, 0x3292e291) 1.226095758s ago: executing program 2 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="61202a3a2a207700dfd00fd8ea77a355b0eff70a869ea82f0a4f628369059b14cb2a1077d04c7ef9ef49514d9b66380a005709fa17df551051503b10a81ae475e1842e47b9a6e93a2ddeffa3fb0b0000485ff8280f65cfbb79de888d65da53db0c91756957f7880301919b25a5f62d484dedde16e53d3ad1783e6f436b5b517e"], 0x8) write$cgroup_devices(r4, &(0x7f00000000c0)={'b', ' *:* ', 'rm\x00'}, 0x9) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x18, r2, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r5 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x20000000, 0x0, 0x31, 0x40}, &(0x7f0000000300)=0x0, &(0x7f00000005c0)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000880)={@empty, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0xff, 0x0, ']', "8382033f70742f5951604cc57d2ed5748fd131f1e58ded874accb72c6902294e0d5c7ee2bde63b99d80b9c67487b1654bd12f29e22aa4a11669f6dc87f11b4bf6fe7ab2bfb5157350a995d11fe47d79dedb9fb169a1eb6559b43b66d572b8abe182acf504c6e307a7a8ee48fae5baa48b70ac1d7f83da546eb521deb1aa034748a471ea378be5a191f048e70eed6be2e37b2e704d4de182873bf00ff7225be34ed4eb58d137a7bac2fd1d86f0e8e152cc2374786973d793dd6e6e82b5ad83b3d28b275f1e3802b3f5a1a072585"}}}}}, 0x0) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)="38505c6d2097a4cb762a2250344a6ef9908bf08516d4f3be91731b00a474109a49c76c4466c1f6841c665e843fe46cc23ae6b6485c8cf5cd0d0d85c0f0ffed4fa1bbad44e27929e5ee6f8364c9f044f1ed7a72b83620eb3bc42b53f14527975ea397ec310a3b161dc6ad102ecd21edf711d4", 0x1000, r8}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000000801080000000000000000000000000500030001000000040004800900010073797a310000000006000240803500008b47e52f017550f05de927a0b2c1e9d3ffb5edfa528321b7e248f645a5baa2aa7e18b7d6092af15f7cd7296deda56d23aab047f886d42d194f312f73b37cb7b7a37a17dbb64eae2c29f4f9da08782a9aa424394b2a6466326140f04d91753c23ea19ae2927b3ebb4d0730ee5995636d72c128ad11ae41b8b324f0de52b743a76c2014bbab2f7bfc7493a9fd54388b8827139064b9200"/211], 0x34}}, 0x0) 1.056314275s ago: executing program 2 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x12) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20008080) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffeddf7f, 0x1000, 0x0, 0x1}, 0x20) poll(&(0x7f0000000100)=[{r3, 0x10}, {r4, 0x211}, {r0, 0x631}, {r6, 0x4048}], 0x4, 0x2) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 632.207495ms ago: executing program 0 (id=762): syz_usbip_server_init(0x3) syz_io_uring_setup(0x5564, &(0x7f0000000000)={0x0, 0x372, 0x2000, 0x2, 0x34b}, &(0x7f0000000080), &(0x7f00000000c0)) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) syz_emit_ethernet(0x70, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4e, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67ab2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb019"}}}}}}, 0x0) 504.978343ms ago: executing program 5 (id=766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = syz_open_dev$I2C(&(0x7f0000001000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x15, 0x2, 0x1, "110100005c000000463300", 0x41495043}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_io_uring_setup(0x45b3, &(0x7f0000000000)={0x0, 0x7532, 0x400, 0x3, 0x3d6}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000001c0)={0x4, r0, 0x0, {0x9, 0x9}, 0x6}, 0x1) r8 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xe454, 0x13290, 0x2}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000000095000040"]) ioctl$I2C_TENBIT(r2, 0x704, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f0000000200)={0xc, r10}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r9, 0x3b70, &(0x7f00000000c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 355.281611ms ago: executing program 4 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x7, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "84653375"}, 0xffb, 0x2, {0x0}}) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004a4001000000000000f1ffff0900807a"], 0x14}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) 306.345137ms ago: executing program 5 (id=769): syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x1b) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002180)=ANY=[@ANYBLOB="5410000040400001fffffffffddbdf2503000000360028807ffc6efa3ed937ac867d4bfa9ad749a4d8f89a01b51c406c71e61204e8d270b19349e039dbf57d01f1e262133201b2cb11150000081001800410b900cb1f019bc38c00ac3005bce198acefa1222da6975f12a09feca5f951a19f68b14d1a5d9156c3e5886d6154ee62e211f6199992ffec5d0721b38f596ab6a2f508e52d16eb84e14ebd568ecaa6195473dfd5c5c0d65f74b57f283120647164eb2a9a80e512b0d5affd8febe2d3debd96a73ae1a84fc4ab7d2f56280b2e985b400f3b65d37c2d49a8bb112028d566df1bb69ac9014e9a37f2b843b0d135278a8453519bbe298bfa07d224e5cc9a17cb82abc838c209e0f082cb03aa172c458b5332445ec4c8675881e3babc25ebd98447da1d09d8a0874b3efcc3263674a29c5bd34e49d683438d6c78360b29c69294aba441f675286ca8175e4c42159b8fa2a05eeb5701eefa8f63bbee9e5c20946a83ce046eff4be90076deca5536640280b6c53655a6cf72a11bccc2ddbd5a6711455a84bdae1a615e3c04c3416da2f5e6d3602b972477841ed269676f0c37177dcf759bb2191baa13678770f0ce9b1be90bd60c407954ed80b235b67b4874761b47ff0a7e29a826b42e3fff48aba7662476910159c35977cce24bfbda8c1fd07464b65bbd1cc4044f0beefb5417b77b2af9a0ccb298a996634a8487feb1b57eadd76c7d761fdad19d82dc36b731aa4ab8437df89c8d841611f4a36100bdd1d4e98fffc06be18392120f2dbb4c048b5160ad3bd21c432aef4a70e9cc4b6b643dd138e94145b5b40d8dfe8e82b13279f02c9cab5bb135db38c7fa2ae4bd9d07b74e474dea452db75c01258ccecbb7ad338108705b04ed5d6e6b15a85ec7c330a3dcb8624cb4a0a16a4aebc0a4bb78bf108452b2cc6bcfb30233ceed970d21a77dea63d5510efa37a986d09d7b7c053481f6959a949d4edda7aac0978d2dd267470b8b2e04b3d8d9668e1f9edbafcdea14dfcd9519670f806b0c3c9ba054370e89771b8f2b9359b0b67eed96da544443c2c67c4ae372a9a1a5520c627cc5fb300bef0acf658d89f71e4be272b5a762231a69d872ed6289d0af809a12c7198a0f67e05f7d5fa0ec522f93414acb6c2f562c14f9ca6493e70fcd3bcd214de3226b6a6d164805d36bdd61e102b4999d8193eec1258985006f40af146023734e4b4a4572d864e31ebb15ccbb92fdd5fceae3920b818bacae0e950fdee4e048f3b790317b5c257934a574a9ad68d8cf943b66cdfeaf06ab2237e32fd6c221cbce810a53bc2893a941933c5c19921b30aca8b1491d484e2c53fdf4c70d41bf3cd79c9a9e04c4990994e937dd1e898becc491d5e8fed1c183aa824b7b815ae27c980a35fb5a395152c88170dea81000dd0ef72cf45dd847274f0addce89e75405e78c5cc1913b18fdfd8e53b50cda7d524b60161a17c61610dfe17778d08198eefd1cd93f6268e3f0160ab084ddc09a5a73c1f134dd7260d722f9631f11de3c25588c00ca90ca54888158ec5ed82ac975659a9d95640de3fa9d7c0241ab6689b24b53ff41c62ea200a4db40de32f197daa4f8950288f0d00071a2d127c05ff3fe92cdbecd210a41f68d32a1a71f0b9f2c4d7f08f1dfb62e42bc5e94bf1a9634233bf8793806e7f04c60d745712d6444d2fd487237ef688445de1dcc04564477d9cdb36000906b32945a0a5af6ed99108bf385d01ca675209ef7f258a3f3c7e752b0f535b1a0601d76234cec956641ff9ef4571ab94d0c05bd227b832690a01610c0b1dde57d0677c72fa003a4ad95a80effb5741658322a552187b4639f2762d10a1b0e52562cd0b54bdb36fe76a468aa25b3a821a545cacae9b84705986f5c48bce830b80cf7824aff9676bcc17961ef92824b694f6d9df430d2b0e10ca7b891699c4ec647dbaec73122fe3f6b3aa78e7096a68ca033737084959a4d231e1b31156e6e6919381b0589748bc17844b8b164b4607662064f71ecc4d165690b2b602de8fad3c6ec6fd5de9cffdc744058834eb8e9760727bc01ae9ac076c1ce30d2a4cee73b5d8f6df1bba18759d150d8931d488de50f534ba200f4e98896541974c3b1466c811b17e1a2ef1a38dacde2044284b74b78ccee54436c9b050bcb967c8e16c33360a70c40ad077bc358880dce20ffabd6e2e1b546505fd79d37c8c554b7b1ff925fa65f7d52164ec1a55e633a6ea5b91217f036649f82b9548701902d3cfa9ba6f267c9754d3434c9607becf552f1e38bf25e4a4acb70741ecdc2576fe6be76a8419694ecfe0da139c961aca01ec65de0015fd8ac5684d80b1ae88df2ef87b0bd52b6435251fb0e6bcebc0d194defadd0d1fc28310f39f96981139f2c7256e83de8c3dd726a4fe3e243a63084ec2eb38b9d1b74f02dcafbd8073eb6be1deb4e4d83eb22597db0db6cdc4b817b25a40fae69008f11ccfb7fb94b692b7d8cb34a15d6e054bd44d21caae88a53ac42817e6776c312a513439639437af92f834b759602a60eaab2d82bb69c40efd274074fc91b51f36c17f278a8279c5a0b1692369a3e662694641d632ee1afa2930818b190fe913ab987ac0c3b5bb6ea57c03fc16088378f2e57f725ac1c6f54402271ab3c0710ddecc139c99a0a6019e14d6dab3198f71b6dc64f1421b475d056255ad5ceda6bebb573b37140602c33b7bb2c19b40dd21523878c824eaf8393b2a598a855031d812d0b9801a6db2a04ca017ea8bac8544728c886f6bae3e20231aebdbf37aa85b70d451b31f08afc379a213af4fa664ce3a5132b0a6713aecc2654c478ee81f65ba7ee18fdfe8af87d96ea940d29e68505198657bcf8fe041a9031ec29ad1b25524082153786b613ea81943c544554e698f04213200b7a9cfd48e76dc17dbebfa8bc45734eed84cc1294a15c43ac588842ae0e9e4c4af900307853a37846ee8a0927894ea6fa82fb2365454f8433ac1573dda8a1e5e7093dba2cdc778b3a2d768bd39af3fc3178b3ebe357e5a50ce413508af33cfd2122182e39e0f8448e134d3e6ccc9ded4cea79ca870724ed347539e93ecbc274179fc467a25d753f30a54336b4a640e10a503fb0d0ad413f9bbdcc92ce613f616222c72057bbe50a9a18129e13983ca4c37c3a52e9f0256500cd3f72b61be654fb52379c55617e1bf65a3ff83929eb362450a0a1bcae0582cba4c549ada2fc83ccbb9812cb869764df260fb6155380c13e0b9e308ce6192a1270f898bd9065f87b2ce798d7af47c8f260c8d6c5bb3dec2749305a1b3435ba4569e018266c20df2b3905473838b10aacade89a0faa8d5897b3247dbd2c9eb84e2642484dfaa6f98e84d5a765e7c4b7faf6beba87203edb2961036c3d78520d8de13b213eabc5a99971678560eba6aec05dd780687d6ce524be7d2345cc169283f439e2a28a30cbcffb8c0dd39fb8b4ebc6aff371ebd8fdd0cd891c27e11ed6c76834718daccbedfd7aa580d241587e46ab9ab954082bda6cc23ba86dc46717a291347f6463ad5e58394d907743c5f4406cb9f4e5698d27b52885ef57827a3328c8706280c5ac39e5a7e3534754565b85e925f25545a4a35ff7bf62144a2e512d336e377f9b493ba4200ed0df49a550d5982706ddd8c25683776481b912a3422e3f446de9f1c5a4ffd61557afe0ac233c3cc487073e6a1f6924b69c31cd46daf131b30221676685579bceb4aeaa554cd4747982ca63322cafa26f563ca23c090be08faffd9b414955c55f4b54aa3ad0cb4c89f866b1fab32d6584fc26bd2e530749a0868e06c9b6df25eff677e8445c800dfe616cf0302a4dca1ef2522223ec60013a8d9b13d0bf070d87b6f99e6c58033df4080b81a9fd65b06588d8b7e765625afb25ac91054dfd85f175896508f52af0d0a14c0250f949d204d5989b31fa697a56f8c0a8dea4c6798f274ccdc1abd86bff2409c1a7b7892557b4008893f118517bf45495a707c52617161efa54c86a40d281d0bc400db8de72f7c004afa61e140ade22c42cbea8ba13bae3382d9a9c6e387d97d427eaf59f77d105b46278c80185712a04c236da02368122c932250100e8c855a128a591f5cb5a9bc8d467bccd0c3613305cad59963a4705846a2f6ad3b7546a3a87699386207a8089657f39ac65af65879026ec33adbd34d7c7db01efe3b0301c5f606a04a2ac2216a19283c2564b5c12e9bfaf237284d916d91ee31fbcc1addaeef9200a7ac52e4bacfa3a3e5f32b4d12a426fcc36c6737e65a8c239db63a219762a0c7ba93641a0f88bea64d2722b7dcd1ff4d5e0d77450501cc0196dc7e398a6ae724f96b6086aa388130ddd8dd1d5aea4312ea62af65907da9cb20ad0fc7f7014c901cf84db8511f65a9fc037e47d1a9846056fea3b86f8ef13d808f047afebe1e62ea96b3c5d6c55630cd0b943440e0d91d8f2bf265b0fe761eef4dbb7cfa8212e9a644bcb501b5f58703868649fddccc5a0c5aaa44019a900e4d4ea0ed686df24be18f45aa9c6996eae40a1462fdf863fa8ddd05a2daca2bbfd346deed0a6fa4ba2cfdf8a7ab2b90cb4f2051797a1b7fc38b8515678627507fc4520af8e3f98621f79ae261520e4ff72ceb95cee2444bf8056ce70681b7846c337c6e4ae8557a7f4c85d83a1d26df163c0696a6bcf564ffc72201e86fd7899e8c63f625ca81bea13c833fa983db11efba609dab357adbcf9058f5575c3a6c60716e90e7ad2135597b77ee1ddbe693598d7b76101cd6d99bb7659e9e47b3ce62a400c393476646b4adb07856c80626a69d1c9982654b25b7556f538fe0845c16331da7aeafb9833e98cf348ba4d2739dde248705fd66d4845b182451f19859f2bf10924a4ac95ab389886af54e738bd0ac2f6ae3a942f9a3879fb2c87436307a72cd8756d1ad425b77ae384bda575a4416f5e71b00781fd8123f2a8bd9fb4baf57c47a73f3c33acc89354192be01e43133359510b3b982f9c677f3391458ab8b7c738f4e357b7cadffbd657d6e85424ac729d4d75d5718b55b1fd344b7cd35dd513f085cacc3a5af2a89537c019803bf03422514c1b583f5c97a149d3b720d0dabc54e3c8ad78b836bf34da026ffde5253acabb38bc41e08c5d2afd478581a310fb79d0d82bd9e942f1b8f9e26f66a1b99c6b8907546b3a4b224f58d689417bd730b4613ed5c602f12c5e60dc861b529ff002af288f2dc7da13824c4f94eada44addec8e073a06f18ca8c08571673245f62d5863f3df39b1a22d30ca744fa11c6fa0aa59a1c7a5d43a4b65999dda770d8606f1c847bacad1876a13f94a50663981c272d19d2351b61ccee43c31cf824f35ee1e6840c02d37272389433d5e00317fd412fd7ea60574891c129f92ab339f9580d68d46a9760a7b056030478a4525919606df47020135a343c78e70489874fda2b882781c9721343ff0d9936207d8110e3b191e57d77b90bbeb76ab8b7929e931942070c6cf90e042f9cf67ab6c11deb1e7840906435a8e9e1ccd0b477e5637966e5a02e7ad55b63103ef65b094e68f8ffc732233f7e027e1ce89587a73c22e00a68b9eb91c0088082d324824c236888ff7d813ce5c47e58f5600bb8c982b2fc0fdf954e0d5be671b4708494fc9e656c9c0afda3a83e7621a8408d0aae63e28f9331f94d77f0b339ddb461de9f0aa1b2da5a181caf953a0bbe5b8cbcdee446e18d8604871b7bcce4120e5c49bb2415fc82859319b73b6cf9228d7b6b93ebc60dac7bc4068499d043be496c5d325b65d1ce7b82a88f4edb8a3513a97a1ce5c2b78b1175756da2374ddcf9189bbe7f0496816bc45b2e9106675d2beeb87933b0db61eeec29151adf383e50fcf5706e59d788fd9abed74cf4e55c06854b9f6234ba39944eb11bb9e7a61e2c49a4114cf954ff30b2da886c7ef19bd1577796f9838b4a4f681d129ab93b7d313efaa46103ea45e389a9bd580eef7697239224a96dfaa4f6344558ed6924d06e1b87eb82c1c286b4d15e3f05cad1767c59e5d1b347983f63c83e869c572614cd0abbd5ee52f6"], 0x1054}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000010001fff000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000012b9cbe0812bb2cbafd951fff9e3845e7bac84c99df9c55a037527f15c72bf53e5116d16854493b45ddd61f1ea399eaf3a9828c89ee7e0717cae0f06710ba8679effaabd978057e99fe6be3c88a099c7fa21e33fcf0a62e29e1d63c6b9f9491fa1043ebb08ffdda5f9c971fd216ed38724f6806547c52af3068093d480d95ee97902ad940f2f17021b3bfe35c61e6fbd9630066fa6", @ANYRESHEX=r6, @ANYBLOB="050000000000000000006400000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="7a0000809c005b173f9710faf4041e2b711536e557e06b792fbfcb03a96b135315c4489ef2c2844f2e35d888e4bc2a", @ANYRES16=r7, @ANYRES64=r2, @ANYRES8=r4, @ANYBLOB="aae213dfe3a8c31403588f02b9c0cc9246b9fa5a1ee2b1270736cdcb846413a2db09764c82b7f18821c1453f42f78ea5c41a841518cea847c812de8a4a702209902691cfba01e448864de72925831ca71287d564924cddb0a077fb4cd455c10c31032095fd12b9a7a404ab8d2782bfcaffff00004766668629f3f7ff3a524ec324aacf87452ec82e9b"], 0x1c}, 0x1, 0x0, 0x0, 0x14048000}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="aabaaa4500002814000000004e2400000000002a4500000000000023ed7fa5616e1af859a0450509ee5bb39d14da7dd935d848a1de49c996b94fa2b0e8188172fd079bacd5a8e85406d0c67f14a3702a026937730e0d2c8deefa10a1ade3894d7d8055afcfdaa96b30519e9f6fcfd787411daacb084858da7bd16bca792cab7e897eae25c2fe8a4a55076b067dadae00d08414d15234a2000000009e38e109c59b95488a6321c5ce1bba41aabe91cc6db6159f50a97080a2a44c98bbec2cb808ea07157e4091dfe606c3e65b7b6fea70fe5207753085a1986a37b94655aa8ade115a7450441e79b52f71d6094f60e5a3f41e0601ade25bbb24b50e50321e1c7c88b3c2c21ff1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc2000090780000"], 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="cdf89305000000000000002f8cdb918151af69c5686d55100c987b30b93cd34b0afe4239f0eba3e04a4d3ceade1d2530a820e709d695327928da42092b23f11861156fa6f2d26f94", @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) write$sndseq(r10, &(0x7f0000000340)=[{0xfc, 0x0, 0x0, 0x2, @tick=0x9, {0x0, 0xb8}, {0x0, 0x5}, @addr={0x6, 0xa}}, {0x4, 0x0, 0x0, 0x10, @time={0x2, 0xb92a}, {0x6, 0x80}, {0x4, 0x88}, @control={0x7, 0x9fa, 0x7}}], 0x38) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) r11 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x0) ppoll(&(0x7f0000000080)=[{r11, 0x2250}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000000380)={0x9, 0x9127, {0xffffffffffffffff}, {0xee01}, 0xccf, 0x10}) quotactl_fd$Q_SETQUOTA(r11, 0xffffffff80000801, r12, &(0x7f0000000480)={0x3, 0x101, 0xbe1e, 0x60000, 0x81, 0x8, 0x6, 0x7fffffff, 0x101}) 226.418915ms ago: executing program 5 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r1, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000018c0)={'ip6_vti0\x00', &(0x7f0000001840)={'syztnl1\x00', 0x0, 0x2d, 0x8, 0x4, 0x80, 0x31, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8000, 0x7, 0xfad7, 0x6}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001900)={@initdev, @remote, 0x0}, &(0x7f0000001940)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001980)={0x0, @remote, @initdev}, &(0x7f00000019c0)=0xc) sendmsg$inet(r0, &(0x7f0000001b80)={&(0x7f00000017c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001800), 0x0, &(0x7f0000001a00)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xd2, 0x3, 0x9, [{@multicast2, 0x8}, {@multicast2, 0x4}, {@local, 0x30}]}, @timestamp_addr={0x44, 0x34, 0x41, 0x1, 0x8, [{@empty, 0xa96}, {@private=0xa010100, 0x1}, {@private=0xa010102, 0x2}, {@loopback}, {@remote, 0x9}, {@multicast2, 0x1ff}]}, @rr={0x7, 0x13, 0xd6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @remote]}, @ssrr={0x89, 0xf, 0xc9, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xd, "219401828c5014df34e22f"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x178}, 0x4040800) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000080)="808b758459ae022062609d84981b28139a7d58d04f5aeda1698090f9525e99832fe83c5c54ee1c5abf773a5db3fac9657a253cede01ef141e779ffe910f4dfd07c89192cadcde12688003919096a4816db75a2126a93daa070a5870d96f7e976cc853bd7ee03878bdea2991f1c109ebf6e99e4792f", 0x75}, {&(0x7f00000001c0)="77f378788d06288d82de5b6c9dfe05f17b06ae292253e9aeeea56769d387a51eaae8ac8b1c4f2eb201a764415c99d99b1c36b181bc88da60d4d8f8436046becd1891518ef5b7110c665c824e844d0d63bcbb726f5f5a70e2afe0346b1b11568c74d6998ec0001214a193308cfcc8861c986151c7b525163b478cd4617825349b76cb8ba054e81cedff78c994cd47a5c89fe2", 0x92}, {&(0x7f0000000280)="d9deec3dc9dfbfeead39c683f25018e78f7f8479d8f35f5a5bcd4de02e2ce10450808246f579d6641e02b0f9117df1c2fcb91ff74e609186f7dc1ad29ed5400146cecfe7d02f", 0x46}, {&(0x7f0000000300)="467ca6fdf0e85e933bd0bdf2ee4f9a0ff64c216228c1091b07a3e2e97ecf34bf353021ed6618cd0557ffeb28dd67e5f5fac028d588c782a77a41d002b40ebefef7ee96d951874c7d84b0b39914aea70986d25c0b33bab49c97e5060eb2d901af90f4054b034ab5bb9d00fbfec86567956e8ec7", 0x73}, {&(0x7f0000000380)="7dd7e146b83827ad561c573978626c5a0be33147de7310c5e07d80a273eb1d476048eaea43a41bc57bdcf18263c37f0e349c614cf6d40976fa984ec50d70cdfdb84b081495ca1f5d33bdf99082", 0x4d}, {&(0x7f0000000400)="cdd013add5e3d8469f0fbc0fec3266f5d5fab65c8452863d80a81997781facb5308d7f8b49a67119566af89b59d75405c141d97f9759261fa6f13400db1ed4fff53abb4e5b5c5588c21294a9dd4382890486a6d64d15c23daa88b15fccb25c7a20a29f378b1f45d2be50", 0x6a}, {&(0x7f0000000480)="5b4b1a13966ad2242816bd85d736e13a27bf99bc6177f7cbe92f61dba0257feed0f25af194935f2555ac7f4182a9f677e418c9b29d12646b41e6a0dd893a6e979f6b205a547a0b9adf77f7a18027e58140efe553a665632514a5c4ab5c0dd240278b8faef5911fed45dce44c859b2a8b1f763a978efbec91a8e5785f55770eb915443b960efc3525ef176abdb86666565ffec2b4c9576f701718a3ab4121b64cf54b4fc53db3c3", 0xa7}, {&(0x7f00000005c0)="f458f59c31e685c127f6e80f58f0b4de830507c4b1f9c9e761db47c8c7181d07ea3e8b066e66e477a8eedd2ed8f861edf3674cbad3e2302d1bd8d426f8183a1b4436fbd9179b2e5c6918830a1fae", 0x4e}, {&(0x7f0000000100)="9978d6928df99460caa025e52c05f6a9f0c0011306244c0d16ccb562", 0x1c}], 0xa, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}, 0x1) 226.051738ms ago: executing program 4 (id=771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd, 0x218002) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={r2, 0x0, 0x7f, 0x1, 0x0, 0xfffffecd, 0x8}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="da0c77f7738b35400000000f22e00fc72b430f7936f0819019f00000b2680000640f01ca0f35c401f850ef66440f01df39460f08", 0x34}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 225.885334ms ago: executing program 5 (id=772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0xffffffff, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0x20}, {@in6=@empty, 0x0, 0x32}, @in=@local, {0x4, 0x7, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xce}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "4b520e60e980f5be59ae0f2ab4edfd0e577fd47ea491a9555aed3b"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000844) 225.128942ms ago: executing program 2 (id=773): r0 = gettid() timer_create(0x6, &(0x7f0000000080)={0x0, 0x821, 0x4, @thr={&(0x7f00000000c0)="48e80d031843550249442eff0f11a533337b0ec1702402fb981e3e9dc47c96113eb9a91511ffc564a0be5c774e21b5655f5905e2e096d37b860d9d9ee4e7cba8214961a6332bd316086a85c5aa518b84c43271a40e8c29ecb0", &(0x7f0000000400)="2210c49463777198c51848b12691f11fc3f51a2245f4318710d59fb6eac38a14b1419bdf64363ae913c5a4404efb3f935153035680ab291de0dd8c9b26eaaafb3f08dc06d7fd0177cc66d30a4e6dda0abffce5da725029888f38cf1101f7354a41d5ab69b0a7d8af2a374c81a0d5088a1c2054b4a4e1d9b97e976180a6a5dcee0d877a57"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="000000004f86490902120001030010000904e3636200f4b008934b96000000"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x541c, &(0x7f0000000000)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) ptrace$cont(0x20, r9, 0x3, 0x3) ptrace$setregs(0xd, r9, 0x7fff, &(0x7f0000000280)="3f14cab321eb3f2dac4ff9cb757738c509fe27646d995f9ee9c664b7ae80e62558d06cd33ab7740b7beb3c788bdbbc3baca2cd0a2afa816765aacf3739683f71b409b82f5bf80e67efd36f950c1317d861dd31ea18da596bbd5c62221331ec98a499a7f0239e47d2b6e0c4d00465639a3fc73230d6511143e975de9a17bbc39938564e98132f36d68f") syz_open_procfs(r0, &(0x7f0000000000)='oom_score_adj\x00') 166.514328ms ago: executing program 4 (id=774): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4800) r0 = socket$inet6(0xa, 0x3, 0x5) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) futex(&(0x7f0000000040), 0x6, 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180), 0x1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 65.279561ms ago: executing program 5 (id=775): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)=0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e12"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000580), 0x1000000000000297) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x9}, @generic={0x3, 0x3, 0xd, 0x8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000480)={0x86e, 0x7, 0x4, 0xfffffffc, 0x5, 0x0, [{0x8, 0xfffffffffffffff0, 0x7f, '\x00', 0x9}, {0x6, 0x8, 0x2, '\x00', 0xe82}, {0x9, 0x40, 0x5, '\x00', 0x1}, {0xd, 0x5, 0x2, '\x00', 0x1000}, {0x101, 0x24000, 0x5, '\x00', 0x10}]}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x8012, r2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}}, 0x0, 0x0, 0xb, 0x0, "213346fc074f6f9cce1764af23a95f83e4219cb7fc14f6fec291d1171326ed2d16c92081606b84f4aed5cd635bb9cc14340e5b4119d49c54fb056021f486d0b1908fb08945465f82a300a8c25c17c652"}, 0xd8) 64.810136ms ago: executing program 0 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70b92d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0xfffffffffffffe65, 0x16, 0xe384}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40851}, 0x4014) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 64.491413ms ago: executing program 4 (id=777): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 64.22871ms ago: executing program 5 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x65, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 286.947µs ago: executing program 4 (id=779): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 0s ago: executing program 4 (id=780): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000280)={0x0, r3}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=0x189) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1}}], 0x48}, 0x4000881) socket$rds(0x15, 0x5, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) eventfd2(0x1, 0x1) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000280)={0x0, r3}) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=0x189) (async) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1}}], 0x48}, 0x4000881) (async) kernel console output (not intermixed with test programs): d wMaxPacketSize 0 [ 50.227141][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.229477][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 50.232889][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.236712][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.240437][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 50.244456][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.247131][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 50.250489][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.254083][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.258253][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 50.263968][ T34] usb 8-1: string descriptor 0 read error: -22 [ 50.266371][ T34] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 50.269230][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.282269][ T40] audit: type=1400 audit(1753727011.359:186): avc: denied { associate } for pid=6077 comm="syz.0.18" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.287053][ T34] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 50.290726][ T40] audit: type=1400 audit(1753727011.359:187): avc: denied { write } for pid=6077 comm="syz.0.18" name="pfkey" dev="proc" ino=4026533407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.304692][ T6093] could not allocate digest TFM handle hmac(sha3-384-ce) [ 50.391017][ T40] audit: type=1400 audit(1753727011.469:188): avc: denied { create } for pid=6100 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.475795][ T6088] netlink: 248 bytes leftover after parsing attributes in process `syz.3.21'. [ 50.499036][ T34] usb 8-1: USB disconnect, device number 2 [ 50.564212][ T10] usb 5-1: 0:2 : does not exist [ 50.578606][ T10] usb 5-1: USB disconnect, device number 2 [ 50.590875][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 51.157614][ T6152] trusted_key: syz.3.34 sent an empty control message without MSG_MORE. [ 51.420143][ T6172] Zero length message leads to an empty skb [ 51.520760][ T63] Bluetooth: hci3: command tx timeout [ 51.520838][ T5956] Bluetooth: hci0: command tx timeout [ 51.523086][ T63] Bluetooth: hci1: command tx timeout [ 51.525461][ T5950] Bluetooth: hci2: command tx timeout [ 51.571602][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 51.660379][ T6193] nfs4: Unknown parameter '9O' [ 51.677775][ T6197] process 'syz.3.50' launched '/dev/fd/4' with NULL argv: empty string added [ 51.677999][ T6159] hugetlbfs: Bad value for 'mode' [ 51.719463][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 51.831258][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 51.834735][ T6208] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.898904][ T6216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.906533][ T6216] netlink: 272 bytes leftover after parsing attributes in process `syz.1.57'. [ 51.956089][ T6222] Bluetooth: MGMT ver 1.23 [ 52.004724][ T6227] Bluetooth: hci0: service_discovery: too big uuid_count value 48428 [ 52.126232][ T838] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 52.286899][ T838] usb 8-1: config 1 interface 0 has no altsetting 0 [ 52.291336][ T838] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 52.294568][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.297511][ T838] usb 8-1: Product: syz [ 52.299136][ T838] usb 8-1: Manufacturer: syz [ 52.300618][ T838] usb 8-1: SerialNumber: syz [ 52.436041][ T6248] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 52.511837][ T838] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 16 proto 1 vid 0x0525 pid 0xA4A8 [ 52.524506][ T838] usb 8-1: USB disconnect, device number 3 [ 52.529310][ T838] usblp0: removed [ 52.534441][ T5961] udevd[5961]: setting mode of /dev/bus/usb/008/003 to 020664 failed: No such file or directory [ 52.539031][ T5961] udevd[5961]: setting owner of /dev/bus/usb/008/003 to uid=0, gid=7 failed: No such file or directory [ 52.727540][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 52.904676][ T6273] block device autoloading is deprecated and will be removed. [ 52.971891][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 52.973629][ T6281] program syz.0.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.082675][ T6292] Malformed UNC in devname [ 53.082675][ T6292] [ 53.083014][ T6293] Malformed UNC in devname [ 53.083014][ T6293] [ 53.084889][ T6292] CIFS: VFS: Malformed UNC in devname [ 53.087854][ T6293] CIFS: VFS: Malformed UNC in devname [ 53.166205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.262273][ T6303] sctp: [Deprecated]: syz.0.84 (pid 6303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.262273][ T6303] Use struct sctp_sack_info instead [ 53.302924][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 53.389453][ T6313] capability: warning: `syz.3.90' uses deprecated v2 capabilities in a way that may be insecure [ 53.587988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.589930][ T6325] netlink: 44 bytes leftover after parsing attributes in process `syz.1.93'. [ 53.596703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.596786][ T5950] Bluetooth: hci2: command tx timeout [ 53.596835][ T5956] Bluetooth: hci1: command tx timeout [ 53.596866][ T5956] Bluetooth: hci0: command tx timeout [ 53.596882][ T5956] Bluetooth: hci3: command tx timeout [ 53.600549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.654982][ T6334] capability: warning: `syz.1.95' uses 32-bit capabilities (legacy support in use) [ 53.751509][ T6345] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 53.774253][ T5950] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 53.774366][ T6352] ipt_rpfilter: unknown options [ 53.775886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.784128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.785986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 53.786839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.789371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 53.943940][ T6361] batman_adv: batadv0: Adding interface: ipvlan2 [ 53.946158][ T6361] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.954155][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.957732][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.960944][ T6361] batman_adv: batadv0: Interface activated: ipvlan2 [ 54.000104][ T6370] delete_channel: no stack [ 54.151363][ T6401] tty tty1: ldisc open failed (-12), clearing slot 0 [ 54.158842][ T72] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.293207][ T6424] netlink: 'syz.3.120': attribute type 2 has an invalid length. [ 54.296884][ T6424] netlink: 'syz.3.120': attribute type 2 has an invalid length. [ 54.320911][ T72] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.325116][ T72] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 54.329932][ T72] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.332727][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.335939][ T72] usb 6-1: Product: syz [ 54.337281][ T72] usb 6-1: Manufacturer: syz [ 54.338730][ T72] usb 6-1: SerialNumber: syz [ 54.377967][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 54.382697][ T6450] ptrace attach of "/syz-executor exec"[5947] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 54.383347][ T6451] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 54.549184][ T6365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.569312][ T6471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.571785][ T6471] IPv6: NLM_F_CREATE should be set when creating new route [ 54.574052][ T6471] IPv6: NLM_F_CREATE should be set when creating new route [ 54.577326][ T6470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.579650][ T6471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.606109][ T6475] program syz.0.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.610003][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.613572][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.618189][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.681215][ T6489] binder: Bad value for 'max' [ 54.902043][ T6511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6511 comm=syz.3.144 [ 54.953715][ T72] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 54.957771][ T72] cdc_ncm 6-1:1.0: bind() failure [ 54.963019][ T72] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 54.965183][ T72] cdc_ncm 6-1:1.1: bind() failure [ 55.146110][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 55.146119][ T40] audit: type=1400 audit(1753727272.233:332): avc: denied { bind } for pid=6542 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.150177][ T5950] Bluetooth: hci0: unexpected cc 0x042d length: 1 < 7 [ 55.151298][ T6545] nfs4: Unknown parameter 'rdmas' [ 55.154458][ T40] audit: type=1400 audit(1753727272.233:333): avc: denied { mount } for pid=6544 comm="syz.0.157" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.158007][ T6543] fuse: Bad value for 'fd' [ 55.160193][ T40] audit: type=1400 audit(1753727272.243:334): avc: denied { getopt } for pid=6542 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.170963][ T6543] UHID_CREATE from different security context by process 85 (syz.2.156), this is not allowed. [ 55.174183][ T40] audit: type=1400 audit(1753727272.253:335): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.186245][ T40] audit: type=1400 audit(1753727272.253:336): avc: denied { read write } for pid=6542 comm="syz.2.156" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.194358][ T40] audit: type=1400 audit(1753727272.253:337): avc: denied { open } for pid=6542 comm="syz.2.156" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.202468][ T40] audit: type=1400 audit(1753727272.273:338): avc: denied { read } for pid=6546 comm="syz.0.158" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.204508][ T6549] __nla_validate_parse: 1 callbacks suppressed [ 55.204517][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 55.211486][ T40] audit: type=1400 audit(1753727272.273:339): avc: denied { open } for pid=6546 comm="syz.0.158" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.211534][ T40] audit: type=1400 audit(1753727272.283:340): avc: denied { ioctl } for pid=6546 comm="syz.0.158" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.211578][ T40] audit: type=1400 audit(1753727272.283:341): avc: denied { set_context_mgr } for pid=6546 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.265426][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 55.342323][ T6557] netlink: 228 bytes leftover after parsing attributes in process `syz.0.163'. [ 55.345393][ T6557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.347639][ T6557] IPv6: NLM_F_CREATE should be set when creating new route [ 55.408406][ T6567] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 55.471492][ T6576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.747986][ T6598] warning: `syz.2.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.886248][ T6607] usb usb8: usbfs: process 6607 (syz.2.175) did not claim interface 0 before use [ 55.895817][ T1346] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.025828][ T1346] usb 5-1: device descriptor read/64, error -71 [ 56.030965][ T59] cfg80211: failed to load regulatory.db [ 56.261309][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 56.285854][ T1346] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.310251][ T6642] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.312969][ T6642] IPv6: NLM_F_REPLACE set, but no existing node found! [ 56.317364][ T6643] usb usb8: usbfs: process 6643 (syz.3.185) did not claim interface 0 before use [ 56.438278][ T1346] usb 5-1: device descriptor read/64, error -71 [ 56.520091][ T6660] xt_cgroup: invalid path, errno=-2 [ 56.556023][ T1346] usb usb5-port1: attempt power cycle [ 56.656026][ T6669] "syz.3.197" (6669) uses obsolete ecb(arc4) skcipher [ 56.867003][ T72] usb 6-1: USB disconnect, device number 2 [ 56.905804][ T1346] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.926818][ T1346] usb 5-1: device descriptor read/8, error -71 [ 56.997022][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 57.000119][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: kworker/u33:2 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 57.000133][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.000140][ T5950] Workqueue: hci2 hci_rx_work [ 57.000155][ T5950] Call Trace: [ 57.000159][ T5950] [ 57.000164][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 57.000183][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 57.000202][ T5950] sysfs_create_dir_ns+0x24b/0x2b0 [ 57.000219][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.000234][ T5950] ? find_held_lock+0x2b/0x80 [ 57.000250][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 57.000262][ T5950] kobject_add_internal+0x2c4/0x9b0 [ 57.000275][ T5950] kobject_add+0x16e/0x240 [ 57.000287][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 57.000299][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 57.000311][ T5950] ? kobject_put+0xab/0x5a0 [ 57.000325][ T5950] device_add+0x288/0x1a70 [ 57.000337][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 57.000350][ T5950] ? __pfx_device_add+0x10/0x10 [ 57.000362][ T5950] ? mgmt_send_event_skb+0x2fb/0x460 [ 57.000381][ T5950] hci_conn_add_sysfs+0x17e/0x230 [ 57.000393][ T5950] le_conn_complete_evt+0x1075/0x1d70 [ 57.000432][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 57.000458][ T5950] ? hci_event_packet+0x459/0x11c0 [ 57.000477][ T5950] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 57.000495][ T5950] ? skb_pull_data+0x166/0x210 [ 57.000513][ T5950] hci_le_meta_evt+0x357/0x5e0 [ 57.000524][ T5950] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 57.000543][ T5950] hci_event_packet+0x682/0x11c0 [ 57.000560][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 57.000572][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 57.000589][ T5950] ? kcov_remote_start+0x3c9/0x6d0 [ 57.000600][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.000618][ T5950] hci_rx_work+0x2c5/0x16b0 [ 57.000628][ T5950] ? rcu_is_watching+0x12/0xc0 [ 57.000643][ T5950] process_one_work+0x9cc/0x1b70 [ 57.000660][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 57.000674][ T5950] ? assign_work+0x1a0/0x250 [ 57.000685][ T5950] worker_thread+0x6c8/0xf10 [ 57.000702][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 57.000712][ T5950] kthread+0x3c2/0x780 [ 57.000722][ T5950] ? __pfx_kthread+0x10/0x10 [ 57.000732][ T5950] ? rcu_is_watching+0x12/0xc0 [ 57.000745][ T5950] ? __pfx_kthread+0x10/0x10 [ 57.000755][ T5950] ret_from_fork+0x5d4/0x6f0 [ 57.000769][ T5950] ? __pfx_kthread+0x10/0x10 [ 57.000779][ T5950] ret_from_fork_asm+0x1a/0x30 [ 57.000797][ T5950] [ 57.000811][ T5950] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.085180][ T5950] Bluetooth: hci2: failed to register connection device [ 57.175747][ T1346] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.196840][ T1346] usb 5-1: device descriptor read/8, error -71 [ 57.305976][ T1346] usb usb5-port1: unable to enumerate USB device [ 57.476050][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 57.615763][ T6089] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 57.767212][ T6089] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.771196][ T6089] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 57.774271][ T6089] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.777974][ T6089] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 57.781364][ T6089] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 57.784902][ T6089] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 57.787780][ T6089] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.792794][ T6683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.796569][ T6089] hub 7-1:1.0: bad descriptor, ignoring hub [ 57.798556][ T6089] hub 7-1:1.0: probe with driver hub failed with error -5 [ 57.801563][ T6089] cdc_wdm 7-1:1.0: skipping garbage [ 57.803303][ T6089] cdc_wdm 7-1:1.0: skipping garbage [ 57.807661][ T6089] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 57.810060][ T6089] cdc_wdm 7-1:1.0: Unknown control protocol [ 58.074762][ T6706] overlayfs: failed to resolve 'verity=require': -2 [ 58.236642][ T6720] netlink: 64 bytes leftover after parsing attributes in process `syz.3.211'. [ 58.559908][ T6683] cdc_wdm 7-1:1.0: Error autopm - -16 [ 58.570969][ T6089] usb 7-1: USB disconnect, device number 2 [ 58.665163][ T6724] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.212'. [ 58.668486][ T6724] netlink: 21172 bytes leftover after parsing attributes in process `syz.0.212'. [ 58.705779][ T6089] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.855786][ T6089] usb 7-1: Using ep0 maxpacket: 8 [ 58.859234][ T6089] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.862475][ T6089] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.865293][ T6089] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.869040][ T6089] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.872521][ T6089] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.876162][ T6089] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 58.879009][ T6089] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.883373][ T6704] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.886741][ T6089] hub 7-1:1.0: bad descriptor, ignoring hub [ 58.888931][ T6089] hub 7-1:1.0: probe with driver hub failed with error -5 [ 58.891387][ T6089] cdc_wdm 7-1:1.0: skipping garbage [ 58.893210][ T6089] cdc_wdm 7-1:1.0: skipping garbage [ 58.896860][ T6089] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 58.898806][ T6089] cdc_wdm 7-1:1.0: Unknown control protocol [ 58.905246][ T6735] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20004 [ 59.216967][ T59] usb 7-1: USB disconnect, device number 3 [ 59.335077][ T6761] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 400c6615, magic 66 != 6b] [ 59.430817][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 59.586644][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 59.694961][ T6783] vivid-000: ================= START STATUS ================= [ 59.697601][ T6783] vivid-000: Test Pattern: 75% Colorbar [ 59.699439][ T6783] vivid-000: Fill Percentage of Frame: 100 [ 59.701216][ T6783] vivid-000: Horizontal Movement: No Movement [ 59.703065][ T6783] vivid-000: Vertical Movement: No Movement [ 59.704929][ T6783] vivid-000: OSD Text Mode: All [ 59.706758][ T6783] vivid-000: Show Border: false [ 59.708766][ T6783] vivid-000: Show Square: false [ 59.710564][ T6783] vivid-000: Sensor Flipped Horizontally: false [ 59.712636][ T6783] vivid-000: Sensor Flipped Vertically: false [ 59.714568][ T6783] vivid-000: Insert SAV Code in Image: false [ 59.718200][ T6783] vivid-000: Insert EAV Code in Image: false [ 59.720092][ T6783] vivid-000: Insert Video Guard Band: false [ 59.722226][ T6783] vivid-000: Reduced Framerate: false [ 59.724436][ T6783] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 59.727688][ T6783] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 59.730789][ T6783] vivid-000: Enable Capture Cropping: true [ 59.733101][ T6783] vivid-000: Enable Capture Composing: true [ 59.735284][ T6783] vivid-000: Enable Capture Scaler: true [ 59.737514][ T6783] vivid-000: Timestamp Source: End of Frame [ 59.739931][ T6783] vivid-000: Colorspace: SMPTE 170M [ 59.741522][ T6783] vivid-000: Transfer Function: Default [ 59.743181][ T6783] vivid-000: Y'CbCr Encoding: Default [ 59.744873][ T6783] vivid-000: HSV Encoding: Hue 0-179 [ 59.747102][ T6783] vivid-000: Quantization: Default [ 59.748820][ T6783] vivid-000: Apply Alpha To Red Only: false [ 59.750569][ T6783] vivid-000: Standard Aspect Ratio: 4x3 [ 59.752647][ T6783] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 59.755899][ T6783] vivid-000: DV Timings: 640x480p59 inactive [ 59.758490][ T6783] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 59.761901][ T6783] vivid-000: Maximum EDID Blocks: 2 [ 59.763581][ T6783] vivid-000: Limited RGB Range (16-235): false [ 59.765565][ T6783] vivid-000: Rx RGB Quantization Range: Automatic [ 59.768511][ T6783] vivid-000: Power Present: 0x00000001 [ 59.770606][ T6783] tpg source WxH: 720x576 (R'G'B) [ 59.772312][ T6783] tpg field: 4 [ 59.773492][ T6783] tpg crop: (0,0)/64x64 [ 59.774818][ T6783] tpg compose: (0,0)/16x16 [ 59.776338][ T6783] tpg colorspace: 1 [ 59.777722][ T6783] tpg transfer function: 0/0 [ 59.779246][ T6783] tpg quantization: 0/0 [ 59.780610][ T6783] tpg RGB range: 0/2 [ 59.781908][ T6783] vivid-000: ================== END STATUS ================== [ 59.889260][ T6797] lo speed is unknown, defaulting to 1000 [ 59.891870][ T6797] lo speed is unknown, defaulting to 1000 [ 59.900040][ T6797] lo speed is unknown, defaulting to 1000 [ 59.906131][ T6797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.912038][ T6797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 59.930335][ T6797] lo speed is unknown, defaulting to 1000 [ 59.933129][ T6797] lo speed is unknown, defaulting to 1000 [ 59.937235][ T6797] lo speed is unknown, defaulting to 1000 [ 59.939753][ T6797] lo speed is unknown, defaulting to 1000 [ 59.942323][ T6797] lo speed is unknown, defaulting to 1000 [ 60.174038][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 60.174050][ T40] audit: type=1400 audit(1753727277.253:484): avc: denied { write } for pid=6806 comm="syz.0.235" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.208085][ T40] audit: type=1400 audit(1753727277.293:485): avc: denied { map } for pid=6806 comm="syz.0.235" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.292943][ T6813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.328577][ T6816] dummy0: entered promiscuous mode [ 60.334401][ T6816] vcan0: mtu less than device minimum [ 60.401697][ T40] audit: type=1400 audit(1753727277.483:486): avc: denied { mounton } for pid=6820 comm="syz.3.239" path="/84/file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.411575][ T6821] syz.3.239: attempt to access beyond end of device [ 60.411575][ T6821] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 60.417917][ T6821] XFS (nbd3): SB validate failed with error -5. [ 60.449345][ T6813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.535069][ T6813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.598201][ T6813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.730361][ T6813] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.730523][ T40] audit: type=1400 audit(1753727277.813:487): avc: denied { read } for pid=6837 comm="syz.3.242" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.733829][ T6838] input: syz0 as /devices/virtual/input/input8 [ 60.738870][ T6813] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.742888][ T40] audit: type=1400 audit(1753727277.813:488): avc: denied { open } for pid=6837 comm="syz.3.242" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.743910][ T6813] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.750470][ T6813] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.752249][ T40] audit: type=1400 audit(1753727277.813:489): avc: denied { ioctl } for pid=6837 comm="syz.3.242" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.766798][ T40] audit: type=1400 audit(1753727277.833:490): avc: denied { read } for pid=5345 comm="acpid" name="event4" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.773659][ T40] audit: type=1400 audit(1753727277.833:491): avc: denied { open } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.781417][ T40] audit: type=1400 audit(1753727277.833:492): avc: denied { ioctl } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2890 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.795986][ T40] audit: type=1326 audit(1753727277.883:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.243" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa72558e9a9 code=0x0 [ 60.890247][ T6854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.248'. [ 60.962581][ T6864] netlink: 'syz.1.253': attribute type 13 has an invalid length. [ 60.965720][ T6864] netlink: 'syz.1.253': attribute type 17 has an invalid length. [ 61.000174][ T6864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.130840][ T6879] syzkaller1: entered promiscuous mode [ 61.132637][ T6879] syzkaller1: entered allmulticast mode [ 61.137270][ T6879] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 61.182999][ T6089] libceph: connect (1)[c::]:6789 error -101 [ 61.185363][ T6089] libceph: mon0 (1)[c::]:6789 connect error [ 61.188677][ T6089] libceph: connect (1)[c::]:6789 error -101 [ 61.190625][ T6089] libceph: mon0 (1)[c::]:6789 connect error [ 61.225494][ T6889] ata1.00: invalid multi_count 1 ignored [ 61.332948][ T6893] netlink: 256 bytes leftover after parsing attributes in process `syz.3.261'. [ 61.457280][ T6089] libceph: connect (1)[c::]:6789 error -101 [ 61.457436][ T6089] libceph: mon0 (1)[c::]:6789 connect error [ 61.479662][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 61.479683][ T6900] netlink: 92 bytes leftover after parsing attributes in process `syz.3.264'. [ 61.480703][ T6900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.797593][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 61.953287][ T6883] ceph: No mds server is up or the cluster is laggy [ 61.968631][ T34] libceph: connect (1)[c::]:6789 error -101 [ 61.972066][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 62.052687][ T6924] erofs (device nbd3): cannot find valid erofs superblock [ 62.125749][ T6089] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.193515][ T6937] netlink: 176 bytes leftover after parsing attributes in process `syz.3.274'. [ 62.196531][ T6937] ip6gretap0: entered promiscuous mode [ 62.198570][ T6937] netlink: 176 bytes leftover after parsing attributes in process `syz.3.274'. [ 62.255973][ T6089] usb 5-1: device descriptor read/64, error -71 [ 62.283835][ T6945] xt_NFQUEUE: number of total queues is 0 [ 62.295623][ T6943] lo speed is unknown, defaulting to 1000 [ 62.367651][ T6947] batadv_slave_1: entered promiscuous mode [ 62.495769][ T6089] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.605833][ T1346] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.635760][ T6089] usb 5-1: device descriptor read/64, error -71 [ 62.746011][ T6089] usb usb5-port1: attempt power cycle [ 62.755831][ T1346] usb 6-1: Using ep0 maxpacket: 8 [ 62.758699][ T1346] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.761761][ T1346] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.764848][ T1346] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.768130][ T1346] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.772100][ T1346] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.774948][ T1346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.982820][ T1346] usb 6-1: GET_CAPABILITIES returned 0 [ 62.984627][ T1346] usbtmc 6-1:16.0: can't read capabilities [ 63.085764][ T6089] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 63.106191][ T6089] usb 5-1: device descriptor read/8, error -71 [ 63.187884][ T1346] usb 6-1: USB disconnect, device number 3 [ 63.317673][ T6946] batadv_slave_1: left promiscuous mode [ 63.355807][ T6089] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 63.376456][ T6089] usb 5-1: device descriptor read/8, error -71 [ 63.384067][ T6966] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 63.486012][ T6089] usb usb5-port1: unable to enumerate USB device [ 63.845551][ T6968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6968 comm=syz.1.283 [ 63.851633][ T6968] netlink: 52 bytes leftover after parsing attributes in process `syz.1.283'. [ 63.854568][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 63.895008][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 64.102592][ T6986] lo speed is unknown, defaulting to 1000 [ 64.422060][ T7004] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 64.427162][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.430448][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.452144][ T7006] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 64.608426][ T7017] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 64.610152][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.618403][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.622574][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.627322][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.630472][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.633337][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.637210][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.640516][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.643444][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.647759][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.651086][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.654239][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.657920][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.661064][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.664371][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.667758][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.671068][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.674017][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.677025][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.679926][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.682811][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.685764][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.688607][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.691491][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.694395][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.697523][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.700499][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.703398][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.706513][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.709064][ T7024] ======================================================= [ 64.709064][ T7024] WARNING: The mand mount option has been deprecated and [ 64.709064][ T7024] and is ignored by this kernel. Remove the mand [ 64.709064][ T7024] option from the mount to silence this warning. [ 64.709064][ T7024] ======================================================= [ 64.709457][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.720235][ T7024] 9pnet_virtio: no channels available for device syz [ 64.722689][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.727799][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.730634][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.733626][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.736848][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.740279][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.743782][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.747467][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.750951][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.754152][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.757313][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.760083][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.762878][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.765742][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.768508][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.771270][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.774063][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.777230][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.780013][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.782822][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.785761][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.788689][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.791487][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.794295][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.797156][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.799920][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.802740][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.805525][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.808627][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.811462][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.814248][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.817177][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.819965][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.822937][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.826011][ T7020] binder: binder_mmap: 7018 200000000000-200000b36000 bad vm_flags failed -1 [ 64.951717][ T7037] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 64.954956][ T7037] netlink: 'syz.1.300': attribute type 3 has an invalid length. [ 64.959406][ T7037] NCSI netlink: No device for ifindex 0 [ 64.978338][ T7040] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 65.234518][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 65.234530][ T40] audit: type=1400 audit(1753727282.313:568): avc: granted { setsecparam } for pid=7069 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 65.311250][ T40] audit: type=1400 audit(1753727282.393:569): avc: denied { ioctl } for pid=7077 comm="syz.2.314" path="socket:[12209]" dev="sockfs" ino=12209 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.323086][ T40] audit: type=1400 audit(1753727282.403:570): avc: denied { create } for pid=7077 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.481266][ T40] audit: type=1400 audit(1753727282.563:571): avc: denied { setopt } for pid=7081 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.493650][ T40] audit: type=1400 audit(1753727282.573:572): avc: denied { read } for pid=7083 comm="syz.1.318" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 65.501052][ T40] audit: type=1400 audit(1753727282.573:573): avc: denied { open } for pid=7083 comm="syz.1.318" path="/63/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 65.517900][ T40] audit: type=1400 audit(1753727282.603:574): avc: denied { ioctl } for pid=7083 comm="syz.1.318" path="/63/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 65.639013][ T7120] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 65.641196][ T7120] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.648450][ T7120] vhci_hcd vhci_hcd.0: Device attached [ 65.654933][ T40] audit: type=1400 audit(1753727282.733:575): avc: denied { bind } for pid=7119 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.665477][ T40] audit: type=1400 audit(1753727282.733:576): avc: denied { name_bind } for pid=7119 comm="syz.3.324" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 65.675863][ T40] audit: type=1400 audit(1753727282.733:577): avc: denied { node_bind } for pid=7119 comm="syz.3.324" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 65.761650][ T7131] bridge0: entered allmulticast mode [ 65.775005][ T7131] bridge_slave_1: left allmulticast mode [ 65.777046][ T7131] bridge_slave_1: left promiscuous mode [ 65.780118][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.785304][ T7131] bridge_slave_0: left allmulticast mode [ 65.787617][ T7131] bridge_slave_0: left promiscuous mode [ 65.789562][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.885779][ T1346] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 66.016218][ T216] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.081183][ T7135] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 66.106507][ T216] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.145199][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.154101][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.157012][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.159960][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.162762][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.187834][ T216] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.198384][ T7136] lo speed is unknown, defaulting to 1000 [ 66.275172][ T216] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.324316][ T7136] chnl_net:caif_netlink_parms(): no params data found [ 66.402093][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.404588][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.407548][ T7136] bridge_slave_0: entered allmulticast mode [ 66.410279][ T7136] bridge_slave_0: entered promiscuous mode [ 66.421410][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.423826][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.426663][ T7136] bridge_slave_1: entered allmulticast mode [ 66.429405][ T7136] bridge_slave_1: entered promiscuous mode [ 66.470457][ T7121] vhci_hcd: connection reset by peer [ 66.473062][ T7136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.474795][ T46] vhci_hcd: stop threads [ 66.481104][ T46] vhci_hcd: release socket [ 66.483721][ T46] vhci_hcd: disconnect device [ 66.489807][ T7136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.499690][ T216] bridge_slave_1: left allmulticast mode [ 66.502264][ T216] bridge_slave_1: left promiscuous mode [ 66.505250][ T216] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.511799][ T216] bridge_slave_0: left allmulticast mode [ 66.513705][ T216] bridge_slave_0: left promiscuous mode [ 66.515737][ T216] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.733220][ T216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.737716][ T216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.741697][ T216] bond0 (unregistering): Released all slaves [ 66.748038][ T216] bond1 (unregistering): Released all slaves [ 66.787870][ T7136] team0: Port device team_slave_0 added [ 66.791388][ T7136] team0: Port device team_slave_1 added [ 66.803659][ T7148] __nla_validate_parse: 6 callbacks suppressed [ 66.803670][ T7148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.332'. [ 66.831104][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.833441][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.845610][ T7136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.852510][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.855057][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.864408][ T7136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.937993][ T7155] sp0: Synchronizing with TNC [ 66.957113][ T7154] [U] [ 66.978452][ T7136] hsr_slave_0: entered promiscuous mode [ 66.981606][ T7136] hsr_slave_1: entered promiscuous mode [ 66.985196][ T7136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.988926][ T7136] Cannot create hsr debugfs directory [ 67.053289][ T7165] netlink: zone id is out of range [ 67.055124][ T7165] netlink: zone id is out of range [ 67.058094][ T7165] netlink: zone id is out of range [ 67.059853][ T7165] netlink: zone id is out of range [ 67.061876][ T7165] netlink: zone id is out of range [ 67.063571][ T7165] netlink: zone id is out of range [ 67.065313][ T7165] netlink: zone id is out of range [ 67.079788][ T7165] netlink: set zone limit has 4 unknown bytes [ 67.127326][ T216] hsr_slave_0: left promiscuous mode [ 67.135875][ T216] hsr_slave_1: left promiscuous mode [ 67.138103][ T216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.141210][ T216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.144429][ T216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.147252][ T216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.166401][ T216] veth1_macvtap: left promiscuous mode [ 67.168428][ T216] veth0_macvtap: left promiscuous mode [ 67.171364][ T216] veth1_vlan: left promiscuous mode [ 67.174458][ T216] veth0_vlan: left promiscuous mode [ 67.218468][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 67.251912][ T7184] input: syz0 as /devices/virtual/input/input9 [ 67.695297][ T216] team0 (unregistering): Port device team_slave_1 removed [ 67.748942][ T216] team0 (unregistering): Port device team_slave_0 removed [ 68.161288][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.164155][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.228104][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.233978][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.235864][ T63] Bluetooth: hci2: command tx timeout [ 68.270621][ T7162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.273478][ T7162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.277007][ T7162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.279885][ T7162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.301641][ T7162] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 68.528517][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 68.547686][ T7136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.562626][ T7136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.578590][ T7136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.584537][ T7136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.626560][ T7136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.651559][ T7136] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.660490][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.662580][ T7107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.668749][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.672395][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.694724][ T7136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.698778][ T7136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.747178][ T7230] geneve2: entered allmulticast mode [ 68.756697][ T7230] syz.2.352 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.791986][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 68.794515][ T7239] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 68.811214][ T7235] could not allocate digest TFM handle rmd256-generic [ 68.819236][ T7136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.860997][ T6014] IPVS: starting estimator thread 0... [ 68.917945][ T7253] tipc: Started in network mode [ 68.919595][ T7253] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.922564][ T7253] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 68.925019][ T7253] tipc: Enabled bearer , priority 10 [ 68.960731][ T7272] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 68.962637][ T7272] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.965545][ T7272] vhci_hcd vhci_hcd.0: Device attached [ 68.986004][ T7256] IPVS: using max 45 ests per chain, 108000 per kthread [ 69.009790][ T7136] veth0_vlan: entered promiscuous mode [ 69.014492][ T7136] veth1_vlan: entered promiscuous mode [ 69.026818][ T7136] veth0_macvtap: entered promiscuous mode [ 69.026954][ T7279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6663 sclass=netlink_route_socket pid=7279 comm=syz.3.366 [ 69.030363][ T7136] veth1_macvtap: entered promiscuous mode [ 69.042228][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.051331][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.058007][ T7136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.060476][ T7136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.063088][ T7136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.065569][ T7136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.066832][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 69.112830][ T7098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.115281][ T7098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.129489][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.132052][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.138152][ T7283] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7283 comm=syz.3.366 [ 69.216671][ T5988] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 69.386211][ T7311] overlayfs: failed to resolve '/': -2 [ 69.394004][ T7311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.545916][ T6014] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 69.705759][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 69.708792][ T6014] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.711498][ T6014] usb 5-1: config 0 has no interface number 0 [ 69.713587][ T6014] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.717636][ T6014] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 69.722273][ T6014] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.725891][ T6014] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.730029][ T6014] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.732884][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.737000][ T6014] usb 5-1: config 0 descriptor?? [ 69.740993][ T6014] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 69.792955][ T7273] vhci_hcd: connection reset by peer [ 69.794807][ T7098] vhci_hcd: stop threads [ 69.797650][ T7098] vhci_hcd: release socket [ 69.799102][ T7098] vhci_hcd: disconnect device [ 69.821142][ T7344] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (9863168) [ 69.824864][ T7344] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 69.921453][ T7358] netlink: 84 bytes leftover after parsing attributes in process `syz.3.372'. [ 69.928439][ T6014] tipc: Node number set to 2886997162 [ 69.944823][ T6014] usb 5-1: USB disconnect, device number 11 [ 69.951079][ T6014] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 69.975749][ T7305] Invalid source name [ 69.977368][ T7305] UBIFS error (pid: 7305): cannot open "ubifs", error -22 [ 70.046463][ T7370] program syz.3.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.046767][ T7361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.138660][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'. [ 70.142324][ T7390] netlink: 116 bytes leftover after parsing attributes in process `syz.4.377'. [ 70.149352][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.377'. [ 70.317090][ T63] Bluetooth: hci2: command tx timeout [ 70.428411][ T7414] binder: 7413:7414 ioctl 5386 200000000140 returned -22 [ 70.576651][ T7443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 70.579456][ T7443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.585777][ T7443] vhci_hcd vhci_hcd.0: Device attached [ 70.607585][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 70.607598][ T40] audit: type=1400 audit(1753727287.693:629): avc: denied { mounton } for pid=7447 comm="syz.3.391" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.607788][ T7448] syz.3.391: attempt to access beyond end of device [ 70.607788][ T7448] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 70.622801][ T7448] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 70.634190][ T7448] netlink: 'syz.3.391': attribute type 39 has an invalid length. [ 70.855786][ T29] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 71.029234][ T1346] vhci_hcd: vhci_device speed not set [ 71.060252][ T7467] Sensor A: ================= START STATUS ================= [ 71.063264][ T7467] Sensor A: Test Pattern: 75% Colorbar [ 71.066570][ T7467] Sensor A: Show Information: All [ 71.068615][ T7467] Sensor A: Vertical Flip: false [ 71.070334][ T7467] Sensor A: Horizontal Flip: false [ 71.072329][ T7467] Sensor A: Brightness: 128 [ 71.074222][ T7467] Sensor A: Contrast: 128 [ 71.076149][ T7467] Sensor A: Hue: 0 [ 71.077676][ T7467] Sensor A: Saturation: 128 [ 71.079594][ T7467] Sensor A: ================== END STATUS ================== [ 71.120063][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.122252][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.327128][ T40] audit: type=1400 audit(1753727288.403:630): avc: denied { read } for pid=7478 comm="syz.3.397" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.407951][ T7444] vhci_hcd: connection reset by peer [ 71.410555][ T1143] vhci_hcd: stop threads [ 71.411968][ T1143] vhci_hcd: release socket [ 71.415816][ T1143] vhci_hcd: disconnect device [ 71.965003][ T40] audit: type=1400 audit(1753727289.043:631): avc: denied { read } for pid=7486 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.022297][ T7492] loop4: detected capacity change from 0 to 7 [ 72.027943][ T5961] Dev loop4: unable to read RDB block 7 [ 72.029843][ T5961] loop4: unable to read partition table [ 72.031747][ T5961] loop4: partition table beyond EOD, truncated [ 72.050145][ T7492] Dev loop4: unable to read RDB block 7 [ 72.052408][ T7492] loop4: unable to read partition table [ 72.054273][ T7492] loop4: partition table beyond EOD, truncated [ 72.065746][ T7492] loop_reread_partitions: partition scan of loop4 (被xe) failed (rc=-5) [ 72.078865][ T40] audit: type=1400 audit(1753727289.163:632): avc: denied { accept } for pid=7493 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 72.086879][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 72.141753][ T7498] net_ratelimit: 10 callbacks suppressed [ 72.141765][ T7498] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 72.148632][ T7499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7499 comm=syz.4.401 [ 72.161772][ T40] audit: type=1400 audit(1753727289.243:633): avc: denied { setopt } for pid=7493 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.178853][ T7501] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 72.189920][ T40] audit: type=1400 audit(1753727289.273:634): avc: denied { setattr } for pid=7493 comm="syz.4.401" name="SCTPv6" dev="sockfs" ino=17005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.258555][ T40] audit: type=1400 audit(1753727289.343:635): avc: denied { append } for pid=7504 comm="syz.0.405" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.273807][ T40] audit: type=1400 audit(1753727289.353:636): avc: denied { listen } for pid=7504 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.280733][ T40] audit: type=1400 audit(1753727289.353:637): avc: denied { accept } for pid=7504 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.285100][ T7519] netlink: del zone limit has 4 unknown bytes [ 72.292872][ T40] audit: type=1400 audit(1753727289.353:638): avc: denied { read } for pid=7504 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.395818][ T5950] Bluetooth: hci2: command tx timeout [ 72.429923][ T7536] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 72.475573][ T7538] Bluetooth: MGMT ver 1.23 [ 72.475856][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.480167][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 72.564889][ T7558] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.579572][ T24] lo speed is unknown, defaulting to 1000 [ 72.592609][ T7563] netlink: 152 bytes leftover after parsing attributes in process `syz.2.425'. [ 72.644013][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'. [ 72.644043][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'. [ 72.683598][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 72.688100][ T7569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7569 comm=syz.0.427 [ 72.704738][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.431'. [ 72.707670][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.431'. [ 72.757448][ T7587] xt_l2tp: missing protocol rule (udp|l2tpip) [ 72.759431][ T7587] xt_l2tp: missing protocol rule (udp|l2tpip) [ 72.761367][ T7587] xt_l2tp: missing protocol rule (udp|l2tpip) [ 72.803526][ T7595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.805915][ T7595] IPv6: NLM_F_CREATE should be set when creating new route [ 72.808191][ T7594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.813385][ T7594] lo: entered allmulticast mode [ 72.816704][ T7594] tunl0: entered allmulticast mode [ 72.819464][ T7594] gre0: entered allmulticast mode [ 72.825318][ T7594] gretap0: entered allmulticast mode [ 72.829967][ T7594] erspan0: entered allmulticast mode [ 72.833144][ T7594] ip_vti0: entered allmulticast mode [ 72.835897][ T7594] ip6_vti0: entered allmulticast mode [ 72.838847][ T7594] sit0: entered allmulticast mode [ 72.842344][ T7594] ip6tnl0: entered allmulticast mode [ 72.845462][ T7594] ip6gre0: entered allmulticast mode [ 72.849170][ T7594] syz_tun: entered allmulticast mode [ 72.852506][ T7594] ip6gretap0: entered allmulticast mode [ 72.856031][ T7594] vcan0: entered allmulticast mode [ 72.860340][ T7594] bond0: entered allmulticast mode [ 72.861979][ T7594] bond_slave_0: entered allmulticast mode [ 72.863763][ T7594] bond_slave_1: entered allmulticast mode [ 72.878303][ T7594] team0: entered allmulticast mode [ 72.880046][ T7594] team_slave_0: entered allmulticast mode [ 72.881921][ T7594] team_slave_1: entered allmulticast mode [ 72.885362][ T7594] dummy0: entered allmulticast mode [ 72.890428][ T7594] nlmon0: entered allmulticast mode [ 72.892937][ T7594] caif0: entered allmulticast mode [ 72.894934][ T7594] batadv0: entered allmulticast mode [ 72.898426][ T7594] vxcan0: entered allmulticast mode [ 72.900641][ T7594] vxcan1: entered allmulticast mode [ 72.903247][ T7594] veth0: entered allmulticast mode [ 72.906975][ T7594] veth1: entered allmulticast mode [ 72.922624][ T7594] wg0: entered allmulticast mode [ 72.927967][ T7594] wg1: entered allmulticast mode [ 72.932418][ T7594] wg2: entered allmulticast mode [ 72.936345][ T7594] veth0_to_bridge: entered allmulticast mode [ 72.940040][ T7594] bridge_slave_0: entered allmulticast mode [ 72.943379][ T7594] veth1_to_bridge: entered allmulticast mode [ 72.950146][ T7594] bridge_slave_1: entered allmulticast mode [ 72.953575][ T7594] veth0_to_bond: entered allmulticast mode [ 72.955833][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 72.958993][ T7594] veth1_to_bond: entered allmulticast mode [ 72.963085][ T7594] veth0_to_team: entered allmulticast mode [ 72.978056][ T7594] veth1_to_team: entered allmulticast mode [ 72.983642][ T7594] veth0_to_batadv: entered allmulticast mode [ 72.986293][ T1346] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.988747][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.996372][ T7594] batadv_slave_0: entered allmulticast mode [ 73.000213][ T7594] veth1_to_batadv: entered allmulticast mode [ 73.005313][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.010968][ T7594] batadv_slave_1: entered allmulticast mode [ 73.014875][ T7594] xfrm0: entered allmulticast mode [ 73.018457][ T7594] veth0_to_hsr: entered allmulticast mode [ 73.021698][ T7594] hsr_slave_0: entered allmulticast mode [ 73.024945][ T7594] veth1_to_hsr: entered allmulticast mode [ 73.028903][ T7594] hsr_slave_1: entered allmulticast mode [ 73.032060][ T7594] hsr0: entered allmulticast mode [ 73.035494][ T7594] veth1_virt_wifi: entered allmulticast mode [ 73.040112][ T7594] veth0_virt_wifi: entered allmulticast mode [ 73.043577][ T7594] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 73.047975][ T7594] veth1_vlan: entered allmulticast mode [ 73.052672][ T7594] veth0_vlan: entered allmulticast mode [ 73.067214][ T7594] vlan0: entered allmulticast mode [ 73.068959][ T7594] vlan1: entered allmulticast mode [ 73.071389][ T7594] macvlan0: entered allmulticast mode [ 73.071972][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 73.077053][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 73.077336][ T7594] macvlan1: entered allmulticast mode [ 73.080953][ T7622] netlink: 'syz.4.443': attribute type 10 has an invalid length. [ 73.082912][ T7594] ipvlan0: entered allmulticast mode [ 73.085859][ T7594] ipvlan1: entered allmulticast mode [ 73.088561][ T7594] veth1_macvtap: entered allmulticast mode [ 73.092588][ T7594] veth0_macvtap: entered allmulticast mode [ 73.097760][ T7594] macvtap0: entered allmulticast mode [ 73.101716][ T7594] macsec0: entered allmulticast mode [ 73.108106][ T7594] geneve0: entered allmulticast mode [ 73.112080][ T7594] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.114948][ T7594] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.117921][ T7594] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.120783][ T7594] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.123811][ T7594] geneve1: entered allmulticast mode [ 73.127659][ T7594] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 73.132234][ T7594] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 73.135775][ T1346] usb 8-1: Using ep0 maxpacket: 32 [ 73.138274][ T7594] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 73.139423][ T1346] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.145403][ T7594] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 73.145459][ T1346] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.149296][ T7594] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 73.151350][ T1346] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 73.153704][ T7594] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 73.157919][ T1346] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 73.160156][ T7594] veth2: entered allmulticast mode [ 73.162980][ T1346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.164715][ T7594] veth3: entered allmulticast mode [ 73.170191][ T1346] usb 8-1: config 0 descriptor?? [ 73.188335][ T7622] team0: Device hsr_slave_0 failed to register rx_handler [ 73.447690][ T7646] tty tty24: ldisc open failed (-12), clearing slot 23 [ 73.475406][ T7653] tipc: Started in network mode [ 73.478393][ T7653] tipc: Node identity 4, cluster identity 4711 [ 73.480162][ T7653] tipc: Node number set to 4 [ 73.484867][ T7651] netlink: 'syz.2.454': attribute type 83 has an invalid length. [ 73.593842][ T1346] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0002/input/input12 [ 73.630902][ T7666] loop6: detected capacity change from 0 to 2560 [ 73.635255][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.638654][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.641596][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.644517][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.648563][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.650895][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.653223][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.655561][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.659169][ T7666] ldm_validate_partition_table(): Disk read failed. [ 73.663326][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.665780][ T7666] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.668097][ T7666] Dev loop6: unable to read RDB block 0 [ 73.669891][ T7666] loop6: unable to read partition table [ 73.671617][ T7666] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 73.673342][ T1346] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0002/input/input13 [ 73.714748][ T1346] kye 0003:0458:5011.0002: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 73.725825][ T59] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 73.736040][ T7666] loop6: detected capacity change from 2560 to 0 [ 73.876999][ T59] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.880597][ T59] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 73.884039][ T59] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 73.887229][ T59] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.890031][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.894196][ T7653] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.898194][ T59] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.005795][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 74.188545][ T59] usb 5-1: USB disconnect, device number 12 [ 74.306186][ T5988] vhci_hcd: vhci_device speed not set [ 74.335754][ T6014] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 74.485918][ T63] Bluetooth: hci2: command tx timeout [ 74.487845][ T6014] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.492013][ T6014] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.496044][ T6014] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.500745][ T6014] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.505222][ T6014] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 74.510481][ T6014] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 74.514176][ T6014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.522029][ T7682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 74.531151][ T6014] hub 9-1:1.0: bad descriptor, ignoring hub [ 74.533705][ T6014] hub 9-1:1.0: probe with driver hub failed with error -5 [ 74.537299][ T6014] cdc_wdm 9-1:1.0: skipping garbage [ 74.539527][ T6014] cdc_wdm 9-1:1.0: skipping garbage [ 74.543099][ T6014] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 74.545615][ T6014] cdc_wdm 9-1:1.0: Unknown control protocol [ 74.698223][ C2] kye 0003:0458:5011.0002: usb_submit_urb(ctrl) failed: -1 [ 74.729297][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.732094][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.735928][ T7682] netlink: 'syz.4.461': attribute type 2 has an invalid length. [ 74.738135][ T7682] netlink: 244 bytes leftover after parsing attributes in process `syz.4.461'. [ 74.896311][ T5830] usb 9-1: USB disconnect, device number 2 [ 75.035853][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 75.235833][ T5830] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 75.385803][ T5830] usb 9-1: Using ep0 maxpacket: 8 [ 75.389697][ T5830] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.394802][ T5830] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.399219][ T5830] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.403741][ T5830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.408558][ T5830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.412978][ T5830] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 75.417017][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.424234][ T7682] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 75.458810][ T5830] hub 9-1:1.0: bad descriptor, ignoring hub [ 75.460642][ T5830] hub 9-1:1.0: probe with driver hub failed with error -5 [ 75.462977][ T5830] cdc_wdm 9-1:1.0: skipping garbage [ 75.464466][ T7691] FAULT_INJECTION: forcing a failure. [ 75.464466][ T7691] name failslab, interval 1, probability 0, space 0, times 1 [ 75.464557][ T5830] cdc_wdm 9-1:1.0: skipping garbage [ 75.471155][ T7691] CPU: 3 UID: 0 PID: 7691 Comm: syz.3.463 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 75.471170][ T7691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.471176][ T7691] Call Trace: [ 75.471180][ T7691] [ 75.471184][ T7691] dump_stack_lvl+0x16c/0x1f0 [ 75.471219][ T7691] should_fail_ex+0x512/0x640 [ 75.471238][ T7691] ? fs_reclaim_acquire+0xae/0x150 [ 75.471252][ T7691] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 75.471263][ T7691] should_failslab+0xc2/0x120 [ 75.471274][ T7691] __kmalloc_noprof+0xd2/0x510 [ 75.471292][ T7691] tomoyo_realpath_from_path+0xc2/0x6e0 [ 75.471304][ T7691] ? tomoyo_profile+0x47/0x60 [ 75.471317][ T7691] tomoyo_path_number_perm+0x245/0x580 [ 75.471331][ T7691] ? tomoyo_path_number_perm+0x237/0x580 [ 75.471347][ T7691] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.471362][ T7691] ? find_held_lock+0x2b/0x80 [ 75.471388][ T7691] ? find_held_lock+0x2b/0x80 [ 75.471400][ T7691] ? hook_file_ioctl_common+0x145/0x410 [ 75.471415][ T7691] ? __fget_files+0x20e/0x3c0 [ 75.471427][ T7691] security_file_ioctl+0x9b/0x240 [ 75.471438][ T7691] __x64_sys_ioctl+0xb7/0x210 [ 75.471453][ T7691] do_syscall_64+0xcd/0x4c0 [ 75.471464][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.471479][ T7691] RIP: 0033:0x7f7080f8e9a9 [ 75.471488][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.471498][ T7691] RSP: 002b:00007f7081e90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.471507][ T7691] RAX: ffffffffffffffda RBX: 00007f70811b5fa0 RCX: 00007f7080f8e9a9 [ 75.471514][ T7691] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.471519][ T7691] RBP: 00007f7081e90090 R08: 0000000000000000 R09: 0000000000000000 [ 75.471525][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.471531][ T7691] R13: 0000000000000000 R14: 00007f70811b5fa0 R15: 00007ffde56df788 [ 75.471544][ T7691] [ 75.471548][ T7691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.473642][ T5830] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 75.562445][ T5830] cdc_wdm 9-1:1.0: Unknown control protocol [ 75.562519][ T1346] usb 8-1: USB disconnect, device number 4 [ 75.640614][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 75.640628][ T40] audit: type=1400 audit(1753727292.723:666): avc: denied { create } for pid=7693 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.736050][ T5830] usb 9-1: USB disconnect, device number 3 [ 75.955765][ T1346] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.995815][ T29] vhci_hcd: vhci_device speed not set [ 76.075828][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 76.095741][ T1346] usb 8-1: device descriptor read/64, error -71 [ 76.162473][ T7701] IPVS: Error joining to the multicast group [ 76.326584][ T7705] overlayfs: overlapping lowerdir path [ 76.345759][ T1346] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.361325][ T40] audit: type=1400 audit(1753727293.443:667): avc: denied { create } for pid=7706 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 76.367360][ T40] audit: type=1400 audit(1753727293.453:668): avc: denied { ioctl } for pid=7706 comm="syz.4.467" path="socket:[19481]" dev="sockfs" ino=19481 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 76.475920][ T1346] usb 8-1: device descriptor read/64, error -71 [ 76.496312][ T7713] ptrace attach of "/syz-executor exec"[7136] was attempted by ""[7713] [ 76.521187][ T7715] loop2: detected capacity change from 0 to 7 [ 76.524925][ T7715] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.527920][ T7720] "syz.4.471" (7720) uses obsolete ecb(arc4) skcipher [ 76.528142][ T7715] loop2: partition table partially beyond EOD, truncated [ 76.530182][ T7720] "syz.4.471" (7720) uses obsolete ecb(arc4) skcipher [ 76.532527][ T7715] loop2: p1 size 872559382 extends beyond EOD, truncated [ 76.562675][ T40] audit: type=1400 audit(1753727293.643:669): avc: denied { ioctl } for pid=7719 comm="syz.4.471" path="socket:[17247]" dev="sockfs" ino=17247 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.573529][ T7721] efs: device does not support 512 byte blocks [ 76.577874][ T7721] device does not support 512 byte blocks [ 76.577874][ T7721] [ 76.586165][ T1346] usb usb8-port1: attempt power cycle [ 76.603237][ T7726] netlink: 'syz.4.472': attribute type 1 has an invalid length. [ 76.732058][ T7738] overlayfs: overlapping lowerdir path [ 76.757128][ T7740] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 76.771724][ T7740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.803869][ T40] audit: type=1326 audit(1753727293.883:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.2.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99178e9a9 code=0x7fc00000 [ 76.845072][ T40] audit: type=1400 audit(1753727293.923:671): avc: denied { execute } for pid=7743 comm="syz.2.477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.926018][ T1346] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 76.946271][ T1346] usb 8-1: device descriptor read/8, error -71 [ 77.115718][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 77.205816][ T1346] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 77.227307][ T1346] usb 8-1: device descriptor read/8, error -71 [ 77.346230][ T1346] usb usb8-port1: unable to enumerate USB device [ 77.402896][ T7773] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 77.406775][ T7773] __nla_validate_parse: 2 callbacks suppressed [ 77.406785][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 77.411529][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 77.420186][ T7773] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.423601][ T7773] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.426775][ T7773] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.429583][ T7773] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.437617][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 77.440357][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 77.470274][ T40] audit: type=1400 audit(1753727294.553:672): avc: denied { write } for pid=7774 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.521022][ T40] audit: type=1400 audit(1753727294.603:673): avc: denied { sqpoll } for pid=7777 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.583515][ T40] audit: type=1400 audit(1753727294.663:674): avc: denied { unmount } for pid=7136 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.649590][ T40] audit: type=1400 audit(1753727294.733:675): avc: denied { watch watch_reads } for pid=7790 comm="syz.4.488" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.686425][ T7800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7800 comm=syz.4.491 [ 77.766873][ T7817] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 77.768875][ T7817] PKCS7: Only support pkcs7_signedData type [ 77.918051][ T7831] overlay: Unknown parameter 'measure' [ 77.944322][ T7834] netlink: 'syz.0.501': attribute type 5 has an invalid length. [ 78.135321][ T7851] overlayfs: overlapping lowerdir path [ 78.149800][ T7846] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 78.152406][ T7846] overlayfs: missing 'lowerdir' [ 78.166057][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 78.183832][ T7858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 78.185973][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.189262][ T7858] vhci_hcd vhci_hcd.0: Device attached [ 78.223284][ T7859] vhci_hcd: connection closed [ 78.224763][ T46] vhci_hcd: stop threads [ 78.227593][ T46] vhci_hcd: release socket [ 78.229035][ T46] vhci_hcd: disconnect device [ 78.262059][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.510'. [ 78.265100][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 78.531883][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 78.711449][ T7886] overlayfs: overlapping lowerdir path [ 78.783195][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 78.821279][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 79.010338][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 79.090226][ T7912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.091814][ T7906] team0: Port device team_slave_0 removed [ 79.195770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 79.772946][ T7960] kAFS: No cell specified [ 79.775148][ T7960] overlayfs: overlapping lowerdir path [ 79.802615][ T7964] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 79.805745][ T7964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.809907][ T7964] vhci_hcd vhci_hcd.0: Device attached [ 79.840707][ T7965] vhci_hcd: connection closed [ 79.840921][ T1143] vhci_hcd: stop threads [ 79.844654][ T1143] vhci_hcd: release socket [ 79.846777][ T1143] vhci_hcd: disconnect device [ 79.983254][ T7976] netlink: 'syz.2.531': attribute type 39 has an invalid length. [ 79.983455][ T7972] netlink: 'syz.0.529': attribute type 11 has an invalid length. [ 80.002796][ T7972] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.005524][ T7972] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.008284][ T7972] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.010884][ T7972] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.014836][ T7972] netlink: 'syz.0.529': attribute type 11 has an invalid length. [ 80.037290][ T7977] program syz.2.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.235881][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 80.301969][ T7991] kAFS: No cell specified [ 80.307833][ T7991] overlayfs: overlapping lowerdir path [ 80.625754][ T9] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 80.790920][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 80.795451][ T9] usb 8-1: config 1 interface 0 altsetting 53 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.802947][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 80.807826][ T9] usb 8-1: New USB device found, idVendor=1477, idProduct=1025, bcdDevice= 0.40 [ 80.811602][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.815127][ T9] usb 8-1: Product: 㟇襧杔쬙Ꮖ훨듢吐鱊㣧ల罶⯮딵쪰ᘩಂ⻰쨴ã뵆秋ᆻւ騁⠧薍颐ꥎꝗ멞뿴㟗䋢泊⏹喚䗳ぶ忒ꪡɛ꺦퉢箒⵺᫳᫻☵ꏁ婎䘯硔≿哋ꔼ薂魑钚䙺ꣴ咳ꊁ䎍䬨씮귝稪栣碏쇀 [ 80.824966][ T9] usb 8-1: Manufacturer: ъ [ 80.826942][ T9] usb 8-1: SerialNumber: syz [ 80.832836][ T7997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.858343][ T8009] geneve2: entered promiscuous mode [ 80.860668][ T8009] geneve2: entered allmulticast mode [ 81.025510][ T8017] kAFS: No cell specified [ 81.036961][ T8017] overlayfs: overlapping lowerdir path [ 81.138958][ T8026] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.141655][ T8026] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.145012][ T8026] vhci_hcd vhci_hcd.0: Device attached [ 81.183691][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 81.183710][ T40] audit: type=1400 audit(1753727298.263:696): avc: denied { validate_trans } for pid=8029 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 81.191029][ T8027] vhci_hcd: connection closed [ 81.195504][ T1143] vhci_hcd: stop threads [ 81.199990][ T1143] vhci_hcd: release socket [ 81.201824][ T1143] vhci_hcd: disconnect device [ 81.285799][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 81.433406][ T8043] kAFS: No cell specified [ 81.436317][ T8043] overlayfs: overlapping lowerdir path [ 81.605399][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 81.610420][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 81.618327][ T9] usb 8-1: USB disconnect, device number 9 [ 81.948116][ T8086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=8086 comm=syz.3.561 [ 81.953489][ T40] audit: type=1400 audit(1753727299.033:697): avc: denied { map } for pid=8085 comm="syz.3.561" path="socket:[20650]" dev="sockfs" ino=20650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.014981][ T8089] kAFS: No cell specified [ 82.025772][ T8089] overlayfs: overlapping lowerdir path [ 82.098108][ T8093] macvlan3: entered promiscuous mode [ 82.100054][ T8093] macvlan3: entered allmulticast mode [ 82.118880][ T40] audit: type=1400 audit(1753727299.203:698): avc: denied { ioctl } for pid=8094 comm="syz.2.563" path="socket:[20102]" dev="sockfs" ino=20102 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.127297][ T40] audit: type=1400 audit(1753727299.203:699): avc: denied { ioctl } for pid=8094 comm="syz.2.563" path="socket:[20655]" dev="sockfs" ino=20655 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.325736][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 82.375996][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.387165][ T8106] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 82.389485][ T8106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 82.406506][ T8106] vhci_hcd vhci_hcd.0: Device attached [ 82.426843][ T8107] vhci_hcd: connection closed [ 82.433993][ T7107] vhci_hcd: stop threads [ 82.438385][ T7107] vhci_hcd: release socket [ 82.440199][ T7107] vhci_hcd: disconnect device [ 82.462294][ T8114] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 82.527844][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 82.531997][ T34] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 82.535339][ T34] usb 7-1: config 0 has no interface number 0 [ 82.537850][ T34] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.541752][ T34] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.547442][ T34] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 82.551114][ T34] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 82.554375][ T34] usb 7-1: Product: syz [ 82.557857][ T8117] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 82.558606][ T34] usb 7-1: SerialNumber: syz [ 82.568511][ T34] usb 7-1: config 0 descriptor?? [ 82.577282][ T34] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 82.583119][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input14 [ 82.780402][ T8096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.786579][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.792706][ T8096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.796638][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.801296][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.805588][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.808648][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.811689][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.814721][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.818527][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.822107][ T6089] usb 7-1: USB disconnect, device number 4 [ 82.826934][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.829756][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 82.833388][ T40] audit: type=1400 audit(1753727299.913:700): avc: denied { name_bind } for pid=8139 comm="syz.0.570" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 82.834610][ T8140] __nla_validate_parse: 8 callbacks suppressed [ 82.834622][ T8140] netlink: 76 bytes leftover after parsing attributes in process `syz.0.570'. [ 82.839928][ T6089] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 82.866959][ T8140] netlink: 52 bytes leftover after parsing attributes in process `syz.0.570'. [ 82.896745][ T40] audit: type=1400 audit(1753727299.983:701): avc: denied { map } for pid=8146 comm="syz.0.573" path="socket:[21608]" dev="sockfs" ino=21608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 82.901628][ T8149] kAFS: No cell specified [ 82.915587][ T8149] overlayfs: overlapping lowerdir path [ 82.947741][ T40] audit: type=1400 audit(1753727300.023:702): avc: denied { getopt } for pid=8152 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.968202][ T8161] loop7: detected capacity change from 0 to 7 [ 82.972110][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.974975][ C1] buffer_io_error: 7 callbacks suppressed [ 82.974983][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.988411][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.991695][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.994319][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.997275][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.000548][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.003334][ T8164] vcan1: entered allmulticast mode [ 83.003458][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.007812][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.010930][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.014295][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.017195][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.020127][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.023036][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.025862][ T8161] ldm_validate_partition_table(): Disk read failed. [ 83.029001][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.031961][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.034648][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.037565][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.040255][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.043255][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.045927][ T8161] Dev loop7: unable to read RDB block 0 [ 83.048367][ T8161] loop7: unable to read partition table [ 83.050215][ T8161] loop7: partition table beyond EOD, truncated [ 83.052346][ T8161] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 83.054491][ T6337] ldm_validate_partition_table(): Disk read failed. [ 83.059460][ T6337] Dev loop7: unable to read RDB block 0 [ 83.061597][ T6337] loop7: unable to read partition table [ 83.063455][ T6337] loop7: partition table beyond EOD, truncated [ 83.177980][ T40] audit: type=1400 audit(1753727300.263:703): avc: denied { write } for pid=8170 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.184987][ T40] audit: type=1400 audit(1753727300.263:704): avc: denied { create } for pid=8170 comm="syz.3.579" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.259609][ T40] audit: type=1400 audit(1753727300.343:705): avc: denied { append } for pid=8184 comm="syz.3.583" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.294265][ T8192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 83.297038][ T8192] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.301697][ T8192] vhci_hcd vhci_hcd.0: Device attached [ 83.325044][ T8193] vhci_hcd: connection closed [ 83.325213][ T7100] vhci_hcd: stop threads [ 83.333897][ T7100] vhci_hcd: release socket [ 83.335289][ T7100] vhci_hcd: disconnect device [ 83.341936][ T8199] Can't find a SQUASHFS superblock on nullb0 [ 83.365717][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 83.455816][ T8206] overlayfs: overlapping lowerdir path [ 83.537160][ T8218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8218 comm=syz.0.594 [ 83.764884][ T8240] netlink: 'syz.0.600': attribute type 10 has an invalid length. [ 83.767706][ T8240] lo: entered promiscuous mode [ 83.771190][ T8240] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.775054][ T6014] lo speed is unknown, defaulting to 1000 [ 83.777570][ T6014] syz0: Port: 1 Link DOWN [ 83.794573][ T8240] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856973526 (22855788208 ns) > initial count (15481779200 ns). Using initial count to start timer. [ 83.821215][ T8245] overlayfs: overlapping lowerdir path [ 83.863692][ T8252] tipc: Started in network mode [ 83.865365][ T8252] tipc: Node identity baa4957cf129, cluster identity 4711 [ 83.869995][ T8252] tipc: Enabled bearer , priority 0 [ 83.872914][ T8252] syzkaller0: entered promiscuous mode [ 83.874670][ T8252] syzkaller0: entered allmulticast mode [ 83.881553][ T8252] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 83.885109][ T8252] SELinux: failed to load policy [ 83.887513][ T8252] syzkaller0: mtu greater than device maximum [ 83.964586][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 83.967883][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 84.108555][ T8272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.611'. [ 84.137770][ T8274] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 84.139830][ T8274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.142350][ T8274] vhci_hcd vhci_hcd.0: Device attached [ 84.157519][ T8275] vhci_hcd: connection closed [ 84.157724][ T1143] vhci_hcd: stop threads [ 84.160983][ T1143] vhci_hcd: release socket [ 84.162758][ T1143] vhci_hcd: disconnect device [ 84.175807][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 84.246161][ T8280] overlayfs: overlapping lowerdir path [ 84.281883][ T8283] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 84.284381][ T8283] netlink: 224 bytes leftover after parsing attributes in process `syz.4.614'. [ 84.325937][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 84.336328][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 84.339142][ T29] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.342850][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.346855][ T5830] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.352913][ T29] usb 8-1: config 0 descriptor?? [ 84.405773][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 84.507189][ T5830] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 84.510252][ T5830] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.514018][ T5830] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 84.516962][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 84.519506][ T5830] usb 7-1: Product: syz [ 84.520882][ T5830] usb 7-1: Manufacturer: syz [ 84.522392][ T5830] usb 7-1: SerialNumber: syz [ 84.526387][ T5830] usb 7-1: config 0 descriptor?? [ 84.531405][ T5830] usb 7-1: selecting invalid altsetting 0 [ 84.698363][ T8292] veth1_to_bridge: entered promiscuous mode [ 84.703964][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.717150][ T5950] Bluetooth: hci2: command 0x0406 tx timeout [ 84.734465][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.611'. [ 84.737716][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.740501][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.751640][ T6014] usb 7-1: USB disconnect, device number 5 [ 84.860386][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 84.865340][ C3] vcan0: j1939_xtp_rx_dat: no tx connection found [ 84.867902][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 84.870432][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 84.872947][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 84.875463][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 84.878556][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 84.995759][ T24] tipc: Node number set to 1267570044 [ 85.057211][ T8305] ipt_rpfilter: unknown options [ 85.061068][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 85.063003][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 85.067802][ T29] usb 8-1: USB disconnect, device number 10 [ 85.102003][ T8308] 9pnet_fd: Insufficient options for proto=fd [ 85.226903][ T8315] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 85.229718][ T8315] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.233024][ T8315] vhci_hcd vhci_hcd.0: Device attached [ 85.241641][ T8316] vhci_hcd: connection closed [ 85.241851][ T7100] vhci_hcd: stop threads [ 85.244760][ T7100] vhci_hcd: release socket [ 85.246707][ T7100] vhci_hcd: disconnect device [ 85.435855][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 85.649482][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 85.650096][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 85.760049][ T8354] overlayfs: missing 'lowerdir' [ 85.851142][ T8361] syzkaller1: entered promiscuous mode [ 85.852945][ T8361] syzkaller1: entered allmulticast mode [ 85.936833][ T8379] overlayfs: missing 'lowerdir' [ 85.943227][ T8381] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 85.945341][ T8381] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.953699][ T8381] vhci_hcd vhci_hcd.0: Device attached [ 85.957942][ T8385] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 85.967429][ T8385] CIFS: Unable to determine destination address [ 85.975897][ T8382] vhci_hcd: connection closed [ 85.978166][ T7107] vhci_hcd: stop threads [ 85.981184][ T7107] vhci_hcd: release socket [ 85.982670][ T7107] vhci_hcd: disconnect device [ 86.123306][ T8399] team_slave_1: mtu greater than device maximum [ 86.126248][ T8399] team0: Device team_slave_1 failed to change mtu [ 86.271742][ T8411] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.278885][ T8411] overlayfs: failed to set xattr on upper [ 86.280839][ T8411] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.283799][ T8411] overlayfs: ...falling back to index=off. [ 86.286414][ T8411] overlayfs: ...falling back to uuid=null. [ 86.334309][ T8413] xt_l2tp: v2 doesn't support IP mode [ 86.345846][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.350166][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.353302][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.363812][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.368423][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.373491][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 86.373501][ T40] audit: type=1400 audit(1753727303.453:733): avc: denied { getopt } for pid=8417 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.382314][ T7107] bridge_slave_1: left allmulticast mode [ 86.384209][ T7107] bridge_slave_1: left promiscuous mode [ 86.390769][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.395267][ T7107] bridge_slave_0: left allmulticast mode [ 86.403883][ T7107] bridge_slave_0: left promiscuous mode [ 86.410751][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.418428][ T7107] tipc: Resetting bearer [ 86.420118][ T8422] hugetlbfs: Bad value '?' for mount option 'nr_inodes' [ 86.420118][ T8422] [ 86.421861][ T40] audit: type=1400 audit(1753727303.503:734): avc: denied { mount } for pid=8420 comm="syz.2.660" name="/" dev="hugetlbfs" ino=21955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 86.433821][ T40] audit: type=1400 audit(1753727303.503:735): avc: denied { remount } for pid=8420 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 86.441505][ T40] audit: type=1400 audit(1753727303.513:736): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 86.485769][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.498713][ T8428] vfat: Unknown parameter 'discard' [ 86.611639][ T40] audit: type=1400 audit(1753727303.693:737): avc: denied { read } for pid=5345 comm="acpid" name="event4" dev="devtmpfs" ino=3019 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 86.621371][ T40] audit: type=1400 audit(1753727303.693:738): avc: denied { open } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3019 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 86.628694][ T8441] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 86.631316][ T40] audit: type=1400 audit(1753727303.693:739): avc: denied { ioctl } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3019 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 86.639566][ T7107] tipc: Disabling bearer [ 86.902466][ T7107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.906597][ T7107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.909770][ T7107] bond0 (unregistering): Released all slaves [ 86.921464][ T8441] macvlan0: entered promiscuous mode [ 86.925473][ T8441] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 86.942747][ T8414] lo speed is unknown, defaulting to 1000 [ 86.974681][ T8454] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 86.976786][ T8454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.985387][ T8454] vhci_hcd vhci_hcd.0: Device attached [ 87.026475][ T7107] tipc: Left network mode [ 87.029649][ T8455] vhci_hcd: connection closed [ 87.030532][ T1150] vhci_hcd: stop threads [ 87.046095][ T1150] vhci_hcd: release socket [ 87.047560][ T1150] vhci_hcd: disconnect device [ 87.052810][ T40] audit: type=1400 audit(1753727304.133:740): avc: denied { shutdown } for pid=8465 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.124348][ T40] audit: type=1400 audit(1753727304.203:741): avc: denied { write } for pid=8468 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.145889][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 87.197764][ T7107] hsr_slave_0: left promiscuous mode [ 87.200070][ T7107] hsr_slave_1: left promiscuous mode [ 87.202202][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.205220][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.208253][ T7107] batman_adv: batadv0: Removing interface: ipvlan2 [ 87.525802][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 87.615039][ T8501] xt_l2tp: v2 doesn't support IP mode [ 87.808066][ T7107] team0 (unregistering): Port device team_slave_1 removed [ 87.878055][ T7107] team0 (unregistering): Port device team_slave_0 removed [ 88.345955][ T8494] netlink: 'syz.0.680': attribute type 2 has an invalid length. [ 88.349109][ T8494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.396092][ T63] Bluetooth: hci3: command tx timeout [ 88.423735][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.426878][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.429939][ T8414] bridge_slave_0: entered allmulticast mode [ 88.433769][ T8414] bridge_slave_0: entered promiscuous mode [ 88.439406][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.442547][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.445585][ T8414] bridge_slave_1: entered allmulticast mode [ 88.449475][ T8414] bridge_slave_1: entered promiscuous mode [ 88.507450][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.511887][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.555753][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 88.559433][ T8414] team0: Port device team_slave_0 added [ 88.567490][ T8414] team0: Port device team_slave_1 added [ 88.641626][ T40] audit: type=1400 audit(1753727305.723:742): avc: denied { setopt } for pid=8525 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.650651][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.653586][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.665146][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.671333][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.674275][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.686430][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.750201][ T8414] hsr_slave_0: entered promiscuous mode [ 88.752506][ T8414] hsr_slave_1: entered promiscuous mode [ 88.852661][ T8532] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 88.855533][ T8532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.860436][ T8532] vhci_hcd vhci_hcd.0: Device attached [ 88.870262][ T8533] vhci_hcd: connection closed [ 88.870490][ T46] vhci_hcd: stop threads [ 88.873427][ T46] vhci_hcd: release socket [ 88.874882][ T46] vhci_hcd: disconnect device [ 88.883701][ T8414] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.890867][ T8414] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.895526][ T8414] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.907112][ T8414] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.928641][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.930939][ T8414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.934153][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.937239][ T8414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.969926][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.979074][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.983434][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.995549][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.004291][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.006614][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.013671][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.015946][ T7107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.063852][ T8549] overlayfs: missing 'lowerdir' [ 89.140689][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.280195][ T8414] veth0_vlan: entered promiscuous mode [ 89.285314][ T8414] veth1_vlan: entered promiscuous mode [ 89.302096][ T8414] veth0_macvtap: entered promiscuous mode [ 89.306642][ T8414] veth1_macvtap: entered promiscuous mode [ 89.316448][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.325192][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.331573][ T8414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.334429][ T8414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.337923][ T8414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340735][ T8414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.395402][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.404392][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.418893][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.421939][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.489959][ T8580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8580 comm=syz.5.655 [ 89.507059][ T8582] __nla_validate_parse: 1 callbacks suppressed [ 89.507075][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.513604][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.515807][ T8580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8580 comm=syz.5.655 [ 89.519475][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.525422][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.529387][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.533530][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.538147][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.542267][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.546920][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.551121][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.605727][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 89.618365][ T8591] netlink: 'syz.5.692': attribute type 1 has an invalid length. [ 89.629901][ T8591] vlan2: entered allmulticast mode [ 89.632344][ T8591] veth1: entered allmulticast mode [ 90.232549][ T8602] 9pnet_virtio: no channels available for device syz [ 90.361254][ T8615] XFS (nullb0): Invalid superblock magic number [ 90.413367][ T8625] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 90.416029][ T8625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.418972][ T8625] vhci_hcd vhci_hcd.0: Device attached [ 90.424491][ T8626] vhci_hcd: connection closed [ 90.424698][ T1150] vhci_hcd: stop threads [ 90.427684][ T1150] vhci_hcd: release socket [ 90.429178][ T1150] vhci_hcd: disconnect device [ 90.475969][ T63] Bluetooth: hci3: command tx timeout [ 90.489081][ T8632] overlayfs: missing 'lowerdir' [ 90.532542][ T8634] tipc: Started in network mode [ 90.534786][ T8634] tipc: Node identity ac1414aa, cluster identity 4711 [ 90.540888][ T8634] tipc: Enabled bearer , priority 10 [ 90.544666][ T63] Bluetooth: Frame is too long (len 12, expected len 4) [ 90.635729][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 90.789578][ T8646] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 90.791676][ T8646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.794229][ T8646] vhci_hcd vhci_hcd.0: Device attached [ 90.801049][ T8645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=8645 comm=syz.5.703 [ 90.806183][ T8647] vhci_hcd: connection closed [ 90.806508][ T7100] vhci_hcd: stop threads [ 90.809895][ T7100] vhci_hcd: release socket [ 90.811352][ T7100] vhci_hcd: disconnect device [ 91.085884][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 91.190350][ T8667] overlayfs: missing 'lowerdir' [ 91.235771][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 91.242730][ T8676] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 91.244816][ T8676] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.248578][ T8676] vhci_hcd vhci_hcd.0: Device attached [ 91.249016][ T29] usb 9-1: config 0 has no interfaces? [ 91.252058][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.253428][ T8677] vhci_hcd: connection closed [ 91.254886][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.256981][ T29] usb 9-1: config 0 descriptor?? [ 91.259942][ T216] vhci_hcd: stop threads [ 91.262560][ T216] vhci_hcd: release socket [ 91.264006][ T216] vhci_hcd: disconnect device [ 91.447433][ T8689] overlayfs: unescaped trailing colons in lowerdir mount option. [ 91.448862][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 91.448872][ T40] audit: type=1400 audit(1753727308.533:757): avc: denied { name_bind } for pid=8687 comm="syz.5.717" path="socket:[23465]" dev="sockfs" ino=23465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 91.487880][ T5830] usb 9-1: USB disconnect, device number 4 [ 91.490110][ T8694] overlay: Unknown parameter '/' [ 91.536463][ T29] tipc: Node number set to 2886997162 [ 91.561441][ T40] audit: type=1400 audit(1753727308.643:758): avc: denied { bind } for pid=8704 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.675844][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 92.020250][ T8723] overlay: Unknown parameter '/' [ 92.225310][ T8744] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 92.227923][ T8744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.236087][ T8744] vhci_hcd vhci_hcd.0: Device attached [ 92.243261][ T8745] vhci_hcd: connection closed [ 92.243425][ T7100] vhci_hcd: stop threads [ 92.249282][ T7100] vhci_hcd: release socket [ 92.250752][ T7100] vhci_hcd: disconnect device [ 92.271238][ T8747] geneve2: entered promiscuous mode [ 92.273029][ T8747] geneve2: entered allmulticast mode [ 92.565805][ T63] Bluetooth: hci3: command tx timeout [ 92.725785][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 92.773851][ T8762] overlay: Unknown parameter '/' [ 92.863167][ T40] audit: type=1400 audit(1753727309.943:759): avc: denied { write } for pid=8768 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.873168][ T8771] syz.5.742: attempt to access beyond end of device [ 92.873168][ T8771] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 92.881227][ T8771] XFS (nbd5): SB validate failed with error -5. [ 92.910366][ T63] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 92.974768][ T8784] input: syz0 as /devices/virtual/input/input16 [ 93.048549][ T40] audit: type=1400 audit(1753727310.133:760): avc: denied { ioctl } for pid=8782 comm="syz.0.746" path="socket:[25777]" dev="sockfs" ino=25777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.202282][ T8796] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 93.205044][ T8796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.212465][ T8796] vhci_hcd vhci_hcd.0: Device attached [ 93.220338][ T8797] vhci_hcd: connection closed [ 93.220465][ T1143] vhci_hcd: stop threads [ 93.223606][ T1143] vhci_hcd: release socket [ 93.225090][ T1143] vhci_hcd: disconnect device [ 93.390600][ T40] audit: type=1400 audit(1753727310.473:761): avc: denied { getopt } for pid=8801 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.399161][ T40] audit: type=1400 audit(1753727310.483:762): avc: denied { setattr } for pid=8801 comm="syz.2.750" name="NFC_LLCP" dev="sockfs" ino=25796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.755755][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 93.939260][ T8825] serio: Serial port ptm0 [ 93.961542][ T40] audit: type=1400 audit(1753727311.043:763): avc: denied { ioctl } for pid=8820 comm="syz.4.757" path="socket:[24737]" dev="sockfs" ino=24737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.033034][ T8833] input: syz0 as /devices/virtual/input/input17 [ 94.033753][ T8831] 9pnet_fd: Insufficient options for proto=fd [ 94.053876][ T40] audit: type=1400 audit(1753727311.133:764): avc: denied { append } for pid=8832 comm="syz.4.761" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.054814][ T8835] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 94.062837][ T8835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.068377][ T8835] vhci_hcd vhci_hcd.0: Device attached [ 94.073900][ T8836] vhci_hcd: connection closed [ 94.074125][ T7100] vhci_hcd: stop threads [ 94.078767][ T7100] vhci_hcd: release socket [ 94.080207][ T7100] vhci_hcd: disconnect device [ 94.107280][ T40] audit: type=1400 audit(1753727311.193:765): avc: denied { execute } for pid=8842 comm="syz.4.764" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.252652][ T8851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.351389][ T40] audit: type=1400 audit(1753727311.433:766): avc: denied { unmount } for pid=8414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.366927][ T8856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16458 sclass=netlink_route_socket pid=8856 comm=syz.4.768 [ 94.524641][ T8873] netlink: 'syz.4.774': attribute type 1 has an invalid length. [ 94.545600][ T8873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.561086][ T8873] vlan2: entered allmulticast mode [ 94.562822][ T8873] veth1: entered allmulticast mode [ 94.567665][ T8873] bond1: (slave vlan2): making interface the new active one [ 94.577630][ T8873] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 94.601896][ T8881] __nla_validate_parse: 78 callbacks suppressed [ 94.601908][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.5.775'. [ 94.606618][ T8883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.607829][ T8881] netlink: 92 bytes leftover after parsing attributes in process `syz.5.775'. [ 94.677345][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 94.680153][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'. [ 94.692896][ T8894] ipt_REJECT: TCP_RESET invalid for non-tcp [ 94.695233][ T8883] geneve2: entered promiscuous mode [ 94.701820][ T8896] ipt_REJECT: TCP_RESET invalid for non-tcp [ 94.706629][ T8883] geneve2: entered allmulticast mode [ 94.720480][ T8888] ------------[ cut here ]------------ [ 94.722589][ T8888] WARNING: CPU: 0 PID: 8888 at arch/x86/kvm/x86.c:11649 kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 94.726339][ T8888] Modules linked in: [ 94.727778][ T8888] CPU: 0 UID: 0 PID: 8888 Comm: syz.5.778 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 94.732462][ T8888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.736254][ T8888] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 94.738460][ T8888] Code: 0a 00 00 00 00 00 00 ff d5 0f 1f 00 31 ff 89 c5 89 c6 e8 47 5d 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 f5 61 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 e7 61 7a 00 90 0f 0b 90 e9 d3 f0 ff ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.745037][ T8888] RSP: 0018:ffffc90004967c38 EFLAGS: 00010293 [ 94.747308][ T8888] RAX: 0000000000000000 RBX: ffff8880587a8000 RCX: ffffffff81417737 [ 94.750056][ T8888] RDX: ffff888057574880 RSI: ffffffff8141869b RDI: 0000000000000007 [ 94.752770][ T8888] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 94.755466][ T8888] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802cadd000 [ 94.758291][ T8888] R13: ffff8880587a80d8 R14: 0000000000000000 R15: ffff88802cadd120 [ 94.761125][ T8888] FS: 00007f237ae6b6c0(0000) GS:ffff8880d6720000(0000) knlGS:0000000000000000 [ 94.764208][ T8888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.766537][ T8888] CR2: 000000005200000c CR3: 00000000504c6000 CR4: 0000000000352ef0 [ 94.769333][ T8888] Call Trace: [ 94.770516][ T8888] [ 94.771582][ T8888] kvm_vcpu_ioctl+0x5eb/0x1690 [ 94.773294][ T8888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.775114][ T8888] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 94.777620][ T8888] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.780014][ T8888] ? hook_file_ioctl_common+0x145/0x410 [ 94.781931][ T8888] ? selinux_file_ioctl+0x180/0x270 [ 94.783879][ T8888] ? selinux_file_ioctl+0xb4/0x270 [ 94.785831][ T8888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.787629][ T8888] __x64_sys_ioctl+0x18e/0x210 [ 94.789388][ T8888] do_syscall_64+0xcd/0x4c0 [ 94.790968][ T8888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.793021][ T8888] RIP: 0033:0x7f2379f8e9a9 [ 94.794578][ T8888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.796445][ T6089] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.801316][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 94.806126][ T8888] RSP: 002b:00007f237ae6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.809035][ T8888] RAX: ffffffffffffffda RBX: 00007f237a1b6080 RCX: 00007f2379f8e9a9 [ 94.811704][ T8888] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 94.814237][ T8888] RBP: 00007f237a010d69 R08: 0000000000000000 R09: 0000000000000000 [ 94.817015][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.819689][ T8888] R13: 0000000000000000 R14: 00007f237a1b6080 R15: 00007ffc6b367648 [ 94.822365][ T8888] [ 94.823497][ T8888] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.825977][ T8888] CPU: 0 UID: 0 PID: 8888 Comm: syz.5.778 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 94.829285][ T8888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.832926][ T8888] Call Trace: [ 94.834109][ T8888] [ 94.835159][ T8888] dump_stack_lvl+0x3d/0x1f0 [ 94.836780][ T8888] panic+0x71c/0x800 [ 94.838148][ T8888] ? __pfx_panic+0x10/0x10 [ 94.839721][ T8888] ? show_trace_log_lvl+0x29b/0x3e0 [ 94.841544][ T8888] ? check_panic_on_warn+0x1f/0xb0 [ 94.843312][ T8888] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 94.845345][ T8888] check_panic_on_warn+0xab/0xb0 [ 94.847058][ T8888] __warn+0xf6/0x3c0 [ 94.848424][ T8888] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 94.850435][ T8888] report_bug+0x3c3/0x580 [ 94.851935][ T8888] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 94.853953][ T8888] handle_bug+0x184/0x210 [ 94.855448][ T8888] exc_invalid_op+0x17/0x50 [ 94.857025][ T8888] asm_exc_invalid_op+0x1a/0x20 [ 94.858700][ T8888] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 94.860913][ T8888] Code: 0a 00 00 00 00 00 00 ff d5 0f 1f 00 31 ff 89 c5 89 c6 e8 47 5d 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 f5 61 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 e7 61 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 94.867408][ T8888] RSP: 0018:ffffc90004967c38 EFLAGS: 00010293 [ 94.869494][ T8888] RAX: 0000000000000000 RBX: ffff8880587a8000 RCX: ffffffff81417737 [ 94.872184][ T8888] RDX: ffff888057574880 RSI: ffffffff8141869b RDI: 0000000000000007 [ 94.874891][ T8888] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 94.877503][ T8888] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802cadd000 [ 94.879996][ T8888] R13: ffff8880587a80d8 R14: 0000000000000000 R15: ffff88802cadd120 [ 94.882682][ T8888] ? kvm_arch_vcpu_ioctl_run+0x457/0x18c0 [ 94.884636][ T8888] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 94.886641][ T8888] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 94.888651][ T8888] kvm_vcpu_ioctl+0x5eb/0x1690 [ 94.890303][ T8888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.892115][ T8888] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 94.894333][ T8888] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.896700][ T8888] ? hook_file_ioctl_common+0x145/0x410 [ 94.898590][ T8888] ? selinux_file_ioctl+0x180/0x270 [ 94.900410][ T8888] ? selinux_file_ioctl+0xb4/0x270 [ 94.902168][ T8888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.903964][ T8888] __x64_sys_ioctl+0x18e/0x210 [ 94.905628][ T8888] do_syscall_64+0xcd/0x4c0 [ 94.907239][ T8888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.909378][ T8888] RIP: 0033:0x7f2379f8e9a9 [ 94.910928][ T8888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.917451][ T8888] RSP: 002b:00007f237ae6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.920389][ T8888] RAX: ffffffffffffffda RBX: 00007f237a1b6080 RCX: 00007f2379f8e9a9 [ 94.923102][ T8888] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 94.925788][ T8888] RBP: 00007f237a010d69 R08: 0000000000000000 R09: 0000000000000000 [ 94.928469][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.931172][ T8888] R13: 0000000000000000 R14: 00007f237a1b6080 R15: 00007ffc6b367648 [ 94.933881][ T8888] [ 94.935702][ T8888] Kernel Offset: disabled [ 94.937205][ T8888] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:24:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a57c5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc900049675a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9b0b9e20 R15=ffffffff855a5760 RIP=ffffffff855a57ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f237ae6b6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6720000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=00000000504c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000cb6f3 RBX=0000000000000001 RCX=ffffffff8b869c99 RDX=0000000000000000 RSI=ffffffff8de30032 RDI=ffffffff8c157420 RBP=ffffed1003bd6488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801deb2440 R14=ffffffff90a94250 R15=0000000000000000 RIP=ffffffff8b8687ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6820000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=00000000504c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f237a011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f237a011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f237a186488 00007f237a186480 00007f237a186478 00007f237a186450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f237aced100 00007f237a186440 00007f237a186458 00007f237aadc0de ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f237a186498 00007f237a186490 00007f237a186488 00007f237a186480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88801caf9080 RCX=1ffff1100a889327 RDX=ffffffffffffffff RSI=ffffffff8c1573a0 RDI=ffff888054449938 RBP=ffff88807ffd7400 RSP=ffffc9000579f578 R8 =f8051b4ef456f122 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000011 R14=ffff888054448d00 R15=0000000000000000 RIP=ffffffff8229aa0e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f237ae69568 CR3=00000000518e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa725611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa725611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa725611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa725611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa725611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa725611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f00080100000000 0000000500000000 0000000007001400 0000010001000880 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7262ed100 00007fa725786440 00007fa725780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa725786498 00007fa725786490 00007fa725786488 00007fa725786480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a4420a0 RCX=ffffffff81afd3ed RDX=ffff88805943a440 RSI=ffffffff81afd3c9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90005d97438 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000002c00 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d488415 R15=ffff88806a73b580 RIP=ffffffff81afd3cf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3e497b3f98 CR3=000000005a24c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefb8cc800 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4ba11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000