last executing test programs: 24.517313713s ago: executing program 0 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) fspick(0xffffffffffffff9c, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) mkdirat(0xffffffffffffffff, 0x0, 0x10e) (async, rerun: 64) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) poll(0x0, 0x0, 0x6e) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) (async, rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) (async, rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) (async) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0x3c, 0x40000010, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0x1}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x40) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x4810000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) (async) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 24.428614366s ago: executing program 0 (id=206): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0xffe4}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x5, 0x1, 0x5, 0xa, 0xd, 0x3, 0x9, 0x8d, 0x6, 0xff, 0x4, 0xf3, 0x7, 0x40, 0x0, 0xfb}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="660f10eac4c2890bb60050000066bad10466edd3388fe9e89a48000f20e035200000000f22e00f0726f2d80266b8b9008ec8b8010000000f01c1", 0x3a}], 0x1, 0x8, &(0x7f00000001c0), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fcac3fdf4a47ab9a800000000000000000800000000034fe800000000000000000000000cf6aaa"], 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000400)={0x80, 0x7f, 0x8, 0x7fff}, 0x10) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00'}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) listen(r5, 0x2) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000003c0)=0xdb2) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @loopback}}}], 0x20}}, {{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100}}}], 0x20}}], 0x2, 0x4000) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b080510"], 0xe) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x9, @private1, 0x3}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x6}, @in6={0xa, 0x4e20, 0xb4, @rand_addr=' \x01\x00', 0x6}, @in6={0xa, 0x4e24, 0x4, @empty, 0x56d}, @in6={0xa, 0x4e22, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x79, @private2={0xfc, 0x2, '\x00', 0x1}, 0x48000}, @in6={0xa, 0x4e24, 0x3c7, @ipv4={'\x00', '\xff\xff', @local}, 0xffffff20}, @in6={0xa, 0x4e21, 0x80000001, @loopback, 0xfffffff7}, @in={0x2, 0x4e20, @broadcast}], 0x100) socket(0x26, 0x2, 0x0) 24.313762668s ago: executing program 0 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='{^:\x00', 0x0, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101881, 0x0) close(0x3) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettaction={0x20, 0x32, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x20004000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000180)=""/104) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000002af, 0x0, [{0xf6f2f07652d1a6f6}]}) 24.12909948s ago: executing program 0 (id=213): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}, 0x1, 0x7}, 0x4) io_uring_enter(r2, 0x2df0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x4}}, './file1/file0\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 24.040424141s ago: executing program 0 (id=216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x6, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x38}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc0}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x621, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8fa70c177586f94b}, 0x20000010) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10008140}, 0x50) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x100, r10, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x62}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008000}, 0x44010) r11 = socket$inet6_sctp(0xa, 0x9e8b197c922bc005, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x1000, "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"}, &(0x7f0000001780)=0x1008) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f00000017c0)={r12, 0x5}, &(0x7f0000001800)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001840)={{0x1, 0x1, 0x18, r11, {0x8}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r11, &(0x7f0000001880)={0x2000}) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x6c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000854}, 0x40) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x5c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e80)={&(0x7f0000001c40)="4dcca69aa898915af5df3f3ae0161fd3381ead4860e9a23dac1e99ca8195ffaab3fc7b952be8a8bc3bd6cbb2aaebf078d7760c8d8eea3917fee9ba509d76c054dbf8555ea7fc2847ee7dab9a85d144b85f9cfe33acf6e3c47f5e46568d8762ac9d80381876e01ab2", &(0x7f0000001cc0)=""/134, &(0x7f0000001d80)="e2d3f56fd0240303d23ce7d57ce9ae65acb5407b75d26c64487f6dff796eaa898ee7d5f461515b38dc6daac431a14b34950f", &(0x7f0000001dc0)="936105c7d0713e21323a5a4490fe76a6a7dfd8dd85e2942ffcbb89c62e95cc6e544efa1379dbbcdf0d48c60d562fe81134ebfeccd6366782d842416a8ff7f5fb4621c3e3d85130497d781e33293da92fa875bd6b51d9f96c4b81c6cd73e09033253038d99ca200909552671feeecc1aa7819efc91ca1bdedc6a5d42830dc6ba495efd0394b3bb8d22e1f05ff59f19b8accf49897b3f781f42aa0bcb3970ab27e701f", 0x9}, 0x38) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f00), r13) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xb0, r14, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) ioctl$EVIOCGBITSND(r13, 0x80404532, &(0x7f0000002080)=""/64) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r15, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0x88, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xfffffffffffe0106}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1000c8d2}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000002240)) 23.750161691s ago: executing program 0 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003704000000000100000000000000f45bc64504e6087b3a3aa8cb889174da198ae753a772e18e0456f9f5582bf0d02e4ef01524ad3e0cce62b6b05a7d3b5dfbd653d6681883363ced8d1da6fcc3a6243245b1ec706bf958d6dcf1d80cc86e2c", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001800ff0f00000500010004000000"], 0x44}}, 0x0) 23.618497724s ago: executing program 32 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003704000000000100000000000000f45bc64504e6087b3a3aa8cb889174da198ae753a772e18e0456f9f5582bf0d02e4ef01524ad3e0cce62b6b05a7d3b5dfbd653d6681883363ced8d1da6fcc3a6243245b1ec706bf958d6dcf1d80cc86e2c", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001800ff0f00000500010004000000"], 0x44}}, 0x0) 10.506490042s ago: executing program 1 (id=400): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0xa, 0xde, {0xde, 0x2e, "0bd89eee920ebe8478045f9b3f748575e22ca19159b477a985c82a333030e4354fd85b56858b4c884ca9cd3fcf209d1d343c708d48d738b9c8759cea0695d5b9cd64fd3624f9552d4b862dd1ca9c83a9696d51eba3c2d5ed96cf2da37fc19754fa33207834f6f9aa54856e3111def2d081c6615d4aebd48b21724a5eaff2a285249bfba504aa000858955e4da967c1473a838d67577001810eca57807e30ef06c7a703c2d5235a2c965bbf629d8f2b5b62a50d2f2561d6361558a1fedf35cc8bcb187785cf6ac6d6fc14b28d115adbbc3a306fb689be045867d73ea7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0xa6, "fac1f4980a56859aad822f969239e1423c478f9dc316c0b8ea0d2253300d7db845ac70f715000039d8eb54aa9f4f008969e0b1e076fb1e0b87d0adc88ef429128cd95fdc73b4aee905aebae2b47bf38703becec6c9ccd3a70af855a1a7ee1d41f2550342cdf01fbce776c1e2d19a2e90520191e6307357fd71b2b72cdd4cdbc12b99114c18415212ca29c8ebb3b817297dfb1303806b7d468be46ee0ee36a1d0d44a9d5404ff"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x23}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x16}, &(0x7f0000000300)={0x20, 0x0, 0x5f, {0x5d, "f1725d5adbc5bb2f459d19c1b6c8ff97689476fa76f84eb7a678ef06cd2d930c056b54e118c9536a8d21ba1acba119a147713271bba5f303ab14a34f9c8e1831a326c4aa5043ddb70e21a4b3c7b32e89d34a169c574d07b6057572c1c9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x3c}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0xff}}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[], 0x0) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000900)="49b6bfa140", 0x5}], 0x1) 8.179994251s ago: executing program 1 (id=435): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x5, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000640)={0x1, 0x0, [{0x400000f3}]}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a71b5c93f589"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x1fd6b38443af8512}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x4) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r13, @ANYBLOB="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"], 0x270}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x6, 0x4, @private1, @empty, 0x8, 0x8, 0xc, 0xe}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r7, 0x32c, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x4840}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r16) sendmsg$IEEE802154_LLSEC_LIST_KEY(r16, &(0x7f0000000080)={0x0, 0x2e, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r17, 0x325, 0x70bd2c, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4050000}, 0x4008040) r18 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r16, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r18, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'batadv0\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044011}, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) (async) unshare(0x68040200) 7.980028857s ago: executing program 1 (id=440): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0xc0403d15, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1000}]}, 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 7.768582689s ago: executing program 2 (id=448): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@ax25={{0x3, @default, 0x3}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @default]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="eed6e90c7827d9574bfaa80f3c1c40d87638d131b2fe82509225d15990d6592d15a163a7807744984e4eafd8184eb08cdc609cf172c2f96e38581e0bec2a2e72e240b0e8bca24241815b22e11195006089", 0x51}], 0x1, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}], 0x48}, 0x1) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0xc08, 0x3, 0x250, 0xb8, 0x5002004a, 0xb, 0xb8, 0xea13, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'veth1_vlan\x00', 'erspan0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x3d, 0xc, 0x0, 'snmp\x00', 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0xd, r3}) 7.699723655s ago: executing program 2 (id=450): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x10, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x9c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x2, 0x87, 0x5, 0x800, 0x200002, 0xa, 0xfffffff8, 0x5, 0x3, 0xa, 0x16, 0x2, 0xa, 0x3}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xf52a1140}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0x9, 0x1, 0x3}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x100, 0x2, 0xe, 0x7, 0x3, 0xfffffff1, 0x100, 0x7, 0x3c61, 0x18, 0xa, 0xe, 0x7f, 0xf1, 0x8}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}]}}]}, 0xcc}}, 0xc049) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@gettclass={0x24, 0x2a, 0x102, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xfffb}, {0x9, 0x96d53fc76b6ac009}, {0xb, 0x17}}, ["", "", "", ""]}, 0x52}, 0x1, 0x0, 0x0, 0x40040800}, 0x24008000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x45) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @in={0x2, 0x4e23, @multicast2}}}, 0x90) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x200003, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r14, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r15, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dfd, 0xfffffffffffffffe}}}, 0x90) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESOCT=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 7.590532181s ago: executing program 3 (id=451): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) (async) syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x80, 0x0, 0x0, 0xbb, 0x0, 0x0, {0x1}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x80) (async) r7 = syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x6, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000480)={r8}) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r6], 0x4) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a) 6.580832122s ago: executing program 2 (id=455): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.520563985s ago: executing program 2 (id=456): mkdir(&(0x7f0000002740)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="64796e2c666ce16f636b3d6c6f63616c2c00"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioperm(0x0, 0xe4c, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 6.517689608s ago: executing program 4 (id=457): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r4, 0x0, 0xc, 0x8045, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @local}, 0x1c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) 6.517294386s ago: executing program 2 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x400000) 540.441266ms ago: executing program 3 (id=459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x7ff}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x20008881) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x3, 0x26, 0x9, 0x64, 0x93e7, 0xf6, 0x6, 0x5, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, 0x0}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 540.063439ms ago: executing program 2 (id=460): r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write(r1, &(0x7f0000001540)="a10e349b8844672b693862630606363e6a44c20d", 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0) r2 = syz_usb_connect$cdc_ncm(0x4, 0xa5, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0xfb, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a6fed52be7a3"}, {0x5, 0x24, 0x0, 0xf801}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0xa, 0x13}, [@mdlm_detail={0x31, 0x24, 0x13, 0xb2, "0f4b1c1c2fde32a7b4d51abd9d5ffeb6b6176b4328d20c2f363a49c874ef95a759ac9a960dc556c95ce1cc96d2"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x2, 0x26}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x48, 0x2, 0x7, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x6d, 0x9}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x9, 0x4, 0x10, 0x7f}, 0x3d, &(0x7f00000002c0)={0x5, 0xf, 0x3d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "9e7d3e59afd1608663a81855ecf04eb8"}, @ssp_cap={0x24, 0x10, 0xa, 0x8b, 0x6, 0x414, 0xf, 0x8, [0xffc0cf, 0xffc0f0, 0xc0c0, 0xc000, 0x3f30, 0x3f]}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x418}}, {0x37, &(0x7f0000000400)=@string={0x86, 0x3, "02bbbfd3d8e420ac1ae2779312de26a363f08669b924957e1ec9c2901808778a6f519d092cf29137ff6c31e272c9a354de0ea4b9ef0c211314ecbe3e51c6724c20ac75858bb2b7b2e94d2c27e61997e6ac681c401f6002e15a8f4799929292df57ccf576c8517faeeb5b5886157808225e6811d7f4ac6098443660fa10ddbeab4a913a92"}}, {0xcf, &(0x7f00000004c0)=@string={0xcf, 0x3, "082c6377e5406a4783508a282372cf95a3c93ab87000868af486f2bf2d7ae43124f2337e5e7cd118da037393b1f60847af4e7678ecbbb0a418ae9fe58f0dd6b86bb0cb3d8240b1f7c3f3e10d710aafc8a8d48588704addb0a29ca5e9e6cb4ffc1076c6744850d8bdef9dbb394ac400fad03a13bd5ada19479d41dffec170f33e63c67b72c4a86fa3ff4161bda803ccc4798f8b6a6a6ea193f3a0de2d8ade750344690feb782f5742106c0613c77c9181de698912b0c277776e5405d9d5fae4bfed8e73764aca14b08455f9270f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x44d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x401}}, {0xcd, &(0x7f0000000600)=@string={0xcd, 0x3, "3133ddc203d341df71e98329c0e6f308d7739c963816930f9c2f74efb4b0a2faf6354cf4065ba726098230da27c08d5d6120a2d5e9e0be13611073d6242b43788042c2d09f4f71ac230dcecd2b58bbdb8ad24543b3777c6bf72337c0fc62ff06215c50770ec21cf87a0053c5944396edf995616d5c1c14c82029738f694c9dc3c684a2c5f7feb199cb45e393b5f5ec017a9eccc8831fbc452ae8e68a3166a77cdbabac5d3830776411788ab4ea0f0d4fb28ddc4f6aaedecb7f05e46cb7efd001028b3b03078564a5cd2d1d"}}, {0x50, &(0x7f00000008c0)=@string={0x0, 0x3, "3612e913d754bf370de6fa7ba85a828c488497e045a42b2e960a3eb5a0ae25f84e32a3dc52f32f0fcf03816f2b591f6473d7fbcdbde8bb4423160958bfff0f267d29a46f335b7589808bae6193ba13b9d7c6e738533768c1386a0acccc6d883be7ac2ef483fdec75533ba3a7b9ff6435d93b2ed2b4f30d87a6ef51cd292fcd99aef3dfbf6395ba1a791c4ec0b6dc2faad0dd720d3a03abdb0aed15180acdc40d0c84e4fe3275b8de80b761d4fa256ca07c9e3e882363dad8fb9892e53687ad8dfc1af04f26e6179b962f62076e5ab558cc01d1d6d8f3b0c9d433de5d363b4c4c78c497a4"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_disconnect(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 528.731401ms ago: executing program 4 (id=461): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x25, 0xe1d9, 0x4, 0xff}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@any, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x6}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) 526.907211ms ago: executing program 1 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10820, 0x400}}, 0x20}}, 0x4084) 512.618956ms ago: executing program 4 (id=463): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 507.811213ms ago: executing program 4 (id=464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc010) (async) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) (async) creat(&(0x7f0000000100)='./file0\x00', 0x11) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r13, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r13, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) (async) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x1000000, 0x13, r13, 0xe0b72000) 370.295929ms ago: executing program 3 (id=465): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x109) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x5, &(0x7f00000024c0)=0xc, 0x4) ptrace(0x11, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x4000000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) 280.278405ms ago: executing program 4 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x768) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) sendto$inet6(r6, &(0x7f00000006c0)="8ad41e011c01", 0x6, 0x8000, &(0x7f0000000780)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 279.838633ms ago: executing program 1 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000400)='./bus\x00', 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') execve(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000480)={[&(0x7f00000003c0)='#\x00']}, &(0x7f0000000800)={[&(0x7f00000004c0)='ramfs\x00', &(0x7f0000000500)='/.[^#&{{//}\x00', &(0x7f0000000540)='workdir', &(0x7f0000000580)='.-\x00', &(0x7f00000005c0)='tmpfs\x00', &(0x7f0000000600)='overlay\x00', &(0x7f0000000740)='tmpfs\x00', &(0x7f0000000780)='overlay\x00', &(0x7f00000007c0)='upperdir']}) write$tcp_mem(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x50) unlink(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 206.405237ms ago: executing program 4 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) flock(r0, 0xc) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000140)=0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x5c22, 0x3, 0x1, 0x0, 0x2, 0x7, 0xe, 0x7, 0xa, 0xfe, 0x2, 0x1, 0x3, 0x403, 0x6, 0xc, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x7fff, 0xb27, 0x5, 0x7fff, 0x8, 0x5, 0x8, 0x8, 0x10000]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="40020000", @ANYRES16=r6, @ANYBLOB="02002dbd7000ffdbdf253900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x800}, 0x401) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x734d3d88, @local, 0x3}, {0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x5}, 0xfffffffe}, 0xffffffffffffffff, 0x5}}, 0x48) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x2a, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32, @ANYBLOB="79819185e280db0498fb019fee4d905b5f14c10a43abd4465427b290aafdd6b6613f578e78218a260de18d32dcc151f1d119930c0636d75ab004b1de81bb41896bb829a67712209d412034679f2fde13d8fcf3d70902d15ed170be10"], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1e, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r9], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x2000002}) 192.881037ms ago: executing program 1 (id=469): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) r2 = socket(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000002d000117f370779076dffea4553a82b887a8772d6f6f4b1e2014b9d479dfb14c78a2eb6c2865691f70343a299f90e1fd358e9f1b5cbf585a869a225e632c47c3363a6cb9e6b8328083b90a1f321ba8a173ec12df39e4c7e2ef65fd307ffa78d2561af6ff73679606d97463d3b5882964d9df2a40006c73a254ec8c1d281ca3570a21b70f11c6fe9c09cb1de76658209643d0bb1b7596f6ebb06de7d36291730194a98bff5f55ad300af39a4f36"], 0x14}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0xfffffffffffffffd, {{0x41}, 0x1}}, 0x10) r6 = dup(r4) unshare(0x28000600) ftruncate(r4, 0xdcb) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x141101) write$sndseq(r7, &(0x7f00000000c0)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) copy_file_range(r4, &(0x7f0000000100)=0xb76, r6, 0x0, 0x2aad109b, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x118, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa0e9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ffb}}]}, 0x118}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x2, 0x2, 0x4}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004580)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="330827bd70002f93df2508000000050005008800eeff"], 0x1c}}, 0x8000) socket$kcm(0x29, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 140.293203ms ago: executing program 3 (id=470): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1000000000000073, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xa8, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff11}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0xf1c618b0b61cf17e) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x9, 0x20880) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x100002}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x0, 0xf5}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000380)={0x9, 0x390a7f14, 0x146fe0aa}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000000180)={&(0x7f0000000040)=[r5, r5], &(0x7f0000000140)=[0x7f], 0x9, 0x2, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000340)={r5, 0x0, 0x0, 0x7, 0x6}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r8, 0x5, 0x70bd27, 0x25dfdc01, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000580)={0x0, 0x0, 0x80800}) 70.542683ms ago: executing program 3 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x25, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x20048044) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2200020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0xc0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r12, &(0x7f0000000040)}, 0x20) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r14 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 0s ago: executing program 3 (id=472): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close_range(r0, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) (async) close_range(r0, r0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r1, 0x2f, 0x1, 0x9, 0x2, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x5, 0x2d48ef99}}) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0)) (async) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x6}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x100) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000840}, 0x40881) (async) r5 = fcntl$getown(r3, 0x9) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) close_range(r6, r0, 0x0) (async) read$FUSE(r3, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002440)={0x10, 0x0, r7}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r3) getsockopt$inet_int(r3, 0x0, 0x32, &(0x7f00000024c0), &(0x7f0000002500)=0x4) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) statx(r3, &(0x7f00000048c0)='./file0\x00', 0x1184140f54914b87, 0x4, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000004b40)='./file0\x00', &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004dc0)=0x0, &(0x7f0000004e00), &(0x7f0000004e40)) syz_fuse_handle_req(r6, &(0x7f0000002540)="c7b74676385836b1c3208aa3692872d31c712ae568ab823ed7611046f7d8ea9e3cc4c21e1bf2bbb4abb8d4fc9b4fa7af8f1cd9d5d5c4d527bf7f9a2f465dfb7e5c13b678934f56272e82566b9ea4c8fb8db4b485830b898f543b75eaacd3aed4a429e8fa2d53b769eec66d7dcd90b9b284f27183ffac4bcfc3ac22df0f8fe578e97edba82eb0919f7583a47bce9ac8b515ac4478abeca2aec270c22d0f8de4c2478519de25385bbe716361f2bdb20f2f795cba5ca51e34783daeccf77eb3a57347ec96bbc0ce024558bad11d7372943e81072c26e057743d7704e4201609bddef891787fae79bf4351a7a156f15248dad61375bb3d053e2044176f08c787e7a97aa3d80d191299d0ff3c779ee3f7a4f693cea54bdf46a186268c94f3845a4d9f0ad44470d6d95e4dae5f009943929c1d9e51c1a37dd88a0aa48f232b293e84d198417f6b1bdbdb1b040992fb89ec34092f142d281803722a779b82c30a23890d665a0c2f54758b5fde2bb154678aeed906e204fed54bc61a0e342048fd484641671bf87d4c8819aaaac3234d78b80421b76ed0c41b70b24e5dc4022dc5ffdaa5099f639a5b69b27d03ced684072a2143a992a8176efedd8b60854016ee34114492afeedaa09a6a972e7c3385ef059aab21e6bbd9c37acd68fd4df14db2217592bdce52af22a5f6201980f9e9c2d5e035fe7a91e768b25a7fe00f6ff5127577811421555bfe1f87e50d336fd41c428cc361d33ee6fda6895c186ae0c33d0954aff1b75e06c0244b1e84cf5c64de9ad643715c2f1d68044d8c033b512b6a35e7da60e43d48bb87ad034ae219e715dbffc40d93884b88de4a6b007eb44d5b4668fbc0768a66804fb5364a013feceb7df7a67e904075dad7b462c0ee72a92c51282a9dc80120f1910072d2e230bc98a4f7d65d40f1ce4121b0d92a45f369aa743661356de763147297e0d0b430a1d28dfa685abd25e7a6e4f907b978b88257b5ffc66d918cd56a2567cc51ce030da7a7e796360333ee87eb6a2d43505c4214d57e842afc8fea89551942eca2c8bfe77ad78a3e0146fe9cc554b891dbad0877a69828ba1858b71fc370cbe242022ca822a4f1decf7dfa7a3397c493d92aed88c1b6d4b0f78efeb4ffebe216e9875435d147d6b61ddd3e5e3461c22269f0736d9b78cfd5eadcde9627479e33a491427db310beedd69f7b4df9a8f11abaeae06efd857a67e5a1a15d21af49a8781c9844003dfbca65c26aac21d5dcc3dff5c346391c017ac200164e392462c1c187b53bc96fc67c5e6c7ff87c9ba501f50d59fa1c769017ddab0caa1d3cb5e2bd417c55de7d667562950067879d0e7c53773bc55b9a60c267ec7a5d3144d7326acd200d468f05a9718f6121313f760072160155eee84eb22f817f77a09514f0669dd4fa19f635f2fac0ab5a3ca37607efd08dbec220e02aa29ba2684f425786675fb53398ea41ba622fc6b5fd4ed0512258f061ba6637a0cda91e95e5cac640c65e1af3226dd7bb6bd152798268e92f08373976aa6404a409cd00e454557b421c53b2494ed0774966d14490f0a728aea39aa3b8f53524df42319e9ad4dfb5248a8e0723fbc1e64da6cb9e48e67ec7b4883b5aa199af2fb3286c828ff83f5aac2044d45d1d7d8e5eaadf681a9bc5289e12ecf2eb23a3d0abbaa72706a67fe5871bdd2335fae183249f2834ebf4883d33970a9cc3beda3edd00c9164f1dbde810bb3f63b8bc0219f102dcc751119405c5a514f97235702ccdaa9180f221a31158312eaea64dc4468fa3fec2a12779c05ae3cf4849317a2ca3da5ed51df11d732b3890a21bb82a7a9e508a41876156fbd03feab76b325e57d247389aeb1dc9a09e552f009749509d3ad4bb300900120d169c0973ef71a698d34a565ba792c5548bf8c71fb44d35a206ea076ac5380ce657f025ca59e1768a8fa11ef00801bc896ab0d043c55de713f35d3dacd13299728e4e7717c9dacf71dedca5809e33c995b13bdd712be870654d9167cab6f0ba61c39c93b170d6ec52783a897690623af9cd2f556aa5fbe290a64a35f521af979a9f72fc4c21ba744969c54186569a3e30b6502f4f9c01baa5a39f6a753824f980c8057e859cd4be7ddbf1192a01767456c64d5a4fc3e2fcec8b3a2a8afd8ec6a507668a29cb1cdddb243bb0a8e0dedc5b7d9b602527c698f08f39dac55cbbff99c6a27356feb619ece18bcae773cb3889669d60f7fdfa3708c862a859cc2a94ca13b55685ee809803ccbc5333d09f150374b471048de6a7999294f5b0974a09cc435b8586e1d42e6045a28c6fb90790934eb7a55863432331edbf67d4ee57d20dacc3a031fd2b9488e19d7cd3919bf8d938ed686a3a36b18addb02e1e02071df89de875541c8fec146e1a914b1e0b6cfd7e164fdc00414d35b9497f1967378be89c68d30e60da1fc2d3d8e9d0ca0064bb242e791f47e2a1c1ef3563896dd562f3b9f1aad0e94c306dcd0f21f96d777fa6a00cdadca219621d27bb5a34c6c79e1269b340457366b2a7a6326130307d734ec0e48abf23aca0027b4c6f9b9d681b10f3883824e3020575f0585029e219a3105506052b1201cf0aefbd521cf907d0fe2e7a97d32d6e2705b25ae39b7b6f3cecfb4264fcd2b2c727a7cb7ef45a49606fe743fdba3507124b73f06a13a2b5be3404d4fea13f0b4fcdb1cfe413d10f0360d2386e108ac29af678255a52f1b8f87163dcc3387b4ec9cf5c9ccd85d3a4a90f76426157dce1ce85d4330bd6b1c75ca8f065072aa25232f3ff768456842af2c3eda3e1a8be77ccddd6d73a871b23c1f6986dab986c47ee13201184ba026372f30a9c4643fa1654809e94b502bd366a132f9762d6b959b17dff34dad8ea28d9424333be4ab28e6bdb57b131eb9700c06c42be1ee54055f759f2dc2782dfc81713c0bc31ac7a98f50ac7bdd3c635dc99d16023d8d4259ea7a8145bce884edc9a6b16d38ba200d17eabfc08e853926d5e974c89ca5bb5295ab23fdce5e02942144453866b2f19b08eeb6257745ed237a5dd0a48692481cef7a1854eb6c6cea24e85d7782afd5859f830587bb657df0a996afe33306c0bc2ca6358217e267d85820b26b961b2b81352968bb0d09e25e8a71dc3e746ee3d847b611acae4a321bb94a00476ece8ffd1b277958ce63d5e14be407a93fb44ece1a9b99c3dab28dfed316eb9399fa9c400d0cfb09ce41556fb3dabe073078079aba13230ccb3b809da2e08fba4eb7f66a66e20989180f8e4572557599210be8c00c42424d7cb982322e85dd415cd7fc06018cb31dbacf18344843c413adc788e1b5ae53f2b47409b97cf53c30af4c120550c74b836553bffcd823a78f0b02ebc63eea666573daf1b3180c74b8cce3ec268d101e5a10d165d9d90d529de468fdcbab20a38d2f212c7ee479966436c4d268644e8fad57798e072b2a48bdda33dfe2863e7eeab98b05fb008c7e496065dda32c77dbe3bbdfa95ba727e4d8bb63464803bf9610aa52ae785588e61c1a27cf650cfee5284de8758dff0997403182bf44e9e64477a9fb74d62759179e9a3850787d721def7909de0d75e944a7d711af88dd02c6c7e22b8b9000ab4ed42cae461483176663ba2647f65831f6e03cf8ed198996d961de80523d61a13fa3b3bce3658dd9afc5f5ee6bce51881ca80ae39c7ae7438ddb596ae55f5378ed9877dd68fe39bf87af52e047606abfeeb26e1ad1bd2d30ba9920e4064d910c56e363b62bd273e46579842d4afdc9dc2866a720f93bac1c3dd0c24edde75b051915a8ac028d2c47ac70b9928ee61c0a7bc3e1791ebce2f5844c85dc6747adec8771780a40e7cd360f0d7ff2a1ebd475551aff2bc8635e4075aa31ce63caaffc605b9bbd0e4f36b9e50d56977628d6363d7cbe5234aeef2543d084bac29a765c7119f017084ec7ff7dffed27fc1e6cc74c4a955af47d1ea30435d1d0e2363e3854dac2f2a2e4a235cdc3c1c47a0611dce9b34300868dcaa4b414bdfc31f140588965aecce5f84102ff97c5b471ae11695a6f68028afdf127ad8a7873ed3ed53d2ba692a733a977d25d4c1cbeda993a11801e008f7823015ccc52dad37dfa50fa7a3d6a5475389f26c9c298bf29789316a587ef5c863814c631d223165f6983972d753e93270ab85f39f8afea73162b1f28c6ed219dc82b804a60e4b35c0beb583b2b0ff38e7f843e88f99045d93f7b556b928453c07fd223ab72d861a5b9e8593e120edb4255837c9a867ba7984cd7f28a44b48988a97fea37043e73166a927c9a643180ca98ed6ec29b5a12b1fdc4bf1a5b4dc0099e8d36ea278ae312fc9aeb10bcb0630e10f4ea96b0057b3c995e2301004e094aa69438567816704cdf8f07f8f3db0265937cbfcd01fd237a30fad7a8cae86e11cfde858a99933a8a98f728f7f4a7c87af8700f1716944681531819e4f2b8423010bc3eaa3f67984edb3478f5accc4693fb3a77b0867922d9d62c47daa726476e0ecf68989852eaec9b19c2ca5944d2b20401c48c27c08ed4b0f1904f3868db0e0e5e362a93638549d69f18b790a4562fc787a32f9d413c13b6bbca0aa945d1a0bbb03ec7b9ed96837a4bd238cf58b026445437ad2fa0136f6f9610bfd532f816ee61c15d6cd5598ee341e11832f0c716a4e11c5ae0a6bd6922751e307bed504dbd8e71bb4877b16a6fda5c3082558eb7c6c48c345a2a2ccef771eff61fd878d65c616a84d87e7945dc85ce7e9ccd4c4881507945bd0f9c991305bc74a7461fb144b8c08051bcbfcdf09d7be198d1f0bcd9cf5c8567b18f58f76043739d4f9c3599ab7444e8f7867cbf8b6cf4a7e55b26d2468a026bf3d1ae60b82e2c38ad52d46e9ffe8c6e72bb241a2eb5ad89741c4fbf11bf006e4cc4890e047432226bcfd0a33bbf5f049badbdb9ee1d46e1ef9c7475e0ab8247423e2e73f81f36b8101c79212444060a60cf3664a1260764fdbb0a4fe27a016069070f2680e16a281bdee83b0a8619c045ff8ce306c385ee685a02df4dabb9fd57487fba026aa7f5648e9f32252b8d4f93f2c9448ab049407f6bcfc1ec177b4b8e50f0d5b535eeb4e6160e89fa700f0ccbcfe6b740a00204eb2ace59c8fbf1007016b61ddf1013332645f5c86b978d742026073b8f9020a63810b8aeb37b6bda646ead82bfa7d73f58db8f4a10a974004ad48bf3e2710023f05dad3a8432344a64342fdad29c7d32a13001bb1aacf218ec30a13d68b112074b12e6512e6d007991fcfc2ee1c77095f785ec1e349c589398d75d80270c68d9ead6b840b242d5f35b2d00d5c3c30fff341fad30b49adae9ef911962ecedcc030eb417b3a8d4ca7f2d4a9562bc8bdd3dbc6bc9d9a87b12545b55a228f94b4aaefacde2ea0f96adea5f1ab07e8355fbfeb966685115783f2d72912f0ed2ba0b4c4b845616e554c8ce8bb7a9851e85598f2220278000b3c158e211cb3cb7fe0537650c6a52c1a79faf202b3f7cc7f075350d0219301b2668c669fef9f7fee743040a3cead6d4b678243199587c49c01c0e0675ce47206ec3d39bcede77dee03a2cce00a253d645039e2d19dbfde3e880e8acc6aa1ea5190aa2b3aa00b59951393a8ef9b152345059f1b57553b6f9dd5868270c679f11bebebd395fed89aac3504286a45fab7ab9f40a22f1debdd3aa99b866207063c4f73bcd79d7ec9c42c87af55a5ae1f3bab6f6cecb9df1d18119267955e322b7b225434d3a5154b4185a05514a0c1adb98b8d95f18e453a6ad2b7da67edb711e995eab49880cc49e8bca37db8b3dec58fc97cf715ba115172e09721b68c4b57a6aeb5f399db21c5aab15fa473a2c6009fa12142a6ff1385c2e122611165d4764e8eb67e5aead0e36304deeed9f0fd156ebc513b01ed9b8fc62a6ecb792997f100262061c26faddd32c83008b79d637ba5e9bba42248ca483bdcda51042cc9aacc3d551cf6e13c12cade5ed7c036b10731a96298ac979c7efd5bc945f7074b21cf9b1d48a27bca0e3571a838088dfab1b1a7d99232be6d2ad317202b92e15ee6054eeca4edebee5b13ee3ce8a06136b0495f9319ff1a9b2bf28b00b1c355c160c90acdfd30f6cdb6a82a320718c4c344114b2aed53a3670368b88e00cd7262a5f67e14c723676748aa305f5688d371c23617f42066698e298619bb96beb287e90e3d771af127503f1f4fa0c80df70785e5f256a7c742314d8e68853b6b2f40618751c667f70022a21a768b110eef937470b86c5b7005f1b818c3c3ca8540760e6df1af296513de88bb66df3383be8b05464db3081d3d07fec58760222ab9156486e1fe4ac53ffc95c71b3051a2cad1f6c44637471eaad90892d132aea7e1cab2b99736c8379b361b6c718b09e9c6b5b96d361e606137028eaa363188a064716db79de4124e1fa6eb18d7baec0c9c069b4b5588cf758baacc9a9cfcc6b50b022001da0abf54a025f5c1061fa8a15e6be4a6cfaae85585323c537db0b477de3eb45ffd36fd82527c01b09ebdb76a136d195196beb7f64053458254cce6b88fd9ad11a9d3ccbde43352550dc8113c6dd1c2947eaa63d4d1446950b2b636263f2382a839262a4ddc8e72d22ebd9adb2cddf9ec14e6b8f63c3b8c74d151f3ffc6017d0a5b6d05dc3d4fda74bc417c7e630506d7e9e9c4e376645168528896bfce1531b4fb404ce33f02b2b0242cd4c5f1b9b505a823a549d9c4be76e97d41b677411f847bc49232ef8d3c0d70c00b9fa4f7386f0bd338b6d32bfd46db3d043381b7b6df8d98e1cf0f143557db3fe82504e016567342075a1968e1c7f329be18d646d3d9a1727fb0b29d75aaf973bcfd661233ca6372b656f01e22508a4c17b0ec7f3a80c3174c631f9367aefcb6b9427290ef5b388f69bbf07c5018d0ca4f98c9fa72673d3baca2e49c6633bf3c6c47ef3f220ca5c3d3e6581025de55bf8b67fdce9bcd617cda5aa187ec9383b9cffae98335ced2277acdb4e0f72b612f8b0c3dd1d47801dc09205d85e5bdd427d9c670883794ff7bd46e6b66d5f33053ff2e054c14434f04daec34b684a0091a958ec754fa240ba3078e158c901a365f970406534006cc0f1ba56c7bde3402fb8c314aecb2d8f1d7349723a7a600d13b454c15b364291e34394b945be663260ec0c3be86fd039296b61ed70ed9bdb8fe6aa23a6866f755bd074756ae30fcf745cb89e9cc0b1911e9912989ba2f47dca71a9ec819cccb012caa518d0c8b94dc9435dd65a6ec719f23798366ae3d9de084571db3df488d404ade8861db9527d2bcd6ec9e6546c8f00cb1374db036022f86f277490f41fd176418740b4ed22cfefe61ead2e2746a774ad25f8cdeda6a443730ad389de33204cfa9cd49b59195e818999e7a56226b36b8d24a73a2073a89bae0699f1e9ae068cb39b9a1bdbce3bc428f6dffc7e193edb2d8ab309d0636564041d5b149fc344b35f0e41d875ebfd8d03ac4e1003f55ed840658e0f8f0b086f6fa5232c8f60e46f6b471e7fd1c62414db9a8511c8a4d13e317afb0e6c439ebbccd8fd8f03bf944de79f52089bffde98dc45b5bf06d0e1bfa07e00b1525197a39fb42cb095186dea31b80b7c6c79f07e847bf950088d89e39e27d7d8a5366d1e0c7b6941c857a0a80f388979b0619ddc9a95bfeca36bbcf48a5f7f142a2895091d5ac32723fe73a70bd63d5c25b2f76ec83588a7dd9a570cdbb08932e9e5c7815ae4e6a0d633881c4aef2f2f48cd621fd79a33d28f91bc26e8b9a499ace625f37b16398ecbe60a6e35bb7e6dad5c677f602cfa9c22b3fa33bb192cac79c12a348a98d3b9a944310c80d7a321c318aef253a2a59e618cf5bc503a4c414b2c0ee63dd7796b6784132f6a563ddc6b6c4d75fbc6bda695df5891a651fd8bdf14db5417bbef5665fda52eecf4c653486ce54814a94e3d314469c4c6d8f81b1a4f55d8191caae9cf6391e36a0735cea4a2815066a462e7ee2435e133b3f285dc799da4c345c72fa2aa70cd78577d964ee797591a3863d92201810c09fca967159bf18476be4c364c18c78d68ffca6213f9ace1c1bbe793e8b50d0cb99471e040938d7918b4c725748dad11a1e49151ec27af0adf214f4567f035bfb4714a030926d5b781b2d8386b53a66a0f7ec75dfc1a11f36234fc9deb4ae6d571ba8671cdd054d696e4bdfeabf42a4bcb0bde09cf39a1005327c6fb0050c8de2279a580d8775c120d373c83c191d9e05924c5a56a99bd8880257cdb821aefa04411906e5003f7fb8c85b89754ac5c1c2d307dd94a0ad8f45af7b86d7fa4d8d2b9a00e96c6bdd0e9557fbdee007607b8c308a16e0717cc5974573caeef2e3be248f806c4c9ad01e10589c0e258c28391285223d45c008e694f48678fd483e8b2487355d9e9dd93542217c76798b64f68ab6bf53556f424cdca2c7d53173dd8780b79b11cc3bb9d3c95fe6c8cbc569f3ec4c510ee6a410211e50214dfb2fe714b4989cd36885935bb864873079d189844f83dfb0a74a6f3605d319f7b94184820b98e82f18681233f4e356c208c6ef1f2abbf06bc34c53f1d0c1f8c9b890300f5fc543eb7ef96bafbf539c89d3e887d03bd41a8ee5e4a8723bc4119cc158dc8b299fdce729b809d389ec9b438b18c79255bb27f3dcac77368188721eb5b4ee0173559dce79a744f538d2eb161b1a0b159aa5cd1d1af65a0348bfb0e2f6af63257e31f59ec9a160e0a20fdc2a422f24da63886d472211722fdb7c33066b1b15429f315ddf2e92764a6252eaedd8d79a2c5a70ed6ae46cf25b7fd704508bbf27b064193871f84bccc4dea75163cc6a921427f314855bf450bf3d108d64aa0f237d2f2b74aed57f7f5c567bc31b77a23cbe992c7200c1e2fa25ff3ea2195091e14a23191a50096662b6a2ea977db945ba5b11073e096eb2362e4eb35d954d5997bab872d9f574fb23e57c1d34501193614b2ea8da62aef9e919a2d347f309d644821850754a20533f208e68479751fbbe7d821614bba8cbd740f6d9b67af83a851faefe2344d1e1f9e0a4cd675cdef759aab131353ac213b74927b4429b1b27a8ed3d34fedaa48fb87bd6bc88edfc134e68b8cb8c4b486479e8e3fadd944bf129291c7c8e524762902bf83605a85131dcd816a60ef280db21bbf9ded8c1e82664c6c65b5959d5c17a87b27bb6e557eb3bb4e1ee3018e27511630a52723f55b029b6a3a85f60202b136118da1eb3f1d24836025169b96fde661351dcf4c064b62d6046ce8a109e9b173d467bb41ba5b5886c00e36d70bf4cb33e5869bfc8f196cd3a13ac190b442885008e357b295ab74d83060a80c099851d42359e6a2f80f8a716e3ca7c43e84254a27e2904c0c4925b9305f7011d94908945f4a86000d8d67ec9156b452d23bbfecb234d9bbf40e759b0db9e69e79125d3caa29d9620ec0e07b96ff51cb4332ec3769cc43e1583a2f8e4c257c3e4bf4d02f43fe7584a45d89f780895b2b504523803d57e3d69ad13847fe543706afebf9812b36a55bb5d3f33502db4758899c5d0598ee4f4f4dbf33bff6b9378745030c4c347635ead95bb11bae6d68df9b94255b373e67cb56e7a8b8c3f10ef8172925beedd4be18ace0615e7675f31974ce628c8663bcacc98ffe288d033396e7c90f797154bcb3fdacd65ed85385465bb8b1091e6a9cd8b3383abf42e273174ff95e8c3101c9a26387e347caf7bb9553f18e273bdf9b9e1d1bcb7414255cb3e25e26753e020435452a6dd7ead20480b83f6462c2f8b25194693318fd15474b4df5ae94d7e80e2e918d7a21222b493dee2b40a4fe7d6eea8b34e5936624a57cbad1d48654ae4b747ecc725103438a2e437ff6e915d877faa460356218e1d515b81db922edd8bf836a33332327d0888414cf89f3cdf1ac733b2b6eae58163ee379b510ff80ed080101b84e078346a6e1c0409ac9b7fcf505ac1e324c9867322d65e332b39ae507ac7a798a3a709ce6337e403bd5425e3f432bcabdf2b8d7651b2736da122a63ffcb2f2fdc5a8e32a8d0e30f618a912cc31232a168247dcb55137dbccef1ae358e9233b5c3a4e9d8d8852a013f7009e2fcf8bf880b436ce18352834a62c334fb1b91d98ff1cfd10cc656ad93d20aecf943be909db12de611b90075736359f96ef5417b013ce453cea5fb9dc655a7783faa93da1655ba81ca2752d64fff740ee51056ea15b653d00de8d3f0d02bfc68f4ea57cda475b2a0736553674c1446239bd875880c4cd6b8cd44a74167fa7b67c794b381dfde40dd1e7ef19671fc242da763bb441ba7059da9e1721665fc8acbc4ce604b31468a3cff74e2d6a07fdec83d8199533605c2c5f39282728973701b7ecb928da2b1788ea7a3862f67c1571be7a9e5272effb0de003feeb7744c730079b33d8a52efd313c5b9ede3ff5ba5f0d717ac6df3bd1681d69af0b7a318063005f0e579dc6e9795f8d0ffae4fc01d44c7fb99e920e681c9600b0810e5d6e926e1a7e521d7a87ed30493be2fad0d436fa9bd416b66fc99817b5814b9368c81c48637a879a5b08fc6c6e5f5f4fc5286a931e20e1bbd5e20a24d5f8b5454673b439a733d72b589ca892cc1db32274559fe6d3a3f722b8c5084b4f41d92dbaed74ee5fd7ceebb2539ec0018929cf00cd26365f626310bf1006c264c6d2ce716fa919c81eee039af0d2a43169c43eafc412907494d3cbd8249cdb71db852cd8985a7302825f998982eb49b095aa02bbc5148daf225d5c0d5e959173bc845a96b9f58c86ad51085cd47d70ce3a9a3c863cd50188ac4f5c86a7319baa78a2e7eb903a2e5dcc3ba9030557db40400e3fa66a2eb37b27b5ef416df247c3c4f3fea25027b841b27649723af692e8b223eeb07f15d16bcc7150e2236b18be586bd9137ae7032bbfff2c39b6a54e68ed5c178383ab743186b6e3d4aaa689f5c0007246c6c69a63aa1962700cb02359fe2c5b7279c266f3c5cbd64756ac74f836f6f04323253422bcadd335962724db57981063598363437687e2b9f7908920bb668e29785021e09c03c86b682da937922ad2c5b15dfb1e36c04968d8f1b1317176c6fd75546135f06e1a27032bd230a85047713ad118fa5a022366f50fbf9425ab29aa71428dd8e8405b401b2f7c818c23a41dd9936bc73aef0b79b6ae1b87efa1f90432f922e78c6063c4297728ead8e2a9e5d7141248f3ff9c062f6491046769a576a7211a6da402e107c9586d8025bb7013140ea256932565457f1af991d32a68b5e087b1054372a04d135fc7b69c9761937287587df19e3bfda1d40efe74678d98e6840b8389247dcc4e0a3399f0a4fc741b124653013c27cb8ca2b0d4da0d89ca04e8dde545e2455e3587f5b0da31c7c47a1dc00938731d9ccdaddda526eb01d87fa2e7ddca11e3ebb564fee9800b2bb7940c6e41c258d9ab768d03a2ecd770457aea042ef56118e6106abdcee493eb1c9d5c27042d1226e0304e7b1409d60a34e52931efc946b47705b61148bdf4acf6d1a8a1f03bf9ff6b47dd9443535a9513c6f25c8ab63d8afb4b5ae0844c2e50be17c26db6ba5838876105e9047005ba42404a1695a88c891ff1791526ae6a246b8a35d13ccb010f3f9c5bcb", 0x2000, &(0x7f0000004fc0)={&(0x7f0000004540)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x1, 0x40009028, 0x4, 0x1, 0xb, 0xb0, 0x0, 0x0, 0x20, 0x1}}, &(0x7f00000045c0)={0x18, 0xffffffffffffffda, 0x1, {0x8}}, &(0x7f0000004600)={0x18, 0x0, 0xa7, {0x4}}, &(0x7f0000004640)={0x18, 0x0, 0x9c, {0xfffffffd}}, &(0x7f0000004680)={0x18, 0xfffffffffffffffe, 0x4000000000000000, {0x1}}, &(0x7f00000046c0)={0x28, 0x0, 0x7, {{0x9, 0x4, 0x0, r5}}}, &(0x7f0000004700)={0x60, 0x0, 0x1, {{0x3, 0xe, 0x9, 0xff, 0x3, 0xffff0000, 0x401, 0x9}}}, &(0x7f0000004780)={0x18, 0x0, 0x1, {0x7}}, &(0x7f00000047c0)={0x13, 0x0, 0xc0000000000000, {'E&\x00'}}, &(0x7f0000004800)={0x20, 0x0, 0xb}, &(0x7f0000004840)={0x78, 0x0, 0x625f, {0x2, 0xfffffff1, 0x0, {0x1, 0x5, 0x4, 0x100000000, 0x0, 0x7, 0x7, 0x2, 0x3, 0xc000, 0x7, r8, r9, 0xecf1, 0x3d}}}, &(0x7f0000004a00)={0x90, 0x0, 0xb, {0x1, 0x0, 0x8000000000000001, 0x4, 0x3, 0x9, {0x3, 0x7, 0x422be0fa, 0x9, 0x40, 0x6, 0x86f, 0x2, 0x7, 0x8000, 0x1, r8, r10, 0x0, 0x40}}}, &(0x7f0000004ac0)={0x50, 0x0, 0x8000, [{0x3, 0x4, 0x2, 0x2, '!)'}, {0x3, 0x8, 0x3, 0x2, ':^*'}]}, &(0x7f0000004c00)={0xb0, 0x0, 0x8000000000000001, [{{0x0, 0x3, 0x100, 0x200, 0x1, 0x5, {0x4, 0xae3, 0x80000001, 0x7, 0x4, 0x5, 0x10000, 0xfffffff9, 0x5, 0x6000, 0xfffff339, r8, r11, 0xb7, 0x6}}, {0x6, 0xdc, 0x8, 0x2, 'nl80211\x00'}}]}, &(0x7f0000004cc0)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0x10, 0x8, 0x8, 0x10, {0x5, 0x6, 0x66a, 0x8, 0x4, 0x2, 0x1000, 0x4, 0x4, 0x2000, 0x1, r8, r9, 0x4, 0xffff}}, {0x0, 0x11}}}, &(0x7f0000004d80)={0x20, 0x0, 0x2, {0x6, 0x0, 0x8, 0xa8e4}}, &(0x7f0000004e80)={0x130, 0x0, 0x3, {0x45da, 0xe2, 0x0, '\x00', {0x20, 0x88, 0x9, 0xef1, r8, r12, 0x6000, '\x00', 0xfffffffffffff001, 0x1, 0x7fff, 0xffffffffffffff5a, {0x7, 0x12000}, {0x7, 0x6}, {0x0, 0xea4}, {0x400, 0x665a}, 0x200, 0xa, 0x68, 0x1}}}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000005080), r13) (async) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r14, 0x112, 0xa, &(0x7f00000050c0)=0x5, &(0x7f0000005100)=0x4) kernel console output (not intermixed with test programs): [ 53.252265][ T40] audit: type=1400 audit(1765087926.758:60): avc: denied { rlimitinh } for pid=5918 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.260369][ T40] audit: type=1400 audit(1765087926.758:61): avc: denied { siginh } for pid=5918 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.594294][ T24] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:59246' (ED25519) to the list of known hosts. [ 386.358456][ T40] audit: type=1400 audit(1765088259.878:62): avc: denied { name_bind } for pid=5983 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 386.391583][ T40] audit: type=1400 audit(1765088259.908:63): avc: denied { execute } for pid=5984 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 386.399415][ T40] audit: type=1400 audit(1765088259.928:64): avc: denied { execute_no_trans } for pid=5984 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 388.423494][ T40] audit: type=1400 audit(1765088261.958:65): avc: denied { mounton } for pid=5984 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 388.431335][ T40] audit: type=1400 audit(1765088261.958:66): avc: denied { mount } for pid=5984 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 388.433255][ T5984] cgroup: Unknown subsys name 'net' [ 388.443746][ T40] audit: type=1400 audit(1765088261.968:67): avc: denied { unmount } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 388.635464][ T5984] cgroup: Unknown subsys name 'cpuset' [ 388.639372][ T5984] cgroup: Unknown subsys name 'rlimit' [ 388.794328][ T40] audit: type=1400 audit(1765088262.318:68): avc: denied { setattr } for pid=5984 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.801573][ T40] audit: type=1400 audit(1765088262.318:69): avc: denied { create } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.808340][ T40] audit: type=1400 audit(1765088262.318:70): avc: denied { write } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.815166][ T40] audit: type=1400 audit(1765088262.318:71): avc: denied { read } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.858297][ T5986] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 389.579183][ T5984] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 393.032238][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 393.032248][ T40] audit: type=1400 audit(1765088266.548:82): avc: denied { execmem } for pid=5991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 393.230957][ T40] audit: type=1400 audit(1765088266.748:83): avc: denied { create } for pid=5996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.238278][ T40] audit: type=1400 audit(1765088266.748:84): avc: denied { read write } for pid=5996 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 393.253379][ T40] audit: type=1400 audit(1765088266.748:85): avc: denied { open } for pid=5996 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 393.256403][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.261773][ T40] audit: type=1400 audit(1765088266.768:86): avc: denied { ioctl } for pid=5996 comm="syz-executor" path="socket:[6490]" dev="sockfs" ino=6490 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.265279][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.267941][ T6009] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.268539][ T6009] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.268799][ T6009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.272678][ T6009] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.274115][ T5297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.276155][ T6009] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.278470][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.287496][ T6012] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.290113][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.293332][ T6009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.295360][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.297157][ T6010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.297807][ T6009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.298054][ T6009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.303672][ T6009] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.304722][ T40] audit: type=1400 audit(1765088266.838:87): avc: denied { read } for pid=5996 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 393.314061][ T6009] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.318537][ T40] audit: type=1400 audit(1765088266.838:88): avc: denied { open } for pid=5996 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 393.323266][ T6009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.329479][ T40] audit: type=1400 audit(1765088266.838:89): avc: denied { mounton } for pid=5996 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 393.332915][ T6000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.548450][ T40] audit: type=1400 audit(1765088267.068:90): avc: denied { module_request } for pid=5996 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 393.602610][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 393.698014][ T5998] chnl_net:caif_netlink_parms(): no params data found [ 393.712074][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.714978][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.717466][ T5996] bridge_slave_0: entered allmulticast mode [ 393.720379][ T5996] bridge_slave_0: entered promiscuous mode [ 393.747587][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.750436][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.753637][ T5996] bridge_slave_1: entered allmulticast mode [ 393.756722][ T5996] bridge_slave_1: entered promiscuous mode [ 393.821266][ T5995] chnl_net:caif_netlink_parms(): no params data found [ 393.826682][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 393.849203][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.865667][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.928877][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.931990][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.935499][ T5998] bridge_slave_0: entered allmulticast mode [ 393.939278][ T5998] bridge_slave_0: entered promiscuous mode [ 393.966294][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.969275][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.972363][ T5998] bridge_slave_1: entered allmulticast mode [ 393.976661][ T5998] bridge_slave_1: entered promiscuous mode [ 393.986708][ T5996] team0: Port device team_slave_0 added [ 394.020963][ T5996] team0: Port device team_slave_1 added [ 394.062365][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.073131][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.076196][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.078526][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.080870][ T5995] bridge_slave_0: entered allmulticast mode [ 394.083799][ T5995] bridge_slave_0: entered promiscuous mode [ 394.092321][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.095339][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.097651][ T5997] bridge_slave_0: entered allmulticast mode [ 394.100307][ T5997] bridge_slave_0: entered promiscuous mode [ 394.113678][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.116019][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.118491][ T5995] bridge_slave_1: entered allmulticast mode [ 394.121185][ T5995] bridge_slave_1: entered promiscuous mode [ 394.124408][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.126627][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.134972][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.138926][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.141188][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.143679][ T5997] bridge_slave_1: entered allmulticast mode [ 394.146333][ T5997] bridge_slave_1: entered promiscuous mode [ 394.167236][ T5998] team0: Port device team_slave_0 added [ 394.169960][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.172632][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.182102][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.200149][ T5998] team0: Port device team_slave_1 added [ 394.217362][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.243736][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.247786][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.251834][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.254818][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.265345][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.271524][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.294232][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.297202][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.307028][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.341741][ T5995] team0: Port device team_slave_0 added [ 394.345031][ T5997] team0: Port device team_slave_0 added [ 394.351234][ T5996] hsr_slave_0: entered promiscuous mode [ 394.353960][ T5996] hsr_slave_1: entered promiscuous mode [ 394.357969][ T5995] team0: Port device team_slave_1 added [ 394.360954][ T5997] team0: Port device team_slave_1 added [ 394.414914][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.417041][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.425153][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.429151][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.432118][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.442704][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.453112][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.456089][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.466728][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.474171][ T5998] hsr_slave_0: entered promiscuous mode [ 394.476447][ T5998] hsr_slave_1: entered promiscuous mode [ 394.478555][ T5998] debugfs: 'hsr0' already exists in 'hsr' [ 394.480580][ T5998] Cannot create hsr debugfs directory [ 394.483022][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.485620][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.495597][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.607422][ T5997] hsr_slave_0: entered promiscuous mode [ 394.610430][ T5997] hsr_slave_1: entered promiscuous mode [ 394.613599][ T5997] debugfs: 'hsr0' already exists in 'hsr' [ 394.616002][ T5997] Cannot create hsr debugfs directory [ 394.630637][ T5995] hsr_slave_0: entered promiscuous mode [ 394.634370][ T5995] hsr_slave_1: entered promiscuous mode [ 394.636891][ T5995] debugfs: 'hsr0' already exists in 'hsr' [ 394.639180][ T5995] Cannot create hsr debugfs directory [ 394.789958][ T5996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.813318][ T5996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.836753][ T5996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.840784][ T5996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.917087][ T5998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.921557][ T5998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.927415][ T5998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.934052][ T5998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.989046][ T5997] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.996873][ T5997] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.004235][ T5997] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.008472][ T5997] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.069339][ T5995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 395.076642][ T5995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 395.085475][ T5995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 395.090885][ T5995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 395.099710][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.128056][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.147930][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.150332][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.160224][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.169589][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.172339][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.195778][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.218604][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.221233][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.228983][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.244130][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.246411][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.259264][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.276503][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.278842][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.297866][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.300210][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.309407][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.313507][ T5297] Bluetooth: hci0: command tx timeout [ 395.313512][ T6000] Bluetooth: hci3: command tx timeout [ 395.317741][ T40] audit: type=1400 audit(1765088268.838:91): avc: denied { sys_module } for pid=5996 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 395.344038][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.360898][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.363201][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.366752][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.369653][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.393563][ T5297] Bluetooth: hci1: command tx timeout [ 395.403582][ T5297] Bluetooth: hci2: command tx timeout [ 395.412335][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.440741][ T5996] veth0_vlan: entered promiscuous mode [ 395.454697][ T5996] veth1_vlan: entered promiscuous mode [ 395.470973][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.480908][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.500785][ T5996] veth0_macvtap: entered promiscuous mode [ 395.510856][ T5996] veth1_macvtap: entered promiscuous mode [ 395.534592][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.551117][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.555407][ T5997] veth0_vlan: entered promiscuous mode [ 395.573292][ T6069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.579004][ T5998] veth0_vlan: entered promiscuous mode [ 395.581077][ T6069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.585156][ T6069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.593705][ T5997] veth1_vlan: entered promiscuous mode [ 395.596463][ T6069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.611423][ T5998] veth1_vlan: entered promiscuous mode [ 395.621231][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.676231][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.680161][ T5997] veth0_macvtap: entered promiscuous mode [ 395.680406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.701372][ T5998] veth0_macvtap: entered promiscuous mode [ 395.706735][ T5997] veth1_macvtap: entered promiscuous mode [ 395.721063][ T5998] veth1_macvtap: entered promiscuous mode [ 395.738012][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.738796][ T5995] veth0_vlan: entered promiscuous mode [ 395.741409][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.756025][ T5995] veth1_vlan: entered promiscuous mode [ 395.762319][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.771258][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.783738][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.791021][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.796155][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.802035][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.805663][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.811626][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.814128][ T5996] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 395.828341][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.831742][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.838481][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.841370][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.845866][ T5995] veth0_macvtap: entered promiscuous mode [ 395.856696][ T5995] veth1_macvtap: entered promiscuous mode [ 395.889148][ T6091] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 395.891449][ T6091] overlayfs: failed to set xattr on upper [ 395.893347][ T6091] overlayfs: ...falling back to redirect_dir=nofollow. [ 395.895769][ T6091] overlayfs: ...falling back to index=off. [ 395.897633][ T6091] overlayfs: ...falling back to uuid=null. [ 395.903330][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.933437][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.940011][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.947369][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.964955][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5'. [ 395.967842][ T6094] netlink: 'syz.0.5': attribute type 7 has an invalid length. [ 395.970294][ T6094] netlink: 'syz.0.5': attribute type 8 has an invalid length. [ 395.972863][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.972888][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 395.975981][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.984597][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.987719][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.993464][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.995892][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.007585][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.011879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.057445][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.060262][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.099443][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.114050][ T6105] capability: warning: `syz.0.7' uses deprecated v2 capabilities in a way that may be insecure [ 396.114326][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.115263][ T6101] fuse: Bad value for 'group_id' [ 396.115274][ T6101] fuse: Bad value for 'group_id' [ 396.119236][ T6106] /dev/sg0: Can't lookup blockdev [ 396.156117][ T6103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.189196][ T6103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.199235][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.203310][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.209313][ T6103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 396.239936][ T6103] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.269936][ T6103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.279855][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 396.296673][ T6103] 8021q: adding VLAN 0 to HW filter on device bond6 [ 396.316606][ T6103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 396.343767][ T6103] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.358526][ T6103] 8021q: adding VLAN 0 to HW filter on device bond9 [ 396.373848][ T6103] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.405070][ T6103] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.448950][ T6134] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.12'. [ 396.449330][ T6103] 8021q: adding VLAN 0 to HW filter on device bond12 [ 396.466215][ T6103] 8021q: adding VLAN 0 to HW filter on device bond13 [ 396.492104][ T6103] 8021q: adding VLAN 0 to HW filter on device bond14 [ 396.518292][ T6103] 8021q: adding VLAN 0 to HW filter on device bond15 [ 396.530971][ T6103] 8021q: adding VLAN 0 to HW filter on device bond16 [ 396.565249][ T6103] 8021q: adding VLAN 0 to HW filter on device bond17 [ 396.588108][ T6103] 8021q: adding VLAN 0 to HW filter on device bond18 [ 396.601189][ T6143] "syz.1.14" (6143) uses obsolete ecb(arc4) skcipher [ 396.611563][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 396.621984][ T6103] 8021q: adding VLAN 0 to HW filter on device bond19 [ 396.637517][ T6103] 8021q: adding VLAN 0 to HW filter on device bond20 [ 396.649896][ T6103] 8021q: adding VLAN 0 to HW filter on device bond21 [ 396.663218][ T6103] 8021q: adding VLAN 0 to HW filter on device bond22 [ 396.677411][ T6103] 8021q: adding VLAN 0 to HW filter on device bond23 [ 396.717693][ T6103] 8021q: adding VLAN 0 to HW filter on device bond24 [ 396.737496][ T6103] 8021q: adding VLAN 0 to HW filter on device bond25 [ 396.757341][ T6103] 8021q: adding VLAN 0 to HW filter on device bond26 [ 396.761018][ T6158] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.767137][ T6159] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.784907][ T6103] 8021q: adding VLAN 0 to HW filter on device bond27 [ 396.809442][ T6103] 8021q: adding VLAN 0 to HW filter on device bond28 [ 396.826587][ T6103] 8021q: adding VLAN 0 to HW filter on device bond29 [ 396.840433][ T6103] 8021q: adding VLAN 0 to HW filter on device bond30 [ 396.852457][ T6103] 8021q: adding VLAN 0 to HW filter on device bond31 [ 396.867686][ T6103] 8021q: adding VLAN 0 to HW filter on device bond32 [ 396.891476][ T6103] 8021q: adding VLAN 0 to HW filter on device bond33 [ 397.119674][ T6186] netlink: 'syz.1.22': attribute type 2 has an invalid length. [ 397.245139][ T6182] ALSA: seq fatal error: cannot create timer (-16) [ 397.271254][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 397.283901][ T6215] binder: 6214:6215 ioctl 40046205 0 returned -22 [ 397.286994][ T6215] binder: 6214:6215 ioctl c0306201 200000000300 returned -11 [ 397.290707][ T6211] process 'syz.2.31' launched './file0' with NULL argv: empty string added [ 397.357069][ T6221] syz.2.35: vmalloc error: size 4294950912, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 397.372880][ T6221] CPU: 0 UID: 0 PID: 6221 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 397.372898][ T6221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 397.372905][ T6221] Call Trace: [ 397.372909][ T6221] [ 397.372915][ T6221] dump_stack_lvl+0x16c/0x1f0 [ 397.372949][ T6221] warn_alloc+0x248/0x3a0 [ 397.372963][ T6221] ? __pfx_warn_alloc+0x10/0x10 [ 397.372974][ T6221] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 397.372989][ T6221] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.373003][ T6221] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 397.373020][ T6221] ? kasan_save_stack+0x42/0x60 [ 397.373032][ T6221] ? kasan_save_stack+0x33/0x60 [ 397.373044][ T6221] ? kasan_save_track+0x14/0x30 [ 397.373058][ T6221] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.373071][ T6221] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 397.373087][ T6221] ? do_syscall_64+0xcd/0xf80 [ 397.373101][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.373116][ T6221] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.373130][ T6221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.373151][ T6221] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.373162][ T6221] vmalloc_user_noprof+0x9e/0xe0 [ 397.373177][ T6221] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.373189][ T6221] vb2_vmalloc_alloc+0x135/0x410 [ 397.373200][ T6221] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 397.373211][ T6221] __vb2_queue_alloc+0x8c9/0x1280 [ 397.373235][ T6221] vb2_core_create_bufs+0x559/0xab0 [ 397.373254][ T6221] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 397.373274][ T6221] ? __pfx___might_resched+0x10/0x10 [ 397.373288][ T6221] vb2_create_bufs+0x5e8/0x840 [ 397.373306][ T6221] ? __pfx_vb2_create_bufs+0x10/0x10 [ 397.373322][ T6221] ? v4l_sanitize_format+0x18d/0x430 [ 397.373337][ T6221] vb2_ioctl_create_bufs+0x244/0x3e0 [ 397.373354][ T6221] ? check_fmt+0x234/0x910 [ 397.373365][ T6221] v4l_create_bufs+0x151/0x260 [ 397.373378][ T6221] __video_do_ioctl+0xb77/0xf00 [ 397.373393][ T6221] ? __might_fault+0xe3/0x190 [ 397.373403][ T6221] ? __pfx___video_do_ioctl+0x10/0x10 [ 397.373422][ T6221] video_usercopy+0x4d0/0x16c0 [ 397.373437][ T6221] ? __pfx___video_do_ioctl+0x10/0x10 [ 397.373450][ T6221] ? selinux_kernel_read_file+0xb0/0x120 [ 397.373473][ T6221] ? __pfx_video_usercopy+0x10/0x10 [ 397.373495][ T6221] v4l2_ioctl+0x1bd/0x250 [ 397.373509][ T6221] ? __pfx_v4l2_ioctl+0x10/0x10 [ 397.373523][ T6221] __x64_sys_ioctl+0x18e/0x210 [ 397.373538][ T6221] do_syscall_64+0xcd/0xf80 [ 397.373555][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.373567][ T6221] RIP: 0033:0x7fc0f498f7c9 [ 397.373576][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.373587][ T6221] RSP: 002b:00007fc0f588c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.373598][ T6221] RAX: ffffffffffffffda RBX: 00007fc0f4be5fa0 RCX: 00007fc0f498f7c9 [ 397.373605][ T6221] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000006 [ 397.373612][ T6221] RBP: 00007fc0f4a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.373618][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.373624][ T6221] R13: 00007fc0f4be6038 R14: 00007fc0f4be5fa0 R15: 00007ffef4fbab48 [ 397.373638][ T6221] [ 397.373642][ T6221] Mem-Info: [ 397.394553][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 397.395760][ T6221] active_anon:10324 inactive_anon:0 isolated_anon:93 [ 397.395760][ T6221] active_file:1456 inactive_file:40637 isolated_file:0 [ 397.395760][ T6221] unevictable:1768 dirty:1652 writeback:0 [ 397.395760][ T6221] slab_reclaimable:11811 slab_unreclaimable:67664 [ 397.395760][ T6221] mapped:27086 shmem:5244 pagetables:1137 [ 397.395760][ T6221] sec_pagetables:307 bounce:0 [ 397.395760][ T6221] kernel_misc_reclaimable:0 [ 397.395760][ T6221] free:463725 free_pcp:22749 free_cma:0 [ 397.402845][ T5297] Bluetooth: hci3: command tx timeout [ 397.402867][ T6000] Bluetooth: hci0: command tx timeout [ 397.405272][ T6221] Node 0 active_anon:41668kB inactive_anon:0kB active_file:5824kB inactive_file:162340kB unevictable:3536kB isolated(anon):372kB isolated(file):0kB mapped:108344kB dirty:6592kB writeback:0kB shmem:17440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:4372kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 397.405321][ T6221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 397.409647][ T6225] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 397.412397][ T6221] Node 0 [ 397.482829][ T6000] Bluetooth: hci2: command tx timeout [ 397.482853][ T5297] Bluetooth: hci1: command tx timeout [ 397.485939][ T6221] DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.562992][ T6221] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 397.568466][ T6221] Node 0 DMA32 free:220456kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41668kB inactive_anon:0kB active_file:5824kB inactive_file:162340kB unevictable:3536kB writepending:6592kB zspages:0kB present:2080628kB managed:1265320kB mlocked:0kB bounce:0kB free_pcp:78608kB local_pcp:36280kB free_cma:0kB [ 397.579760][ T6221] lowmem_reserve[]: 0 0 0 0 0 [ 397.581351][ T6221] Node 1 Normal free:1616920kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB writepending:16kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:12652kB local_pcp:4648kB free_cma:0kB [ 397.592849][ T6221] lowmem_reserve[]: 0 0 0 0 0 [ 397.595225][ T6221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 397.600142][ T6221] Node 0 DMA32: 40*4kB (ME) 137*8kB (UM) 292*16kB (UME) 13*32kB (UME) 12*64kB (UME) 40*128kB (UME) 15*256kB (ME) 9*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 46*4096kB (M) = 220360kB [ 397.606957][ T6221] Node 1 Normal: 4*4kB (ME) 5*8kB (E) 6*16kB (ME) 30*32kB (UME) 19*64kB (UME) 12*128kB (UME) 3*256kB (UE) 9*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 391*4096kB (M) = 1616920kB [ 397.613663][ T6221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.617812][ T6221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.621661][ T6221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.625644][ T6221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.629608][ T6221] 47333 total pagecache pages [ 397.631635][ T6221] 0 pages in swap cache [ 397.633020][ T6221] Free swap = 124996kB [ 397.634821][ T6221] Total swap = 124996kB [ 397.636610][ T6221] 1048443 pages RAM [ 397.638790][ T6221] 0 pages HighMem/MovableOnly [ 397.640832][ T6221] 282802 pages reserved [ 397.642688][ T6221] 0 pages cma reserved [ 397.716981][ T6250] warning: `syz.2.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 397.832687][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 397.836297][ T6095] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 397.839869][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 397.850686][ T6216] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.850775][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 397.853533][ T6216] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.856524][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 397.860765][ T6216] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.867286][ T6216] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.871853][ T6257] Zero length message leads to an empty skb [ 397.911200][ T6262] rdma_op ffff8880581449f0 conn xmit_rdma 0000000000000000 [ 397.960643][ T6267] binder: BINDER_SET_CONTEXT_MGR already set [ 397.963377][ T6267] binder: 6266:6267 ioctl 40046207 0 returned -16 [ 398.013137][ T6095] usb 8-1: Using ep0 maxpacket: 16 [ 398.017647][ T6095] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 398.020949][ T6095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 398.027123][ T6095] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d9 [ 398.030939][ T6095] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.034200][ T6095] usb 8-1: Product: syz [ 398.036145][ T6095] usb 8-1: Manufacturer: syz [ 398.038107][ T6095] usb 8-1: SerialNumber: syz [ 398.045608][ T6095] usb 8-1: config 0 descriptor?? [ 398.064081][ T6095] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 398.067042][ T6095] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 398.079554][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 398.079568][ T40] audit: type=1400 audit(1765612559.588:217): avc: denied { create } for pid=6275 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 398.109672][ T40] audit: type=1400 audit(1765612559.588:218): avc: denied { write } for pid=6275 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.link" dev="tmpfs" ino=2189 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 398.125845][ T40] audit: type=1400 audit(1765612559.588:219): avc: denied { append } for pid=6275 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" dev="tmpfs" ino=2189 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 398.136452][ T6280] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 398.139055][ T6280] netlink: 'syz.1.53': attribute type 2 has an invalid length. [ 398.141744][ T40] audit: type=1400 audit(1765612559.646:220): avc: denied { unlink } for pid=6278 comm="rm" name="resolv.conf.lapb5.link" dev="tmpfs" ino=2189 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 398.156782][ T6281] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 398.157039][ T40] audit: type=1400 audit(1765612559.665:221): avc: denied { create } for pid=6282 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.169590][ T6281] netlink: 'syz.1.53': attribute type 2 has an invalid length. [ 398.173076][ T40] audit: type=1400 audit(1765612559.675:222): avc: denied { create } for pid=6279 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 398.183390][ T40] audit: type=1400 audit(1765612559.685:223): avc: denied { write } for pid=6282 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.190177][ T40] audit: type=1400 audit(1765612559.694:224): avc: denied { create } for pid=6282 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.196469][ T40] audit: type=1400 audit(1765612559.694:225): avc: denied { setopt } for pid=6282 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.243906][ T6280] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 398.246382][ T6280] overlayfs: failed to set xattr on upper [ 398.257048][ T40] audit: type=1400 audit(1765612559.752:226): avc: denied { read append } for pid=6282 comm="syz.0.54" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 398.257098][ T6280] overlayfs: ...falling back to redirect_dir=nofollow. [ 398.269818][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.272910][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.276141][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.280845][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.284036][ T6280] overlayfs: ...falling back to index=off. [ 398.285987][ T6280] overlayfs: ...falling back to uuid=null. [ 398.286352][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.293653][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.294474][ T6280] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 398.298105][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.306019][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.309219][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.312161][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.432353][ T6303] overlay: Unknown parameter 'fsname' [ 398.599060][ T6095] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 398.619118][ T6324] overlayfs: workdir and upperdir must be separate subtrees [ 398.668734][ T6095] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 398.671845][ T6095] em28xx 8-1:0.0: board has no eeprom [ 398.732152][ T6095] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 398.741757][ T6095] em28xx 8-1:0.0: dvb set to bulk mode. [ 398.745114][ T6099] em28xx 8-1:0.0: Binding DVB extension [ 398.764674][ T6095] usb 8-1: USB disconnect, device number 2 [ 398.768355][ T6095] em28xx 8-1:0.0: Disconnecting em28xx [ 398.788292][ T6099] em28xx 8-1:0.0: Registering input extension [ 398.791025][ T6095] em28xx 8-1:0.0: Closing input extension [ 398.816969][ T6095] em28xx 8-1:0.0: Freeing device [ 398.930314][ T6358] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 399.150730][ T6374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6374 comm=syz.1.73 [ 399.229447][ T6377] kernel profiling enabled (shift: 63) [ 399.232263][ T6377] profiling shift: 63 too large [ 399.240933][ T6377] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 399.254887][ T6377] team0: Failed to send options change via netlink (err -105) [ 399.258808][ T6377] team0: Port device dummy0 added [ 399.534889][ T6000] Bluetooth: hci0: command tx timeout [ 399.535402][ T5297] Bluetooth: hci3: command tx timeout [ 399.617258][ T6000] Bluetooth: hci1: command tx timeout [ 399.617254][ T5297] Bluetooth: hci2: command tx timeout [ 400.003148][ T6397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 400.011881][ T6397] bridge_slave_1: left allmulticast mode [ 400.014280][ T6397] bridge_slave_1: left promiscuous mode [ 400.017509][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.028725][ T6397] bridge_slave_0: left allmulticast mode [ 400.030770][ T6397] bridge_slave_0: left promiscuous mode [ 400.032781][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.094068][ T6405] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 400.096543][ T6405] netlink: 'syz.2.85': attribute type 4 has an invalid length. [ 400.267787][ T6421] tipc: Started in network mode [ 400.270026][ T6421] tipc: Node identity 7f000001, cluster identity 4711 [ 400.273701][ T6421] tipc: Enabled bearer , priority 10 [ 400.397632][ T6433] fuse: Bad value for 'user_id' [ 400.399823][ T6433] fuse: Bad value for 'user_id' [ 400.461466][ T6430] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 400.835320][ T6454] Unknown options in mask b7f2 [ 401.030574][ T6464] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 401.091457][ T6472] __nla_validate_parse: 9 callbacks suppressed [ 401.091469][ T6472] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.99'. [ 401.390427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 401.602608][ T10] tipc: Node number set to 2130706433 [ 401.650965][ T6000] Bluetooth: hci3: command tx timeout [ 401.660361][ T6000] Bluetooth: hci0: command tx timeout [ 401.694056][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 401.697808][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.103'. [ 401.713272][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 401.717583][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.103'. [ 401.721734][ T6482] netlink: 104 bytes leftover after parsing attributes in process `syz.1.103'. [ 401.730384][ T6000] Bluetooth: hci2: command tx timeout [ 401.730439][ T5297] Bluetooth: hci1: command tx timeout [ 401.855271][ T6497] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.972145][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 402.013407][ T6512] hsr_slave_0 (unregistering): left promiscuous mode [ 402.025944][ T6516] syzkaller0: entered promiscuous mode [ 402.027963][ T6516] syzkaller0: entered allmulticast mode [ 402.127700][ T6522] Malformed UNC in devname [ 402.127700][ T6522] [ 402.129897][ T6522] CIFS: VFS: Malformed UNC in devname [ 402.133758][ T6523] Malformed UNC in devname [ 402.133758][ T6523] [ 402.136723][ T6523] CIFS: VFS: Malformed UNC in devname [ 402.194502][ T6525] netlink: 96 bytes leftover after parsing attributes in process `syz.2.115'. [ 402.480276][ T6097] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 402.630272][ T6097] usb 7-1: Using ep0 maxpacket: 16 [ 402.635280][ T6097] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 402.638388][ T6097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.641021][ T6097] usb 7-1: Product: syz [ 402.642297][ T6097] usb 7-1: Manufacturer: syz [ 402.643968][ T6097] usb 7-1: SerialNumber: syz [ 402.649738][ T6097] r8152-cfgselector 7-1: Unknown version 0x0000 [ 402.652002][ T6097] r8152-cfgselector 7-1: config 0 descriptor?? [ 402.761602][ T6533] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 402.775048][ T6530] SELinux: ebitmap: truncated map [ 402.776121][ T6534] XFS (nbd3): SB validate failed with error -5. [ 402.789666][ T6530] SELinux: failed to load policy [ 402.806809][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 402.859066][ T6097] r8152-cfgselector 7-1: Unknown version 0x0000 [ 402.863716][ T6097] r8152-cfgselector 7-1: bad CDC descriptors [ 402.868776][ T6097] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 402.995207][ T6555] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 403.005346][ T6555] IPVS: set_ctl: invalid protocol: 51 100.1.0.255:20000 [ 403.023546][ T6557] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 403.025880][ T6557] overlayfs: failed to set xattr on upper [ 403.028522][ T6557] overlayfs: ...falling back to redirect_dir=nofollow. [ 403.031535][ T6557] overlayfs: ...falling back to index=off. [ 403.034642][ T6557] overlayfs: ...falling back to uuid=null. [ 403.037069][ T6557] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 403.178570][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 403.178582][ T40] audit: type=1400 audit(1765612564.602:337): avc: denied { map } for pid=6579 comm="syz.0.131" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 403.271612][ T40] audit: type=1400 audit(1765612564.702:338): avc: denied { write } for pid=6595 comm="syz.1.135" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 403.280327][ T40] audit: type=1400 audit(1765612564.702:339): avc: denied { open } for pid=6595 comm="syz.1.135" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 403.292305][ T40] audit: type=1400 audit(1765612564.712:340): avc: denied { write } for pid=6597 comm="syz.3.136" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 403.303943][ T40] audit: type=1400 audit(1765612564.722:341): avc: denied { ioctl } for pid=6597 comm="syz.3.136" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 403.321019][ T40] audit: type=1400 audit(1765612564.732:342): avc: denied { append } for pid=6597 comm="syz.3.136" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 403.331642][ T6603] program syz.1.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.362696][ T40] audit: type=1400 audit(1765612564.792:343): avc: denied { read } for pid=6588 comm="syz.0.133" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 403.397607][ T40] audit: type=1400 audit(1765612564.822:344): avc: denied { append } for pid=6607 comm="syz.3.138" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 403.414504][ T6589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6589 comm=syz.0.133 [ 403.431833][ T40] audit: type=1400 audit(1765612564.832:345): avc: denied { ioctl } for pid=6607 comm="syz.3.138" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 403.459246][ T40] audit: type=1400 audit(1765612564.882:346): avc: denied { watch watch_reads } for pid=6612 comm="syz.1.140" path="pipe:[10048]" dev="pipefs" ino=10048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 403.609766][ T6627] rtc_cmos 00:05: Alarms can be up to one day in the future [ 403.655889][ T6631] sctp: [Deprecated]: syz.2.144 (pid 6631) Use of int in max_burst socket option. [ 403.655889][ T6631] Use struct sctp_assoc_value instead [ 403.747936][ T6638] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 403.756220][ T6638] CIFS mount error: No usable UNC path provided in device string! [ 403.756220][ T6638] [ 403.759482][ T6638] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 403.826838][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.829957][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.833160][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.836270][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.839359][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.842662][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.845658][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.848645][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.852043][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.855473][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.880343][ T6068] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 404.031964][ T6068] usb 6-1: unable to get BOS descriptor or descriptor too short [ 404.035284][ T6068] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 404.038005][ T6068] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 404.041095][ T6068] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 404.044766][ T6068] usb 6-1: config 129 has no interface number 0 [ 404.047396][ T6068] usb 6-1: config 129 has no interface number 1 [ 404.050080][ T6068] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 404.057991][ T6068] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 404.062736][ T6068] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 404.067902][ T6068] usb 6-1: config 129 interface 135 has no altsetting 0 [ 404.070946][ T6068] usb 6-1: config 129 interface 5 has no altsetting 0 [ 404.076520][ T6068] usb 6-1: string descriptor 0 read error: -22 [ 404.079195][ T6068] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 404.083433][ T6068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.098147][ T6068] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.100572][ T6068] usb 6-1: MIDIStreaming interface descriptor not found [ 404.331187][ T839] usb 6-1: USB disconnect, device number 2 [ 404.463581][ T6653] syzkaller0: entered promiscuous mode [ 404.465413][ T6653] syzkaller0: entered allmulticast mode [ 404.478020][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 404.487061][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6653 comm=syz.3.149 [ 404.840266][ T6068] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 404.990310][ T6068] usb 8-1: Using ep0 maxpacket: 16 [ 404.994864][ T6068] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.998552][ T6068] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.002678][ T6068] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.006016][ T6068] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.013454][ T6068] usb 8-1: config 0 descriptor?? [ 405.142706][ T6672] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 405.147838][ T6672] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 405.779656][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.785099][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.815651][ T6068] usbhid 8-1:0.0: can't add hid device: -71 [ 405.820264][ T6068] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 405.827857][ T6068] usb 8-1: USB disconnect, device number 3 [ 405.889546][ T6707] ======================================================= [ 405.889546][ T6707] WARNING: The mand mount option has been deprecated and [ 405.889546][ T6707] and is ignored by this kernel. Remove the mand [ 405.889546][ T6707] option from the mount to silence this warning. [ 405.889546][ T6707] ======================================================= [ 405.984919][ T6716] overlayfs: failed to resolve './file1': -2 [ 406.182103][ T6718] overlayfs: invalid origin (0000) [ 406.440296][ T6097] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 406.620333][ T6097] usb 6-1: Using ep0 maxpacket: 8 [ 406.631312][ T6097] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 406.634556][ T6097] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.638437][ T6097] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 406.648048][ T6734] Illegal XDP return value 4294967274 on prog (id 27) dev syz_tun, expect packet loss! [ 406.650567][ T6097] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.655518][ T6097] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.655559][ T6097] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 406.655579][ T6097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.675784][ T6736] __nla_validate_parse: 5 callbacks suppressed [ 406.675795][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 406.719899][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 406.836713][ T34] Process accounting resumed [ 406.861703][ T6097] usb 6-1: usb_control_msg returned -32 [ 406.864086][ T6097] usbtmc 6-1:16.0: can't read capabilities [ 406.895060][ T6758] overlayfs: failed to resolve './file0': -2 [ 407.063415][ T6766] IPVS: length: 18 != 8 [ 407.218302][ T6774] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 24 [ 407.280303][ T6097] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 407.440238][ T6097] usb 8-1: Using ep0 maxpacket: 32 [ 407.443512][ T6095] usb 6-1: USB disconnect, device number 3 [ 407.444801][ T6097] usb 8-1: config 78 has an invalid interface number: 105 but max is 3 [ 407.448592][ T6097] usb 8-1: config 78 has an invalid interface number: 5 but max is 3 [ 407.452735][ T6097] usb 8-1: config 78 has an invalid descriptor of length 0, skipping remainder of the config [ 407.456243][ T6097] usb 8-1: config 78 has 2 interfaces, different from the descriptor's value: 4 [ 407.459274][ T6097] usb 8-1: config 78 has no interface number 0 [ 407.461489][ T6097] usb 8-1: config 78 has no interface number 1 [ 407.463627][ T6097] usb 8-1: config 78 interface 105 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 407.468019][ T6097] usb 8-1: too many endpoints for config 78 interface 5 altsetting 8: 67, using maximum allowed: 30 [ 407.471721][ T6097] usb 8-1: config 78 interface 5 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 407.476138][ T6097] usb 8-1: config 78 interface 105 has no altsetting 0 [ 407.478450][ T6097] usb 8-1: config 78 interface 5 has no altsetting 0 [ 407.483359][ T6097] usb 8-1: New USB device found, idVendor=06ca, idProduct=2003, bcdDevice= 1.00 [ 407.486960][ T6097] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.490493][ T6097] usb 8-1: Product: с [ 407.492135][ T6097] usb 8-1: Manufacturer: ࡃ [ 407.493992][ T6097] usb 8-1: SerialNumber: І [ 407.701971][ T6768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.189'. [ 407.705736][ T6768] netlink: 96 bytes leftover after parsing attributes in process `syz.3.189'. [ 407.745878][ T6097] usb-storage 8-1:78.105: USB Mass Storage device detected [ 407.753897][ T6097] usb-storage 8-1:78.105: Quirks match for vid 06ca pid 2003: 4 [ 407.801147][ T6097] usb-storage 8-1:78.5: USB Mass Storage device detected [ 407.808380][ T6097] usb-storage 8-1:78.5: Quirks match for vid 06ca pid 2003: 4 [ 407.886446][ T6097] usb 8-1: USB disconnect, device number 4 [ 408.061323][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 408.065270][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 408.090714][ T6796] overlayfs: failed to resolve './file0': -2 [ 408.106332][ T6798] new mount options do not match the existing superblock, will be ignored [ 408.199804][ T6807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6807 comm=syz.0.197 [ 408.330734][ T6825] netlink: 396 bytes leftover after parsing attributes in process `syz.0.202'. [ 408.477184][ T6837] overlayfs: failed to resolve './file0': -2 [ 408.516664][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 408.531957][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 408.535702][ T6846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'. [ 408.554055][ T40] kauditd_printk_skb: 598 callbacks suppressed [ 408.554065][ T40] audit: type=1400 audit(1765612569.982:945): avc: denied { read } for pid=6840 comm="syz.3.208" lport=34755 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 408.626422][ T40] audit: type=1400 audit(1765612570.052:946): avc: denied { create } for pid=6855 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 408.697370][ T40] audit: type=1400 audit(1765612570.122:947): avc: denied { append } for pid=6864 comm="syz.3.212" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 408.767810][ T6868] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 408.920256][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 408.997955][ T40] audit: type=1400 audit(1765612570.422:948): avc: denied { create } for pid=6880 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 409.006855][ T40] audit: type=1400 audit(1765612570.422:949): avc: denied { bind } for pid=6873 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.015018][ T40] audit: type=1400 audit(1765612570.422:950): avc: denied { listen } for pid=6873 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.024094][ T40] audit: type=1400 audit(1765612570.452:951): avc: denied { connect } for pid=6880 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 409.034440][ T6881] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 409.037559][ T40] audit: type=1400 audit(1765612570.462:952): avc: denied { read } for pid=6880 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 409.092528][ T10] usb 6-1: config 0 has no interfaces? [ 409.096525][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 409.106685][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.113216][ T10] usb 6-1: config 0 descriptor?? [ 409.157871][ T40] audit: type=1400 audit(1765612570.582:953): avc: denied { map } for pid=6890 comm="syz.3.220" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 409.204598][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.306268][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.323391][ T40] audit: type=1400 audit(1765612570.752:954): avc: denied { execute } for pid=6897 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 409.340762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 409.350544][ T10] usb 6-1: USB disconnect, device number 4 [ 409.400428][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.410753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 409.413448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 409.420871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 409.427751][ T6000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.428967][ T6903] ip6t_srh: unknown srh invflags 51E8 [ 409.431547][ T6000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.435955][ T6000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.439967][ T6000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.443383][ T6000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.463419][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.614407][ T6901] chnl_net:caif_netlink_parms(): no params data found [ 409.999979][ T6919] overlayfs: failed to resolve './file0': -2 [ 410.034591][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.042266][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.047121][ T13] bond0 (unregistering): Released all slaves [ 410.130122][ T6174] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 410.138554][ T13] bond1 (unregistering): Released all slaves [ 410.189724][ T13] bond2 (unregistering): Released all slaves [ 410.241449][ T13] bond3 (unregistering): Released all slaves [ 410.295591][ T13] bond4 (unregistering): Released all slaves [ 410.362162][ T13] bond5 (unregistering): Released all slaves [ 410.422226][ T13] bond6 (unregistering): Released all slaves [ 410.487887][ T13] bond7 (unregistering): Released all slaves [ 410.563783][ T13] bond8 (unregistering): Released all slaves [ 410.615643][ T13] bond9 (unregistering): Released all slaves [ 410.666522][ T13] bond10 (unregistering): Released all slaves [ 410.714592][ T13] bond11 (unregistering): Released all slaves [ 410.766137][ T13] bond12 (unregistering): Released all slaves [ 410.821463][ T13] bond13 (unregistering): Released all slaves [ 410.885469][ T13] bond14 (unregistering): Released all slaves [ 410.933316][ T13] bond15 (unregistering): Released all slaves [ 410.978714][ T13] bond16 (unregistering): Released all slaves [ 411.049427][ T13] bond17 (unregistering): Released all slaves [ 411.106146][ T13] bond18 (unregistering): Released all slaves [ 411.153363][ T13] bond19 (unregistering): Released all slaves [ 411.205812][ T13] bond20 (unregistering): Released all slaves [ 411.253380][ T13] bond21 (unregistering): Released all slaves [ 411.303557][ T13] bond22 (unregistering): Released all slaves [ 411.352691][ T13] bond23 (unregistering): Released all slaves [ 411.400705][ T13] bond24 (unregistering): Released all slaves [ 411.454440][ T13] bond25 (unregistering): Released all slaves [ 411.490993][ T6000] Bluetooth: hci0: command tx timeout [ 411.505751][ T13] bond26 (unregistering): Released all slaves [ 411.557915][ T13] bond27 (unregistering): Released all slaves [ 411.608157][ T13] bond28 (unregistering): Released all slaves [ 411.654843][ T13] bond29 (unregistering): Released all slaves [ 411.701988][ T13] bond30 (unregistering): Released all slaves [ 411.748448][ T13] bond31 (unregistering): Released all slaves [ 411.805780][ T13] bond32 (unregistering): Released all slaves [ 411.855171][ T13] bond33 (unregistering): Released all slaves [ 411.866560][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.869179][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.871814][ T6901] bridge_slave_0: entered allmulticast mode [ 411.875503][ T6901] bridge_slave_0: entered promiscuous mode [ 411.878287][ T6908] __nla_validate_parse: 4 callbacks suppressed [ 411.878303][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 411.887010][ T6933] netlink: 396 bytes leftover after parsing attributes in process `syz.1.229'. [ 411.916418][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.919366][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.923701][ T6901] bridge_slave_1: entered allmulticast mode [ 411.951025][ T6901] bridge_slave_1: entered promiscuous mode [ 412.046192][ T13] tipc: Disabling bearer [ 412.051845][ T13] tipc: Left network mode [ 412.071326][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.075926][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.098929][ T13] IPVS: stopping backup sync thread 6358 ... [ 412.114927][ T6901] team0: Port device team_slave_0 added [ 412.123769][ T6901] team0: Port device team_slave_1 added [ 412.144096][ T6946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=6946 comm=syz.3.235 [ 412.213892][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.216566][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.226268][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.232714][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.235358][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.245577][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.314604][ T6901] hsr_slave_0: entered promiscuous mode [ 412.317694][ T6901] hsr_slave_1: entered promiscuous mode [ 412.320772][ T6901] debugfs: 'hsr0' already exists in 'hsr' [ 412.323184][ T6901] Cannot create hsr debugfs directory [ 412.398873][ T13] hsr_slave_0: left promiscuous mode [ 412.402953][ T13] hsr_slave_1: left promiscuous mode [ 412.405214][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.407580][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.411379][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.413799][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.428224][ T13] veth1_macvtap: left promiscuous mode [ 412.430549][ T13] veth0_macvtap: left promiscuous mode [ 412.432986][ T13] veth1_vlan: left promiscuous mode [ 412.435293][ T13] veth0_vlan: left promiscuous mode [ 412.440344][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 412.592908][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 412.598957][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.603921][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.607208][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.612895][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.618222][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.623131][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.721704][ T6975] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 412.724583][ T6975] overlayfs: failed to set xattr on upper [ 412.726348][ T6975] overlayfs: ...falling back to redirect_dir=nofollow. [ 412.728416][ T6975] overlayfs: ...falling back to index=off. [ 412.730675][ T6975] overlayfs: ...falling back to uuid=null. [ 412.797294][ T13] team0 (unregistering): Port device team_slave_1 removed [ 412.816937][ T13] team0 (unregistering): Port device team_slave_0 removed [ 412.817276][ T6981] vxcan1: tx drop: invalid da for name 0x0000000010000000 [ 412.834133][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 412.836047][ T10] usbtmc 8-1:16.0: can't read capabilities [ 413.039187][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.042463][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.046137][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.051982][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.055722][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.059386][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.063149][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.068873][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.071809][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.074712][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.077655][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.080547][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.083911][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.087642][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.091379][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.095118][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 413.103547][ T34] usb 8-1: USB disconnect, device number 5 [ 413.115591][ T6901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.126598][ T6901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.136992][ T6901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.147044][ T6901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.206317][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.217087][ T6901] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.223954][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.226248][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.241881][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.244344][ T6148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.382981][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.539201][ T6901] veth0_vlan: entered promiscuous mode [ 413.544676][ T6901] veth1_vlan: entered promiscuous mode [ 413.559775][ T6901] veth0_macvtap: entered promiscuous mode [ 413.564319][ T6901] veth1_macvtap: entered promiscuous mode [ 413.572757][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.578466][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.580646][ T6000] Bluetooth: hci0: command tx timeout [ 413.589102][ T6174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.594634][ T6174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.603180][ T6174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.605951][ T6174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.643058][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.646355][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.660658][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.663273][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.720935][ T7028] ./bus: Can't lookup blockdev [ 413.822712][ T7040] netlink: 328 bytes leftover after parsing attributes in process `syz.4.255'. [ 413.931610][ T7046] usb usb8: usbfs: process 7046 (syz.2.252) did not claim interface 0 before use [ 413.943294][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 413.943310][ T40] audit: type=1400 audit(1765612575.372:961): avc: denied { ioctl } for pid=7042 comm="syz.4.256" path="socket:[13815]" dev="sockfs" ino=13815 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.975028][ T40] audit: type=1400 audit(1765612575.402:962): avc: denied { ioctl } for pid=7053 comm="syz.4.258" path="socket:[16418]" dev="sockfs" ino=16418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 414.055507][ T40] audit: type=1400 audit(1765612575.482:963): avc: denied { create } for pid=7066 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 414.067001][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036e9d000: rx timeout, send abort [ 414.070946][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888036e9d000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 414.081244][ T40] audit: type=1400 audit(1765612575.512:964): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 414.088127][ T40] audit: type=1400 audit(1765612575.512:965): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.096610][ T40] audit: type=1400 audit(1765612575.512:966): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.118496][ T40] audit: type=1400 audit(1765612575.512:967): avc: denied { add_name } for pid=5328 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.140279][ T40] audit: type=1400 audit(1765612575.512:968): avc: denied { create } for pid=5328 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.150281][ T40] audit: type=1400 audit(1765612575.512:969): avc: denied { append open } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.162653][ T40] audit: type=1400 audit(1765612575.512:970): avc: denied { getattr } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.192835][ T7082] validate_nla: 1 callbacks suppressed [ 414.192847][ T7082] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 414.211313][ T7082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.217518][ T7082] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 414.223004][ T7082] bond1: entered allmulticast mode [ 414.232852][ T7082] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 414.237857][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 414.320232][ T6089] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 414.451098][ T6097] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 414.480403][ T6089] usb 7-1: Using ep0 maxpacket: 8 [ 414.483666][ T6089] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.486413][ T6089] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 414.490981][ T6089] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.496726][ T6089] usb 7-1: config 0 descriptor?? [ 414.510741][ T6029] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 414.591772][ T6097] usb 9-1: device descriptor read/64, error -71 [ 414.670257][ T6029] usb 8-1: Using ep0 maxpacket: 8 [ 414.677107][ T6029] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 414.680817][ T6029] usb 8-1: config 0 has no interface number 0 [ 414.683488][ T6029] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 414.688070][ T6029] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 414.695475][ T6029] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.700095][ T6029] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.717095][ T6029] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 414.728891][ T6029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.741811][ T6029] usb 8-1: config 0 descriptor?? [ 414.749433][ T6029] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 414.830466][ T6097] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 414.874670][ T7103] kvm: pic: level sensitive irq not supported [ 414.875073][ T7103] kvm: pic: non byte read [ 414.880762][ T7103] kvm: pic: non byte read [ 414.883839][ T7103] kvm: pic: non byte read [ 414.886614][ T7103] kvm: pic: level sensitive irq not supported [ 414.886918][ T7103] kvm: pic: non byte read [ 414.928346][ T6089] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 414.960309][ T6097] usb 9-1: device descriptor read/64, error -71 [ 415.053804][ T7118] loop9: detected capacity change from 0 to 7 [ 415.056613][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.059223][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.064130][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.066717][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.069248][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.070536][ T6097] usb usb9-port1: attempt power cycle [ 415.072256][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.077274][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.079814][ T7118] ldm_validate_partition_table(): Disk read failed. [ 415.083902][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.086425][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.088941][ T7118] Buffer I/O error on dev loop9, logical block 0, async page read [ 415.091990][ T7118] Dev loop9: unable to read RDB block 0 [ 415.093914][ T7118] loop9: unable to read partition table [ 415.095786][ T7118] loop9: partition table beyond EOD, truncated [ 415.097755][ T7118] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 415.097755][ T7118] ) failed (rc=-5) [ 415.126560][ T34] usb 7-1: USB disconnect, device number 3 [ 415.224325][ T7123] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 415.231295][ T7123] Error validating options; rc = [-22] [ 415.410347][ T6097] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 415.431126][ T6097] usb 9-1: device descriptor read/8, error -71 [ 415.480030][ T7134] sp0: Synchronizing with TNC [ 415.491195][ T7134] sp0: Found TNC [ 415.500045][ T7133] [U] ` [ 415.651049][ T5297] Bluetooth: hci0: command tx timeout [ 415.669630][ T7138] syzkaller0: entered promiscuous mode [ 415.672647][ T6097] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 415.675551][ T7138] syzkaller0: entered allmulticast mode [ 415.690992][ T6097] usb 9-1: device descriptor read/8, error -71 [ 415.744359][ T7144] tipc: Started in network mode [ 415.746512][ T7144] tipc: Node identity b2893d60e529, cluster identity 4711 [ 415.749801][ T7144] tipc: Enabled bearer , priority 0 [ 415.794807][ T7137] tipc: Resetting bearer [ 415.801157][ T6097] usb usb9-port1: unable to enumerate USB device [ 415.812223][ T7137] tipc: Disabling bearer [ 416.084152][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 416.152263][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 416.155388][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 416.223354][ T7169] macsec1: entered promiscuous mode [ 416.225100][ T7169] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 416.227411][ T7169] macsec1: entered allmulticast mode [ 416.229099][ T7169] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 416.409863][ T7177] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 416.494675][ T7182] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 416.497898][ T7182] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 416.501880][ T7182] overlayfs: failed to set uuid (99/file0, err=-13); falling back to uuid=null. [ 416.540021][ T7184] input: syz1 as /devices/virtual/input/input8 [ 417.115137][ T7206] 9pnet_fd: Insufficient options for proto=fd [ 417.120288][ T7207] 9pnet_fd: Insufficient options for proto=fd [ 417.178046][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 417.181163][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 417.184043][ T7210] netlink: 'syz.1.307': attribute type 11 has an invalid length. [ 417.186378][ T7210] netlink: 'syz.1.307': attribute type 13 has an invalid length. [ 417.281035][ T7217] raw_sendmsg: syz.1.310 forgot to set AF_INET. Fix it! [ 417.342737][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 417.547002][ T7224] netlink: 52 bytes leftover after parsing attributes in process `syz.1.313'. [ 417.550458][ T6089] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 417.633043][ T7229] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 417.636727][ T7229] qnx6: wrong signature (magic) in superblock #1. [ 417.638938][ T7229] qnx6: unable to read the first superblock [ 417.701744][ T6089] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 417.704797][ T6089] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.709565][ T6089] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 417.713316][ T6089] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 417.716479][ T6089] usb 9-1: Manufacturer: syz [ 417.722542][ T6089] usb 9-1: config 0 descriptor?? [ 417.730412][ T5297] Bluetooth: hci0: command tx timeout [ 417.733250][ T34] usb 8-1: USB disconnect, device number 6 [ 417.738162][ T34] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 417.770335][ T6089] rc_core: IR keymap rc-hauppauge not found [ 417.772399][ T6089] Registered IR keymap rc-empty [ 417.775826][ T6089] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 417.782338][ T6089] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input9 [ 417.821415][ T7243] binder: 7240:7243 ioctl c020f509 200000000140 returned -22 [ 417.833029][ T7241] mkiss: ax0: crc mode is auto. [ 417.986772][ T7248] tmpfs: Bad value for 'huge' [ 418.022405][ T6029] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 418.138590][ T7255] overlayfs: missing 'lowerdir' [ 418.141357][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.145221][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.180335][ T6029] usb 6-1: Using ep0 maxpacket: 16 [ 418.185808][ T6029] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 418.189696][ T6029] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 418.193443][ T6029] usb 6-1: Product: syz [ 418.195251][ T6029] usb 6-1: Manufacturer: syz [ 418.197553][ T6029] usb 6-1: SerialNumber: syz [ 418.202653][ T6029] usb 6-1: config 0 descriptor?? [ 418.226691][ T6097] usb 9-1: USB disconnect, device number 6 [ 418.438604][ T34] usb 6-1: USB disconnect, device number 5 [ 418.830783][ T7263] Bluetooth: MGMT ver 1.23 [ 418.900717][ T7266] capability: warning: `syz.4.326' uses 32-bit capabilities (legacy support in use) [ 419.004768][ T7274] program syz.4.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.014079][ T7274] syzkaller0: entered promiscuous mode [ 419.014122][ T7274] syzkaller0: entered allmulticast mode [ 419.032604][ T7274] tipc: Started in network mode [ 419.034629][ T7274] tipc: Node identity 569f6d72e341, cluster identity 4711 [ 419.037844][ T7274] tipc: Enabled bearer , priority 0 [ 419.060447][ T7273] tipc: Resetting bearer [ 419.078055][ T7273] tipc: Disabling bearer [ 419.081826][ T7276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1050 sclass=netlink_route_socket pid=7276 comm=syz.1.330 [ 419.097677][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 419.103114][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 419.103125][ T40] audit: type=1400 audit(1765612580.532:992): avc: denied { write } for pid=7278 comm="syz.3.332" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 419.103154][ T40] audit: type=1400 audit(1765612580.532:993): avc: denied { open } for pid=7278 comm="syz.3.332" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 419.142733][ T7276] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.158047][ T7276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7276 comm=syz.1.330 [ 419.224209][ T7286] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 419.283536][ T40] audit: type=1400 audit(1765612580.712:994): avc: denied { read } for pid=7283 comm="syz.3.334" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 419.293743][ T40] audit: type=1400 audit(1765612580.722:995): avc: denied { open } for pid=7283 comm="syz.3.334" path="/76/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 419.388114][ T7303] syz.2.338 uses obsolete (PF_INET,SOCK_PACKET) [ 419.485227][ T7319] netlink: 72 bytes leftover after parsing attributes in process `syz.2.344'. [ 419.489456][ T7319] netlink: 96 bytes leftover after parsing attributes in process `syz.2.344'. [ 419.748341][ T40] audit: type=1400 audit(1765612581.172:996): avc: denied { create } for pid=7334 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 419.754367][ T40] audit: type=1400 audit(1765612581.172:997): avc: denied { setopt } for pid=7334 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 419.765938][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 419.826855][ T7344] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 419.833278][ T40] audit: type=1400 audit(1765612581.262:998): avc: denied { ioctl } for pid=7343 comm="syz.3.352" path="socket:[15994]" dev="sockfs" ino=15994 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 419.842468][ T40] audit: type=1400 audit(1765612581.272:999): avc: denied { create } for pid=7343 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 420.055034][ T40] audit: type=1400 audit(1765612581.482:1000): avc: denied { ioctl } for pid=7348 comm="syz.4.354" path="socket:[14284]" dev="sockfs" ino=14284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 420.223549][ T7304] [U] ^Z [ 420.387179][ T7371] random: crng reseeded on system resumption [ 420.388837][ T40] audit: type=1400 audit(1765612581.812:1001): avc: denied { read write } for pid=7369 comm="syz.1.358" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 420.458188][ T7380] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 420.491921][ T7390] comedi: No check for data length of config insn id -2 is implemented [ 420.496140][ T7387] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 420.498796][ T7390] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 420.500042][ T7387] macsec1: entered promiscuous mode [ 420.506147][ T7387] macsec1: entered allmulticast mode [ 420.507807][ T7387] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 420.510565][ T7390] comedi: Assuming n=15 is correct [ 420.587537][ T7398] netlink: 'syz.4.365': attribute type 11 has an invalid length. [ 420.594768][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.597466][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.758076][ T7412] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 420.761436][ T7412] SELinux: failed to load policy [ 420.763474][ T7414] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 420.767339][ T7414] SELinux: failed to load policy [ 420.850808][ T5297] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 420.850912][ T6000] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.006217][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7443 comm=syz.3.379 [ 421.011978][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'. [ 421.038751][ T7443] netlink: 'syz.3.379': attribute type 3 has an invalid length. [ 421.041246][ T7443] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 421.043706][ T7443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.379'. [ 421.046528][ T7443] NCSI netlink: No device for ifindex 0 [ 421.203865][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 421.237119][ T7457] netlink: 'syz.3.382': attribute type 39 has an invalid length. [ 421.337576][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7463 comm=syz.2.385 [ 421.370297][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 421.375690][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 421.379283][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 421.390682][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.393875][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.398024][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.401059][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.481641][ T7475] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 421.484960][ T7475] block device autoloading is deprecated and will be removed. [ 421.554574][ T7471] block device autoloading is deprecated and will be removed. [ 421.557216][ T7471] md: invalid raid superblock magic on ram32 [ 421.559150][ T7471] md: ram32 does not have a valid v0.0 superblock, not importing! [ 421.561724][ T7471] md: md_import_device returned -22 [ 421.609376][ T34] usb 9-1: usb_control_msg returned -32 [ 421.611566][ T34] usbtmc 9-1:16.0: can't read capabilities [ 421.647661][ T7484] tmpfs: User quota block hardlimit too large. [ 421.689433][ T7479] syzkaller1: entered promiscuous mode [ 421.692731][ T7479] syzkaller1: entered allmulticast mode [ 421.780265][ T6089] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 421.930268][ T6089] usb 8-1: Using ep0 maxpacket: 8 [ 421.933575][ T6089] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.937783][ T6089] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 421.941814][ T6089] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 421.945541][ T6089] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.949480][ T6089] usb 8-1: config 0 descriptor?? [ 421.961716][ T7493] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -71 [ 421.965726][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 421.970404][ T7493] usbtmc 9-1:16.0: Unable to send data, error -71 [ 422.155870][ T6089] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 422.355868][ T7477] net_ratelimit: 23 callbacks suppressed [ 422.355879][ T7477] openvswitch: netlink: IP tunnel dst address not specified [ 422.360619][ T7477] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 422.367157][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.370455][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.385499][ T7477] vxcan1: entered allmulticast mode [ 422.512418][ T7521] overlayfs: missing 'lowerdir' [ 422.582765][ T7528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7528 comm=syz.2.404 [ 422.651109][ T7535] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 422.653238][ T7535] overlayfs: failed to set xattr on upper [ 422.655011][ T7535] overlayfs: ...falling back to redirect_dir=nofollow. [ 422.657148][ T7535] overlayfs: ...falling back to index=off. [ 422.659260][ T7535] overlayfs: ...falling back to uuid=null. [ 422.780249][ T6097] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 422.900689][ T6071] usb 8-1: USB disconnect, device number 7 [ 422.942908][ T6097] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.946058][ T6097] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 422.949269][ T6097] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.956662][ T6097] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 422.959615][ T6097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.962789][ T6097] usb 6-1: Product: syz [ 422.964782][ T6097] usb 6-1: Manufacturer: syz [ 422.966925][ T6097] usb 6-1: SerialNumber: syz [ 422.975289][ T6097] hub 6-1:1.0: bad descriptor, ignoring hub [ 422.978059][ T6097] hub 6-1:1.0: probe with driver hub failed with error -5 [ 422.980050][ T7550] __nla_validate_parse: 3 callbacks suppressed [ 422.980060][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 422.988234][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 423.034678][ T7552] overlayfs: missing 'lowerdir' [ 423.178502][ T6097] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 423.199705][ T7565] openvswitch: netlink: Duplicate or invalid key (type 0). [ 423.202586][ T7565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.490590][ T34] usb 6-1: USB disconnect, device number 6 [ 423.500476][ T34] usblp1: removed [ 423.820289][ T6097] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 423.917964][ T7587] veth1_macvtap: left promiscuous mode [ 423.919901][ T7587] macsec0: entered promiscuous mode [ 423.922975][ T7587] macsec0: entered allmulticast mode [ 423.944452][ T34] usb 9-1: USB disconnect, device number 7 [ 423.973556][ T6097] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 423.976256][ T7589] overlayfs: missing 'lowerdir' [ 423.977473][ T6097] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 423.984229][ T6097] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.998732][ T6097] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 424.008484][ T6097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.012577][ T6097] usb 6-1: Product: syz [ 424.013934][ T6097] usb 6-1: Manufacturer: syz [ 424.015543][ T6097] usb 6-1: SerialNumber: syz [ 424.021314][ T7592] input: syz0 as /devices/virtual/input/input10 [ 424.037850][ T6097] hub 6-1:1.0: bad descriptor, ignoring hub [ 424.040527][ T6097] hub 6-1:1.0: probe with driver hub failed with error -5 [ 424.141278][ T7604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7604 comm=syz.4.426 [ 424.157489][ T7602] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 424.226337][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.425'. [ 424.240920][ T6097] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 424.249154][ T7608] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 424.253280][ T7608] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 424.260901][ T6097] usb 6-1: USB disconnect, device number 7 [ 424.276222][ T6097] usblp0: removed [ 424.318164][ T7614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.427'. [ 424.409997][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.413194][ T7622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.417391][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.419848][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.427366][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 424.430995][ T7622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.498639][ T7614] 9pnet_fd: Insufficient options for proto=fd [ 424.624113][ T7633] overlayfs: missing 'workdir' [ 424.885242][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 424.885256][ T40] audit: type=1400 audit(1765612586.312:1018): avc: denied { mount } for pid=7655 comm="syz.2.437" name="/" dev="hugetlbfs" ino=17408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 424.907470][ T40] audit: type=1400 audit(1765612586.332:1019): avc: denied { read } for pid=7657 comm="syz.3.438" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 424.922026][ T40] audit: type=1400 audit(1765612586.352:1020): avc: denied { open } for pid=7657 comm="syz.3.438" path="/dev/usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 424.939614][ T40] audit: type=1400 audit(1765612586.362:1021): avc: denied { mount } for pid=7662 comm="syz.2.439" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 424.951307][ T7666] netlink: 'syz.4.434': attribute type 8 has an invalid length. [ 424.955409][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 424.962082][ T7666] bond0: entered promiscuous mode [ 424.962648][ T40] audit: type=1400 audit(1765612586.392:1022): avc: denied { unmount } for pid=5998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 424.971856][ T7666] bond_slave_0: entered promiscuous mode [ 424.973728][ T7666] bond_slave_1: entered promiscuous mode [ 424.977010][ T7666] ip6gretap0: entered promiscuous mode [ 424.980877][ T7666] gretap0: entered promiscuous mode [ 424.983404][ T7666] hsr1: entered promiscuous mode [ 425.061902][ T7680] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 425.065258][ T7680] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 425.068519][ T7680] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 425.068553][ T40] audit: type=1400 audit(1765612586.492:1023): avc: denied { firmware_load } for pid=7678 comm="syz.4.443" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 425.184247][ T7688] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 425.190925][ T6029] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 425.265367][ T7695] syzkaller0: entered promiscuous mode [ 425.267784][ T7695] syzkaller0: entered allmulticast mode [ 425.280515][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.450'. [ 425.303906][ T7695] bond1 (unregistering): Released all slaves [ 425.350322][ T6029] usb 6-1: Using ep0 maxpacket: 32 [ 425.353715][ T6029] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.357090][ T6029] usb 6-1: config 0 has no interfaces? [ 425.358923][ T6029] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 425.363066][ T6029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.368306][ T6029] usb 6-1: config 0 descriptor?? [ 425.578328][ T6029] usb 6-1: USB disconnect, device number 8 [ 425.954597][ T7711] netlink: 'syz.4.452': attribute type 11 has an invalid length. [ 425.957908][ T7711] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.452'. [ 425.965343][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 425.969181][ T7711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.452'. [ 426.050361][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 426.051137][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 426.055318][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 426.315433][ T7713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7713 comm=syz.4.453 [ 426.320863][ T40] audit: type=1400 audit(1765612587.752:1024): avc: denied { nlmsg_write } for pid=7712 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 426.393764][ T7723] afs: Unknown parameter 'flock' [ 428.130381][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 428.132835][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 428.140307][ T6000] Bluetooth: hci1: command 0x0c1a tx timeout [ 430.210375][ T6000] Bluetooth: hci3: command 0x0c1a tx timeout [ 430.213133][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 430.215745][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 432.290440][ T6000] Bluetooth: hci0: command 0x0c1a tx timeout [ 432.292663][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 432.295015][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 432.410424][ T7740] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 432.415863][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.442596][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.589884][ T40] audit: type=1400 audit(1765612594.012:1025): avc: denied { create } for pid=7753 comm="syz.3.465" name="#29" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 432.596347][ T40] audit: type=1400 audit(1765612594.022:1026): avc: denied { link } for pid=7753 comm="syz.3.465" name="#29" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 432.603203][ T40] audit: type=1400 audit(1765612594.022:1027): avc: denied { rename } for pid=7753 comm="syz.3.465" name="#2a" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 432.609937][ T40] audit: type=1400 audit(1765612594.022:1028): avc: denied { setopt } for pid=7753 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 432.685763][ T40] audit: type=1400 audit(1765612594.112:1029): avc: denied { mount } for pid=7760 comm="syz.1.467" name="/" dev="ramfs" ino=18208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 432.696424][ T7735] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 432.698805][ T7735] SELinux: failed to load policy [ 432.700962][ T7761] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 432.703834][ T7761] overlayfs: failed to set xattr on upper [ 432.706152][ T7761] overlayfs: ...falling back to redirect_dir=nofollow. [ 432.709023][ T7761] overlayfs: ...falling back to index=off. [ 432.712038][ T7761] overlayfs: ...falling back to uuid=null. [ 432.736327][ T40] audit: type=1400 audit(1765612594.162:1030): avc: denied { unmount } for pid=5995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 432.751251][ T40] audit: type=1400 audit(1765612594.172:1031): avc: denied { lock } for pid=7763 comm="syz.4.468" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 432.777422][ T40] audit: type=1400 audit(1765612594.202:1032): avc: denied { bind } for pid=7765 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.832604][ T40] audit: type=1400 audit(1765612594.262:1033): avc: denied { create } for pid=7769 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 432.906310][ T40] audit: type=1400 audit(1765612594.332:1034): avc: denied { read } for pid=7774 comm="syz.3.472" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 432.953043][ T7764] ------------[ cut here ]------------ [ 432.955458][ T7764] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#2: syz.4.468/7764 [ 432.959857][ T7764] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.961872][ T7764] CPU: 2 UID: 0 PID: 7764 Comm: syz.4.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.968609][ T7764] Tainted: [L]=SOFTLOCKUP [ 432.970729][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 432.975431][ T7764] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 432.978184][ T7764] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 81 de 5e 09 83 fe 0a 0f 86 0c fe ff ff 80 3d c9 7b 55 0e 00 75 0b c6 05 c0 7b 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 432.986295][ T7764] RSP: 0018:ffffc9000294f9f8 EFLAGS: 00010246 [ 432.988732][ T7764] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 432.991988][ T7764] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 432.995345][ T7764] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 432.998805][ T7764] R10: 0000000000000013 R11: ffff88805744d4b0 R12: 0000000000040cc0 [ 433.002304][ T7764] R13: 1ffff92000529f55 R14: ffffffff9ac2aac4 R15: 0000000000000013 [ 433.005604][ T7764] FS: 00007f7c51cc36c0(0000) GS:ffff8880d6b0d000(0000) knlGS:0000000000000000 [ 433.009447][ T7764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.012441][ T7764] CR2: 000000110c3eb89f CR3: 0000000057a58000 CR4: 0000000000352ef0 [ 433.015777][ T7764] Call Trace: [ 433.017185][ T7764] [ 433.018359][ T7764] ? find_held_lock+0x2b/0x80 [ 433.020262][ T7764] ? avc_has_extended_perms+0x33a/0x1090 [ 433.022563][ T7764] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 433.025258][ T7764] ? avc_has_extended_perms+0x47c/0x1090 [ 433.027754][ T7764] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 433.030296][ T7764] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.032463][ T7764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.034885][ T7764] ? policy_nodemask+0xea/0x4e0 [ 433.037002][ T7764] alloc_pages_mpol+0x1fb/0x550 [ 433.039050][ T7764] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 433.041409][ T7764] ___kmalloc_large_node+0x10c/0x150 [ 433.043743][ T7764] __kmalloc_large_node_noprof+0x1c/0x70 [ 433.046103][ T7764] ? __might_fault+0xe3/0x190 [ 433.048078][ T7764] __kmalloc_noprof.cold+0xc/0x62 [ 433.050286][ T7764] ? raw_alloc_io_data+0x12c/0x1a0 [ 433.052364][ T7764] ? raw_alloc_io_data+0x12c/0x1a0 [ 433.054502][ T7764] raw_alloc_io_data+0x12c/0x1a0 [ 433.056530][ T7764] raw_ioctl+0x1397/0x2e60 [ 433.058395][ T7764] ? __pfx_raw_ioctl+0x10/0x10 [ 433.060723][ T7764] ? selinux_file_ioctl+0xb4/0x270 [ 433.062850][ T7764] ? __pfx_raw_ioctl+0x10/0x10 [ 433.064819][ T7764] __x64_sys_ioctl+0x18e/0x210 [ 433.066819][ T7764] do_syscall_64+0xcd/0xf80 [ 433.068717][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.071246][ T7764] RIP: 0033:0x7f7c50d8f7c9 [ 433.073095][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.080375][ T7764] RSP: 002b:00007f7c51cc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.083708][ T7764] RAX: ffffffffffffffda RBX: 00007f7c50fe5fa0 RCX: 00007f7c50d8f7c9 [ 433.086886][ T7764] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000006 [ 433.089922][ T7764] RBP: 00007f7c50e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.093234][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.096749][ T7764] R13: 00007f7c50fe6038 R14: 00007f7c50fe5fa0 R15: 00007ffdb0ff9178 [ 433.099938][ T7764] [ 433.101038][ T7764] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 433.103326][ T7764] CPU: 2 UID: 0 PID: 7764 Comm: syz.4.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.106677][ T7764] Tainted: [L]=SOFTLOCKUP [ 433.108053][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 433.111434][ T7764] Call Trace: [ 433.112505][ T7764] [ 433.113509][ T7764] dump_stack_lvl+0x3d/0x1f0 [ 433.115043][ T7764] vpanic+0x640/0x6f0 [ 433.116287][ T7764] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 433.118346][ T7764] panic+0xca/0xd0 [ 433.119550][ T7764] ? __pfx_panic+0x10/0x10 [ 433.120988][ T7764] check_panic_on_warn+0xab/0xb0 [ 433.122590][ T7764] __warn+0x108/0x3c0 [ 433.123868][ T7764] __report_bug+0x2a0/0x520 [ 433.125323][ T7764] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 433.127251][ T7764] ? __pfx___report_bug+0x10/0x10 [ 433.128805][ T7764] ? __kernel_text_address+0xd/0x40 [ 433.130482][ T7764] ? unwind_get_return_address+0x59/0xa0 [ 433.132318][ T7764] ? arch_stack_walk+0xa6/0x100 [ 433.133943][ T7764] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 433.136414][ T7764] report_bug+0xb2/0x220 [ 433.138452][ T7764] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 433.140383][ T7764] handle_bug+0x127/0x260 [ 433.141855][ T7764] exc_invalid_op+0x17/0x50 [ 433.143307][ T7764] asm_exc_invalid_op+0x1a/0x20 [ 433.144874][ T7764] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 433.147131][ T7764] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 81 de 5e 09 83 fe 0a 0f 86 0c fe ff ff 80 3d c9 7b 55 0e 00 75 0b c6 05 c0 7b 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 433.154252][ T7764] RSP: 0018:ffffc9000294f9f8 EFLAGS: 00010246 [ 433.156721][ T7764] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 433.160267][ T7764] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 433.163183][ T7764] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 433.165727][ T7764] R10: 0000000000000013 R11: ffff88805744d4b0 R12: 0000000000040cc0 [ 433.168264][ T7764] R13: 1ffff92000529f55 R14: ffffffff9ac2aac4 R15: 0000000000000013 [ 433.170756][ T7764] ? find_held_lock+0x2b/0x80 [ 433.172334][ T7764] ? avc_has_extended_perms+0x33a/0x1090 [ 433.174152][ T7764] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 433.176185][ T7764] ? avc_has_extended_perms+0x47c/0x1090 [ 433.177981][ T7764] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 433.179943][ T7764] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.181591][ T7764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.183888][ T7764] ? policy_nodemask+0xea/0x4e0 [ 433.185547][ T7764] alloc_pages_mpol+0x1fb/0x550 [ 433.187162][ T7764] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 433.188915][ T7764] ___kmalloc_large_node+0x10c/0x150 [ 433.190599][ T7764] __kmalloc_large_node_noprof+0x1c/0x70 [ 433.192402][ T7764] ? __might_fault+0xe3/0x190 [ 433.193891][ T7764] __kmalloc_noprof.cold+0xc/0x62 [ 433.195566][ T7764] ? raw_alloc_io_data+0x12c/0x1a0 [ 433.197197][ T7764] ? raw_alloc_io_data+0x12c/0x1a0 [ 433.198822][ T7764] raw_alloc_io_data+0x12c/0x1a0 [ 433.200385][ T7764] raw_ioctl+0x1397/0x2e60 [ 433.201835][ T7764] ? __pfx_raw_ioctl+0x10/0x10 [ 433.203391][ T7764] ? selinux_file_ioctl+0xb4/0x270 [ 433.205040][ T7764] ? __pfx_raw_ioctl+0x10/0x10 [ 433.206602][ T7764] __x64_sys_ioctl+0x18e/0x210 [ 433.208439][ T7764] do_syscall_64+0xcd/0xf80 [ 433.209903][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.211794][ T7764] RIP: 0033:0x7f7c50d8f7c9 [ 433.213259][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.219304][ T7764] RSP: 002b:00007f7c51cc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.221955][ T7764] RAX: ffffffffffffffda RBX: 00007f7c50fe5fa0 RCX: 00007f7c50d8f7c9 [ 433.224573][ T7764] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000006 [ 433.227071][ T7764] RBP: 00007f7c50e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.229571][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.232490][ T7764] R13: 00007f7c50fe6038 R14: 00007f7c50fe5fa0 R15: 00007ffdb0ff9178 [ 433.235039][ T7764] [ 433.236687][ T7764] Kernel Offset: disabled [ 433.238094][ T7764] Rebooting in 86400 seconds..