last executing test programs: 27.380790871s ago: executing program 0 (id=238): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@bcast, @bcast, @rose, @rose, @bcast, @null, @null, @bcast]}, &(0x7f0000000080)=0x48, 0x80000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/xfrm_stat\x00') r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0xffff0000, 0x1, 0x2, 0x0, 0x40}) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) socket$inet(0x2, 0x80000, 0x7) 26.50826531s ago: executing program 0 (id=241): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x101402, 0x0) preadv(r4, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000001500)=""/94, 0x5e}], 0x2, 0x2, 0x4) r5 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f0000000740)={[&(0x7f0000000140)='\x00', &(0x7f00000005c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000600)='\x00', &(0x7f0000000640)='[-{+\'+&\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/full\x00', &(0x7f0000000700)='security\x00']}, &(0x7f00000007c0)={[&(0x7f0000000780)='\x00']}, 0x800) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r0, @ANYRES16=r0], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x2d0, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) writev(r6, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f0000000280)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) 26.507389257s ago: executing program 0 (id=243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) write$P9_RLERRORu(r1, 0x0, 0xd) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_inodes=p,usrquota_block_hardlimit=5']) 26.42088407s ago: executing program 0 (id=244): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x1, 0x0, &(0x7f0000000040)) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 26.310228907s ago: executing program 0 (id=246): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0xa2}}]}}) 26.309728541s ago: executing program 0 (id=247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0603d0f, &(0x7f0000000040)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa9}}, 0x18) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x8, 0x4007, @fd, 0x8, 0x0, 0x0, 0x0, 0x1, {0x1}}) (async) r5 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) (async, rerun: 64) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1000, 0x14210000, 0x81, 0x1005, 0x0, 0xc, 0x0, 0x0, 0x80}}, 0x50) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @auto="df122325b295388032d1a6e110964320"}}) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6gre0\x00'}) 16.619994486s ago: executing program 2 (id=385): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x25, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0xa, 0x7, 0xffffffffffffffc0, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x7, 0x4, 0x30, 0x8}, @ldst={0x0, 0x0, 0x4, 0x5, 0x8, 0xfffffffffffffff0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x32}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000140)='GPL\x00', 0xb5, 0x74, &(0x7f0000000180)=""/116, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xe, 0x7, 0x9}, 0x10, 0xa3a6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc2, @void, @value}, 0x94) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x480) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f00000004c0)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r4, &(0x7f0000000500)) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='mem_return_failed\x00', r2, 0x0, 0x9}, 0x18) (async, rerun: 64) r6 = syz_usbip_server_init(0x2) (async, rerun: 64) r7 = getpid() (async) getresuid(&(0x7f0000002900), &(0x7f0000002940)=0x0, &(0x7f0000002980)) newfstatat(0xffffffffffffff9c, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) fstat(r2, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getgroups(0x4, &(0x7f0000002d40)=[0xee00, 0xee01, 0xffffffffffffffff, 0xee01]) (async, rerun: 64) read$FUSE(r2, &(0x7f0000002d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) r16 = geteuid() (async, rerun: 32) statx(r1, &(0x7f0000005080)='./file0\x00', 0x400, 0x200, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r2, &(0x7f00000051c0)='./file0\x00', 0x1000, 0x20, &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000600)="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", 0x2000, &(0x7f00000055c0)={&(0x7f0000002600)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x5, 0x403000, 0x1, 0x7, 0x81f8, 0x9, 0x0, 0x0, 0x80, 0x5}}, &(0x7f0000002680)={0x18, 0x0, 0x19, {0xc}}, &(0x7f00000026c0)={0x18, 0x0, 0xed}, &(0x7f0000002700)={0x18, 0x0, 0x40, {0xfffffff7}}, &(0x7f0000002740)={0x18, 0x0, 0x1, {0x7}}, &(0x7f0000002780)={0x28, 0xfffffffffffffffe, 0x101, {{0x7f, 0x5, 0x1, r7}}}, &(0x7f00000027c0)={0x60, 0xffffffffffffffda, 0x80000001, {{0x9af, 0xe, 0xfe64, 0xd, 0x10, 0xf4, 0x8, 0x8000}}}, &(0x7f0000002840)={0x18, 0x0, 0xbe, {0xff}}, &(0x7f0000002880)={0x13, 0x0, 0x7fff, {'(-\x00'}}, &(0x7f00000028c0)={0x20, 0x0, 0x4000, {0x0, 0x10}}, &(0x7f0000002a80)={0x78, 0x0, 0x400, {0x4, 0x100, 0x0, {0x6, 0x9, 0x8958, 0x8, 0x3, 0x1, 0x8, 0xfffffff4, 0x7, 0x1000, 0x4, r8, r9, 0x5, 0xf}}}, &(0x7f0000002bc0)={0x90, 0x0, 0x7ff, {0x2, 0x2, 0x2, 0x6, 0x7, 0x7, {0x4, 0x73, 0x5, 0x10000, 0x8001, 0x5, 0x401, 0x5, 0x7fffffff, 0x6000, 0x800, r4, r10, 0x794, 0x3}}}, &(0x7f0000002c80)={0x10}, &(0x7f0000004dc0)={0x2c0, 0x0, 0x9, [{{0x3, 0x1, 0x5, 0x9, 0x11, 0x0, {0x5, 0x0, 0x4, 0x7, 0x2, 0xe33d, 0x2, 0x8001, 0x2, 0x4000, 0xb29b, r4, r11, 0x4, 0x3}}, {0x4, 0x5, 0x12, 0x8, 'mem_return_failed\x00'}}, {{0x3, 0x0, 0x80000001, 0x1, 0x800, 0x2, {0x6, 0x2, 0x7, 0x4, 0x0, 0x930e, 0x0, 0x10001, 0x6, 0x4000, 0x69, r4, r13, 0x5, 0x4}}, {0x6, 0xf, 0x3, 0x0, '%!\x00'}}, {{0x3, 0x1, 0x7fffffff, 0x4, 0x10001, 0x4, {0x2, 0x7, 0x8, 0xfff, 0x41, 0x1, 0x1, 0x7effae96, 0x9, 0xc000, 0x6, r4, r15, 0x7ff, 0x9}}, {0x5, 0x0, 0x12, 0x80000001, 'mem_return_failed\x00'}}, {{0x6, 0x0, 0x5, 0x6, 0x1, 0x4, {0x5, 0x1, 0x3, 0xfa, 0x80000001, 0x3, 0x8, 0xfffffff7, 0x2, 0x4000, 0x401, r16, 0xffffffffffffffff, 0x8, 0x1}}, {0x4, 0x6, 0x12, 0x42, 'mem_return_failed\x00'}}]}, &(0x7f0000005300)={0xa0, 0x0, 0x1d7, {{0x4, 0x3, 0x2, 0x9, 0x4, 0x2, {0x6, 0x5, 0x6, 0x2562, 0x340, 0x3, 0x4, 0x1, 0x7fffffff, 0xa000, 0x10001, r17, r18, 0x8, 0xfffffff9}}, {0x0, 0x4}}}, &(0x7f00000053c0)={0x20, 0x0, 0x7, {0x9, 0x4, 0xfff, 0x137}}, &(0x7f0000005480)={0x130, 0x0, 0xd, {0x8, 0xb27b, 0x0, '\x00', {0x1, 0xcf, 0xfffffffffffffffd, 0x8, r4, r19, 0xc000, '\x00', 0xde, 0xb4, 0xfffffffffffffffc, 0x1ff, {0x8, 0x1}, {0x7, 0x8}, {0x8a06, 0x6}, {0x3, 0x1}, 0x400, 0x8, 0x729, 0x2}}}}) (async) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000005680)={0xffff, 0x8, 0x2, 0x8, 0x7, 0x4}) setgroups(0x6, &(0x7f00000056c0)=[r19, r12, r18, r14, r12, r12]) fallocate(r5, 0x11, 0xcf7, 0x9) (async) read$FUSE(r2, &(0x7f0000005700)={0x2020}, 0x2020) (async, rerun: 32) read$FUSE(r2, &(0x7f0000007740)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r2, &(0x7f0000009780)={0x50, 0x0, r20, {0x7, 0x2b, 0x2, 0x2000000, 0x8001, 0x7, 0xe6, 0x5, 0x0, 0x0, 0x10}}, 0x50) (async) r21 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000009800), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r21, 0x40605346, &(0x7f0000009840)={0x3, 0x0, {0x1, 0x1, 0x0, 0x1, 0x3}, 0x152}) (async) r22 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r22, &(0x7f00000098c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000009900)=0x20) 16.619681184s ago: executing program 2 (id=386): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000280)={0x28, 0x4, r1, r1, 0x6b2, 0x40000, 0x40000202}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x2000000, {{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x120}, {@in6=@private0={0xfc, 0x0, '\x00', 0x3}, 0xfffffffd, 0xff}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xffffffffffffffff}, {}, 0x70bd26, 0x0, 0x2, 0x2, 0x0, 0x18}}, 0xf0}}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 16.510657855s ago: executing program 2 (id=387): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0xe4, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff3}, {0x127d16b5fca99984, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1b, 0x400, 0x2, 0x2, 0x1, 0x2, 0x4}}, {0xc, 0x2, [0x8, 0x2, 0x71, 0x9]}}, {{0x1c, 0x1, {0x6, 0xdd, 0xfffb, 0x0, 0x1, 0x4, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x41, 0x8, 0x5, 0x6, 0x0, 0x30, 0x1, 0x2}}, {0x8, 0x2, [0x4, 0x3]}}, {{0x1c, 0x1, {0x4e, 0x21, 0x0, 0x6, 0x2, 0x2, 0x6, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x2, 0x9, 0x6, 0xdd9, 0x2, 0x9, 0xd0f, 0x2}}, {0x8, 0x2, [0x6, 0x8]}}]}]}, 0xe4}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x10000a47) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4083, 0xff3}], 0x1) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) recvmsg$can_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a3, &(0x7f0000000100)) 15.650361778s ago: executing program 2 (id=392): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) syz_open_dev$admmidi(&(0x7f0000000000), 0x8, 0x5a1100) 15.05011941s ago: executing program 2 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r4 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="845715a681", 0x5}], 0x2}}, {{&(0x7f0000000380)={0xa, 0xa, 0x8, @mcast2, 0x2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="6dca1fab1cf13077499294b0b3a391327f363aada0c957488e8a09ffa2e8f1cdef40395da18a146da2f6b99e17491539a80f4411cf6f020e457715bff1c8f0bfba602e1189b3be710d026b34de19866d0f105f65e53da4a44e1e403e9b924bb43880667dd5b2baece7e8bb1c1b13974377981e3eaf847346bda4a185ac42e36533203a369db1abd2c145f1c6d5a05dab40519d4197", 0x95}, {&(0x7f00000003c0)="d02986ec14a7c57e4b6caf19d56aa534edd5ec810ed2b508bb5945c046e05725a50919914ca487aa9af7e79439c9b4466089dade62d4babe9cefbf6d30731e645f6c78083047fcfe86e7d54bddc0dba3583932905f3044ffc1ef213286a21f", 0x5f}, {&(0x7f0000000740)="6b5b5fe509c9de930e7a6087e6418a424a5c7b0f0420b7634b842893dd4c46e7e32a7bba29019cfc6aafdbe84c46c2702b67a5146539afd6a6c707fd76db3ed5d5badba395f742905d4ef7cb5a0f30ca9babb4c985887e4fff8f73ac754d0e856be057bca06d44e491048963099cb094f252201d4f102e46d884a3c236a117ab60c324bc9ac085b415a97992feef6c752f98d951e59aac7b45c1c39118e127673614", 0xa2}, {&(0x7f0000000900)="192571965152aa992a2d744cb1e9dee2a38f1061ce10b9293cf77cf9a7941ea5d0519988882fc5cd54702f648a897ddb9eb53b890a897b30a48b1786bd1a3a440979ee004df1ffd7ab4e12a8320ae59c81b56adf556b8edf13b26ce70db89be79fa551aec3ebb3fc079c6242e9a1f277424c9409b6930d98f49c569adc3e6fd33c1e3272912f123ae0f13c942ccfab80facd059610dcb3b7335063f794f90093dc5ee04581cb83eecf2872bc879da670d0c3f26ff9b27bd553b4f0f51d2a7f5ef3529efb1b80a424bfdfa3351f83e9ee", 0xd0}], 0x4, &(0x7f0000000a00)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x83780}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x8, 0xe, 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00', @loopback, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @empty}, @local, @dev={0xfe, 0x80, '\x00', 0x16}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x81}}, @dstopts_2292={{0x190, 0x29, 0x4, {0x6, 0x2e, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0xff, [0x3744]}}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x48, {0x3, 0x10, 0x44, 0x1, [0x4, 0x100, 0x3, 0xc, 0x9, 0x2, 0xb2, 0x7]}}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x1, 0xf8, "2d6f2bdea0a3054e76994d6a45c573cca906e1a25173d0b857106d82f456c43eff54cc7f13cc24ea1d247194ce1c6da6704e63d16cd08098bd5f95fe4c702c2f9f16569e2223ae5ef16aa6c2cdb0d9adea8a1b0e2e6d1a1b276d0852213aa9a04b9b15f62fab7785936fad6d8c251ba23138d32e18bdb1738bd00e022de9e9e75290eff96bff7beace11ab4f72f2d1cdd390c4bb8960e09894007c3bc0d3059445c260fc7a31f9b76cbdbc8576bed155ece6d17f1951c90b92780027aa8e62b2068f8a05b235b8d41674582091be392e910bf6f1688342aadc8c1d2187e89bbb73f2f84f33956de84dba49e2478214853ef53c827441ba71"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, r2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}], 0x2d8}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x800, @loopback, 0x9a}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000800)="b47e6f0fe5e8bde36d8800dd198d5ab52fdb8adf006bbe49c92f5235e93fe2a73bef9d5c5aa7b890b21e0b21d24e77d100e71b3a3c7caa7b5a78fa2e6654bbe16af529cc8b72f42b4327cb3886c640c1031f576848daa52eea15eca39fa9aeb4e16ff6dcbfed770f56ee57408b30bbba11d0fbe6f1d39629047688e82a90048f06fc82f7c898bd", 0x87}, {&(0x7f00000018c0)="33cc6a4ff8fb35480b597351006a16d327b7bcfaf906f434bf24850ebb8fcc6ef77a929225fad009cb1e2fd697e88687b35f13f9726de2f702ae76a2a86513b981e4c6fc905a86860de9ee788743c0eafae70ba2d65def6093c71c795cbe8ec43d440184cf9aabb3751f0df83cc4f575b7cec57cb4a96a4b6f1a964fd891b76ee74158c2026f7b430b98adf723f10daf084931120bd1ea2c8c830d6f979ce96c34a1ac838c4cec0063690660885ae225efc379e2bcf9c557ab593a91482a8e269ce54c8ac550af8762d03cdad6c69813a864f6e55c3f0d744c87085e3043510ec44a940a5071829249a3c64a09863dc4097268f9390edc4c7a9b318ce88c59b0ee0d7b993d721b2c172429006cebc85415a6583a5dfb281f31f2ab0341fad6164f1286cda64979e7068df815d276182d4e900e920f61baa40f6064f1369362b7816bccd1b5f7e3a1c8589b5d74287f64838d773ffcb80514e8c0ef7e028cf5f6a2cefd7ffbf6eead9ac258276f4e261206e8218da1f022944e319300f18cf88ae29f1b7fc597f0ed60f5598c8b5a05f92958d9a19377b0f84f75600046e630c06db9361022100639648185b4cdc3c87c0f119b712f82e83baa74b865d149529f289f8f835e108972495837e037c36d8da6bdd705117ace1e9747b8f9bd444e99f1c1f1509b8c1a98544cf2c7a7fa73a344ad8a77b28c601fefa34a7edbbba548e6dbc1e0cb3af5f787b718dc07430553df5461377aa86745f8a3971d2cb013948d9c6d98fc611a808779cd51322c0fc2b9efbc348288b970c3c57a70252964706ed9c1ca4d2032b58a0133fa1a3b0aeaa0abfbd161bcf4669891f1590e0b8cb231eddc703a3200116d5b11f0e919601dad5ec8f786f02badd220d013b73cbc1e8c997a478772faedb37d082ae87713aceaf6998eeca88ef39cd69802f19f1386ddf05569fc1afdbde13eeee84307d02aa7785c0d6d11719a0181fae2735c8706c110966b0cdb355e5bb86cf42ac6be0a6ded1c442cc95cf98de0a71071ef3255cefe80d9748dbddab7443fdcebcbf357e222d3fd2286b8a61c61bc89639166a845f03016c39e8dc489f503d3d9bee1940c5fbd7dda9191a150c2486106966aa1392bdf27872930ca15347d6ee3c4c4bcf88382c9d709d5670790d8fe95833ad30d4efa0da5041b02138a1084f662ee6ee2d6d3fad8296dac51bc8d1c8773ecf8f81c4439437ce80b8bc2925e45d660a2598a28396b63513204195f52eabf2fb02f332c6f4100d7323bca36a38ad0690baf9b2c89a942170a4d176f3fbe4a2e9517b6c84f86d049574c38340c2a71049614552f5121012fe57dd1bcf07539fd73f8a5f858045cbf0c5c59a96a319a6e8eeee29e385b2e708490efb85d802250a1aa896de1db1db7bceee76c336a77e85baea89f135124850d4f184585c21b8b61111932f60d29c01d28a2168a4d2c0d76b9e1625f98acda3838415bd41c2c5d09349be21c8e6304dbf988a37f247423105f1130f1a15548c711ce2e3bb2325eb57eead31d55f2a229b4fa5780f808277f8097c5ac9906230aa65e09ec3f9baad449a3b79f35ce21f4636a9895608cc7cb4d5a53bee1abc2e0ae23e0be0e586bed3fc622249a86e3d9acd16b917ffa81e99feb68aef7fa709bf8b53b5bcdef40d8e5706579aadbf7a10b8112897ac935cf401287290b7a37e2e93e914218b7233684f0c56a8421139d418fc1a509d556abd2c19c7e48300a912c2d6d60a6eeb9fb27682a25aa561c2302981aa0d594ce3b9843175a8a6a10539387e95ed27dfec64b03119c2e4ee2674b3d00898d934632d96d27a0087ec3c19e23858ae6d433ce87504c6e3bcd0a35f0a535869bdb36cbf750e00fe6ea5c91bba198156f56caf20fdfeaa57e5f2f000b50aa1906a68940d852e7f6a40e98bf8b7084bb125fb06c70b1ad894a26cbac00a931e3aa2130b73306219130c66f72b7accb9f2cca2e01f62d81dbe81175d7152c92c483d2156370c190fa2e6fedeb6984cf0015b9ce8e3799f80eb312fc8425083a31bebb5d23afb86b3ea31888495e999e99fd67c12eeb854bcba6f486c2a47b9cd61978597cc0ac2930cdd55417b7a1e2ac64398585dffe30de7e2062455c63d0f83110f9689653f2d368c2606a3a71d7d8eb042ae5f160929e2ad4c25d8cc79413cfd714121b7b55329e5d336038072e75c28a063fd7d2c62bfcc78b201b478db624556221b12588a89dab529b25a803b6a8ec7ce0556432bc2d9da64b7928d4038c57b1789aaff33bca036c7f1850d66d3591079a5a0b48f51f642bc161a2fad1e820d56a4ed2114635245e03ed5c7e4e0f082a64521623aff434a169fa5a2bf0144fdb8d12271e233131d986a5436745f6e188934e44dfe6ecd099a1e5c005c8093c394f26fd459215d61da3e22ff479cd698fa7c66657a00cc40debb3f62efe26c5320f883f442d7668d435e58439ab2f84669843e3d0c4b6b1af00e9223361a7e622257147ad28d8eebb5afa97bf9de771e8ded8fccd9caf5f636beb4dfb52a120d36af8798a9e1861b7ab9b1d0aaccbf20d9802e0e5d954b1fa75f0faad384b1936d90074500f5c0659b84d88a833a4dd508989dc4b33ffb9ce54333f49d84b772715246dbebc263df13ad26286a7808a1dfd7cab4b218aac6bb7bd19d963007cc3e10881ab5074e225cae4e62ce1a51bee5dba9a414c14405a4ea923e21a2946d322b43226099951c65d0a936f9a46de41ea6dfdcc9c826132e4d7505d6deb802260e5363a83f4858f24116a7c1727baa8a900d48690b9e0831d4c14129f9bfd20c3aee8f788667c36c4977f965ac954c7293c0a1b2c3feb3fea617849bd7e44e8d65ad3ddff34a49c1885b823481b757559bf6a56603bd572e16335c97d5845949797433a70b537a9c10489e6f9b9634fbef0444430929f245b2737f42324246fcd452c11b2afa9c8b117d3a71271d09f15d83152ce2fbe4bb51b1e80d9449e45e7dc7cb0b3f55f2309c50b1734dc755d1975b70be990e99b7d026676557f959d3878d1dee97ebe0da3bfeb8f9cee07bb9bb3cfada718ff034011729d5136083ca0824343def766db7ff7acda8b06a6272986e7ee53a6409d3f85df96fbf2f857dc9a603996a0efe14b35aebd93fef31b7d6c2e2b5ae72046f1c60c3b6437fd24f67c111abbb517e47179cb6221a7c56273d9d197ecbd08e5311ec36faaaaa4e2d9505b2d4c5e1872e52dc9bd3f9e06d8371b39b9cacfcd4582d98a812d8454c59b5605fc6b375878551058ae96e6e8ec5bfdefe34735c2235db833880cbeec73d7fd3471bb9867d50ae060e223a88abdb2b116f0c7635ea9b1d34a344ef893f6105d855a2bbdeb19464ddabc684a2c7d1ee4a9195f1359cb0e56c05db955afe055920055244b4795369a0c1341488c2e9f195dab339b7833fe9e6d24dab525e0bc1004de0aae71b751c9b9a5422e8791c67cce764297c6ba0ebe418425032dbb4b9645a31591977a70a20b8617860ff5d387e581c3430ba79e640f12be0fc2d523ff177ea03d0dea2bd8f3eee17f265adf91bd5d2ffb0f668d945ce68c687be817a500da313d8365efc58e5eb589ec8f4fd61df8b0ae90fd4a368b36a9bfc167be6d56bdae4f5ff257ec55a2a8e72dfec56fdd95b64bba76c56922f74a9307ab9a43f5774ac36b86badc4f8e51618516b0e11861b0a7d8513682291e6168906118868e15246b00772e6af79250c46dedb57bb4e6950130cd7c7b165715addfc314611f1ace96bc1bd0983db9171da46ed099d730e7c46fa3bc6e8e2f3866b75a74cb2a105bdc632a4ad1457f95ab543bb8ee63d20ec8fa27d36f4992eae0746e6e422d816ca2bad0801ad675609b60473102a12f34ff2c157dd6186105ad23486ea566cf008151af668af4ab01c5cb5e89f3acbf97a0404efc9d754424e9bbc7dd22d59c5595d68f5e396fe7ec338fa46ffe94548171dac3eace5b8a50aee0c829b00fb499a08fdc32f8f31f359dda3ed3ec99b0a5cf9651b96428b9daa60c247ad789994acd2f2bf091cc449e10f67a856bdbe13552a89da57e4bfa39f6445f660b0f65c0c81abe7f003f69bc6741c77d513f58e5f2b18350b8ec2417a5890844ba781f1dee7985ded42aad3efd993bc10345664f90ba1ad403204a7804907c6b050b93c94e9979841d51b2d7c3246a0b8abcf274ba8515fe9506947829a165983e488f90fae24075ad2bb2dd165d9252185b8c95c56dc926407890cb107bb6d93157c67a7c9563af89ea5aa992dcc361cb519a6a79b54f4ed3aecf6126a6886f8ed1b66d08589118b543b773ab7a8244ab9817341b50e54e9fbd94ea1aefda3bb5a1aae519ec4a66f655731060a4b34f0f32d2f8a5472e41420bb12ff872fe3deb6b39edb2bac229ac5209390000ebb63835b8945a34bcc04c7759ac1af80d2085460c1fb8b7986233dd0183258593368403c01351c564f50a36e9297dcfff35d30eeea844e5096fa65a950b44a34f7821502e6bd8653fef01cc744145a9337fb67b902abb1774f6239271abfe1a405e8466bb3aa2a0d0fcae3bb21b68253cf09a9fe15e7432b480f5275659e51657e04c25de90c0c75fbc8c05405fbdd972f472322a2352e03d6164fa8fad707e4c50b1623f8aea2052d13eb922c061ed508f8cdcac76cea300219453447ab6615f76d360e07f67302b0161482d98e71ae9c4712d04baefebd00025151e2f4b6121dcdde4d6aa122e69217e575b2134a91259b6de32544954adb835ee0c77fa56fcf1eaaa02da2e01b65f9ff177f2f4c8de0d8bd58a4e6be992f62f34648d3cbe670bb4d9c87efa7ca267bebd2eb064edaf4445389d60a32df85de9296c8603bca3ebce84b3bd3e969e6d9860353b17691e2601ba9afc9b0355d0bc456b8437bf2e9f5a98b0e2d258bcf3421ecb67f05d814c6dea268454611fd03c18f81a5c30a28e30f284d40ff7836c6d193ffbe2ee5b11596c42cd0945a534e739433ef8f89b7639d882badd6cb44182ae72943eecea515b442c8e2364a57022f191e5e4ccf9da4b7e5067fce4a2952728cb6e1c1bfa9dbf62f1da62a8a5d82c132643f67a6d0120fdc3ca27b8121178b5e02eab013b5334a35f533f75def30cd801eefdf80adeaa5049ac0999a38167044f331d82c68ac3a0180b32bf196ca35764236d760c8aa6a309a69e513832b3c41e7e7c16f91cad5fbfe16b45e298bd31ce8e54183dbe76183042a7d16e3a699a5864f802f98e570872667800bf4bbfa199353c031f575bba4ff53057c4a14815f2857d44dfb4e667b7699a6bbaf0d043a1f0ed849305502efe774ab9562a06254176e95c65769c1e9bc9b9196729c70225849f31667d6187d71a324835a7005c7a89e72c7751f1c9023dd25262d8d4f35a71ae7f4a6fb7177ece2ef36054abd50df90a21bc93792ddcc499b06597bd7e81b18574fc47c29ef2b1a2c16431de6d73e31d686edf344a2115aa651a770b086350acf751ecb5742d497392471cac2e9963db4d8796ba57c7175009ba37d5ab7f06947cf999eba4207f3b5dc07bb5d0f04b3d563b7eb8ab5df8926f515d47d1f369e09ef3d6018409d210d56761f0195203376671f39da96c7a965589a329751253bbf5f4e33859e2a0682e605f3d37938efe1a10ab2ce609bbdec34df4d5aca32e44e450948eaee6b1e63cd278aefef305dd9cc8d93eed8ea1a443173f5473ab45328c4733fb50dcd95f5886ff89fc3d3dedbd586838fc83721e8719f1ec6be1b24816ccd2", 0x1000}, {&(0x7f0000000d00)="d5958e45a5f69f5b4acf30cbb859de9cd32f4ec39c6ca4ef6a2aadafec86fe01ecbc1c1dd2b1fc7a64a0e08556b3056bfcf748f54c6a21ac6cdbb9dea8b8b704fe825fa69d257e9ca23d9648ac31e10251ae1902690e3d147e2fd527d3150abec4fbf29ee260a11a9b218f1ab8fbdc7f8328e136ed8fdb14e6c5ab585b7c7b7585b1a580c91227009f6b1cf1287a60d74947eec8733af20750fb42451b44e655761439d7f1a878a92fd68180", 0xac}], 0x3, &(0x7f0000000dc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts={{0x38, 0x29, 0x37, {0x3a, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x8, 0x17, [0x100000001, 0x6]}}]}}}], 0x50}}], 0x3, 0x4400c800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ff"], 0x15) sendto$inet6(r5, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", '\x00\t\x00', "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r7, 0x11a, 0x4, &(0x7f0000000100), 0x3c) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfd9fa, {0x0, 0x0, 0x0, r2, 0x6cd7e, 0x240}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) sendfile(r7, r8, &(0x7f0000000300)=0x7, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="020027bd7000fcdbdf251c00000008000300", @ANYRES32=r11, @ANYBLOB="0c00af0000cc"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) 14.990539073s ago: executing program 2 (id=400): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="00a10200", 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 10.949137401s ago: executing program 32 (id=247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0603d0f, &(0x7f0000000040)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa9}}, 0x18) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x8, 0x4007, @fd, 0x8, 0x0, 0x0, 0x0, 0x1, {0x1}}) (async) r5 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) (async, rerun: 64) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1000, 0x14210000, 0x81, 0x1005, 0x0, 0xc, 0x0, 0x0, 0x80}}, 0x50) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @auto="df122325b295388032d1a6e110964320"}}) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6gre0\x00'}) 1.447598019s ago: executing program 3 (id=567): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) (fail_nth: 3) 1.388944681s ago: executing program 3 (id=568): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000280)='./file0\x00', 0x10000, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r2, 0x4) write$tun(r0, &(0x7f0000000740)={@void, @void, @llc={@snap={0x55, 0x0, "cc", "7002da", 0xdada}}}, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000780)={0x714, 0x1ff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$kcm(0x29, 0x7, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0xfe5e0000, "bfd8a5dd2002c02142c4391145badd28fd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 1.269333205s ago: executing program 3 (id=572): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x0, 0x2, {{0x6, 0x4, 0x0, 0x14, 0x18, 0x66, 0x0, 0x10, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x83, 0x3, "e2"}]}}}}}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r8, &(0x7f0000000080)=""/237, 0xed, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x34}], &(0x7f0000000240)='syzkaller\x00', 0x4a9, 0xc1, &(0x7f0000000280)=""/193, 0x41100, 0xc, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x0, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r8, 0x1, r0], &(0x7f0000000500)=[{0x0, 0x80, 0x9, 0x3}, {0x3, 0x4, 0x9, 0x3}, {0x5, 0x3, 0x7, 0x6}, {0x3, 0x5, 0x4, 0x9}, {0x4, 0x2, 0xf, 0xa}], 0x10, 0xe, @void, @value}, 0x94) r9 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2001}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.267906624s ago: executing program 3 (id=575): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x10000000000, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000003, 0x82012, r0, 0x83000000) 1.198760025s ago: executing program 3 (id=577): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000500)='./cgroup/../file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, r3, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xee01}}}}, 0xa0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r5, 0x0, 0x1ffd, 0x1) write$UHID_INPUT(r1, &(0x7f0000001980)={0xc, {"a2e3ad214fc752f91b3d060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x5f1}}, 0x505) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0x10, 0x3, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x400000, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) shmget(0x0, 0x4000, 0x602, &(0x7f0000ff9000/0x4000)=nil) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r11, r10, 0x0) shmget(0x0, 0x4000, 0x64, &(0x7f0000ff9000/0x4000)=nil) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0xff00) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x80000}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6072b2af00042f00874ed7fe800000000000000000000000000000ff0200000000000000000890780200000000000000000000ff00000000000000"], 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r14}, 0x10) 965.730957ms ago: executing program 1 (id=580): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r4, 0x0, 0x2fff, 0x2, &(0x7f0000000280)="c100", 0x4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x470bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000001c0)=""/238, &(0x7f0000000180)=0xee) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r4, 0x0, 0x2fff, 0x2, &(0x7f0000000280)="c100", 0x4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x470bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000001c0)=""/238, &(0x7f0000000180)=0xee) (async) 963.046836ms ago: executing program 1 (id=581): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a000000fe800000000000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x11}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x103040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {@in6=@loopback, 0x4d3, 0x33}, @in=@local, {0x20000, 0x0, 0xc4}, {0x400000000000000}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000f00)=@ethtool_rxfh_indir={0x38, 0x8, [0x0, 0x3, 0x0, 0x3, 0x3, 0x77, 0x10, 0x1a3]}}) socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000080), &(0x7f0000000300)=r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000002c0), 0x12) ioctl$TCXONC(r5, 0x540a, 0x0) (async) ioctl$TCXONC(r5, 0x540a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) unshare(0xa028000) (async) unshare(0xa028000) socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r7, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffb, 0x283, 0x7, 0x619347a8, 0x7, 0x3]}, &(0x7f0000000140)=0x78) (async) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffb, 0x283, 0x7, 0x619347a8, 0x7, 0x3]}, &(0x7f0000000140)=0x78) 962.866603ms ago: executing program 1 (id=582): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f000000ae80)={0x2020}, 0x2020) 961.77414ms ago: executing program 1 (id=583): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000008000000000004"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000140)=[{r0, 0x10}, {0xffffffffffffffff, 0x5040}], 0x2, 0x9) 850.575608ms ago: executing program 1 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 845.943741ms ago: executing program 1 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000580)={0x7, 0x1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000100)=""/147, 0x93}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/78, 0x4e}], &(0x7f0000000000)=[0x1ce64f3a, 0x3]}, 0x20) 359.689696ms ago: executing program 3 (id=596): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003940), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000003a40)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003a00)={&(0x7f0000003980)={0x44, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000240)={0xacb0, 0x7, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000280)=""/68, 0x44}], 0x2, &(0x7f0000000340)=""/220, 0xdc}, 0x80000000}, {{&(0x7f0000000440)=@vsock, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/89, 0x59}], 0x6, &(0x7f0000000980)=""/105, 0x69}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/240, 0xf0}], 0x1, &(0x7f0000000b40)=""/165, 0xa5}, 0x10001}, {{&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003640)=[{&(0x7f0000000c00)=""/28, 0x1c}, {&(0x7f00000021c0)=""/76, 0x4c}, {&(0x7f0000001080)=""/46, 0x2e}, {&(0x7f0000002240)=""/205, 0xcd}, {&(0x7f0000002340)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/186, 0xba}, {&(0x7f00000023c0)=""/31, 0x1f}, {0x0}, {&(0x7f0000003580)=""/159, 0x9f}], 0xa, &(0x7f0000003780)=""/68, 0x44}, 0x29}], 0x4, 0x40002103, &(0x7f0000002400)={0x0, 0x989680}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0100fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000240)={r10, 0x8000, 0x200, 0x2, 0x7ff, 0xffffffc0}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000c40)=@newchain={0x43c, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xd}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x9, 0x9, 0x0, 0xd153, 0x1, 0x0, 0x200, 0xea90, 0x861, 0x1000, 0x5, 0x9, 0xb, 0x1, 0x7, 0x1, 0x0, 0x6090, 0x2000000, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x7, 0x6a, 0x8, 0xb, 0xa962, 0x932, 0x8, 0x6bf1, 0x480a, 0x6, 0x9da, 0x5, 0x100, 0x9, 0xec6, 0x100, 0xfff, 0x81, 0x7, 0x6, 0xd, 0x2, 0x682, 0x9b4, 0x6, 0x957, 0xfffffbdd, 0x1, 0x7, 0x7, 0x1, 0x3, 0x252b0000, 0x100, 0xfffffffd, 0x401, 0x0, 0x5, 0x401, 0x3, 0x1, 0x5, 0x1, 0x80008, 0x7, 0xffffffff, 0xe, 0x10000000, 0x1, 0x400, 0xd, 0x0, 0x80000001, 0xcb3, 0x7f, 0x1, 0x81, 0x4, 0x0, 0xffffffff, 0x1, 0x27180000, 0x8, 0x7fff, 0xbcf9, 0xf, 0x0, 0x2, 0x4, 0xb5c, 0x6, 0x4ec, 0x3, 0x3, 0x6, 0x9, 0x8, 0x7ffffffd, 0x81, 0xabc0, 0x7e, 0x6, 0x2, 0x0, 0x0, 0x11, 0x2, 0x9, 0xff, 0x7631, 0x9, 0x37, 0x81, 0x101, 0x6, 0x3, 0x5, 0xfffffffe, 0x6, 0x5, 0x8, 0x5, 0x6, 0xe8f, 0x4d9a, 0x0, 0x800, 0x7, 0x7f, 0x9, 0x0, 0x6, 0x80, 0xd, 0x4, 0x0, 0xe9e, 0x2, 0x1000, 0x9, 0x4, 0x9, 0x100, 0x3, 0x6, 0x0, 0x6, 0x1ff, 0x7ff, 0xfffff9db, 0x0, 0x6, 0x80, 0x4, 0x200, 0x3, 0x5, 0x3302, 0x7, 0x1, 0x8, 0x9, 0xe, 0x7ac2, 0x6, 0x6, 0x81, 0xfffffffb, 0x2407, 0x2, 0x80000001, 0x8, 0xfffff0d1, 0x3, 0x401, 0x9, 0x5, 0x9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x6, 0x81, 0x1, 0x8, 0x0, 0x8, 0xe, 0x0, 0x100, 0x0, 0x1000, 0x3, 0x0, 0x4, 0x7, 0xff, 0x2, 0x4, 0xe, 0x2a, 0x90, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x4, 0x7, 0x7fffffff, 0x9e, 0x3993, 0x9, 0x6f, 0x2, 0x4, 0x934c, 0x5, 0xfff, 0x4, 0x3, 0xfffffff9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x3, 0x0, 0x1, 0x101, 0x0, 0x4, 0x8, 0x1, 0x8, 0xfffff001, 0x7a, 0x2, 0x6, 0x2, 0x1, 0x1, 0x4, 0x80000001, 0xb, 0xfc, 0x4, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r11) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r12, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r12, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8004) 147.328967ms ago: executing program 4 (id=602): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x1010, 0xffffffffffffffff, 0x8000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000002580)=0x5, 0x6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 146.963702ms ago: executing program 4 (id=603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000010000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000a000000af000000000000001c00170000000000000000002abd70000000400000000000000000004c001400636d6163286165732900"/272], 0x158}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2084}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}}, 0x0) 90.199773ms ago: executing program 4 (id=604): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280"], 0xa8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280"], 0xa8}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002700851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 89.525692ms ago: executing program 4 (id=605): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r1, r1], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000100)={&(0x7f0000000080)=[r1], &(0x7f00000000c0)=[0x1], 0x3, 0x1, 0x7}) r2 = socket(0x22, 0x2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x100010, r0, 0x3229a000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000f300210100404a3e9a000000000000000000000057129c83ab89e8a2949d61166ff6cdde40bc9f2ce1725a08f6672f05cc63cdda62048498ef8cd3de27edb92407e1cf89a15bc652333b9d2b18074d7390e5635e2c353c4547dedaf58be00514f663222015155289e3d34045e0a7259cb8a0448276f44973bc66e480de4098c58329e12d3a61cefcc9ffc3348f5b60b044b63efe5351486e8d95141ff31d21a7b662d4e7819979fc43845f0506c5f35beb2c2cbbb05d53903f5af690b709282d238566db6ce9c8229272e1cde368ac7380cf963ea66e49806eeb095f0a", @ANYRES32=0x0], 0x18}}, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41c0) 19.134122ms ago: executing program 4 (id=606): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f139c07a86f4efe85e13f460356370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xd8}]}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000000c0)={0x40, "ea73a225f4e103712d8dd2e6d50dd735a0546b1c30494e734d29d73d5c495048dc0bf52ce081b6de37cf69a474780b2108bbe3c7ac0478b27d2c262b85268bbbce3f2c984b4ba96a37ef69c89a9f32e5a6d5974cdc8e019686a97983408f8e54b0bc8057485746ada697bd2b128bb0b5166c9b1a484dcb4a398cd31c34c4c3bc"}) r2 = socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="24a4067b1b9c6a910a6310e458099a3fb4c1121abefdf8ebeef34b6dffad0b59deed0e", 0x23}, {&(0x7f0000000200)="171d80ba5954d87f689fb4218b01471a76bf582ecab075b4e49850e60dc942b6c5f5804dae5748d8580b54da6b3da4488752e378a2da58b59f38919143ce1467618dbe6e34cd6136c9227f973210e9a82e93af945fb1003c9681b025bc8c9e5c096f53c5a0dc304d8eda2fa490297adfb7546aaf86209938fbf9c03043fc40b150874a5ae1", 0x85}, {&(0x7f00000002c0)="01eb8a2da5924043955388acaddb8d20c7ce8a9ddfb3d18be8106dfeb275c71c05d37620cbf4740e38404c7d6474007751afd4690870d97f551aec325c3dabb8185a5a4a2c6305daa7a8a9c9a9efae2d23baf6d24f74624b61583d79584079af8843c3ab55d6d06725c9d52a7f875b57adc36b7095c84e9dd896d5da0e6a603b6219acb89872e7bc94905e49211babf4180f68ebc35b61fcd6f6c16bd74e59369963f5d85b3c0e595d21b68476942772721888922806c7f541dae71684a2ff5aba5258fd898e777302ecbdb985ae74189909510adee4967c65093496", 0xdc}], 0x3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x280000000000, 0x488040) ioctl$SG_IO(r3, 0x2285, &(0x7f00000019c0)={0x53, 0xffffffffffffffff, 0x55, 0x0, @scatter={0x6, 0x0, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000001600)=""/246, 0xf6}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f0000001800)=""/38, 0x26}]}, &(0x7f00000018c0)="f680ca14de2c3f47adf112aaacc01f5f903e828ebfca8d4c3ed39bff1d451365055fd6d0cb692ba7502d90657c52e746cc86ac215c46d616d9b34945b2a08ea0fa97ac02a7b048aa41492776a9522a6d1d43b4ca6b", &(0x7f0000001940), 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000001980)}) 18.066894ms ago: executing program 4 (id=607): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x32, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a00"], 0x50}}, 0x4000850) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x1) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) mmap$xdp(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x200000b, 0x12, r2, 0x180000000) 0s ago: executing program 33 (id=400): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="00a10200", 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000300)=[r3], &(0x7f0000000340)}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:7938' (ED25519) to the list of known hosts. [ 40.161561][ T40] audit: type=1400 audit(1748179194.134:66): avc: denied { name_bind } for pid=5841 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.183294][ T40] audit: type=1400 audit(1748179194.154:67): avc: denied { write } for pid=5842 comm="sh" path="pipe:[2717]" dev="pipefs" ino=2717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 40.195263][ T40] audit: type=1400 audit(1748179194.174:68): avc: denied { execute } for pid=5842 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.203660][ T40] audit: type=1400 audit(1748179194.174:69): avc: denied { execute_no_trans } for pid=5842 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.143086][ T40] audit: type=1400 audit(1748179196.114:70): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.149894][ T5842] cgroup: Unknown subsys name 'net' [ 42.308462][ T5842] cgroup: Unknown subsys name 'cpuset' [ 42.313007][ T5842] cgroup: Unknown subsys name 'rlimit' [ 42.566140][ T5912] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.211092][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.047816][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 46.047827][ T40] audit: type=1400 audit(1748179200.024:84): avc: denied { execmem } for pid=5921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.260932][ T40] audit: type=1400 audit(1748179200.234:85): avc: denied { create } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.272838][ T40] audit: type=1400 audit(1748179200.234:86): avc: denied { read write } for pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.280196][ T40] audit: type=1400 audit(1748179200.234:87): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.287572][ T40] audit: type=1400 audit(1748179200.244:88): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="socket:[7169]" dev="sockfs" ino=7169 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.310659][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.314497][ T5929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.317641][ T5929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.322452][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.324682][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.324934][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.327470][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.330950][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.332377][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.334196][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.337080][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.340775][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.346976][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.349603][ T40] audit: type=1400 audit(1748179200.324:89): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.352104][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.356127][ T40] audit: type=1400 audit(1748179200.324:90): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.359319][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.360671][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.362365][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.362471][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.364877][ T40] audit: type=1400 audit(1748179200.324:91): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.365526][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.368109][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.526620][ T40] audit: type=1400 audit(1748179200.504:92): avc: denied { module_request } for pid=5935 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.619900][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 46.684435][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.703973][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 46.711506][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 46.896726][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.900025][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.902931][ T5935] bridge_slave_0: entered allmulticast mode [ 46.908532][ T5935] bridge_slave_0: entered promiscuous mode [ 46.934225][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.936930][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.939948][ T5935] bridge_slave_1: entered allmulticast mode [ 46.943862][ T5935] bridge_slave_1: entered promiscuous mode [ 46.964380][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.966602][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.968854][ T5940] bridge_slave_0: entered allmulticast mode [ 46.971233][ T5940] bridge_slave_0: entered promiscuous mode [ 47.070934][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.073040][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.075312][ T5940] bridge_slave_1: entered allmulticast mode [ 47.077897][ T5940] bridge_slave_1: entered promiscuous mode [ 47.096579][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.117003][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.119608][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.121701][ T5927] bridge_slave_0: entered allmulticast mode [ 47.124833][ T5927] bridge_slave_0: entered promiscuous mode [ 47.155570][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.159533][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.162569][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.166355][ T5926] bridge_slave_0: entered allmulticast mode [ 47.170344][ T5926] bridge_slave_0: entered promiscuous mode [ 47.174434][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.176720][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.178834][ T5927] bridge_slave_1: entered allmulticast mode [ 47.181314][ T5927] bridge_slave_1: entered promiscuous mode [ 47.198490][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.228830][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.231649][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.234489][ T5926] bridge_slave_1: entered allmulticast mode [ 47.237409][ T5926] bridge_slave_1: entered promiscuous mode [ 47.276639][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.309840][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.329538][ T5935] team0: Port device team_slave_0 added [ 47.332936][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.338271][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.360025][ T5935] team0: Port device team_slave_1 added [ 47.364197][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.398085][ T5940] team0: Port device team_slave_0 added [ 47.479911][ T5940] team0: Port device team_slave_1 added [ 47.482696][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.487270][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.498045][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.505959][ T5926] team0: Port device team_slave_0 added [ 47.510552][ T5927] team0: Port device team_slave_0 added [ 47.527684][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.529931][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.538828][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.544932][ T5926] team0: Port device team_slave_1 added [ 47.572368][ T5927] team0: Port device team_slave_1 added [ 47.615271][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.617494][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.625841][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.672762][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.674946][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.683251][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.691797][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.694155][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.702775][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.706793][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.709308][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.717856][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.723654][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.725942][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.733789][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.737773][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.739951][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.749812][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.838747][ T5940] hsr_slave_0: entered promiscuous mode [ 47.841486][ T5940] hsr_slave_1: entered promiscuous mode [ 47.885372][ T5935] hsr_slave_0: entered promiscuous mode [ 47.887632][ T5935] hsr_slave_1: entered promiscuous mode [ 47.889654][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.892077][ T5935] Cannot create hsr debugfs directory [ 47.922308][ T5927] hsr_slave_0: entered promiscuous mode [ 47.925511][ T5927] hsr_slave_1: entered promiscuous mode [ 47.928230][ T5927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.931103][ T5927] Cannot create hsr debugfs directory [ 47.970634][ T5926] hsr_slave_0: entered promiscuous mode [ 47.972904][ T5926] hsr_slave_1: entered promiscuous mode [ 47.974955][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.977959][ T5926] Cannot create hsr debugfs directory [ 48.416010][ T5283] Bluetooth: hci1: command tx timeout [ 48.416017][ T5939] Bluetooth: hci3: command tx timeout [ 48.425363][ T5283] Bluetooth: hci2: command tx timeout [ 48.425834][ T5939] Bluetooth: hci0: command tx timeout [ 48.429454][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.438584][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.448321][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.464845][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.507496][ T5926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.513946][ T5926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.520608][ T5926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.527001][ T5926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.588067][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.596106][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.602479][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.609626][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.694136][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.698733][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.707680][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.714653][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.726079][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.752868][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.759248][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.780117][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.783289][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.793900][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.796945][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.812858][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.829200][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.831451][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.836980][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.848206][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.850625][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.882603][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.893238][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.896300][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.902364][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.905426][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.967741][ T40] audit: type=1400 audit(1748179202.944:93): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.972085][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.991541][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.999457][ T5927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.004558][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.006888][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.019333][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.021623][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.069691][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.103007][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.118518][ T5926] veth0_vlan: entered promiscuous mode [ 49.124838][ T5926] veth1_vlan: entered promiscuous mode [ 49.154323][ T5926] veth0_macvtap: entered promiscuous mode [ 49.161344][ T5940] veth0_vlan: entered promiscuous mode [ 49.164111][ T5926] veth1_macvtap: entered promiscuous mode [ 49.181347][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.188739][ T5940] veth1_vlan: entered promiscuous mode [ 49.200222][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.209405][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.217751][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.224701][ T5926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.228708][ T5926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.231371][ T5926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.234100][ T5926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.265777][ T5940] veth0_macvtap: entered promiscuous mode [ 49.275212][ T5940] veth1_macvtap: entered promiscuous mode [ 49.294008][ T5935] veth0_vlan: entered promiscuous mode [ 49.321198][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.323982][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.328760][ T5935] veth1_vlan: entered promiscuous mode [ 49.333368][ T5927] veth0_vlan: entered promiscuous mode [ 49.344994][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.369562][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.377134][ T5927] veth1_vlan: entered promiscuous mode [ 49.383332][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.388165][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.392555][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.396538][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.404743][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.409240][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.421230][ T5935] veth0_macvtap: entered promiscuous mode [ 49.431076][ T5935] veth1_macvtap: entered promiscuous mode [ 49.462091][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.467376][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.479060][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.480348][ T5927] veth0_macvtap: entered promiscuous mode [ 49.484445][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.493639][ T5927] veth1_macvtap: entered promiscuous mode [ 49.503516][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.517405][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.520982][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.524517][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.528560][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.555147][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.558490][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.570638][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.587432][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.595549][ T5927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.599125][ T5927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.603320][ T5927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.608457][ T5927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.668519][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.673068][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.691129][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.694455][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.720090][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.724006][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.738380][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.742041][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.966687][ T6021] tipc: Started in network mode [ 49.968249][ T6021] tipc: Node identity ac141417, cluster identity 4711 [ 49.970928][ T6021] tipc: New replicast peer: 172.20.20.23 [ 49.973890][ T6021] tipc: Enabled bearer , priority 10 [ 50.251873][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 50.258732][ T6033] bridge_slave_1: left allmulticast mode [ 50.260669][ T6033] bridge_slave_1: left promiscuous mode [ 50.263146][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.270170][ T6033] bridge_slave_0: left allmulticast mode [ 50.272642][ T6033] bridge_slave_0: left promiscuous mode [ 50.277441][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.312899][ T65] libceph: connect (1)[c::]:6789 error -101 [ 50.316533][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 50.320453][ T65] libceph: connect (1)[c::]:6789 error -101 [ 50.323568][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 50.334821][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.338142][ T6038] process 'syz.2.13' launched '/dev/fd/6' with NULL argv: empty string added [ 50.363203][ T10] libceph: connect (1)[b::]:6789 error -101 [ 50.366026][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 50.394407][ T6047] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14'. [ 50.495674][ T5939] Bluetooth: hci3: command tx timeout [ 50.505440][ T5939] Bluetooth: hci2: command tx timeout [ 50.505532][ T5283] Bluetooth: hci0: command tx timeout [ 50.505534][ T5929] Bluetooth: hci1: command tx timeout [ 50.586121][ T29] libceph: connect (1)[c::]:6789 error -101 [ 50.588110][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 50.625642][ T10] libceph: connect (1)[b::]:6789 error -101 [ 50.627640][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 50.688998][ T6066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=93 sclass=netlink_route_socket pid=6066 comm=syz.3.21 [ 50.758203][ T6073] nbd: must specify at least one socket [ 50.927648][ T6073] sp0: Synchronizing with TNC [ 50.976219][ T10] tipc: Node number set to 2886997015 [ 51.095341][ T65] libceph: connect (1)[c::]:6789 error -101 [ 51.097438][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 51.108354][ T6043] ceph: No mds server is up or the cluster is laggy [ 51.109081][ T6035] ceph: No mds server is up or the cluster is laggy [ 51.133224][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 51.133240][ T40] audit: type=1400 audit(1748179205.104:188): avc: denied { append } for pid=6087 comm="syz.3.26" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.168132][ T40] audit: type=1400 audit(1748179205.144:189): avc: denied { create } for pid=6089 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 51.221489][ T40] audit: type=1400 audit(1748179205.194:190): avc: denied { watch watch_reads } for pid=6095 comm="syz.0.28" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.316676][ T6103] netlink: 'syz.3.30': attribute type 11 has an invalid length. [ 51.319119][ T6103] netlink: 'syz.3.30': attribute type 11 has an invalid length. [ 51.320040][ T6101] SELinux: policydb magic number 0x2a7e120b does not match expected magic number 0xf97cff8c [ 51.321595][ T40] audit: type=1400 audit(1748179205.294:191): avc: denied { load_policy } for pid=6100 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.322777][ T6103] netlink: 224 bytes leftover after parsing attributes in process `syz.3.30'. [ 51.324841][ T6101] SELinux: failed to load policy [ 51.333444][ T40] audit: type=1400 audit(1748179205.294:192): avc: denied { read write } for pid=6104 comm="syz.0.31" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.346354][ T40] audit: type=1400 audit(1748179205.294:193): avc: denied { open } for pid=6104 comm="syz.0.31" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.354432][ T40] audit: type=1400 audit(1748179205.294:194): avc: denied { write } for pid=6100 comm="syz.2.29" name="userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.361965][ T40] audit: type=1400 audit(1748179205.304:195): avc: denied { read write } for pid=6104 comm="syz.0.31" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.369885][ T40] audit: type=1400 audit(1748179205.304:196): avc: denied { open } for pid=6104 comm="syz.0.31" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.378995][ T40] audit: type=1400 audit(1748179205.304:197): avc: denied { append } for pid=6104 comm="syz.0.31" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.416751][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 51.463605][ T6123] capability: warning: `syz.0.36' uses 32-bit capabilities (legacy support in use) [ 51.546655][ T6133] loop3: detected capacity change from 0 to 7 [ 51.552416][ T6133] Dev loop3: unable to read RDB block 7 [ 51.554548][ T6133] loop3: AHDI p1 p2 p3 [ 51.558746][ T10] psmouse serio2: Failed to reset mouse on : -5 [ 51.561655][ T6133] loop3: partition table partially beyond EOD, truncated [ 51.566346][ T6133] loop3: p1 start 1601398130 is beyond EOD, truncated [ 51.569164][ T6133] loop3: p2 start 1702059890 is beyond EOD, truncated [ 51.603053][ T6140] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 51.611891][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 51.640149][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 51.662495][ T6144] x_tables: duplicate underflow at hook 1 [ 51.714138][ T6156] warning: `syz.3.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.720422][ T6156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.835529][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 51.992070][ T6185] netlink: 'syz.0.50': attribute type 4 has an invalid length. [ 52.108604][ T6190] fuse: Invalid rootmode [ 52.111933][ T6190] 9pnet_fd: Insufficient options for proto=fd [ 52.115119][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.265127][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 52.269301][ T65] usb 6-1: config 0 has no interfaces? [ 52.272598][ T65] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 52.277719][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.280311][ T65] usb 6-1: Product: syz [ 52.281626][ T65] usb 6-1: Manufacturer: syz [ 52.283154][ T65] usb 6-1: SerialNumber: syz [ 52.286560][ T65] usb 6-1: config 0 descriptor?? [ 52.423518][ T6211] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.438627][ T6211] input: syz0 as /devices/virtual/input/input6 [ 52.447015][ T6211] ip6t_rpfilter: unknown options [ 52.493400][ T65] usb 6-1: USB disconnect, device number 2 [ 52.575629][ T5283] Bluetooth: hci2: command tx timeout [ 52.575679][ T5929] Bluetooth: hci0: command tx timeout [ 52.579775][ T5939] Bluetooth: hci3: command tx timeout [ 52.826566][ T6232] bridge1: entered promiscuous mode [ 52.828449][ T6232] bridge1: entered allmulticast mode [ 53.195165][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 53.345574][ T9] usb 8-1: no configurations [ 53.347110][ T9] usb 8-1: can't read configurations, error -22 [ 53.467838][ T6258] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 53.495161][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 53.615261][ T5939] Bluetooth: hci1: command tx timeout [ 53.645647][ T9] usb 8-1: no configurations [ 53.647517][ T9] usb 8-1: can't read configurations, error -22 [ 53.650062][ T9] usb usb8-port1: attempt power cycle [ 53.743363][ T6274] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 53.894695][ T6286] IPv6: Can't replace route, no match found [ 53.957888][ T6290] ata3.00: invalid multi_count 1 ignored [ 54.005095][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 54.036820][ T9] usb 8-1: no configurations [ 54.038467][ T9] usb 8-1: can't read configurations, error -22 [ 54.164782][ T6298] Zero length message leads to an empty skb [ 54.165176][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 54.197198][ T9] usb 8-1: no configurations [ 54.199709][ T9] usb 8-1: can't read configurations, error -22 [ 54.202865][ T9] usb usb8-port1: unable to enumerate USB device [ 54.382443][ T6311] fuse: Unknown parameter 'n' [ 54.655163][ T5939] Bluetooth: hci2: command tx timeout [ 54.667412][ T5939] Bluetooth: hci3: command tx timeout [ 54.754560][ T6332] binder: BINDER_SET_CONTEXT_MGR already set [ 54.757324][ T6332] binder: 6331:6332 ioctl 4018620d 200000000040 returned -16 [ 54.875980][ T1122] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 54.879641][ T1122] sr 2:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 54.882254][ T1122] sr 2:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 54.885461][ T1122] sr 2:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 54.888066][ T1122] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 54.891280][ T1122] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 54.894508][ T1122] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 55.076606][ T6349] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6349 comm=syz.1.102 [ 55.122607][ T6351] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 55.204587][ T6357] nfs4: Unknown parameter 'rGma' [ 55.205434][ T6358] overlayfs: missing 'lowerdir' [ 55.345267][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 55.485239][ T5970] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.635149][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 55.639538][ T5970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.643027][ T5970] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 55.647752][ T5970] usb 6-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 55.651217][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.654320][ T5970] usb 6-1: Product: syz [ 55.656182][ T5970] usb 6-1: Manufacturer: syz [ 55.658115][ T5970] usb 6-1: SerialNumber: syz [ 55.663790][ T5970] usb 6-1: config 0 descriptor?? [ 55.760361][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 55.777803][ T6369] bond2: entered promiscuous mode [ 55.779777][ T6369] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 55.783071][ T6369] bond2: left promiscuous mode [ 55.858366][ T6366] ALSA: mixer_oss: invalid OSS volume '' [ 55.943738][ T65] usb 6-1: USB disconnect, device number 3 [ 55.961789][ T6376] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 55.966598][ T6377] Attempt to restore checkpoint with obsolete wellknown handles [ 56.078096][ T6381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.188293][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 56.188312][ T40] audit: type=1400 audit(1748179210.164:297): avc: denied { getopt } for pid=6390 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.347391][ T6394] netlink: 'syz.0.117': attribute type 21 has an invalid length. [ 56.350925][ T40] audit: type=1400 audit(1748179210.324:298): avc: denied { read } for pid=6393 comm="syz.0.117" name="usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.355291][ T6395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'. [ 56.361147][ T40] audit: type=1400 audit(1748179210.324:299): avc: denied { open } for pid=6393 comm="syz.0.117" path="/dev/usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.411495][ T10] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 56.504363][ T40] audit: type=1400 audit(1748179210.474:300): avc: denied { connect } for pid=6397 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.515127][ T40] audit: type=1400 audit(1748179210.484:301): avc: denied { write } for pid=6397 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.553175][ T40] audit: type=1400 audit(1748179210.524:302): avc: denied { create } for pid=6399 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.561301][ T40] audit: type=1400 audit(1748179210.534:303): avc: denied { shutdown } for pid=6397 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.572016][ T40] audit: type=1400 audit(1748179210.544:304): avc: denied { create } for pid=6397 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.581192][ T40] audit: type=1400 audit(1748179210.544:305): avc: denied { setopt } for pid=6397 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.588199][ T40] audit: type=1400 audit(1748179210.544:306): avc: denied { ioctl } for pid=6397 comm="syz.0.118" path="socket:[12294]" dev="sockfs" ino=12294 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.609675][ T6403] xt_hashlimit: size too large, truncated to 1048576 [ 56.625262][ T10] psmouse serio2: Failed to enable mouse on [ 56.678952][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.2.123'. [ 56.682579][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 56.856273][ T6430] erofs (device loop2): cannot find valid erofs superblock [ 56.979212][ T6435] vlan2: entered allmulticast mode [ 56.980969][ T6435] bond0: entered allmulticast mode [ 56.983064][ T6435] bond_slave_0: entered allmulticast mode [ 56.994700][ T6435] bond_slave_1: entered allmulticast mode [ 57.011498][ T6435] bridge0: port 3(vlan2) entered blocking state [ 57.025450][ T6435] bridge0: port 3(vlan2) entered disabled state [ 57.040116][ T6435] vlan2: entered promiscuous mode [ 57.041970][ T6435] bond0: entered promiscuous mode [ 57.043674][ T6435] bond_slave_0: entered promiscuous mode [ 57.043728][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 57.045781][ T6435] bond_slave_1: entered promiscuous mode [ 57.052831][ T6435] bridge0: port 3(vlan2) entered blocking state [ 57.054950][ T6435] bridge0: port 3(vlan2) entered forwarding state [ 57.188340][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.190802][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.193954][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.196814][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.510394][ T6453] usb usb8: usbfs: process 6453 (syz.0.135) did not claim interface 0 before use [ 57.520560][ T6453] batadv0: entered promiscuous mode [ 57.523272][ T6453] hsr1: entered promiscuous mode [ 57.525973][ T6453] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 57.701163][ T6461] openvswitch: netlink: EtherType 0 is less than min 600 [ 57.826931][ T6471] random: crng reseeded on system resumption [ 57.991451][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 58.067774][ T6496] capability: warning: `syz.2.150' uses deprecated v2 capabilities in a way that may be insecure [ 58.295912][ T6514] netlink: 'syz.2.157': attribute type 2 has an invalid length. [ 58.299001][ T6514] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.157'. [ 58.597520][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 58.775720][ T6545] vlan3: entered allmulticast mode [ 58.779252][ T6545] bridge0: entered allmulticast mode [ 58.845540][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 58.890500][ T6557] syz.0.168 uses obsolete (PF_INET,SOCK_PACKET) [ 59.663409][ T6604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.724908][ T6613] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 59.724908][ T6613] program syz.0.188 not setting count and/or reply_len properly [ 59.816208][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.193'. [ 59.851689][ T46] Bluetooth: hci4: Frame reassembly failed (-90) [ 59.894960][ T6643] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 59.912873][ T6643] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 59.916973][ T6643] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 59.926010][ T6643] bond1: (slave wireguard0): making interface the new active one [ 59.928922][ T6643] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 60.029325][ T6654] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 60.032671][ T6654] team0: Device ipvlan2 is already an upper device of the team interface [ 60.155854][ T6658] tipc: Enabled bearer , priority 10 [ 60.160244][ T6658] tipc: Enabled bearer , priority 0 [ 60.164138][ T6658] omfs: Invalid superblock (0) [ 60.206560][ T58] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 60.224862][ T6660] can: request_module (can-proto-0) failed. [ 60.367214][ T58] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 60.371123][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.374839][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.379830][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 60.386308][ T58] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 60.390220][ T58] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 60.393478][ T58] usb 8-1: Manufacturer: syz [ 60.399608][ T58] usb 8-1: config 0 descriptor?? [ 60.795426][ T6691] netlink: 'syz.1.215': attribute type 2 has an invalid length. [ 60.809933][ T58] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 60.813513][ T58] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 60.823316][ T58] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 61.129811][ T10] usb 8-1: USB disconnect, device number 6 [ 61.560435][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 61.560447][ T40] audit: type=1400 audit(1748179215.534:364): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.656073][ T40] audit: type=1400 audit(1748179215.634:365): avc: denied { bind } for pid=6703 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.662130][ T40] audit: type=1400 audit(1748179215.634:366): avc: denied { node_bind } for pid=6703 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 61.669048][ T40] audit: type=1400 audit(1748179215.634:367): avc: denied { getopt } for pid=6703 comm="syz.2.219" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.675469][ T40] audit: type=1400 audit(1748179215.634:368): avc: denied { write } for pid=6703 comm="syz.2.219" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.720638][ T40] audit: type=1400 audit(1748179215.694:369): avc: denied { mount } for pid=6709 comm="syz.3.222" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.732325][ T6712] evm: overlay not supported [ 61.753673][ T40] audit: type=1400 audit(1748179215.724:370): avc: denied { map } for pid=6711 comm="syz.2.223" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.775807][ T40] audit: type=1400 audit(1748179215.754:371): avc: denied { node_bind } for pid=6714 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 61.802373][ T40] audit: type=1400 audit(1748179215.774:372): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.806056][ T6721] netlink: 'syz.2.225': attribute type 23 has an invalid length. [ 61.835200][ T40] audit: type=1400 audit(1748179215.814:373): avc: denied { create } for pid=6726 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.855149][ T5929] Bluetooth: hci4: command 0x1003 tx timeout [ 61.855426][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.890840][ T6734] __nla_validate_parse: 2 callbacks suppressed [ 61.890851][ T6734] netlink: 80 bytes leftover after parsing attributes in process `syz.0.231'. [ 61.919401][ T6736] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 62.016005][ T6747] netlink: 'syz.0.235': attribute type 4 has an invalid length. [ 62.054583][ T6749] sctp: [Deprecated]: syz.2.236 (pid 6749) Use of int in max_burst socket option. [ 62.054583][ T6749] Use struct sctp_assoc_value instead [ 62.076779][ T5930] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 62.236520][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.257891][ T5930] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.260803][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.263222][ T5930] usb 8-1: Product: syz [ 62.264526][ T5930] usb 8-1: Manufacturer: syz [ 62.267044][ T5930] usb 8-1: SerialNumber: syz [ 62.273908][ T5930] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 62.344106][ T58] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 62.386900][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 62.390350][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.393892][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.397434][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 62.402789][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 62.406094][ T29] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 62.408682][ T29] usb 6-1: Manufacturer: syz [ 62.420808][ T29] usb 6-1: config 0 descriptor?? [ 62.839944][ T29] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 62.842608][ T29] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 62.854067][ T29] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 63.074071][ T6778] 9pnet_fd: Insufficient options for proto=fd [ 63.104218][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.107213][ T6780] ======================================================= [ 63.107213][ T6780] WARNING: The mand mount option has been deprecated and [ 63.107213][ T6780] and is ignored by this kernel. Remove the mand [ 63.107213][ T6780] option from the mount to silence this warning. [ 63.107213][ T6780] ======================================================= [ 63.108566][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.121403][ T6780] tmpfs: Cannot change global quota limit on remount [ 63.154459][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 63.212024][ T6763] random: crng reseeded on system resumption [ 63.375278][ T58] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 63.378886][ T58] ath9k_htc: Failed to initialize the device [ 63.406382][ T58] usb 8-1: ath9k_htc: USB layer deinitialized [ 63.420189][ T835] usb 8-1: USB disconnect, device number 7 [ 63.427520][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 63.430264][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'. [ 63.437725][ T6795] geneve2: entered promiscuous mode [ 63.439547][ T6795] geneve2: entered allmulticast mode [ 63.459716][ T6800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.234'. [ 63.516239][ T6807] program syz.2.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.664321][ T58] usb 6-1: USB disconnect, device number 4 [ 64.277776][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.436304][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.440572][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.444319][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.448425][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.454318][ T6821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 64.460737][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.546564][ T6832] overlayfs: failed to resolve './bus': -2 [ 64.662070][ T6841] netlink: 'syz.3.261': attribute type 13 has an invalid length. [ 64.708030][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 64.776399][ T58] usb 7-1: USB disconnect, device number 2 [ 65.156176][ T835] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 65.306343][ T835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.309469][ T835] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.312262][ T835] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.315850][ T835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.321068][ T835] usb 8-1: config 0 descriptor?? [ 65.388736][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'. [ 65.404929][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 65.446387][ T836] hid-generic 0000:AEA3C3F:78D2AF8E.0004: unexpected long global item [ 65.449649][ T836] hid-generic 0000:AEA3C3F:78D2AF8E.0004: probe with driver hid-generic failed with error -22 [ 65.686132][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 65.688775][ T1112] ata1: failed to read log page 10h (errno=-5) [ 65.691182][ T1112] ata1.00: exception Emask 0x1 SAct 0x8000 SErr 0x0 action 0x0 [ 65.693554][ T1112] ata1.00: irq_stat 0x40000000 [ 65.696111][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 65.698756][ T1112] ata1.00: cmd 61/00:78:26:2f:06/01:00:00:00:00/40 tag 15 ncq dma 131072 out [ 65.698756][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 65.705351][ T1112] ata1.00: status: { DRDY } [ 65.709506][ T1112] ata1.00: configured for UDMA/100 [ 65.711404][ T1112] ata1: EH complete [ 67.354433][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 67.354447][ T40] audit: type=1400 audit(1748179221.324:407): avc: denied { read append } for pid=6924 comm="syz.2.287" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.366738][ T40] audit: type=1400 audit(1748179221.344:408): avc: denied { open } for pid=6924 comm="syz.2.287" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.412192][ T6927] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 67.418442][ T46] Bluetooth: (null): Invalid header checksum [ 67.508486][ T40] audit: type=1400 audit(1748179221.484:409): avc: denied { ioctl } for pid=6928 comm="syz.1.289" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.563566][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 67.690548][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 68.044075][ T9] usb 8-1: USB disconnect, device number 8 [ 68.045114][ T5930] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 68.077344][ T6964] netlink: 'syz.3.301': attribute type 5 has an invalid length. [ 68.196948][ T5930] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.205098][ T5930] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 68.207852][ T5930] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 8 [ 68.211118][ T5930] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 68.234429][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.248007][ T6958] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.251236][ T5930] hub 6-1:1.0: bad descriptor, ignoring hub [ 68.253141][ T5930] hub 6-1:1.0: probe with driver hub failed with error -5 [ 68.258670][ T5930] cdc_wdm 6-1:1.0: skipping garbage [ 68.261052][ T5930] cdc_wdm 6-1:1.0: skipping garbage [ 68.267290][ T6972] Invalid source name [ 68.267432][ T5930] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 68.268587][ T6972] UBIFS error (pid: 6972): cannot open "ubifs", error -22 [ 68.270550][ T5930] cdc_wdm 6-1:1.0: Unknown control protocol [ 68.428712][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 68.561586][ T40] audit: type=1400 audit(1748179222.534:410): avc: denied { write } for pid=6984 comm="syz.2.308" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.569733][ T40] audit: type=1400 audit(1748179222.544:411): avc: denied { getopt } for pid=6984 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.575458][ T64] usb 6-1: USB disconnect, device number 5 [ 68.772567][ T40] audit: type=1400 audit(1748179222.744:412): avc: denied { bind } for pid=6990 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.773834][ T6991] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 68.783383][ T6992] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 68.791619][ T6992] CIFS: Unable to determine destination address [ 68.794234][ T40] audit: type=1400 audit(1748179222.764:413): avc: denied { module_request } for pid=6990 comm="syz.2.310" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 68.877883][ T6997] binder: 6996:6997 ioctl 8933 200000000000 returned -22 [ 68.881006][ T6997] nbd: couldn't find a device at index -1605786504 [ 68.910188][ T40] audit: type=1400 audit(1748179222.884:414): avc: denied { listen } for pid=7004 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.915941][ T40] audit: type=1400 audit(1748179222.884:415): avc: denied { accept } for pid=7004 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.921511][ T40] audit: type=1400 audit(1748179222.884:416): avc: denied { shutdown } for pid=7004 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.993802][ T7017] netlink: 76 bytes leftover after parsing attributes in process `syz.1.319'. [ 69.046956][ T7022] fuse: Bad value for 'group_id' [ 69.048510][ T7022] fuse: Bad value for 'group_id' [ 69.789031][ T7033] fuse: Bad value for 'fd' [ 69.951227][ T7042] bond0: Error: Cannot enslave bond to itself. [ 69.994368][ T7050] netlink: 'syz.1.329': attribute type 11 has an invalid length. [ 70.060372][ T7057] netlink: 'syz.3.331': attribute type 2 has an invalid length. [ 70.062971][ T7057] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 70.065723][ T7057] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 70.355385][ T7095] loop2: detected capacity change from 0 to 7 [ 70.363141][ T5945] Dev loop2: unable to read RDB block 7 [ 70.365450][ T5945] loop2: unable to read partition table [ 70.367578][ T5945] loop2: partition table beyond EOD, truncated [ 70.371477][ T7095] Dev loop2: unable to read RDB block 7 [ 70.373311][ T7095] loop2: unable to read partition table [ 70.378339][ T7095] loop2: partition table beyond EOD, truncated [ 70.380662][ T7095] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 70.700003][ T7107] kvm: Disabled LAPIC found during irq injection [ 70.995175][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 71.141454][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.144225][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.155081][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 71.157978][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.161323][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.164298][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 71.168589][ T29] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 71.171460][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.175231][ T29] usb 8-1: config 0 descriptor?? [ 71.382856][ T7111] netlink: 88 bytes leftover after parsing attributes in process `syz.3.348'. [ 71.644050][ T29] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 71.646397][ T29] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 71.648818][ T29] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 71.651013][ T29] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 71.653193][ T29] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 71.658029][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 71.677793][ T29] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 71.680942][ T29] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 71.845679][ T7111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7111 comm=syz.3.348 [ 71.851236][ T7111] random: crng reseeded on system resumption [ 71.999588][ T65] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 71.999733][ T5970] usb 8-1: USB disconnect, device number 9 [ 72.003208][ T65] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 72.011903][ T65] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 72.015489][ T65] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 72.188529][ T5939] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 72.192721][ T5939] Bluetooth: hci1: Injecting HCI hardware error event [ 72.197690][ T5939] Bluetooth: hci1: hardware error 0x00 [ 72.551878][ T7174] wg2: entered promiscuous mode [ 72.557277][ T7174] wg2: entered allmulticast mode [ 72.558440][ T7168] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.560868][ T7168] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.579060][ T7168] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.586929][ T7168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.589542][ T7168] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.627545][ T7168] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.689810][ T7190] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 72.731422][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 72.823507][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 72.827320][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 72.837557][ T7204] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.841321][ T7204] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.844718][ T7204] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.848768][ T7204] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.854076][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 72.857634][ T7208] program syz.1.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.861620][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 72.908085][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 72.908095][ T40] audit: type=1400 audit(1748179226.884:432): avc: denied { setopt } for pid=7209 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.955849][ T40] audit: type=1400 audit(1748179226.934:433): avc: denied { append } for pid=7213 comm="syz.2.385" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.007891][ T40] audit: type=1400 audit(1748179226.974:434): avc: denied { mount } for pid=7219 comm="syz.2.386" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.015300][ T40] audit: type=1400 audit(1748179226.994:435): avc: denied { mounton } for pid=7219 comm="syz.2.386" path="/96/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 73.020109][ T7220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.022614][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 73.028431][ T5970] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 73.046947][ T40] audit: type=1400 audit(1748179227.024:436): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.067450][ T40] audit: type=1400 audit(1748179227.044:437): avc: denied { wake_alarm } for pid=7222 comm="syz.2.387" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.127669][ T7224] GUP no longer grows the stack in syz.2.387 (7224): 200000007000-20000000a000 (200000004000) [ 73.132102][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.2.387 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 73.132126][ T7224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.132137][ T7224] Call Trace: [ 73.132143][ T7224] [ 73.132150][ T7224] dump_stack_lvl+0x16c/0x1f0 [ 73.132198][ T7224] gup_vma_lookup+0x1d2/0x220 [ 73.132223][ T7224] __get_user_pages+0x234/0x36f0 [ 73.132255][ T7224] ? kasan_save_stack+0x33/0x60 [ 73.132270][ T7224] ? kasan_save_track+0x14/0x30 [ 73.132285][ T7224] ? __kasan_kmalloc+0xaa/0xb0 [ 73.132309][ T7224] ? __kvmalloc_node_noprof+0x279/0x600 [ 73.132333][ T7224] ? xdp_umem_create+0x652/0x1270 [ 73.132355][ T7224] ? __pfx___get_user_pages+0x10/0x10 [ 73.132376][ T7224] ? __x64_sys_setsockopt+0xbd/0x160 [ 73.132394][ T7224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.132422][ T7224] __gup_longterm_locked+0x5e7/0x1850 [ 73.132455][ T7224] ? __pfx___gup_longterm_locked+0x10/0x10 [ 73.132493][ T7224] pin_user_pages+0x13c/0x160 [ 73.132518][ T7224] ? __pfx_pin_user_pages+0x10/0x10 [ 73.132540][ T7224] ? trace_kmalloc+0x2b/0xd0 [ 73.132562][ T7224] ? xdp_umem_create+0x652/0x1270 [ 73.132590][ T7224] xdp_umem_create+0x73c/0x1270 [ 73.132619][ T7224] xsk_setsockopt+0x5b2/0x840 [ 73.132641][ T7224] ? __pfx_xsk_setsockopt+0x10/0x10 [ 73.132680][ T7224] ? selinux_socket_setsockopt+0x6a/0x80 [ 73.132713][ T7224] ? __pfx_xsk_setsockopt+0x10/0x10 [ 73.132735][ T7224] do_sock_setsockopt+0x221/0x470 [ 73.132760][ T7224] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 73.132801][ T7224] __sys_setsockopt+0x1a0/0x230 [ 73.132825][ T7224] __x64_sys_setsockopt+0xbd/0x160 [ 73.132843][ T7224] ? syscall_trace_enter+0xee/0x260 [ 73.132863][ T7224] do_syscall_64+0xcd/0x260 [ 73.132889][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.132906][ T7224] RIP: 0033:0x7f5f8618e969 [ 73.132920][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.132936][ T7224] RSP: 002b:00007f5f83ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.132953][ T7224] RAX: ffffffffffffffda RBX: 00007f5f863b6080 RCX: 00007f5f8618e969 [ 73.132964][ T7224] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 73.132974][ T7224] RBP: 00007f5f86210ab1 R08: 0000000000000020 R09: 0000000000000000 [ 73.132984][ T7224] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 73.132994][ T7224] R13: 0000000000000000 R14: 00007f5f863b6080 R15: 00007ffe65597dc8 [ 73.133020][ T7224] [ 73.238684][ T5970] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 73.241789][ T5970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.244325][ T5970] usb 8-1: Product: syz [ 73.255103][ T5970] usb 8-1: Manufacturer: syz [ 73.257233][ T5970] usb 8-1: SerialNumber: syz [ 73.264461][ T5970] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 73.268123][ T7227] 9p: Unknown access argument 18446744073709551615: -34 [ 73.278278][ T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.483304][ T7195] xt_hashlimit: size too large, truncated to 1048576 [ 73.537150][ T40] audit: type=1400 audit(1748179227.514:438): avc: denied { name_bind } for pid=7194 comm="syz.3.377" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.561311][ T40] audit: type=1400 audit(1748179227.534:439): avc: denied { write } for pid=7194 comm="syz.3.377" name="/" dev="9p" ino=37093394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.570623][ T40] audit: type=1400 audit(1748179227.534:440): avc: denied { add_name } for pid=7194 comm="syz.3.377" name="freezer.state" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.578921][ T40] audit: type=1400 audit(1748179227.534:441): avc: denied { create } for pid=7194 comm="syz.3.377" name="freezer.state" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.592785][ T64] usb 8-1: USB disconnect, device number 10 [ 73.944345][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 74.099630][ T7252] hpfs: Bad magic ... probably not HPFS [ 74.265129][ T5939] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 74.335084][ T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 74.337311][ T10] ath9k_htc: Failed to initialize the device [ 74.339429][ T64] usb 8-1: ath9k_htc: USB layer deinitialized [ 74.495127][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.656609][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.081672][ T7272] netlink: 68 bytes leftover after parsing attributes in process `syz.3.405'. [ 75.089687][ T7273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.405'. [ 75.123698][ T5939] Bluetooth: hci2: unexpected event for opcode 0x0c00 [ 75.215319][ T7281] netlink: 64 bytes leftover after parsing attributes in process `syz.3.407'. [ 75.485988][ T7295] trusted_key: syz.3.410 sent an empty control message without MSG_MORE. [ 75.865088][ T5930] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 76.028566][ T5930] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.044744][ T5930] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.048083][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.050788][ T5930] usb 8-1: SerialNumber: syz [ 76.278148][ T5930] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 76.296993][ T5930] usb 8-1: USB disconnect, device number 11 [ 76.405846][ T7344] xt_hashlimit: invalid interval [ 76.411617][ T7344] securityfs: Unknown parameter '&%\&[*+-(+(-#\@-' [ 76.427149][ T7348] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 76.735080][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.516290][ T7371] syz.3.435: attempt to access beyond end of device [ 77.516290][ T7371] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.520515][ T7371] SQUASHFS error: Failed to read block 0x0: -5 [ 77.522593][ T7371] unable to read squashfs_super_block [ 77.526933][ T7372] syz.3.435: attempt to access beyond end of device [ 77.526933][ T7372] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.530911][ T7372] SQUASHFS error: Failed to read block 0x0: -5 [ 77.532971][ T7372] unable to read squashfs_super_block [ 77.660439][ T7375] orangefs_mount: mount request failed with -4 [ 77.695112][ T5970] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.849445][ T5970] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.852316][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.854863][ T5970] usb 6-1: Product: syz [ 77.857587][ T5970] usb 6-1: Manufacturer: syz [ 77.859088][ T5970] usb 6-1: SerialNumber: syz [ 77.872017][ T5970] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 77.886020][ T5970] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.088691][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 78.088702][ T40] audit: type=1400 audit(1748179232.064:465): avc: denied { ioctl } for pid=7363 comm="syz.1.432" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.116219][ T6110] usb 6-1: USB disconnect, device number 6 [ 78.647529][ T40] audit: type=1400 audit(1748179232.624:466): avc: denied { execute } for pid=7397 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.665070][ T40] audit: type=1400 audit(1748179232.624:467): avc: denied { execute_no_trans } for pid=7397 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.809219][ T40] audit: type=1400 audit(1748179232.784:468): avc: denied { watch watch_reads } for pid=7406 comm="syz.3.447" path="pipe:[12254]" dev="pipefs" ino=12254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.816457][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.819791][ T7407] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 78.822408][ T40] audit: type=1400 audit(1748179232.794:469): avc: denied { relabelfrom } for pid=7406 comm="syz.3.447" name="" dev="pipefs" ino=12255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.832075][ T5929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.835692][ T5929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.839716][ T5929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.842910][ T5929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.846294][ T5929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.854353][ T7407] bond2: entered promiscuous mode [ 78.857729][ T7407] bond2: entered allmulticast mode [ 78.871043][ T7407] bond2: (slave ip6gretap1): making interface the new active one [ 78.873530][ T7407] ip6gretap1: entered promiscuous mode [ 78.875814][ T7407] ip6gretap1: entered allmulticast mode [ 78.878173][ T7407] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 78.898053][ T5970] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 78.900320][ T5970] ath9k_htc: Failed to initialize the device [ 78.903287][ T6110] usb 6-1: ath9k_htc: USB layer deinitialized [ 78.957189][ T40] audit: type=1400 audit(1748179232.934:470): avc: denied { create } for pid=7420 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.964093][ T7421] io-wq is not configured for unbound workers [ 78.984217][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 79.017370][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.097079][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.135663][ T5929] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 79.140473][ T5929] Bluetooth: hci2: Injecting HCI hardware error event [ 79.144426][ T5929] Bluetooth: hci2: hardware error 0x00 [ 79.171143][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.176805][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.179391][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.182514][ T7408] bridge_slave_0: entered allmulticast mode [ 79.186619][ T7408] bridge_slave_0: entered promiscuous mode [ 79.190982][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.193836][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.197503][ T7408] bridge_slave_1: entered allmulticast mode [ 79.201191][ T7408] bridge_slave_1: entered promiscuous mode [ 79.267056][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.279108][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.287906][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.323507][ T7408] team0: Port device team_slave_0 added [ 79.329830][ T7408] team0: Port device team_slave_1 added [ 79.367310][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.369817][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.378537][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.383358][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.386109][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.395200][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.469825][ T66] vlan2: left promiscuous mode [ 79.473234][ T66] bridge0: port 3(vlan2) entered disabled state [ 79.477433][ T66] bridge_slave_1: left allmulticast mode [ 79.479299][ T66] bridge_slave_1: left promiscuous mode [ 79.481190][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.488599][ T66] bridge_slave_0: left allmulticast mode [ 79.490427][ T66] bridge_slave_0: left promiscuous mode [ 79.492243][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.820572][ T66] bond0 (unregistering): left promiscuous mode [ 79.822507][ T66] bond_slave_0: left promiscuous mode [ 79.824294][ T66] bond_slave_1: left promiscuous mode [ 79.827118][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.830487][ T66] bond_slave_0: left allmulticast mode [ 79.834628][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.838072][ T66] bond_slave_1: left allmulticast mode [ 79.841028][ T66] bond0 (unregistering): Released all slaves [ 79.848686][ T66] bond1 (unregistering): Released all slaves [ 79.857278][ T66] bond2 (unregistering): Released all slaves [ 79.869591][ T66] bond3 (unregistering): Released all slaves [ 79.884216][ T7408] hsr_slave_0: entered promiscuous mode [ 79.888377][ T7408] hsr_slave_1: entered promiscuous mode [ 79.890440][ T7408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.892699][ T7408] Cannot create hsr debugfs directory [ 79.974023][ T40] audit: type=1400 audit(1748179233.944:471): avc: denied { sqpoll } for pid=7440 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.088114][ T40] audit: type=1400 audit(1748179234.054:472): avc: denied { mount } for pid=7452 comm="syz.1.459" name="/" dev="hugetlbfs" ino=14262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 80.110029][ T40] audit: type=1400 audit(1748179234.084:473): avc: denied { view } for pid=7459 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.118356][ T40] audit: type=1400 audit(1748179234.094:474): avc: denied { create } for pid=7459 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.143948][ T7454] could not allocate digest TFM handle ghash-ce-sync [ 80.210606][ T7408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.220102][ T7408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.231764][ T7408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.238339][ T13] tipc: Subscription rejected, illegal request [ 80.238378][ T7408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.257124][ T66] batadv0: left promiscuous mode [ 80.261995][ T66] hsr_slave_0: left promiscuous mode [ 80.264280][ T66] hsr_slave_1: left promiscuous mode [ 80.266925][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.269161][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.271958][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.274176][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.294467][ T66] veth1_macvtap: left promiscuous mode [ 80.297092][ T66] veth0_macvtap: left promiscuous mode [ 80.298893][ T66] veth1_vlan: left promiscuous mode [ 80.300606][ T66] veth0_vlan: left promiscuous mode [ 80.568833][ T7492] deleting an unspecified loop device is not supported. [ 80.639799][ T7498] program syz.1.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.645440][ T7499] program syz.1.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.653191][ T7498] __nla_validate_parse: 4 callbacks suppressed [ 80.653201][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 80.658385][ T7498] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 80.727159][ T7507] openvswitch: netlink: IPv4 tun info is not correct [ 80.892762][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 80.896261][ T5939] Bluetooth: hci0: command tx timeout [ 80.896265][ T5283] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.047594][ T66] team0 (unregistering): Port device team_slave_1 removed [ 81.104927][ T66] team0 (unregistering): Port device team_slave_0 removed [ 81.226560][ T5929] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 81.321016][ T7534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7534 comm=syz.1.481 [ 81.378153][ T76] cfg80211: failed to load regulatory.db [ 81.621520][ T7517] bridge0: port 3(syz_tun) entered blocking state [ 81.623767][ T7517] bridge0: port 3(syz_tun) entered disabled state [ 81.625934][ T7517] syz_tun: entered allmulticast mode [ 81.628450][ T7517] syz_tun: entered promiscuous mode [ 81.630706][ T7517] bridge0: port 3(syz_tun) entered blocking state [ 81.632928][ T7517] bridge0: port 3(syz_tun) entered forwarding state [ 81.743761][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.769270][ T7408] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.774367][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.776718][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.796390][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.800516][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.839173][ T7408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.842453][ T7408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.019346][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.149598][ T7408] veth0_vlan: entered promiscuous mode [ 82.156303][ T7408] veth1_vlan: entered promiscuous mode [ 82.173124][ T7408] veth0_macvtap: entered promiscuous mode [ 82.178961][ T7408] veth1_macvtap: entered promiscuous mode [ 82.188230][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.193848][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.199246][ T7408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.201806][ T7408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.204440][ T7408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.208050][ T7408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.233507][ T7605] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 82.247708][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.250051][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.278418][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.280827][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.289855][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 82.341660][ T7613] openvswitch: netlink: Unknown key attributes 2 [ 82.425287][ T7623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.496'. [ 82.446149][ T7621] loop2: detected capacity change from 0 to 7 [ 82.453181][ T7621] Dev loop2: unable to read RDB block 7 [ 82.456686][ T7621] loop2: unable to read partition table [ 82.458665][ T7621] loop2: partition table beyond EOD, truncated [ 82.460581][ T7621] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 82.985226][ T5929] Bluetooth: hci0: command tx timeout [ 83.371946][ T7667] macsec1: entered promiscuous mode [ 83.373886][ T7667] macsec1: entered allmulticast mode [ 83.392963][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 83.392979][ T40] audit: type=1400 audit(1748179237.364:480): avc: denied { unmount } for pid=7408 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.423573][ T40] audit: type=1326 audit(1748179237.394:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.502" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f79d8e969 code=0x0 [ 83.530108][ T7679] mmap: syz.4.504 (7679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.678309][ T40] audit: type=1400 audit(1748179237.654:482): avc: denied { getopt } for pid=7686 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.967822][ T7697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 84.275133][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 84.426881][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.430075][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.432977][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.435863][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.441172][ T7700] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.447744][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.718776][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 84.739942][ T7700] unknown channel width for channel at 909000KHz? [ 84.847793][ T7700] could not allocate digest TFM handle cryptd(blake2b-160) [ 84.857566][ T64] usb 9-1: USB disconnect, device number 2 [ 84.875399][ T7714] overlayfs: failed to resolve './file0': -2 [ 85.039341][ T40] audit: type=1400 audit(1748179239.014:483): avc: denied { ioctl } for pid=7740 comm="syz.4.522" path="socket:[18445]" dev="sockfs" ino=18445 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.049689][ T40] audit: type=1326 audit(1748179239.024:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.3.523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b698e969 code=0x7ffc0000 [ 85.057174][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 85.061291][ T40] audit: type=1326 audit(1748179239.024:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.3.523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b698e969 code=0x7ffc0000 [ 85.065693][ T5929] Bluetooth: hci0: command tx timeout [ 85.069543][ T40] audit: type=1326 audit(1748179239.024:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.3.523" exe="/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f55b698e969 code=0x7ffc0000 [ 85.077357][ T40] audit: type=1326 audit(1748179239.024:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.3.523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b698e969 code=0x7ffc0000 [ 85.084232][ T40] audit: type=1326 audit(1748179239.024:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.3.523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b698e969 code=0x7ffc0000 [ 85.091179][ T40] audit: type=1326 audit(1748179239.024:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.3.523" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55b698e969 code=0x7ffc0000 [ 85.387528][ T7760] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7760 comm=syz.3.528 [ 85.391235][ T7760] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7760 comm=syz.3.528 [ 85.404544][ T7761] 9pnet: Could not find request transport: 0xffffffffffffffff [ 85.423914][ T7765] overlayfs: failed to resolve './file0': -2 [ 85.457067][ T7761] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.463387][ T7770] netlink: 37 bytes leftover after parsing attributes in process `syz.4.531'. [ 85.488108][ T7761] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 85.496692][ T7776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7776 comm=syz.4.533 [ 85.500538][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 85.503196][ T7776] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 85.505987][ T7776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.518042][ T7761] kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 85.525138][ T7761] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 85.541965][ T7761] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 85.635784][ T7761] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.648186][ T7761] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 85.671659][ T7761] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 85.683373][ T7761] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 85.696112][ T7761] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 85.775323][ T7797] overlayfs: failed to resolve './file0': -2 [ 85.807567][ T7799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.830592][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 85.833835][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 86.521346][ T7827] FAULT_INJECTION: forcing a failure. [ 86.521346][ T7827] name failslab, interval 1, probability 0, space 0, times 1 [ 86.526745][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.1.549 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 86.526769][ T7827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.526779][ T7827] Call Trace: [ 86.526786][ T7827] [ 86.526793][ T7827] dump_stack_lvl+0x16c/0x1f0 [ 86.526823][ T7827] should_fail_ex+0x512/0x640 [ 86.526856][ T7827] ? fs_reclaim_acquire+0xae/0x150 [ 86.526879][ T7827] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 86.526903][ T7827] should_failslab+0xc2/0x120 [ 86.526922][ T7827] __kmalloc_noprof+0xd2/0x510 [ 86.526944][ T7827] tomoyo_realpath_from_path+0xc2/0x6e0 [ 86.526972][ T7827] ? tomoyo_profile+0x47/0x60 [ 86.526991][ T7827] tomoyo_path_number_perm+0x245/0x580 [ 86.527011][ T7827] ? tomoyo_path_number_perm+0x237/0x580 [ 86.527036][ T7827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.527059][ T7827] ? find_held_lock+0x2b/0x80 [ 86.527104][ T7827] ? find_held_lock+0x2b/0x80 [ 86.527123][ T7827] ? hook_file_ioctl_common+0x145/0x410 [ 86.527146][ T7827] ? __fget_files+0x20e/0x3c0 [ 86.527166][ T7827] security_file_ioctl+0x9b/0x240 [ 86.527192][ T7827] __x64_sys_ioctl+0xb7/0x200 [ 86.527216][ T7827] do_syscall_64+0xcd/0x260 [ 86.527242][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.527259][ T7827] RIP: 0033:0x7f5b86f8e969 [ 86.527273][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.527288][ T7827] RSP: 002b:00007f5b87eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.527305][ T7827] RAX: ffffffffffffffda RBX: 00007f5b871b5fa0 RCX: 00007f5b86f8e969 [ 86.527316][ T7827] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 86.527326][ T7827] RBP: 00007f5b87eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 86.527336][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.527345][ T7827] R13: 0000000000000000 R14: 00007f5b871b5fa0 R15: 00007ffd5aaa7ac8 [ 86.527370][ T7827] [ 86.527376][ T7827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.135266][ T5929] Bluetooth: hci0: command tx timeout [ 87.232552][ T7838] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 87.439817][ T7848] tun0: tun_chr_ioctl cmd 1074025678 [ 87.441535][ T7848] tun0: group set to 0 [ 87.539821][ T7851] FAULT_INJECTION: forcing a failure. [ 87.539821][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 87.543921][ T7851] CPU: 2 UID: 0 PID: 7851 Comm: syz.1.558 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 87.543936][ T7851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.543943][ T7851] Call Trace: [ 87.543947][ T7851] [ 87.543951][ T7851] dump_stack_lvl+0x16c/0x1f0 [ 87.543971][ T7851] should_fail_ex+0x512/0x640 [ 87.543992][ T7851] ? fs_reclaim_acquire+0xae/0x150 [ 87.544008][ T7851] ? tomoyo_encode2+0x100/0x3e0 [ 87.544025][ T7851] should_failslab+0xc2/0x120 [ 87.544037][ T7851] __kmalloc_noprof+0xd2/0x510 [ 87.544048][ T7851] ? d_absolute_path+0x136/0x1a0 [ 87.544064][ T7851] tomoyo_encode2+0x100/0x3e0 [ 87.544082][ T7851] tomoyo_encode+0x29/0x50 [ 87.544098][ T7851] tomoyo_realpath_from_path+0x18f/0x6e0 [ 87.544118][ T7851] tomoyo_path_number_perm+0x245/0x580 [ 87.544132][ T7851] ? tomoyo_path_number_perm+0x237/0x580 [ 87.544148][ T7851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.544163][ T7851] ? find_held_lock+0x2b/0x80 [ 87.544188][ T7851] ? find_held_lock+0x2b/0x80 [ 87.544200][ T7851] ? hook_file_ioctl_common+0x145/0x410 [ 87.544215][ T7851] ? __fget_files+0x20e/0x3c0 [ 87.544227][ T7851] security_file_ioctl+0x9b/0x240 [ 87.544245][ T7851] __x64_sys_ioctl+0xb7/0x200 [ 87.544261][ T7851] do_syscall_64+0xcd/0x260 [ 87.544278][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.544289][ T7851] RIP: 0033:0x7f5b86f8e969 [ 87.544301][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.544316][ T7851] RSP: 002b:00007f5b87eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.544331][ T7851] RAX: ffffffffffffffda RBX: 00007f5b871b5fa0 RCX: 00007f5b86f8e969 [ 87.544342][ T7851] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 87.544354][ T7851] RBP: 00007f5b87eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 87.544363][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.544373][ T7851] R13: 0000000000000000 R14: 00007f5b871b5fa0 R15: 00007ffd5aaa7ac8 [ 87.544396][ T7851] [ 87.544410][ T7851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.923548][ T7860] overlayfs: failed to resolve './file0': -2 [ 88.074276][ T7868] cgroup: Need name or subsystem set [ 88.237592][ T7884] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 88.269518][ T7887] overlayfs: failed to resolve './file0': -2 [ 88.300175][ T7888] netlink: 116 bytes leftover after parsing attributes in process `syz.4.571'. [ 88.329710][ T7894] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 88.343727][ T7894] batman_adv: batadv0: Adding interface: team0 [ 88.347024][ T7894] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.349594][ T7900] futex_wake_op: syz.3.575 tries to shift op by -1; fix this program [ 88.354495][ T7894] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 88.396556][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 88.396572][ T40] audit: type=1400 audit(1748179242.374:597): avc: denied { setattr } for pid=5940 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 88.407038][ T40] audit: type=1400 audit(1748179242.374:598): avc: denied { setattr } for pid=5940 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 88.413402][ T5940] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.417232][ T40] audit: type=1400 audit(1748179242.374:599): avc: denied { setattr } for pid=5940 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 88.419998][ T5940] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 88.425352][ T40] audit: type=1400 audit(1748179242.374:600): avc: denied { setattr } for pid=5940 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 88.427747][ T5940] audit: backlog limit exceeded [ 88.436926][ T40] audit: type=1400 audit(1748179242.374:601): avc: denied { setattr } for pid=5940 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 88.439171][ T5940] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.439658][ T7908] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.633670][ T7924] batman_adv: batadv0: Removing interface: team0 [ 88.640102][ T7924] bond0: (slave bond_slave_0): Releasing backup interface [ 88.647884][ T7924] bond0: (slave bond_slave_1): Releasing backup interface [ 88.661974][ T7924] team0: Port device team_slave_0 removed [ 88.669932][ T7924] team0: Port device team_slave_1 removed [ 88.672222][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.674652][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.679037][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.681627][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.693111][ T223] tipc: Resetting bearer [ 89.168563][ T7956] libceph: resolve ' [ 89.168563][ T7956] -&fYǝa2i [ 89.168563][ T7956] .?&*&' (ret=-3): failed [ 89.207972][ T7959] netlink: 'syz.4.594': attribute type 4 has an invalid length. [ 89.215981][ T7959] netlink: 'syz.4.594': attribute type 4 has an invalid length. [ 89.521419][ T7987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=243 sclass=netlink_route_socket pid=7987 comm=syz.4.605 [ 89.580390][ T7991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.607'. [ 89.817876][ T7422] bridge0: port 3(syz_tun) entered disabled state [ 89.827971][ T7422] syz_tun (unregistering): left allmulticast mode [ 89.829981][ T7422] syz_tun (unregistering): left promiscuous mode [ 89.831985][ T7422] bridge0: port 3(syz_tun) entered disabled state [ 89.846480][ T7786] ================================================================== [ 89.848986][ T7786] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 89.851312][ T7786] Read of size 8 at addr ffffffff9af9f5b0 by task syz.4.536/7786 [ 89.853568][ T7786] [ 89.854867][ T7786] CPU: 2 UID: 0 PID: 7786 Comm: syz.4.536 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 89.854882][ T7786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.854889][ T7786] Call Trace: [ 89.854894][ T7786] [ 89.854898][ T7786] dump_stack_lvl+0x116/0x1f0 [ 89.854917][ T7786] print_report+0xc3/0x670 [ 89.854929][ T7786] ? __virt_addr_valid+0x5e/0x590 [ 89.854947][ T7786] ? __phys_addr+0xc6/0x150 [ 89.854963][ T7786] ? fib6_ifdown+0x7f5/0x8f0 [ 89.854977][ T7786] kasan_report+0xe0/0x110 [ 89.855011][ T7786] ? fib6_ifdown+0x7f5/0x8f0 [ 89.855026][ T7786] fib6_ifdown+0x7f5/0x8f0 [ 89.855038][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 89.855050][ T7786] fib6_clean_node+0x2a7/0x5b0 [ 89.855063][ T7786] ? __pfx_fib6_clean_node+0x10/0x10 [ 89.855078][ T7786] fib6_walk_continue+0x452/0x8d0 [ 89.855096][ T7786] fib6_walk+0x182/0x370 [ 89.855107][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 89.855118][ T7786] fib6_clean_tree+0xd4/0x110 [ 89.855128][ T7786] ? __pfx_fib6_clean_tree+0x10/0x10 [ 89.855139][ T7786] ? __pfx_fib6_clean_node+0x10/0x10 [ 89.855151][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 89.855164][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 89.855175][ T7786] __fib6_clean_all+0x107/0x2d0 [ 89.855187][ T7786] rt6_disable_ip+0x2ec/0x990 [ 89.855203][ T7786] ? __mutex_trylock_common+0xe9/0x250 [ 89.855221][ T7786] ? __pfx___mutex_trylock_common+0x10/0x10 [ 89.855239][ T7786] ? __pfx_rt6_disable_ip+0x10/0x10 [ 89.855255][ T7786] ? rcu_is_watching+0x12/0xc0 [ 89.855269][ T7786] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 89.855289][ T7786] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 89.855312][ T7786] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 89.855327][ T7786] addrconf_notify+0x220/0x19e0 [ 89.855342][ T7786] ? ip6mr_device_event+0x1bc/0x230 [ 89.855358][ T7786] notifier_call_chain+0xbc/0x410 [ 89.855373][ T7786] ? __pfx_addrconf_notify+0x10/0x10 [ 89.855389][ T7786] call_netdevice_notifiers_info+0xbe/0x140 [ 89.855406][ T7786] dev_close_many+0x319/0x630 [ 89.855421][ T7786] ? __lock_acquire+0xaa4/0x1ba0 [ 89.855437][ T7786] ? __pfx_dev_close_many+0x10/0x10 [ 89.855487][ T7786] unregister_netdevice_many_notify+0x578/0x26f0 [ 89.855502][ T7786] ? do_raw_spin_lock+0x12c/0x2b0 [ 89.855514][ T7786] ? ref_tracker_alloc+0x2fe/0x5b0 [ 89.855530][ T7786] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 89.855544][ T7786] ? do_raw_spin_unlock+0x172/0x230 [ 89.855556][ T7786] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.855571][ T7786] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 89.855586][ T7786] ? linkwatch_fire_event+0x20c/0x270 [ 89.855601][ T7786] ? netif_carrier_off+0xa3/0xc0 [ 89.855612][ T7786] ? __tun_detach+0x1177/0x1540 [ 89.855630][ T7786] unregister_netdevice_queue+0x305/0x3f0 [ 89.855645][ T7786] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 89.855658][ T7786] ? linkwatch_schedule_work+0x181/0x1c0 [ 89.855674][ T7786] ? linkwatch_fire_event+0x6f/0x270 [ 89.855690][ T7786] __tun_detach+0x1249/0x1540 [ 89.855707][ T7786] ? __pfx_tun_chr_close+0x10/0x10 [ 89.855723][ T7786] tun_chr_close+0xc2/0x230 [ 89.855739][ T7786] __fput+0x3ff/0xb70 [ 89.855752][ T7786] task_work_run+0x150/0x240 [ 89.855764][ T7786] ? __pfx_task_work_run+0x10/0x10 [ 89.855777][ T7786] do_exit+0xafb/0x2c30 [ 89.855794][ T7786] ? __pfx_do_exit+0x10/0x10 [ 89.855809][ T7786] ? cgroup_update_frozen_flag+0x107/0x210 [ 89.855826][ T7786] ? find_held_lock+0x2b/0x80 [ 89.855839][ T7786] do_group_exit+0xd3/0x2a0 [ 89.855856][ T7786] get_signal+0x2673/0x26d0 [ 89.855871][ T7786] ? hrtimer_nanosleep+0x187/0x380 [ 89.855884][ T7786] ? __pfx_get_signal+0x10/0x10 [ 89.855897][ T7786] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 89.855909][ T7786] arch_do_signal_or_restart+0x8f/0x7d0 [ 89.855925][ T7786] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.855942][ T7786] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 89.855956][ T7786] syscall_exit_to_user_mode+0x150/0x2a0 [ 89.855973][ T7786] do_syscall_64+0xda/0x260 [ 89.855992][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.856004][ T7786] RIP: 0033:0x7f1f79dc1225 [ 89.856289][ T7786] Code: Unable to access opcode bytes at 0x7f1f79dc11fb. [ 89.856297][ T7786] RSP: 002b:00007f1f7ac43f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 89.856312][ T7786] RAX: fffffffffffffdfc RBX: 00007f1f79fb5fa0 RCX: 00007f1f79dc1225 [ 89.856322][ T7786] RDX: 00007f1f7ac43fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.856331][ T7786] RBP: 00007f1f79e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 89.856342][ T7786] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.856352][ T7786] R13: 0000000000000000 R14: 00007f1f79fb5fa0 R15: 00007ffd013c19e8 [ 89.856370][ T7786] [ 89.856376][ T7786] [ 89.999395][ T7786] The buggy address belongs to the variable: [ 90.001266][ T7786] __key.0+0x30/0x40 [ 90.002512][ T7786] [ 90.003289][ T7786] The buggy address belongs to the physical page: [ 90.005333][ T7786] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9f [ 90.008101][ T7786] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 90.010551][ T7786] raw: 00fff00000002000 ffffea00006be7c8 ffffea00006be7c8 0000000000000000 [ 90.013172][ T7786] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 90.015802][ T7786] page dumped because: kasan: bad access detected [ 90.017766][ T7786] page_owner info is not present (never set?) [ 90.019620][ T7786] [ 90.020382][ T7786] Memory state around the buggy address: [ 90.022133][ T7786] ffffffff9af9f480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 90.024829][ T7786] ffffffff9af9f500: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 90.027934][ T7786] >ffffffff9af9f580: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 90.030858][ T7786] ^ [ 90.033104][ T7786] ffffffff9af9f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 90.035861][ T7786] ffffffff9af9f680: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 90.038671][ T7786] ================================================================== [ 90.041199][ T7786] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.043390][ T7786] CPU: 2 UID: 0 PID: 7786 Comm: syz.4.536 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 90.047156][ T7786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.050369][ T7786] Call Trace: [ 90.051409][ T7786] [ 90.052341][ T7786] dump_stack_lvl+0x3d/0x1f0 [ 90.053790][ T7786] panic+0x71c/0x800 [ 90.055021][ T7786] ? __pfx_panic+0x10/0x10 [ 90.056420][ T7786] ? mark_held_locks+0x49/0x80 [ 90.057889][ T7786] ? fib6_ifdown+0x7f5/0x8f0 [ 90.059297][ T7786] ? check_panic_on_warn+0x1f/0xb0 [ 90.060869][ T7786] ? fib6_ifdown+0x7f5/0x8f0 [ 90.062316][ T7786] check_panic_on_warn+0xab/0xb0 [ 90.063888][ T7786] end_report+0x107/0x170 [ 90.065265][ T7786] kasan_report+0xee/0x110 [ 90.066676][ T7786] ? fib6_ifdown+0x7f5/0x8f0 [ 90.068142][ T7786] fib6_ifdown+0x7f5/0x8f0 [ 90.069550][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 90.071108][ T7786] fib6_clean_node+0x2a7/0x5b0 [ 90.072633][ T7786] ? __pfx_fib6_clean_node+0x10/0x10 [ 90.074295][ T7786] fib6_walk_continue+0x452/0x8d0 [ 90.075906][ T7786] fib6_walk+0x182/0x370 [ 90.077216][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 90.078731][ T7786] fib6_clean_tree+0xd4/0x110 [ 90.080196][ T7786] ? __pfx_fib6_clean_tree+0x10/0x10 [ 90.081840][ T7786] ? __pfx_fib6_clean_node+0x10/0x10 [ 90.083504][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 90.085099][ T7786] ? __pfx_fib6_ifdown+0x10/0x10 [ 90.086654][ T7786] __fib6_clean_all+0x107/0x2d0 [ 90.088196][ T7786] rt6_disable_ip+0x2ec/0x990 [ 90.089683][ T7786] ? __mutex_trylock_common+0xe9/0x250 [ 90.091396][ T7786] ? __pfx___mutex_trylock_common+0x10/0x10 [ 90.093267][ T7786] ? __pfx_rt6_disable_ip+0x10/0x10 [ 90.094915][ T7786] ? rcu_is_watching+0x12/0xc0 [ 90.096431][ T7786] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 90.097998][ T7786] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 90.099594][ T7786] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 90.101435][ T7786] addrconf_notify+0x220/0x19e0 [ 90.102967][ T7786] ? ip6mr_device_event+0x1bc/0x230 [ 90.104607][ T7786] notifier_call_chain+0xbc/0x410 [ 90.106190][ T7786] ? __pfx_addrconf_notify+0x10/0x10 [ 90.107867][ T7786] call_netdevice_notifiers_info+0xbe/0x140 [ 90.109716][ T7786] dev_close_many+0x319/0x630 [ 90.111207][ T7786] ? __lock_acquire+0xaa4/0x1ba0 [ 90.112782][ T7786] ? __pfx_dev_close_many+0x10/0x10 [ 90.114411][ T7786] unregister_netdevice_many_notify+0x578/0x26f0 [ 90.116405][ T7786] ? do_raw_spin_lock+0x12c/0x2b0 [ 90.117950][ T7786] ? ref_tracker_alloc+0x2fe/0x5b0 [ 90.119572][ T7786] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 90.121676][ T7786] ? do_raw_spin_unlock+0x172/0x230 [ 90.123318][ T7786] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.125178][ T7786] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 90.126873][ T7786] ? linkwatch_fire_event+0x20c/0x270 [ 90.128569][ T7786] ? netif_carrier_off+0xa3/0xc0 [ 90.130129][ T7786] ? __tun_detach+0x1177/0x1540 [ 90.131681][ T7786] unregister_netdevice_queue+0x305/0x3f0 [ 90.133472][ T7786] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 90.135434][ T7786] ? linkwatch_schedule_work+0x181/0x1c0 [ 90.137171][ T7786] ? linkwatch_fire_event+0x6f/0x270 [ 90.138839][ T7786] __tun_detach+0x1249/0x1540 [ 90.140332][ T7786] ? __pfx_tun_chr_close+0x10/0x10 [ 90.141909][ T7786] tun_chr_close+0xc2/0x230 [ 90.143368][ T7786] __fput+0x3ff/0xb70 [ 90.144603][ T7786] task_work_run+0x150/0x240 [ 90.146073][ T7786] ? __pfx_task_work_run+0x10/0x10 [ 90.147648][ T7786] do_exit+0xafb/0x2c30 [ 90.148981][ T7786] ? __pfx_do_exit+0x10/0x10 [ 90.150410][ T7786] ? cgroup_update_frozen_flag+0x107/0x210 [ 90.152253][ T7786] ? find_held_lock+0x2b/0x80 [ 90.153748][ T7786] do_group_exit+0xd3/0x2a0 [ 90.155264][ T7786] get_signal+0x2673/0x26d0 [ 90.156760][ T7786] ? hrtimer_nanosleep+0x187/0x380 [ 90.158375][ T7786] ? __pfx_get_signal+0x10/0x10 [ 90.159927][ T7786] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 90.161585][ T7786] arch_do_signal_or_restart+0x8f/0x7d0 [ 90.163320][ T7786] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 90.165330][ T7786] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 90.167237][ T7786] syscall_exit_to_user_mode+0x150/0x2a0 [ 90.168971][ T7786] do_syscall_64+0xda/0x260 [ 90.170395][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.172267][ T7786] RIP: 0033:0x7f1f79dc1225 [ 90.173697][ T7786] Code: Unable to access opcode bytes at 0x7f1f79dc11fb. [ 90.175914][ T7786] RSP: 002b:00007f1f7ac43f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 90.178524][ T7786] RAX: fffffffffffffdfc RBX: 00007f1f79fb5fa0 RCX: 00007f1f79dc1225 [ 90.180959][ T7786] RDX: 00007f1f7ac43fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.183360][ T7786] RBP: 00007f1f79e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 90.185898][ T7786] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.188424][ T7786] R13: 0000000000000000 R14: 00007f1f79fb5fa0 R15: 00007ffd013c19e8 [ 90.190924][ T7786] [ 90.192635][ T7786] Kernel Offset: disabled [ 90.194020][ T7786] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:20:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000107b91 RBX=0000000000000000 RCX=ffffffff8b6d4419 RDX=0000000000000000 RSI=ffffffff8dbe4455 RDI=ffffffff8bf4a4e0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90853110 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005615342d0b08 CR3=0000000024ce6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fff00000 Opmask01=0000000000000001 Opmask02=00000000dfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000044400000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4017e2b576687462 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073707574726174 73203030312d3031 20666f2030205d72 656e657473696c5b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 051e505548474953 054140534c404640 5200000000000056 5550515744515605 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6365786562696c 2f7273752f097074 6673096d65747379 736275530a303234 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002d0d4cf32f 1c2535000a726576 7265732d70746673 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000070bfc48f c5b00db9a080596d 7194096c7d51e2a5 eb1cc5eaba643017 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbf38242a1ef8 f0f4f4f123241e33 322e271e273232ee 273232ee223324ee ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e07bf38240a3332 2e07bf32e4ee32e4 bf32e4dff9233622 332426bf242d2e2d ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff912784d2 RBX=ffffffff909f9e28 RCX=dffffc0000000000 RDX=ffffffff82209499 RSI=0000000000000000 RDI=ffffffff909f9e04 RBP=ffffffff909f9e28 RSP=ffffc900006a0928 R8 =ffffffff9127853e R9 =0000000000000000 R10=0000000000000001 R11=0000000000012094 R12=ffffffff909f9e24 R13=ffffffff82209482 R14=ffffffff909f9e04 R15=0000000000000020 RIP=ffffffff8169cffa RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005615342bdb00 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002081 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66676f6c206e6570 6f2074276e646c75 6f43005445495551 004e4f4d45414400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43424a49054b4055 4a0551024b414950 4a43005445495551 004e4f4d45414400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f7020322e322e 302e3031206d6f72 66207463656e6e6f 6373696420646576 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ed20c100013a003 0008001398030880 8081e00800139003 0008001388030208 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0013800300100005 b982080001000002 080606041dcc0010 0005b88208000100 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080606021dce 00040001c0c18008 0005800401c71000 080048cc006d766b ZMM24=6bdd3c7d6bdd3c7d 6bdd3c7d6bdd3c7d 6bdd3c7d6bdd3c7d 6bdd3c7d6bdd3c7d 6bdd3c7d6bdd3c7d 6bdd3c7d6bdd3c7d 6bdd3c7d6bdd3c7d 6bdd3c7d6bdd3c7d ZMM25=aea8d03daea8d03d aea8d03daea8d03d aea8d03daea8d03d aea8d03daea8d03d aea8d03daea8d03d aea8d03daea8d03d aea8d03daea8d03d aea8d03daea8d03d ZMM26=f955e71ff955e71f f955e71ff955e71f f955e71ff955e71f f955e71ff955e71f f955e71ff955e71f f955e71ff955e71f f955e71ff955e71f f955e71ff955e71f ZMM27=8433f1a68433f1a6 8433f1a68433f1a6 8433f1a68433f1a6 8433f1a68433f1a6 8433f1a68433f1a6 8433f1a68433f1a6 8433f1a68433f1a6 8433f1a68433f1a6 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9803000098030000 9803000098030000 9803000098030000 9803000098030000 9803000098030000 9803000098030000 9803000098030000 9803000098030000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffffff8e3bfc00 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8bf4a460 RDI=ffffffff8dcf0d30 RBP=0000000000000002 RSP=ffffc90003b4e388 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8198293d RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1f79f7d2d8 CR3=00000000289de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000018000001 Opmask01=0000000004000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fefffff7 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb275befb 00007ffeb275befb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb275c400 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb275c400 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6b6e00002e2737 30362e342e7a7973 6020737365636f72 70206e6920736500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5561640000242737 3036243424707373 6020737365636572 7020646320736500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332074726f70203a 3065676469726220 5d3232343754205b 5d3637383731382e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3530362e342e7a79 733d6d6d6f632037 3839373d64697020 74656b636f735f65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74756f725f6b6e69 6c74656e3d737361 6c6373203334323d 657079745f67736d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6e20303d6c6f63 6f746f7270203a65 67617373656d206b 6e696c74656e2064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a696e676f6365 726e75203a78756e 694c4553205d3738 393754205b5d3931 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6f6e6920227265 646e6962223d7665 6420227366726564 6e69622f7665642f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffea0000e72b80 RBX=ffffea0000e72b80 RCX=1ffffd40001ce576 RDX=1ffffd40001ce571 RSI=0000000000000000 RDI=ffffea0000e72b88 RBP=ffffc90005fc7308 RSP=ffffc90005fc7290 R8 =0000000000000000 R9 =fffff940001ce570 R10=ffffea0000e72b87 R11=0000000000000000 R12=ffff88804f958000 R13=fffff52000bf8ece R14=0000000000000000 R15=ffff88804f958054 RIP=ffffffff8b7028e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555788b4808 CR3=00000000289de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001801 Opmask01=0000000003002000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fefffff7 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69a83a7f8ac78b9a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70207269643d7373 616c637420745f64 656c650000305f65 76616c735f766400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7020726364377373 6166637420745564 6566650000305565 7661667355766400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332074726f70203a 3065676469726220 5d3232343754205b 5d3538393133382e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3530362e342e7a79 733d6d6d6f632037 3839373d64697020 74656b636f735f65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74756f725f6b6e69 6c74656e3d737361 6c6373203334323d 657079745f67736d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6e20303d6c6f63 6f746f7270203a65 67617373656d206b 6e696c74656e2064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a696e676f6365 726e75203a78756e 694c4553205d3738 393754205b5d3931 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6f6e6920227265 646e6962223d7665 6420227366726564 6e69622f7665642f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000