last executing test programs: 1m5.070761789s ago: executing program 2 (id=228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_CPUID2(r2, 0xc008ae09, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2]) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="eb7a2bbd7000fcdbdf3521000000050020000000af000098b30c0005000200aaaaaaaaaaaa6b2a7b23f4865aa2e607bce97130955b05017973b24df4224a3b4bd5de2eb6570cb6c87cdc756d65871a0e469bbc80ffe25a8de3a93582c7f77774f3d595a6c4b20b774738211fd114c7e08a8eb0463fff914e7f1e43b90ba7c78d4d04ff27ed753157340f652056b5c01eb477883eb05808c4bea49c74a41fee43d2ae589b6dc2918fa2b45ee219115765aa78472603a1ef1eee91a93979d08df187c93736da97c4ecb2583a6ecfdd282d52e44e28ab3f8f901bedfb18b94ff4"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) dup(r1) (async) ioctl$KVM_SET_CPUID2(r2, 0xc008ae09, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2]) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="eb7a2bbd7000fcdbdf3521000000050020000000af000098b30c0005000200aaaaaaaaaaaa6b2a7b23f4865aa2e607bce97130955b05017973b24df4224a3b4bd5de2eb6570cb6c87cdc756d65871a0e469bbc80ffe25a8de3a93582c7f77774f3d595a6c4b20b774738211fd114c7e08a8eb0463fff914e7f1e43b90ba7c78d4d04ff27ed753157340f652056b5c01eb477883eb05808c4bea49c74a41fee43d2ae589b6dc2918fa2b45ee219115765aa78472603a1ef1eee91a93979d08df187c93736da97c4ecb2583a6ecfdd282d52e44e28ab3f8f901bedfb18b94ff4"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async) 1m4.991350063s ago: executing program 2 (id=229): prlimit64(0x0, 0x4, &(0x7f0000000000)={0x0, 0xa}, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="65000000000003040000000000002000"/30], 0x20, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1, 0xe0202) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r1, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095", @ANYRES16=r0, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r3}, 0x18) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0xc00}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r8}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r8, 0x2}}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) fspick(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) 1m4.990855969s ago: executing program 2 (id=230): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xd) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000021c0)={0x5, 0x0, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/232, 0xe8}], &(0x7f0000000040)=[0xc2, 0x8000, 0x80000001, 0x8, 0x7fffffffffffffff], 0x1}, 0x20) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 1m4.939536182s ago: executing program 2 (id=232): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x6400000c) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa438100000086dd60f53a0400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000006050835900000000ff020000000000000000000000000001fc0100000000000000000000000000012c0000000000000004010400000000002ff655b50360dcc5fa0732f0d5ed5f7b43f49f"], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp=r4}, 0x20) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) close(r3) mmap$dsp(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x200000b, 0x100010, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.8485861s ago: executing program 2 (id=235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) 58.950620973s ago: executing program 2 (id=297): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000030a010800000000000000000200000008000b400000000008000a40000000040900012e940073797a31000000001400000011000100"/88], 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x1, 0x8, 0xffffff3b, 0xfffffffc, 0x0, 0x623, 0x3ff}}}}]}, 0x58}}, 0x44080) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f0000002000)) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x4) socket$netlink(0x10, 0x3, 0xe) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x63, 0x3, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xfe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x83e9}, 0x94) 58.838258104s ago: executing program 32 (id=297): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000030a010800000000000000000200000008000b400000000008000a40000000040900012e940073797a31000000001400000011000100"/88], 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x1, 0x8, 0xffffff3b, 0xfffffffc, 0x0, 0x623, 0x3ff}}}}]}, 0x58}}, 0x44080) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f0000002000)) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x4) socket$netlink(0x10, 0x3, 0xe) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x63, 0x3, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xfe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x83e9}, 0x94) 53.243372699s ago: executing program 0 (id=338): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x341000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0xb202000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000640), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r2, 0x1) ptrace$peekuser(0x3, r0, 0x8000000200) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x5c78, &(0x7f0000000040)=""/19) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x120, 0x11, 0x148, 0x0, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0xee00, 0x0, 0x2, 0x3}}, @common=@ah={{0x30}, {[0x0, 0x2]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@empty, @loopback, 0xffffffff, 0xff000000, 'team0\x00', 'team_slave_0\x00', {}, {}, 0x29, 0x0, 0x51}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x3, 0x7, 0x2, 0x3, 0x1], 0x6}}}, @common=@socket0={{0x20}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffb, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="7a4f354186c312a6241afcc12d09b22e5d", 0x11}) close_range(r4, r4, 0x0) 53.046962112s ago: executing program 0 (id=341): r0 = memfd_secret(0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80000000}) ioctl$FITHAW(r0, 0xc0045878) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)={0x62, 0x18, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0x31, [0x3, 0xfff, 0x0, 0x5b, 0x88, 0x4]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}}, @generic={0x4, 0x54, "70e5b2c7ec39fd90f609da9e2a4f32da00742dc1532f8fa83e209dc0f3b9d2b1a862a2bfa663357287d3bad1a4e1547ddd6231699f14cd25cfbda3b96edfb7313521fd93ae8f1f2a7418cc7f6a765f0a3197eea7"}, @calipso={0x7, 0x18, {0x0, 0x4, 0xfd, 0x2, [0x17, 0x1000]}}, @jumbo={0xc2, 0x4, 0xffff}]}, 0xd0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) r1 = accept4(r0, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x80, 0x800) r2 = socket$pppoe(0x18, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000380)=[r0, r1, r0, r1, r1, 0xffffffffffffffff, r0, r1, r2]}, 0x9) r3 = accept4(r2, &(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000480)=0x80, 0x81800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xffffffff, 0x4, 0xff}, &(0x7f00000005c0)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000600)={r4, 0xb}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r0, 0x0, 0x26, 0x19, &(0x7f0000000800)="6cb47dc39478ba89d197e40e29b55c9c7fdb79e41d927f4ef43217b5de9412eb243047a9b62c", &(0x7f0000000840)=""/25, 0x4c2a1b69, 0x0, 0x7a, 0x50, &(0x7f0000000880)="c7a0ba22b2e734dcfc0ced82b31414c870d7dd9c6505b1547cf7b5b8b7de8c2fb5f873b615fab19fe0a58915057a48c6bb7ead8a8e60d5f1b8ac3ea7c88e36567adb520455d60bb856f406059c44eced1907a67ec3f0b8ea13094efea165582d737d5432c4522259de66e6b2a9e6067da87ca162670cff223897", &(0x7f0000000900)="bee102516d6e88db4bbdd6e3d240dc4f899f038df457c0c44a055aee418b99c711b8f410d00ea4e05d85d56b135cf5a45fc7b6f0e4123a82802395c04fc84b24e4a40830399628e2ad30d3b6946e7fdd", 0x1, 0x0, 0x5}, 0x50) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000a00)={r4, 0x4}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x2, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040890}, 0x400c) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000b80)={0x3}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c00), r6) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}}, 0x20841) fsetxattr(r1, &(0x7f0000000d00)=@random={'os2.', 'TIPCv2\x00'}, &(0x7f0000000d40)='\x00', 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000d80)=0x1) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000dc0)={{0x7, 0x5}, 0x100, './file0\x00'}) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000f40)=0x1, 0x4) 53.013435661s ago: executing program 0 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 52.934350663s ago: executing program 0 (id=347): r0 = socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) (async) setpgid(0x0, r1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x3f, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 52.869207953s ago: executing program 0 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 52.401727397s ago: executing program 0 (id=354): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) mkdir(&(0x7f0000000000)='./bus/file0\x00', 0x4) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x1, 0x0, 0x7, [], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, 0xfffffffffffffffe, 0x4004040) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x0, 0xfffffeff, 0xfffffffe, 0x1, [], [0x800, 0x0, 0x20], [0x1, 0x0, 0x0, 0x6], [0x10000, 0xa54, 0xd1, 0x3]}) 52.36403533s ago: executing program 33 (id=354): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) mkdir(&(0x7f0000000000)='./bus/file0\x00', 0x4) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./bus\x00', r3, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x1, 0x0, 0x7, [], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, 0xfffffffffffffffe, 0x4004040) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x0, 0xfffffeff, 0xfffffffe, 0x1, [], [0x800, 0x0, 0x20], [0x1, 0x0, 0x0, 0x6], [0x10000, 0xa54, 0xd1, 0x3]}) 41.850252914s ago: executing program 4 (id=484): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x8, 0x2, {{0x1f, 0x4, 0x3, 0x1a, 0x7c, 0x65, 0x0, 0x4, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0x10, 0x0, [{0x1, 0xa, "977ac7d982e648a9"}]}, @timestamp_prespec={0x44, 0xc, 0x9e, 0x3, 0x4, [{@local, 0x10001}]}, @noop, @generic={0x44, 0x10, "922c8cfa7f39124f93684a8b7aec"}, @timestamp={0x44, 0x14, 0xca, 0x0, 0x6, [0xc, 0x2, 0x80, 0x3]}, @timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x0, [{@empty, 0x7}, {@empty, 0x4}, {@rand_addr=0x64010100, 0xdbea}]}, @timestamp={0x44, 0x8, 0xb9, 0x0, 0x7, [0x0]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x4a, 0x10001, 0x14, @dev={0xfe, 0x80, '\x00', 0x33}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x1, 0x3, 0x2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) bind$802154_dgram(r0, &(0x7f0000000400)={0x24, @none={0x0, 0x3}}, 0x14) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x8, &(0x7f0000000480)=[{0x7, 0x0, 0xe7, 0x10000}, {0x57da, 0xfa, 0x6, 0x3}, {0xe444, 0x6, 0x9, 0x8}, {0x5, 0x5, 0xa6, 0x8}, {0x5, 0x4, 0x7, 0x8}, {0x0, 0x1, 0x0, 0x6}, {0xded, 0x6, 0x7, 0xc6}, {0x5, 0x1, 0x4}]}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)={0x36, 0x720, 0x1, "f9dec8891be72e784f043ab1446c97a856c263e9270c916c940b9332fd06b78dc0595e4087ba3dfc89b5837fe99fbe69151cbaa40614"}) r7 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$int_out(r7, 0x0, &(0x7f0000000580)) (async) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000640)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) (async) statx(r1, &(0x7f0000000780)='./file0\x00', 0x0, 0x400, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f00000008c0)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x7}}], [{@uid_lt={'uid<', r9}}, {@smackfshat={'smackfshat', 0x3d, '%#.#.).@}!/./'}}, {@appraise_type}, {@dont_appraise}, {@fowner_gt={'fowner>', r10}}, {@hash}, {@subj_role={'subj_role', 0x3d, 'syztnl0\x00'}}, {@obj_type={'obj_type', 0x3d, '/'}}, {@euid_gt}]}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r6, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0, 0x8, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000f80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) (async) r12 = fcntl$dupfd(r1, 0x406, r0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000fc0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r6, 0x3ba0, &(0x7f0000001000)={0x48, 0xb, r12, 0x0, r13}) (async) r14 = syz_open_dev$audion(&(0x7f0000001080), 0xad10, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r14, 0x1, &(0x7f00000010c0)={0x3b, 0x80, 0x7, "687274a9b06b6107892be1ac7f36c8c1c2b2a5f78f449d99f3a8506f6adb33e317d9789bbb7ec933ba2c45c03f887fc61eae808da888cbb29a713c"}) (async) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001140)={0x4}, 0x4) (async) syz_open_dev$sndpcmp(&(0x7f0000001180), 0x0, 0x185000) (async) r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000011c0)="39f3c85a191096064a47c4e8e05d46c583f513d669425c9061b125ffc0b8eb2e2095506fd1fa33da20b464edc104002b4d00c13307b1ee26eaa36ff714a690f446593f3b8f28300522791c8db126ee5510b6069b39debd17594e198ea981420603f869dad809c21ac1f1087fe49006daa134c3fa7ce86baa64c309223cf557808811", 0x82}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mount$tmpfs(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x0, &(0x7f0000001380)={[{@mode}, {@uid={'uid', 0x3d, r10}}, {@inode64}, {@huge_within_size}, {@huge_advise}], [{@euid_lt={'euid<', r10}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%.'}}, {@subj_user={'subj_user', 0x3d, '/'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) (async) r16 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r16, &(0x7f0000001440)={'#! ', './file0', [{0x20, 'uid'}, {0x20, '\x00'}, {}, {0x20, ':#}#:.'}, {0x20, '\xe9*\xc9'}], 0xa, "a47c948804b4c1246d3ba09730106270999aee1ae046ad54317aa344bd54d37fac766ca8670bce79becec12ab00c941d4c4ca7fda5c10319206f69ae3a1bf6fb406378ceb9e69aba53326cdc1fffe155b1f39c77ffe274d1927417293b0ccb730548969690056d3b8eaf2451ecca9c20bd8c1c1a5286e534e43a10cebd41a8faeed39cf1e06a48b83e914aaf546da894be77a58ea2e0f3d8d8cdc7f654d2a62797179c497092531d2b6317b4fc1a7ef2449c2592b7e4b9e72b5f2e22191ae79dd9988ce26c6ca58483c22000ca037aff58ef9e8df3d8a5d07d077df1aa69c883379ca751b0250c1b662c62cfb8ef5dd2"}, 0x10d) 41.789489222s ago: executing program 4 (id=486): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x141) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, &(0x7f0000000080)) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x141) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, &(0x7f0000000080)) (async) 41.787329365s ago: executing program 4 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x1c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) 41.778400114s ago: executing program 4 (id=490): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x58b9, &(0x7f0000000280)={0x0, 0xe7f4, 0x800, 0x1, 0x158}) syz_io_uring_setup(0x221f, &(0x7f0000000300)={0x0, 0xe6c, 0x4, 0x3, 0xba, 0x0, r2}, &(0x7f0000000180), &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001580)={r6}) sendto$packet(r0, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610c0806000088a8000081a8880088a8ffff", 0x71, 0x40891, &(0x7f0000000540)={0xc9, 0x88a8, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 41.659435905s ago: executing program 4 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0xb8104140, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r7, @ANYBLOB="fd00000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x2d, 0x1001, r4, 0x0) fanotify_mark(r8, 0x1, 0x4800003e, r4, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700102c00fe80000000000000ece4689339219cc6ff0200000000000000000000000000013c00"/70], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x140c, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}}, 0x4008810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000ec00000000090000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3000, 0x10, 0x0) 41.580853701s ago: executing program 4 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000800000018000280100003800c0001800800010000000000040001000c00018008000100", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x80000000}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44) 26.598726658s ago: executing program 34 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000800000018000280100003800c0001800800010000000000040001000c00018008000100", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x80000000}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44) 1.767923812s ago: executing program 1 (id=929): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve1\x00'}) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x7, 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) socket(0x29, 0x2, 0x3ff) futex(&(0x7f0000000680), 0x85, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030000000000006adf657a000000", @ANYRES32=r0, @ANYBLOB="00000000000000001c0012800b00010067656e65be6a8bf40c00028005000400010000001c001a8018000af5140007"], 0x58}, 0x1, 0x2}, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x9}, 0x8) 1.679965144s ago: executing program 1 (id=930): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.310917s ago: executing program 3 (id=937): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="02", 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xffffffff, 0x6, 0x40000801, 0x0, &(0x7f0000000100)=0x3, 0x0) futex_waitv(&(0x7f0000001580)=[{0x2, &(0x7f0000000140)=0x6, 0x80}, {0xffff, &(0x7f0000000180)=0x80, 0x2}, {0x8000000000000000, &(0x7f00000001c0)=0x100000000, 0x2}, {0xf20, &(0x7f0000000200)=0x7ff, 0x2}, {0x101, &(0x7f0000000240)=0x81, 0x82}, {0xab59, &(0x7f0000000280)=0x80000001, 0x82}, {0x57, &(0x7f00000002c0)=0x5, 0x82}, {0x1, &(0x7f0000000300)=0x3, 0x82}, {0x175, &(0x7f0000000380)=0x6, 0x82}, {0xd, &(0x7f00000003c0)=0x3, 0x82}, {0x9cd2, &(0x7f0000000400)=0x5}, {0x400, &(0x7f0000000440)=0x2, 0x2}, {0x5, &(0x7f0000000480)=0x100000001, 0x82}, {0x2, &(0x7f00000004c0)=0x2, 0x82}, {0x6, &(0x7f0000000500)=0xfffffffffffffffe, 0x2}, {0x7, &(0x7f0000000540)=0x5, 0x2}, {0xffffffff7fffffff, &(0x7f0000000580)=0x5, 0x82}, {0xb3, &(0x7f00000005c0)=0x5, 0x82}, {0x8001, &(0x7f0000000600)=0x9, 0x82}, {0x70000, &(0x7f0000000640)=0x8, 0x82}, {0xffffffffffffddb6, &(0x7f0000000680)=0x5, 0x82}, {0xfff, &(0x7f00000006c0)=0x4, 0x2}, {0x7fff, &(0x7f0000000700)=0x2121800000000}, {0x6, &(0x7f0000000740)=0x4, 0x2}, {0x1, &(0x7f0000000780)=0x5, 0x82}, {0xb, &(0x7f00000007c0)=0x101, 0x2}, {0x9, &(0x7f0000000800)=0x3, 0x82}, {0x80000001, &(0x7f0000000840)=0x1748, 0x82}, {0x4, &(0x7f0000000880)=0x1, 0x80}, {0xca, &(0x7f00000008c0)=0x1}, {0x2, &(0x7f0000000900), 0x2}, {0x5, &(0x7f0000000940)=0x5, 0x2}, {0x100, &(0x7f0000000980)=0xffff, 0x82}, {0x1, &(0x7f00000009c0)=0x3, 0x2}, {0x2, &(0x7f0000000a00)=0x3, 0x82}, {0x5, &(0x7f0000000a40)=0x7, 0x186}, {0x9, &(0x7f0000000a80), 0x82}, {0x8, &(0x7f0000000ac0)=0x2, 0x2}, {0x8, &(0x7f0000000b00)=0x4, 0x2}, {0x3, &(0x7f0000000b40)=0xb, 0x82}, {0xff, &(0x7f0000000b80)=0x7ff, 0x82}, {0x0, &(0x7f0000000bc0)=0x6, 0x82}, {0x401, &(0x7f0000000c00)=0x6, 0x2}, {0x64, &(0x7f0000000c40)=0x40, 0x82}, {0xfffffffffffffffd, &(0x7f0000000c80)=0x8, 0x2}, {0x9, &(0x7f0000000cc0)=0x9, 0x2}, {0x2, &(0x7f0000000d00)=0x400000000000, 0x82}, {0x5, &(0x7f0000000d40)=0x100000000, 0x33adf0ba37224c74}, {0x428, &(0x7f0000000d80)=0xf80, 0x82}, {0x800, &(0x7f0000000dc0)=0x4, 0x2}, {0x1, &(0x7f0000000e00)=0x1c, 0x82}, {0x1, &(0x7f0000000e40)=0x80000000, 0x2}, {0x7, &(0x7f0000000e80)=0x50a0, 0x2}, {0x4, &(0x7f0000000ec0)=0x1ff, 0x82}, {0xc0, &(0x7f0000000f00)=0x401, 0x82}, {0xfffffffffffffffc, &(0x7f0000000f40)=0x8000000000000001, 0x82}, {0x9, &(0x7f0000000f80)=0x7, 0x2}, {0xfff, &(0x7f0000000fc0)=0xffff, 0x82}, {0xc000000000000000, &(0x7f0000001000)=0x81, 0x82}, {0x800, &(0x7f0000001040)=0x800, 0x2}, {0x8df7, &(0x7f0000001080)=0xfffffffffffffff8, 0x2}, {0x7, &(0x7f00000010c0)=0x6, 0x82}, {0x9, &(0x7f0000001100)=0xa00, 0x82}, {0xa28c, &(0x7f0000001140)=0x6, 0x82}, {0xfff, &(0x7f0000001180)=0x2, 0x82}, {0x7f, &(0x7f00000011c0)=0x4, 0x2}, {0x8, &(0x7f0000001200)=0x100, 0x2}, {0x0, &(0x7f0000001240)=0x8, 0x82}, {0x0, &(0x7f0000001280)=0xce, 0x82}], 0x45, 0x0, &(0x7f00000012c0)={0x0, 0x3938700}, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) getitimer(0x2, &(0x7f0000000000)) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) brk(0x8080000000000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', {}, 0x1}) 801.007962ms ago: executing program 5 (id=946): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0xfffffffd}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x20000) 798.907528ms ago: executing program 6 (id=947): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)) 739.770168ms ago: executing program 6 (id=948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={r0, 0x7, 0x8, "ae9391acd41fbcfda11fcd25abf3a2d38bd3dab63da6c884a442e341d10ccc95e3358df5590081276411be64b2795f028f6e6185264703ba1aa7a2744d5ea100ea0dc167de8e70790a256ee0d53ef9264afb819a025ebd8b174f6f2d059e84e89379d8efee5aa12c86e217da53"}) getsockopt$inet6_udp_int(r0, 0x11, 0xc0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000180)={{0x3, 0x0, 0x80, {0x0, 0x2000, 0x1}}, "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", "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"}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) listen(r1, 0x100) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x48, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7e, 0x4f}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d0}, 0x10841) r4 = syz_open_dev$ndb(&(0x7f00000023c0), 0x0, 0xfc82eca8812b9f83) r5 = dup2(r1, r4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x55e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4400}, 0x40008) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002500), 0x480801, 0x0) preadv(r6, &(0x7f00000026c0)=[{&(0x7f0000002540)=""/76, 0x4c}, {&(0x7f00000025c0)=""/87, 0x57}, {&(0x7f0000002640)=""/88, 0x58}], 0x3, 0x5, 0x6ae) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) getpeername$inet(r5, &(0x7f0000002700), &(0x7f0000002740)=0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, r2, 0x8, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40011) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x12010001}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x50, 0x140e, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x7f}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000002bc0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x24020000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a00)={0x148, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xef, 0x8, "e6bcce45d4a0bade1ac8dff5a5d77daa518d1bd5343d284899d4203605ccdcab5fef4f6a46bf739579dd143fafc5d67c4bbb2b3d3b17e9441be63ab2e0cdab8e9ea808ef3bedfbfb29d7997065ab91a5628d10f93ea30dd413577b7f632b3252e7c0e06afa69961a337a532c9d517fe33cc3feeacad39d70e1010c49308ca7c4f6a0f1378f4fd7c305f83486078bc84c3e4a275f6603a0c8a205d06b918e9d072b48946e96652f840692def8a513af0ee38d47f76506fca084ec93cc70487408ab4763212361781cc208c158c353ee361fbc96031920ab08acfb5788fed4bd658eb8fa8add53ad4d34836f"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$IOCTL_GET_NUM_DEVICES(r5, 0x40046104, &(0x7f0000002c00)) r8 = geteuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000002c40)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r8}) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000002c80)=0x0) write$cgroup_pid(r1, &(0x7f0000002cc0)=r9, 0x12) r10 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r5, {r8, r10}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) 739.23694ms ago: executing program 1 (id=949): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x100000c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 739.043411ms ago: executing program 6 (id=950): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) syz_open_dev$cec(0x0, 0x0, 0x101800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close_range(r0, 0xffffffffffffffff, 0x0) 614.274486ms ago: executing program 5 (id=951): r0 = socket$packet(0x11, 0x2, 0x300) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) dup2(r2, r3) (async) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c093}, 0xc000) (async) recvfrom$inet_nvme(r5, &(0x7f0000000140)=""/94, 0x5e, 0x40002002, &(0x7f0000000200)=@x25, 0x80) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000003c0)=0x10000000, 0x4) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r7, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x21, &(0x7f0000000400)={0x11, 0xd8, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) (async) r10 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000480)={0x8, 0x6, {r10}, {0xee00}, 0x5, 0xff}) rt_sigqueueinfo(r11, 0x28, &(0x7f00000007c0)={0x20, 0x2, 0x8}) 613.421307ms ago: executing program 1 (id=952): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x1000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0x2}, {0x10001, 0x401, 0x3}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd2d, 0x70bd2b, 0x70bd2a, 0xa5d}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r1, 0x0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@empty, @broadcast, 0x0}, &(0x7f0000000100)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = fanotify_init(0x200, 0x0) r6 = dup(r4) fanotify_mark(r5, 0x1, 0x48001059, r6, 0x0) readv(r4, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0xe, r3, 0x6, r11}, 0x10) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000180)=0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)=0x0) r14 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}, {@access_uid={'access', 0x3d, r12}}, {@version_L}, {@access_uid={'access', 0x3d, r13}}, {@ignoreqv}], [{@fowner_gt={'fowner>', r14}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, 'deflate\x00'}}, {@seclabel}, {@flag='nolazytime'}, {@fsname={'fsname', 0x3d, 'deflate\x00'}}, {@subj_type={'subj_type', 0x3d, '})%&^('}}]}}) 490.038201ms ago: executing program 5 (id=953): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c007c9e1c00070f000000000000000007000010", @ANYRES32=r1, @ANYBLOB="80009e00"], 0x1c}}, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, 0x0, 0x1) 404.803939ms ago: executing program 6 (id=954): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xe880, 0x6, [0x7, 0x9, 0x30cb, 0x6, 0x30, 0x5]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x9, 0x200, 0x5, 0xc, 0x80000001, 0x20000, 0xffff6d5e, r1}, 0x20) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r1, 0x420000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={r3}, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x1, 0x2, 0x3c, 0x7fffffffffffffff, 0x9, 0x1, 0x9}, &(0x7f0000000200)={0x1, 0xca1e, 0x8, 0x8000000000000001, 0x81, 0xc, 0x4, 0x4}, &(0x7f0000000240)={0x2, 0x9697, 0xa, 0x5, 0x2, 0x7, 0x7, 0x5}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x780]}, 0x8}) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000340)=0x856, 0x4) pselect6(0x40, &(0x7f0000000380)={0x0, 0x81, 0x6, 0x5, 0x8, 0x7, 0x2, 0x5}, &(0x7f00000003c0)={0x7, 0x1, 0x0, 0x8, 0x1, 0x8000, 0x6, 0x4}, &(0x7f0000000400)={0x47b, 0x4, 0x7, 0x7ff, 0x401, 0x1, 0x8, 0x8}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x8]}, 0x8}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000801) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000640)={0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000680)) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000006c0)=""/233) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) (async) r4 = syz_open_dev$vcsu(&(0x7f00000008c0), 0x7, 0x10084) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900), &(0x7f0000000940)=0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000980)=0x4, 0x4) (async) getsockname$packet(r4, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1a, 0x9, 0x8, 0x40, 0x2, r2, 0x8, '\x00', r6, r2, 0x2, 0x0, 0x2}, 0x50) io_uring_enter(r4, 0x65ae, 0x8f20, 0x2, &(0x7f0000000ac0)={[0x9]}, 0x8) (async) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000b00)) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x12, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xb, 0x8, 0x6, 0x1, 0x8}, @map_idx_val={0x18, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000000c40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0x0, 0xf, 0x1c48}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000cc0)=[{0x2, 0x4, 0xe, 0x74b7121d62723530}, {0x2, 0x3, 0x8, 0x4}, {0x1, 0x2, 0xa, 0x4}, {0x5, 0x1, 0x7, 0x4}, {0x0, 0x4, 0x4, 0x5}], 0x10, 0x4}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001180)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000000e80)={0x28c, r8, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4c}, @void, @val={0xc, 0x99, {0x8000, 0x15}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f6e12c16b6a9fd921ff97cbfa6b0c154af2a22c5d286365b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "47745bb23c6d954ae490202af5036b2cc8dd32fc4b5d14de"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2b214fe05a2f0780ce6c4bdc16a718be0e614210b74d1882"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea9d27cb311f80c50312d8d89fb92edb1222ec8019f53f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "63ca3fe3970e5e8279fab2586fdb73bd5dd9854debcd4c3a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5079d3406fe3ba3221188ab4637564b0b695b11643dae392"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7366317edfbe93bd14b54605220c648195f1f2a9bae05614"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4e8a25ad18508900eebc799db6150bcfd3d17d5c860ea13a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9ffad1afb9afbe1463584661f9bcf0c1b16e32c20a4acc21"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "32606f5e02f391a033144d3fc5901ca24899927e74bcf321"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40004) (async) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000011c0), &(0x7f0000001200)=0x14) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r9 = fcntl$getown(r5, 0x9) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r9, 0x7, r7, &(0x7f0000001240)={r2, r0, 0xd}) 401.848427ms ago: executing program 1 (id=955): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe420370000000c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe420370000000c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0xfffffdfffffffffe}}, 0x30) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x10) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x180) dup2(r5, r7) (async) dup2(r5, r7) chmod(&(0x7f00000001c0)='./file1\x00', 0x18e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES32=r3, @ANYRES32=r2]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES32=r3, @ANYRES32=r2]) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={'trans=virtio,', {[{@access_user}]}}) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={'trans=virtio,', {[{@access_user}]}}) 401.499221ms ago: executing program 3 (id=956): r0 = socket(0x10, 0x803, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800526d000000002c0000002c00000009000000070000000000000e0300000000000000070000000000000e0100000000000000000000000000000202000000000000000000002e00"], 0x0, 0x4d, 0x0, 0x1}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @local, 0x10000}, 0x3d) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000180)) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfffb, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x400008, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) 397.524263ms ago: executing program 5 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r1, 0x1) sendto$inet6(r1, &(0x7f00000002c0)="41d8", 0x2, 0x800, &(0x7f0000000000)={0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 397.303563ms ago: executing program 6 (id=958): syz_clone(0xc080a091, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000014c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000001480)={r5}) write$UHID_INPUT(r4, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000001400)={0x4, &(0x7f0000000240)=[{0x8, 0x1c, &(0x7f00000000c0)="fe403e0e36eb4696a72a89e33869185356d0a3ed2cb6bcc213731064", 0x2}, {0x9, 0x96, &(0x7f0000000100)="db53be529fd73e2f50ccc5b60b1fbf05e0c35862aad1f3753d8f2ca6c5f614ae6bc2587083ab4fb6c2ce3a3cb0abb42d306488070dce7df4a73482ce691c052e3985eec137146b19f046717dbc706692e88010f7d0fd1a959cd9e3c0c67adba19da5a3dbc686d73725691ba18d5bdb1b051e350fbf38f18743e4bc70870774391f05a59140a3422bed7531b8a9f337f384b18b5eac8c", 0x1}, {0x1, 0x34, &(0x7f0000000200)="55d64251c8c5e763307d59a2a53d0e4ae288702ce77a7dbce2488c68402df68bb3600d4206d74c6080f5478f3721fc9c64131303", 0x1, 0x1}, {0xe00, 0xee, &(0x7f0000001300)="9d8247c9956f565d57232ba89e4136f0526f849b282e281999e36bf2049485a8b17640029eceed0b3653a543b0eb50923101d1659385af89c6e56b2359ec32f5cbf128466fc5086a9853213b04a79a7b49b97227b7324903bad7895613a76bbe6542169fa60bf41ee73d4b8ac6244039e666d51d1a5e57fcd5eb7187a27dc91c92b828075f32a57673d59ec1160d0687d4a0f5ad503c0294cbb9ded2775305e489994bc0ee484e80346bcde8f3a10e90c401b1bb7530118f93ab90db5ad39b2a66b4b7dd56aeda4e1dc103b03be013a2363b935fe6d0449a8690af61f99c18704726af426d36f85b6a76a021f465", 0x1, 0x1}]}) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f00000001c0)='m', 0x1}]) io_destroy(r2) 340.23474ms ago: executing program 1 (id=959): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_open_dev$media(&(0x7f0000000000), 0x98b9, 0x440000) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000040)=[{}, {0x80000000}], &(0x7f0000000200)}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x3, 0x40080) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000340)={r3, &(0x7f00000002c0), &(0x7f00000004c0)}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000080)={0x1}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$BSG_IO(r7, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000480)="0c1f", 0x0, 0x10, 0x30, 0x0, 0x1}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x8000], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}]}}]}, 0xb8}}, 0x20000000) getdents(r4, &(0x7f0000000700)=""/90, 0x20000) 339.133912ms ago: executing program 5 (id=960): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611004000000000063012c00000000009500001400000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) syz_open_dev$cec(0x0, 0x0, 0x101800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000400)={0x980902, 0x4, @value=0x4}) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x68840, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) ioctl$TUNSETLINK(r1, 0x400454cd, 0x205) close_range(r0, r5, 0x0) 211.222743ms ago: executing program 3 (id=961): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, [0x1]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) 210.914448ms ago: executing program 3 (id=962): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0xffffffff, 0x5, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x400, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xab9}, 0x44) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005d00), 0x0, 0x40, 0x0) listen(r0, 0x1) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) socket$inet6(0xa, 0x80002, 0x88) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0xffffffff, 0x5, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x400, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xab9}, 0x44) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000005d00), 0x0, 0x40, 0x0) (async) listen(r0, 0x1) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) 160.685347ms ago: executing program 3 (id=963): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001400030064756d6d793000000000000000000000050021"], 0x3c}}, 0x0) (async) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\x88\x9a.\xaa\x8c\b\x99\xe5 \x19\xa6\x1c}g\xf5)P\x86\f\xba\xff\x8fS0\xd0/\xa2\x16\xc1?5\x9f&!\xfe?\xbe\x03\\\x94s\xf5\x1f\xaa\xd9\xfd2\xbc5y\x18#Qu\x85\xee-\xc0\xac\xa8\x93\x0eXds\xf3\xf6\x84\xca\"\xb8\x06\x8bM\xd4\xc5\x8c\xe1\x86\'@\x9f\x8f\xce\x85\xdf\xbb\xa2\x04Z\xbc:;\x00B\x85U\xf6\x9d\x9e_\x9f_\x9dD\t\xa6\xf6\xa9\xb2e\x92\xd0g\xb3\x01\xb77\x8eC}\x1d\x92\xa0\x85)\x0f\x1d\x7f\xd6\xd7\x0f\x8d\xea']}) 159.699834ms ago: executing program 6 (id=964): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040080) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000007c0)=&(0x7f0000000780)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r3, 0x801, 0x2, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xfd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}, 0x24044880) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x10, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x5, 0x7, {{0x3b, 0x4, 0x3, 0x3, 0xec, 0x67, 0x0, 0xfe, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xc, "8ceec299b641949609e4"}, {0x0, 0xa, "4123d9ae44260910"}, {0x1, 0xe, "0c371a9147fcdf3629e7f463"}]}, @timestamp={0x44, 0x20, 0xac, 0x0, 0x3, [0xa87, 0xc3e1, 0x2, 0x40000000, 0x5, 0xa, 0x1]}, @timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x9, [{@local, 0xb}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x44, 0x27, 0x1, 0x7, [{@multicast1, 0x6c}, {@local, 0xe8a8}, {@dev={0xac, 0x14, 0x14, 0x1e}}, {@local, 0x1}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x94f}]}, @timestamp_addr={0x44, 0xc, 0xfe, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xd}, 0xfffff800}]}, @rr={0x7, 0x1f, 0x93, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @multicast2, @private=0xa010101, @multicast1, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in=@loopback, 0x4e20, 0x80, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x84, r9, 0xee01}, {0x1f, 0x1ff, 0x10e, 0x400, 0x5, 0x400, 0x1, 0x4}, {0x2, 0x5, 0x0, 0x3}, 0x7, 0x6e6bbf, 0x2, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x0, 0x2, 0x0, 0xfc, 0x0, 0xd, 0xfffffffe}}, 0xe8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800200001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@typedef={0x3}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @func={0xd, 0x0, 0x0, 0xc, 0x4}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000600)=""/222, 0x7f, 0xde, 0x0, 0x80000000, 0x10000, @value=r7}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000700)=@raw=[@alu={0x0, 0x1, 0xd, 0x0, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x4, 0x6, 0x6, 0x30, 0x10}, @ldst={0x1, 0x3, 0xf9f8baa891d4e981, 0x3, 0x7, 0x80, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', r9, 0x1b, r7}, 0x94) 159.33678ms ago: executing program 3 (id=965): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) syz_open_dev$cec(0x0, 0x0, 0x101800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close_range(r0, 0xffffffffffffffff, 0xff0f) 0s ago: executing program 5 (id=966): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001d40)=@newchain={0x3c, 0x64, 0x40b, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xffff, 0x4}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x3c}}, 0x4040891) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1c, r4, 0x87770822856b3fcd, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0xc0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, 0x0, 0x884) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) kernel console output (not intermixed with test programs): mmsg+0x10/0x10 [ 91.714557][ T6478] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 91.714590][ T6478] ? __fget_files+0x20e/0x3c0 [ 91.714619][ T6478] __x64_sys_recvmmsg+0x22a/0x280 [ 91.714644][ T6478] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 91.714672][ T6478] do_syscall_64+0xcd/0x4c0 [ 91.714696][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.714715][ T6478] RIP: 0033:0x7f0faf78e929 [ 91.714728][ T6478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.714744][ T6478] RSP: 002b:00007f0fb0605038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 91.714759][ T6478] RAX: ffffffffffffffda RBX: 00007f0faf9b5fa0 RCX: 00007f0faf78e929 [ 91.714770][ T6478] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 91.714781][ T6478] RBP: 00007f0fb0605090 R08: 0000000000000000 R09: 0000000000000000 [ 91.714789][ T6478] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 91.714798][ T6478] R13: 0000000000000000 R14: 00007f0faf9b5fa0 R15: 00007fff02b44d18 [ 91.714820][ T6478] [ 91.878753][ T6489] netlink: 'syz.0.131': attribute type 11 has an invalid length. [ 91.881891][ T6489] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.131'. [ 91.927221][ T6492] macsec0: entered promiscuous mode [ 91.929136][ T6492] macsec0: entered allmulticast mode [ 91.930899][ T6492] veth1_macvtap: entered allmulticast mode [ 91.936314][ T835] usb 8-1: USB disconnect, device number 6 [ 91.971699][ T6495] syzkaller0: entered promiscuous mode [ 91.973851][ T6495] syzkaller0: entered allmulticast mode [ 92.066168][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 92.066182][ T40] audit: type=1400 audit(1750833702.259:357): avc: denied { remount } for pid=6496 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.205558][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.287919][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.365283][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.468597][ T40] audit: type=1400 audit(1750833702.669:358): avc: denied { setopt } for pid=6504 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.615584][ T6162] vhci_hcd: vhci_device speed not set [ 93.025169][ T6511] FAULT_INJECTION: forcing a failure. [ 93.025169][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.031510][ T6511] CPU: 2 UID: 0 PID: 6511 Comm: syz.0.138 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 93.031529][ T6511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.031536][ T6511] Call Trace: [ 93.031540][ T6511] [ 93.031544][ T6511] dump_stack_lvl+0x16c/0x1f0 [ 93.031567][ T6511] should_fail_ex+0x512/0x640 [ 93.031590][ T6511] _copy_from_user+0x2e/0xd0 [ 93.031607][ T6511] copy_msghdr_from_user+0x98/0x160 [ 93.031624][ T6511] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 93.031641][ T6511] ? kfree+0x24f/0x4d0 [ 93.031653][ T6511] ? __lock_acquire+0x622/0x1c90 [ 93.031678][ T6511] ___sys_recvmsg+0xdb/0x1a0 [ 93.031697][ T6511] ? __pfx____sys_recvmsg+0x10/0x10 [ 93.031724][ T6511] ? __pfx___might_resched+0x10/0x10 [ 93.031747][ T6511] do_recvmmsg+0x2fe/0x750 [ 93.031767][ T6511] ? __pfx_do_recvmmsg+0x10/0x10 [ 93.031791][ T6511] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 93.031813][ T6511] ? __fget_files+0x20e/0x3c0 [ 93.031832][ T6511] __x64_sys_recvmmsg+0x22a/0x280 [ 93.031848][ T6511] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 93.031867][ T6511] do_syscall_64+0xcd/0x4c0 [ 93.031884][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.031896][ T6511] RIP: 0033:0x7f239078e929 [ 93.031906][ T6511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.031916][ T6511] RSP: 002b:00007f239164b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.031926][ T6511] RAX: ffffffffffffffda RBX: 00007f23909b5fa0 RCX: 00007f239078e929 [ 93.031933][ T6511] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 93.031939][ T6511] RBP: 00007f239164b090 R08: 0000000000000000 R09: 0000000000000000 [ 93.031944][ T6511] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 93.031950][ T6511] R13: 0000000000000000 R14: 00007f23909b5fa0 R15: 00007ffd669b9708 [ 93.031962][ T6511] [ 93.113589][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.139'. [ 93.152254][ T40] audit: type=1326 audit(1750833703.349:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.164263][ T40] audit: type=1326 audit(1750833703.349:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.177350][ T40] audit: type=1326 audit(1750833703.349:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.186780][ T40] audit: type=1326 audit(1750833703.349:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.194136][ T40] audit: type=1326 audit(1750833703.349:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.201739][ T40] audit: type=1326 audit(1750833703.359:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.211291][ T40] audit: type=1326 audit(1750833703.359:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.219551][ T40] audit: type=1326 audit(1750833703.359:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf78e929 code=0x7ffc0000 [ 93.254594][ T6519] overlayfs: failed to resolve './file1': -2 [ 93.385544][ T6543] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 93.388453][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.406943][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 93.593768][ T6559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.625067][ T835] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.644392][ T6564] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 93.645137][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 93.682607][ T6564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.686675][ T6564] bond1: (slave bond2): making interface the new active one [ 93.692141][ T6564] bond1: (slave bond2): Enslaving as an active interface with an up link [ 93.796040][ T835] usb 8-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 93.800512][ T835] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.804265][ T835] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.812906][ T835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.819240][ T835] usb 8-1: config 0 descriptor?? [ 93.832662][ T6569] fuse: Bad value for 'user_id' [ 93.834801][ T6569] fuse: Bad value for 'user_id' [ 94.029904][ T835] usb 8-1: USB disconnect, device number 7 [ 94.034537][ T6545] usb 43-1: recv xbuf, 0 [ 94.038976][ T13] vhci_hcd: stop threads [ 94.041351][ T13] vhci_hcd: release socket [ 94.047107][ T13] vhci_hcd: disconnect device [ 94.102958][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 94.105094][ T9] vhci_hcd: vhci_device speed not set [ 94.149766][ T6600] ubi0: attaching mtd0 [ 94.158246][ T6600] ubi0: scanning is finished [ 94.160666][ T6600] ubi0: empty MTD device detected [ 94.238864][ T6600] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.242873][ T6600] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 94.246344][ T6600] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.248600][ T6600] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 94.250900][ T6600] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.253411][ T6600] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.257131][ T6600] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2376589067 [ 94.261447][ T6600] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.270798][ T6606] ubi0: background thread "ubi_bgt0d" started, PID 6606 [ 94.274426][ T6605] ubi0: detaching mtd0 [ 94.286394][ T6605] ubi0: mtd0 is detached [ 94.575156][ T6642] usb usb2: usbfs: process 6642 (syz.0.172) did not claim interface 0 before use [ 94.591346][ T5996] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 94.689379][ T6655] FAULT_INJECTION: forcing a failure. [ 94.689379][ T6655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.693944][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.3.177 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 94.693965][ T6655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.693973][ T6655] Call Trace: [ 94.693979][ T6655] [ 94.693986][ T6655] dump_stack_lvl+0x16c/0x1f0 [ 94.694035][ T6655] should_fail_ex+0x512/0x640 [ 94.694068][ T6655] _copy_from_user+0x2e/0xd0 [ 94.694093][ T6655] copy_msghdr_from_user+0x98/0x160 [ 94.694118][ T6655] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 94.694145][ T6655] ? kfree+0x24f/0x4d0 [ 94.694163][ T6655] ? __lock_acquire+0x622/0x1c90 [ 94.694194][ T6655] ___sys_recvmsg+0xdb/0x1a0 [ 94.694217][ T6655] ? __pfx____sys_recvmsg+0x10/0x10 [ 94.694253][ T6655] ? __pfx___might_resched+0x10/0x10 [ 94.694299][ T6655] do_recvmmsg+0x2fe/0x750 [ 94.694325][ T6655] ? __pfx_do_recvmmsg+0x10/0x10 [ 94.694354][ T6655] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 94.694386][ T6655] ? __fget_files+0x20e/0x3c0 [ 94.694414][ T6655] __x64_sys_recvmmsg+0x22a/0x280 [ 94.694440][ T6655] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 94.694472][ T6655] do_syscall_64+0xcd/0x4c0 [ 94.694498][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.694519][ T6655] RIP: 0033:0x7f5cab78e929 [ 94.694534][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.694549][ T6655] RSP: 002b:00007f5ca95f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 94.694567][ T6655] RAX: ffffffffffffffda RBX: 00007f5cab9b5fa0 RCX: 00007f5cab78e929 [ 94.694577][ T6655] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 94.694587][ T6655] RBP: 00007f5ca95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.694597][ T6655] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 94.694607][ T6655] R13: 0000000000000000 R14: 00007f5cab9b5fa0 R15: 00007ffe7e34fc08 [ 94.694629][ T6655] [ 94.765079][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.791120][ T6659] netlink: 'syz.2.178': attribute type 11 has an invalid length. [ 94.809845][ T5996] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.813978][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.817466][ T5996] usb 6-1: Product: syz [ 94.819126][ T5996] usb 6-1: Manufacturer: syz [ 94.821062][ T5996] usb 6-1: SerialNumber: syz [ 94.834725][ T5996] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.863645][ T6040] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.869185][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.878146][ T6667] vlan1: entered allmulticast mode [ 94.886751][ T6667] veth0_vlan: entered allmulticast mode [ 94.932949][ T6671] dns_resolver: Unsupported content type (234) [ 94.938787][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'. [ 94.939435][ T6673] netlink: 36 bytes leftover after parsing attributes in process `syz.0.184'. [ 95.053729][ T6677] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 95.061636][ T6677] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 95.095227][ T6681] netlink: 248 bytes leftover after parsing attributes in process `syz.0.187'. [ 95.135226][ T6165] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 95.285625][ T6165] usb 7-1: Using ep0 maxpacket: 16 [ 95.289523][ T6165] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.294176][ T6165] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.298158][ T6165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.301583][ T6165] usb 7-1: Product: syz [ 95.303262][ T6165] usb 7-1: Manufacturer: syz [ 95.305046][ T6165] usb 7-1: SerialNumber: syz [ 95.308511][ T6165] usb 7-1: config 0 descriptor?? [ 95.312666][ T6165] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.315938][ T6165] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 95.371914][ T6691] warning: `syz.0.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.496380][ T5953] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 95.500292][ T5953] Bluetooth: hci2: Injecting HCI hardware error event [ 95.503983][ T5299] Bluetooth: hci2: hardware error 0x00 [ 95.570650][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'. [ 95.575158][ T6700] ip_vti0: Master is either lo or non-ether device [ 95.578106][ T6699] delete_channel: no stack [ 95.647758][ T5953] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 95.691640][ T5953] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 95.725259][ T6709] trusted_key: syz.0.196 sent an empty control message without MSG_MORE. [ 95.779248][ T6711] 9p: Unknown Cache mode or invalid value fs [ 95.838989][ T6712] 9p: Unknown Cache mode or invalid value fs [ 95.917234][ T6165] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 96.036488][ T6731] tls_set_device_offload_rx: netdev not found [ 96.125234][ T6040] usb 6-1: Service connection timeout for: 256 [ 96.127726][ T6040] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 96.150778][ T6040] ath9k_htc: Failed to initialize the device [ 96.158273][ T6040] usb 6-1: ath9k_htc: USB layer deinitialized [ 96.298446][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 96.342357][ T6165] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 96.347926][ T6165] em28xx 7-1:0.0: board has no eeprom [ 96.571392][ T6759] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 96.573516][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.577005][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 96.582412][ T6759] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 96.585454][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.591397][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 96.596617][ T6759] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(7) [ 96.598954][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 96.602390][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 96.602548][ T6764] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 96.606627][ T6764] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 96.609697][ T6764] vhci_hcd vhci_hcd.0: Device attached [ 96.612054][ T6766] vhci_hcd: connection closed [ 96.612128][ T6765] vhci_hcd: connection closed [ 96.612178][ T6762] vhci_hcd: connection closed [ 96.612284][ T6760] vhci_hcd: connection closed [ 96.617845][ T46] vhci_hcd: stop threads [ 96.621255][ T46] vhci_hcd: release socket [ 96.623033][ T46] vhci_hcd: disconnect device [ 96.625419][ T46] vhci_hcd: stop threads [ 96.627068][ T46] vhci_hcd: release socket [ 96.628724][ T46] vhci_hcd: disconnect device [ 96.631489][ T46] vhci_hcd: stop threads [ 96.633018][ T46] vhci_hcd: release socket [ 96.634896][ T46] vhci_hcd: disconnect device [ 96.638908][ T46] vhci_hcd: stop threads [ 96.640752][ T46] vhci_hcd: release socket [ 96.642911][ T46] vhci_hcd: disconnect device [ 96.645551][ T6165] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.649042][ T6165] em28xx 7-1:0.0: dvb set to bulk mode. [ 96.654235][ T1459] em28xx 7-1:0.0: Binding DVB extension [ 96.762393][ T6165] usb 7-1: USB disconnect, device number 6 [ 96.765908][ T6165] em28xx 7-1:0.0: Disconnecting em28xx [ 96.792874][ T1459] em28xx 7-1:0.0: Registering input extension [ 96.796572][ T6165] em28xx 7-1:0.0: Closing input extension [ 96.815582][ T6165] em28xx 7-1:0.0: Freeing device [ 97.161835][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 97.316091][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 97.316106][ T40] audit: type=1400 audit(1750833707.519:455): avc: denied { getopt } for pid=6787 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.330388][ T53] usb 6-1: USB disconnect, device number 6 [ 97.332588][ T6793] input: syz0 as /devices/virtual/input/input7 [ 97.351099][ T40] audit: type=1400 audit(1750833707.549:456): avc: denied { read } for pid=5333 comm="acpid" name="event4" dev="devtmpfs" ino=2993 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.359552][ T40] audit: type=1400 audit(1750833707.549:457): avc: denied { open } for pid=5333 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2993 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.367873][ T40] audit: type=1400 audit(1750833707.549:458): avc: denied { ioctl } for pid=5333 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2993 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.390271][ T40] audit: type=1400 audit(1750833707.589:459): avc: denied { map } for pid=6796 comm="syz.1.219" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.411951][ T40] audit: type=1400 audit(1750833707.609:460): avc: denied { search } for pid=6794 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.422446][ T40] audit: type=1400 audit(1750833707.619:461): avc: denied { search } for pid=6794 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.430339][ T40] audit: type=1400 audit(1750833707.619:462): avc: denied { search } for pid=6794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.439195][ T40] audit: type=1400 audit(1750833707.619:463): avc: denied { search } for pid=6794 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.448780][ T40] audit: type=1400 audit(1750833707.619:464): avc: denied { read open } for pid=6799 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.494301][ T6803] only policy match revision 0 supported [ 97.494317][ T6803] unable to load match [ 97.500460][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 97.503919][ T6803] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 97.507349][ T6803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.552843][ T6802] binder: binder_mmap: 6796 200000000000-200000003000 bad vm_flags failed -1 [ 97.556184][ T5989] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.575109][ T5299] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 97.716584][ T5989] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 97.720916][ T5989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.723204][ T5989] usb 5-1: New USB device found, idVendor=847f, idProduct=ffff, bcdDevice= 0.00 [ 97.730134][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.737646][ T5989] usb 5-1: config 0 descriptor?? [ 97.819921][ T6828] wg2: entered promiscuous mode [ 97.824146][ T6828] team0: Device wg2 is of different type [ 97.916656][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 98.109710][ T6871] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 98.201618][ T5299] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 98.470987][ T6895] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 98.474722][ T6897] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 98.505987][ T6899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 98.508203][ T6899] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 98.510754][ T6899] vhci_hcd vhci_hcd.0: Device attached [ 98.515063][ T6899] __nla_validate_parse: 1 callbacks suppressed [ 98.515075][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 98.519847][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'. [ 98.523650][ T6900] vhci_hcd: connection closed [ 98.523985][ T1139] vhci_hcd: stop threads [ 98.530354][ T1139] vhci_hcd: release socket [ 98.532662][ T1139] vhci_hcd: disconnect device [ 98.636909][ T6903] devtmpfs: Cannot change global quota limit on remount [ 98.754001][ T6905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6905 comm=syz.3.243 [ 98.761092][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 98.880006][ T6907] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 98.882434][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.885320][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 98.890349][ T6908] vhci_hcd: connection closed [ 98.890577][ T46] vhci_hcd: stop threads [ 98.894559][ T46] vhci_hcd: release socket [ 98.896763][ T46] vhci_hcd: disconnect device [ 99.485823][ T5299] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.485987][ T6040] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 99.491056][ T6040] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 99.747031][ T5299] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 100.221842][ T5989] usb 5-1: string descriptor 0 read error: -71 [ 100.230434][ T5989] usb 5-1: USB disconnect, device number 7 [ 100.363877][ T6964] netlink: 'syz.3.260': attribute type 5 has an invalid length. [ 100.378127][ T6964] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 100.381664][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.260'. [ 100.403467][ T6964] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 100.407346][ T6964] team0: Failed to send options change via netlink (err -105) [ 100.410688][ T6964] team0: Port device geneve0 added [ 100.461574][ T6972] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 100.504133][ T6972] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 100.510972][ T73] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.511508][ T6972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.579505][ T6981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.584668][ T6981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.635913][ T73] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.719638][ T7000] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.792250][ T7006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.800250][ T7006] af_packet: tpacket_rcv: packet too big, clamped from 17 to 4294967272. macoff=96 [ 100.807284][ T7006] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=20068 sclass=netlink_xfrm_socket pid=7006 comm=syz.0.269 [ 101.547962][ T7046] netlink: 52 bytes leftover after parsing attributes in process `syz.1.271'. [ 101.565662][ T5299] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.568202][ T6040] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.571252][ T6040] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 101.645273][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.275'. [ 101.648509][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.275'. [ 101.652024][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 101.660311][ T7053] vivid-003: kernel_thread() failed [ 101.699687][ T7057] syz.0.275: attempt to access beyond end of device [ 101.699687][ T7057] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 101.700387][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 101.704488][ T7057] (syz.0.275,7057,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 101.707978][ T7063] IPVS: Error joining to the multicast group [ 101.710068][ T7057] (syz.0.275,7057,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 101.714283][ T7057] (syz.0.275,7057,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 101.719753][ T7057] (syz.0.275,7057,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 101.862430][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.867789][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.206198][ T5299] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 102.210276][ T5299] Bluetooth: hci3: Injecting HCI hardware error event [ 102.214487][ T5299] Bluetooth: hci3: hardware error 0x00 [ 102.544390][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 102.544405][ T40] audit: type=1400 audit(1750833712.739:495): avc: denied { getopt } for pid=7077 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.609430][ T40] audit: type=1400 audit(1750833712.809:496): avc: denied { read } for pid=7077 comm="syz.0.280" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 102.618396][ T40] audit: type=1400 audit(1750833712.809:497): avc: denied { open } for pid=7077 comm="syz.0.280" path="/92/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 102.623119][ T7079] block device autoloading is deprecated and will be removed. [ 102.637610][ T40] audit: type=1400 audit(1750833712.839:498): avc: denied { ioctl } for pid=7077 comm="syz.0.280" path="/92/file0/file0" dev="fuse" ino=64 ioctlcmd=0x911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 102.671941][ T40] audit: type=1400 audit(1750833712.869:499): avc: denied { setopt } for pid=7082 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.712080][ T7087] xt_cluster: node mask cannot exceed total number of nodes [ 102.800225][ T40] audit: type=1400 audit(1750833712.999:500): avc: denied { append } for pid=7084 comm="syz.1.283" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.923943][ T7093] macvlan2: entered promiscuous mode [ 102.926537][ T7093] macvlan2: entered allmulticast mode [ 102.928489][ T7093] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 103.229101][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 103.234229][ T40] audit: type=1400 audit(1750833713.429:501): avc: denied { create } for pid=7094 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.241512][ T40] audit: type=1400 audit(1750833713.439:502): avc: denied { ioctl } for pid=7094 comm="syz.0.287" path="socket:[14843]" dev="sockfs" ino=14843 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.503032][ T7103] syz_tun: entered promiscuous mode [ 103.505698][ T7103] batadv_slave_0: entered promiscuous mode [ 103.645274][ T6040] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 103.645343][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.648132][ T6040] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 103.688304][ T40] audit: type=1400 audit(1750833713.889:503): avc: denied { append } for pid=7110 comm="syz.1.292" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 103.698463][ T40] audit: type=1400 audit(1750833713.889:504): avc: denied { map } for pid=7110 comm="syz.1.292" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 103.906418][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7118 comm=syz.1.294 [ 103.967771][ T7120] trusted_key: encrypted_key: master key parameter is missing [ 104.045603][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.092841][ T7122] Cannot find add_set index 0 as target [ 104.123276][ T7122] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 104.130286][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 104.160847][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.240631][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.264633][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.268847][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.273981][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.286995][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.291836][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.306330][ T5953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.313381][ T5953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.319955][ T5953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.322220][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.324344][ T5953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.332788][ T5953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.476012][ T59] bridge_slave_1: left allmulticast mode [ 104.479271][ T59] bridge_slave_1: left promiscuous mode [ 104.484217][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.491436][ T59] bridge_slave_0: left allmulticast mode [ 104.493374][ T59] bridge_slave_0: left promiscuous mode [ 104.497584][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.772660][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.777541][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.781664][ T59] bond0 (unregistering): Released all slaves [ 104.788699][ T59] bond1 (unregistering): (slave bond2): Releasing backup interface [ 104.791650][ T59] bond1 (unregistering): Released all slaves [ 104.846131][ T59] bond2 (unregistering): Released all slaves [ 104.895970][ T7127] chnl_net:caif_netlink_parms(): no params data found [ 105.019910][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.022324][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.024618][ T7127] bridge_slave_0: entered allmulticast mode [ 105.027747][ T7127] bridge_slave_0: entered promiscuous mode [ 105.052995][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.057890][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.062234][ T7127] bridge_slave_1: entered allmulticast mode [ 105.065334][ T7127] bridge_slave_1: entered promiscuous mode [ 105.125728][ T7127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.131538][ T7127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.176523][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 105.202127][ T7127] team0: Port device team_slave_0 added [ 105.216946][ T59] hsr_slave_0: left promiscuous mode [ 105.220137][ T59] hsr_slave_1: left promiscuous mode [ 105.222815][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.225820][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.229738][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.232293][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.253745][ T59] veth1_macvtap: left allmulticast mode [ 105.255825][ T59] veth1_macvtap: left promiscuous mode [ 105.257993][ T59] veth0_macvtap: left promiscuous mode [ 105.259815][ T59] veth1_vlan: left promiscuous mode [ 105.261617][ T59] veth0_vlan: left promiscuous mode [ 105.834315][ T59] team0 (unregistering): Port device team_slave_1 removed [ 105.899759][ T59] team0 (unregistering): Port device team_slave_0 removed [ 106.125235][ T5299] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 106.370166][ T5299] Bluetooth: hci4: command tx timeout [ 106.524393][ T7127] team0: Port device team_slave_1 added [ 106.640146][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 106.686257][ T7169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.689064][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.692337][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.701731][ T7127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.731414][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.733827][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.743102][ T7127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.799100][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 106.803508][ T9] usb 6-1: config 0 has no interfaces? [ 106.808607][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 106.811756][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 106.814693][ T9] usb 6-1: Product: syz [ 106.816730][ T9] usb 6-1: Manufacturer: syz [ 106.818441][ T9] usb 6-1: SerialNumber: syz [ 106.825660][ T9] usb 6-1: config 0 descriptor?? [ 106.859042][ T7127] hsr_slave_0: entered promiscuous mode [ 106.861581][ T7127] hsr_slave_1: entered promiscuous mode [ 107.183498][ T7127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.200244][ T7127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.218678][ T7127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.226437][ T7127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.312701][ T7127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.350498][ T7127] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.357204][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.359598][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.367482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.370558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.392097][ T7127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.504854][ T7127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.664890][ T7127] veth0_vlan: entered promiscuous mode [ 107.672080][ T7127] veth1_vlan: entered promiscuous mode [ 107.699347][ T7127] veth0_macvtap: entered promiscuous mode [ 107.704409][ T7127] veth1_macvtap: entered promiscuous mode [ 107.715741][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.724889][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.733160][ T7127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.737120][ T7127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.739969][ T7127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.742851][ T7127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.796236][ T7153] Set syz1 is full, maxelem 65536 reached [ 107.800968][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.803737][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.808031][ T60] usb 6-1: USB disconnect, device number 7 [ 107.838771][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.841953][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.034104][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 108.037360][ T7233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.310'. [ 108.122942][ T7250] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.311'. [ 108.126409][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'. [ 108.423608][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 108.423620][ T40] audit: type=1400 audit(1750833718.619:517): avc: denied { bind } for pid=7268 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.445333][ T5299] Bluetooth: hci4: command tx timeout [ 108.539263][ T40] audit: type=1400 audit(1750833718.739:518): avc: denied { mounton } for pid=7273 comm="syz.1.316" path="/81/file0" dev="9p" ino=35913835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.547328][ T7280] fuse: Bad value for 'user_id' [ 108.549000][ T7280] fuse: Bad value for 'user_id' [ 108.822730][ T40] audit: type=1400 audit(1750833719.019:519): avc: denied { create } for pid=7289 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 108.981148][ T7303] JFS: discard option not supported on device [ 108.981302][ T40] audit: type=1400 audit(1750833719.179:520): avc: denied { mounton } for pid=7302 comm="syz.1.321" path="/85/bus" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 108.985540][ T7303] syz.1.321: attempt to access beyond end of device [ 108.985540][ T7303] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 109.000031][ T7303] syz.1.321: attempt to access beyond end of device [ 109.000031][ T7303] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 109.004623][ T7303] Mount JFS Failure: -5 [ 109.083420][ T7311] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 109.140315][ T7316] mkiss: ax0: crc mode is auto. [ 109.144028][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 109.155036][ T40] audit: type=1400 audit(1750833719.349:521): avc: denied { getopt } for pid=7315 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 109.178641][ T40] audit: type=1400 audit(1750833719.379:522): avc: denied { wake_alarm } for pid=7317 comm="syz.0.326" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.298823][ T40] audit: type=1400 audit(1750833719.499:523): avc: denied { listen } for pid=7323 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.405262][ T835] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 109.489180][ T40] audit: type=1326 audit(1750833719.689:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.3.333" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cab78e929 code=0x0 [ 109.566588][ T835] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.569982][ T835] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 44079, setting to 1024 [ 109.578468][ T835] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 109.582230][ T835] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.585229][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.593442][ T7316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.602291][ T835] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.700133][ T7352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.769517][ T40] audit: type=1400 audit(1750833719.969:525): avc: denied { shutdown } for pid=7355 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.810660][ T6040] usb 6-1: USB disconnect, device number 8 [ 109.867494][ T40] audit: type=1400 audit(1750833720.069:526): avc: denied { ioctl } for pid=7365 comm="syz.4.340" path="socket:[15655]" dev="sockfs" ino=15655 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.986455][ T7382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.345'. [ 109.990773][ T7382] netlink: 104 bytes leftover after parsing attributes in process `syz.0.345'. [ 110.014532][ T7384] netlink: 'syz.3.346': attribute type 21 has an invalid length. [ 110.017454][ T7384] netlink: 156 bytes leftover after parsing attributes in process `syz.3.346'. [ 110.021483][ T7383] delete_channel: no stack [ 110.061484][ T7386] pim6reg: entered allmulticast mode [ 110.403714][ T7387] syz_tun (unregistering): left promiscuous mode [ 110.525257][ T5299] Bluetooth: hci4: command tx timeout [ 110.675795][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 110.732243][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.736120][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.739140][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.743974][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.747911][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.848902][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.852814][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.856402][ T7428] netlink: 'syz.3.358': attribute type 29 has an invalid length. [ 110.857235][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.863965][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.866618][ T7428] netlink: 'syz.3.358': attribute type 29 has an invalid length. [ 110.867213][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.875285][ T7428] netlink: 500 bytes leftover after parsing attributes in process `syz.3.358'. [ 110.878658][ T53] usb 6-1: config 0 descriptor?? [ 110.895619][ T7422] chnl_net:caif_netlink_parms(): no params data found [ 110.904341][ T7430] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 111.018581][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.021152][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.023654][ T7422] bridge_slave_0: entered allmulticast mode [ 111.027967][ T7422] bridge_slave_0: entered promiscuous mode [ 111.031912][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.035441][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.038514][ T7422] bridge_slave_1: entered allmulticast mode [ 111.043015][ T7422] bridge_slave_1: entered promiscuous mode [ 111.102569][ T7422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.115376][ T7422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.119843][ T7442] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.360'. [ 111.181408][ T7422] team0: Port device team_slave_0 added [ 111.187777][ T7422] team0: Port device team_slave_1 added [ 111.225360][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.227578][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.237560][ T7422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.243359][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.247806][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.256012][ T7422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.290746][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.293698][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.296867][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.301454][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.304630][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.308091][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.310734][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.313349][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.316435][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.319254][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.321774][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.321985][ T7422] hsr_slave_0: entered promiscuous mode [ 111.324311][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.329543][ T7422] hsr_slave_1: entered promiscuous mode [ 111.330088][ T7422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.331383][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.334581][ T7422] Cannot create hsr debugfs directory [ 111.337119][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337137][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337148][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337160][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337171][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337183][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337195][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337206][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337218][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337229][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337241][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337253][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337264][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337276][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337288][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337300][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337317][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337334][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337356][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337375][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337388][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337399][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337411][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337423][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.337434][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.338414][ T53] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 111.433438][ T53] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.579417][ T7455] nbd: couldn't find device at index 587202560 [ 111.596737][ T7422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.605470][ T7422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.616049][ T7422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.622851][ T7422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.668259][ T7422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.713120][ T5989] usb 6-1: USB disconnect, device number 9 [ 111.731080][ T7422] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.747720][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.750767][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.763769][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.767253][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.896427][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.966475][ T7474] SELinux: unknown common r [ 111.968716][ T7474] SELinux: failed to load policy [ 112.045844][ T7484] netlink: 344 bytes leftover after parsing attributes in process `syz.3.367'. [ 112.063753][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.067267][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.070302][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.073048][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.109416][ T7422] veth0_vlan: entered promiscuous mode [ 112.116949][ T7422] veth1_vlan: entered promiscuous mode [ 112.139880][ T7422] veth0_macvtap: entered promiscuous mode [ 112.144714][ T7422] veth1_macvtap: entered promiscuous mode [ 112.155288][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.162636][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.169686][ T7422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.172966][ T7422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.176252][ T7422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.179518][ T7422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.256543][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.260089][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.310393][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.313307][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.606749][ T5299] Bluetooth: hci4: command tx timeout [ 112.675079][ T24] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 112.765273][ T5299] Bluetooth: hci0: command tx timeout [ 112.828492][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.831993][ T24] usb 10-1: config 0 has no interface number 0 [ 112.834937][ T24] usb 10-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.840035][ T24] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.844255][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.850012][ T24] usb 10-1: config 0 descriptor?? [ 112.868341][ T24] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 113.003352][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.375'. [ 113.069338][ T24] usb 10-1: USB disconnect, device number 2 [ 113.151678][ T7518] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(19) [ 113.154374][ T7518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.160227][ T7517] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 113.162450][ T7517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.166643][ T7517] vhci_hcd vhci_hcd.0: Device attached [ 113.166779][ T7518] vhci_hcd vhci_hcd.0: Device attached [ 113.216619][ T7523] vhci_hcd: connection closed [ 113.216664][ T7524] vhci_hcd: connection closed [ 113.217390][ T1139] vhci_hcd: stop threads [ 113.221613][ T1139] vhci_hcd: release socket [ 113.223099][ T1139] vhci_hcd: disconnect device [ 113.225649][ T7530] bridge0: port 3(syz_tun) entered blocking state [ 113.228089][ T7530] bridge0: port 3(syz_tun) entered disabled state [ 113.230881][ T7530] syz_tun: entered allmulticast mode [ 113.237820][ T1139] vhci_hcd: stop threads [ 113.239289][ T7530] syz_tun: entered promiscuous mode [ 113.239300][ T1139] vhci_hcd: release socket [ 113.239310][ T1139] vhci_hcd: disconnect device [ 113.281544][ T7530] netlink: 252 bytes leftover after parsing attributes in process `syz.1.380'. [ 113.298002][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 113.301766][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 113.305321][ T7535] netlink: 'syz.3.381': attribute type 15 has an invalid length. [ 113.314348][ T7535] binder: 7534:7535 unknown command 0 [ 113.316232][ T7535] binder: 7534:7535 ioctl c0306201 200000000180 returned -22 [ 113.894699][ T7563] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.388'. [ 113.922401][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 113.922418][ T40] audit: type=1400 audit(1750833724.119:540): avc: denied { setattr } for pid=7564 comm="syz.1.389" name="/" dev="9p" ino=35913835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.992961][ T40] audit: type=1400 audit(1750833724.189:541): avc: denied { getopt } for pid=7572 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.000886][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 114.030806][ T40] audit: type=1400 audit(1750833724.229:542): avc: denied { create } for pid=7577 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 114.042173][ T40] audit: type=1400 audit(1750833724.239:543): avc: denied { write } for pid=7577 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 114.115474][ T7584] 9pnet_fd: p9_fd_create_tcp (7584): problem binding to privport [ 114.142321][ T7586] netlink: 'syz.5.394': attribute type 7 has an invalid length. [ 114.156053][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.394'. [ 114.194369][ T40] audit: type=1400 audit(1750833724.389:544): avc: denied { bind } for pid=7585 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.532666][ T40] audit: type=1400 audit(1750833724.729:545): avc: denied { getopt } for pid=7603 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.851031][ T5299] Bluetooth: hci0: command tx timeout [ 115.778632][ T40] audit: type=1400 audit(1750833725.979:546): avc: denied { map } for pid=7613 comm="syz.3.401" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.792132][ T40] audit: type=1400 audit(1750833725.979:547): avc: denied { execute } for pid=7613 comm="syz.3.401" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.084430][ T40] audit: type=1400 audit(1750833726.279:548): avc: denied { ioctl } for pid=7629 comm="syz.4.406" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.526540][ T40] audit: type=1400 audit(1750833726.729:549): avc: denied { name_connect } for pid=7641 comm="syz.4.410" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 116.628473][ T7645] __nla_validate_parse: 1 callbacks suppressed [ 116.628491][ T7645] netlink: 76 bytes leftover after parsing attributes in process `syz.4.411'. [ 116.693370][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 116.724501][ T7647] netlink: 'syz.4.412': attribute type 12 has an invalid length. [ 116.727989][ T7647] netlink: 164 bytes leftover after parsing attributes in process `syz.4.412'. [ 116.935083][ T5953] Bluetooth: hci0: command tx timeout [ 117.111185][ T7665] openvswitch: netlink: Key type 179 is out of range max 32 [ 117.115493][ T7665] tmpfs: Invalid uid '0x00000000ffffffff' [ 117.491599][ T7680] netlink: 'syz.3.422': attribute type 27 has an invalid length. [ 117.519895][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.628463][ T7680] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.628517][ T7680] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.628532][ T7680] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.628546][ T7680] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.688683][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.689477][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.697259][ T7681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.733842][ T7683] random: crng reseeded on system resumption [ 117.794671][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 117.800795][ T7688] macvlan2: entered promiscuous mode [ 117.800816][ T7688] macvlan2: entered allmulticast mode [ 117.805834][ T5299] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 117.934437][ T7698] trusted_key: encrypted_key: keylen parameter is missing [ 118.225139][ T5989] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 118.386079][ T5989] usb 8-1: Using ep0 maxpacket: 8 [ 118.405191][ T5989] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 118.408672][ T5989] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.411804][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.414878][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.419177][ T5989] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.424735][ T5989] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.429155][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.534505][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 118.591360][ T7735] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 118.637927][ T5989] usb 8-1: usb_control_msg returned -32 [ 118.640346][ T5989] usbtmc 8-1:16.0: can't read capabilities [ 118.658837][ T9] usb 8-1: USB disconnect, device number 8 [ 118.969688][ T7770] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 119.005213][ T5953] Bluetooth: hci0: command tx timeout [ 119.247043][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 119.247057][ T40] audit: type=1400 audit(1750833729.439:559): avc: denied { lock } for pid=7786 comm="syz.1.448" path="socket:[19111]" dev="sockfs" ino=19111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.419729][ T40] audit: type=1400 audit(1750833729.619:560): avc: denied { map } for pid=7807 comm="syz.1.454" path="socket:[17192]" dev="sockfs" ino=17192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.429814][ T40] audit: type=1400 audit(1750833729.619:561): avc: denied { read } for pid=7807 comm="syz.1.454" path="socket:[17192]" dev="sockfs" ino=17192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.469059][ T7812] input: syz0 as /devices/virtual/input/input8 [ 119.577908][ T40] audit: type=1400 audit(1750833729.779:562): avc: denied { read write } for pid=7817 comm="syz.3.457" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 119.585792][ T40] audit: type=1400 audit(1750833729.779:563): avc: denied { open } for pid=7817 comm="syz.3.457" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 119.628469][ T7825] delete_channel: no stack [ 119.798619][ T7834] No such timeout policy "syz0" [ 119.842147][ T40] audit: type=1400 audit(1750833730.039:564): avc: denied { connect } for pid=7839 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.020531][ T40] audit: type=1400 audit(1750833730.219:565): avc: denied { map } for pid=7852 comm="syz.3.463" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.178942][ T7857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 120.183004][ T7857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 120.188280][ T7857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 120.192416][ T7857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 120.197178][ T7857] geneve2: entered promiscuous mode [ 120.199419][ T7857] geneve2: entered allmulticast mode [ 120.392208][ T40] audit: type=1400 audit(1750833730.589:566): avc: denied { map } for pid=7861 comm="syz.1.466" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.404279][ T40] audit: type=1400 audit(1750833730.589:567): avc: denied { execute } for pid=7861 comm="syz.1.466" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.462849][ T40] audit: type=1400 audit(1750833730.659:568): avc: denied { bind } for pid=7870 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.510744][ T7869] syzkaller1: entered allmulticast mode [ 120.540179][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 120.540288][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 120.572020][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 120.572080][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 120.605124][ T5953] Bluetooth: hci2: command 0x1003 tx timeout [ 120.615139][ T5299] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 120.627069][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 120.635104][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 120.846425][ T7908] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 120.989331][ T7929] hugetlbfs: syz.1.481 (7929): Using mlock ulimits for SHM_HUGETLB is obsolete [ 121.060238][ T7931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7931 comm=syz.4.482 [ 122.045347][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 122.195240][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 122.200856][ T34] usb 8-1: config 0 has no interfaces? [ 122.203268][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 122.207383][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.213448][ T34] usb 8-1: config 0 descriptor?? [ 122.235580][ T7996] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 122.255237][ T7996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.429894][ T1336] usb 8-1: USB disconnect, device number 9 [ 122.525337][ T6040] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 122.676682][ T6040] usb 6-1: config 0 has no interfaces? [ 122.678623][ T6040] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.681645][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.687736][ T6040] usb 6-1: config 0 descriptor?? [ 122.977095][ T8007] __nla_validate_parse: 11 callbacks suppressed [ 122.977110][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 122.982321][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 122.986641][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 122.990266][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 122.993999][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 122.997339][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 123.000634][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 123.003972][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 123.008305][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 123.012367][ T8007] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.506'. [ 123.094298][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.097396][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.101415][ T24] usb 6-1: USB disconnect, device number 10 [ 123.301537][ T8020] netlink: 'syz.5.508': attribute type 11 has an invalid length. [ 123.855710][ T1336] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 124.031006][ T8044] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 124.042748][ T8049] tipc: Started in network mode [ 124.044732][ T8049] tipc: Node identity 4, cluster identity 4711 [ 124.045314][ T8044] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 124.047004][ T8049] tipc: Node number set to 4 [ 126.308597][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 126.308616][ T40] audit: type=1400 audit(1750833736.509:587): avc: denied { recv } for pid=8072 comm="dhcpcd" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 134.695149][ T5989] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 134.850491][ T5989] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 12 [ 134.854515][ T5989] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 134.859365][ T5989] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 134.866505][ T5989] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.869994][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.872584][ T5989] usb 6-1: Product: syz [ 134.874107][ T5989] usb 6-1: Manufacturer: syz [ 134.875805][ T5989] usb 6-1: SerialNumber: syz [ 135.089172][ T5989] cdc_ncm 6-1:1.0: bind() failure [ 135.093084][ T5989] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 135.096068][ T5989] cdc_ncm 6-1:1.1: bind() failure [ 135.101515][ T5989] usb 6-1: USB disconnect, device number 11 [ 135.158919][ T40] audit: type=1400 audit(1750833745.359:588): avc: denied { read } for pid=8105 comm="syz.3.523" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.168086][ T40] audit: type=1400 audit(1750833745.359:589): avc: denied { open } for pid=8105 comm="syz.3.523" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.208878][ T6040] IPVS: starting estimator thread 0... [ 135.315215][ T8111] IPVS: using max 44 ests per chain, 105600 per kthread [ 135.350457][ T40] audit: type=1400 audit(1750833745.549:590): avc: denied { execute } for pid=8116 comm="syz.5.526" path="/dev/dri/card4" dev="devtmpfs" ino=3054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 135.449839][ T40] audit: type=1400 audit(1750833745.649:591): avc: denied { watch_mount } for pid=8115 comm="syz.3.525" path="/141" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 135.595575][ T8133] __nla_validate_parse: 90 callbacks suppressed [ 135.595615][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 135.844084][ T8154] input: syz1 as /devices/virtual/input/input9 [ 135.850444][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 135.866702][ T6040] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 136.036692][ T6040] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.040415][ T6040] usb 10-1: config 0 has no interface number 0 [ 136.048423][ T6040] usb 10-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.052901][ T6040] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.053519][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 136.064403][ T6040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.069177][ T6040] usb 10-1: config 0 descriptor?? [ 136.085648][ T6040] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 136.156994][ T40] audit: type=1400 audit(1750833746.359:592): avc: denied { setattr } for pid=8172 comm="syz.1.540" name="vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 136.275354][ T40] audit: type=1400 audit(1750833746.479:593): avc: denied { watch } for pid=8134 comm="syz.5.529" path="/proc/54/task" dev="proc" ino=20921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.282983][ T40] audit: type=1400 audit(1750833746.479:594): avc: denied { watch_sb watch_reads } for pid=8134 comm="syz.5.529" path="/proc/54/task" dev="proc" ino=20921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 136.327680][ T40] audit: type=1400 audit(1750833746.529:595): avc: denied { mounton } for pid=8134 comm="syz.5.529" path="/proc/54/task" dev="proc" ino=20921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 136.363054][ T40] audit: type=1400 audit(1750833746.559:596): avc: denied { mount } for pid=8186 comm="syz.3.544" name="/" dev="hugetlbfs" ino=20932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.552574][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.569760][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.573351][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.578620][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.582241][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.702706][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 136.782592][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.785065][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.787392][ T8193] bridge_slave_0: entered allmulticast mode [ 136.789958][ T8193] bridge_slave_0: entered promiscuous mode [ 136.813864][ T1139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.821412][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.824148][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.827586][ T8193] bridge_slave_1: entered allmulticast mode [ 136.830874][ T8193] bridge_slave_1: entered promiscuous mode [ 136.868508][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.873391][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.918131][ T1139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.932262][ T8193] team0: Port device team_slave_0 added [ 136.938327][ T8193] team0: Port device team_slave_1 added [ 137.000488][ T1139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.010395][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.012685][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.021900][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.027770][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.030357][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.040186][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.077985][ T1139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.121439][ T8193] hsr_slave_0: entered promiscuous mode [ 137.125997][ T8193] hsr_slave_1: entered promiscuous mode [ 137.129302][ T8193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.132484][ T8193] Cannot create hsr debugfs directory [ 137.212063][ T8185] syz.1.543 (8185) used greatest stack depth: 20536 bytes left [ 137.220318][ T40] audit: type=1400 audit(1750833747.419:597): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 137.270092][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.547'. [ 137.273347][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.547'. [ 137.307663][ T8206] gretap0: entered promiscuous mode [ 137.310053][ T8206] gretap0: left promiscuous mode [ 137.396992][ T1139] bridge_slave_1: left allmulticast mode [ 137.399057][ T1139] bridge_slave_1: left promiscuous mode [ 137.402201][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.409496][ T1139] bridge_slave_0: left allmulticast mode [ 137.411443][ T1139] bridge_slave_0: left promiscuous mode [ 137.413476][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.633316][ T8217] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 137.777400][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.781980][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.786110][ T1139] bond0 (unregistering): Released all slaves [ 137.863445][ T8217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.876072][ T8217] bond2: (slave bond3): making interface the new active one [ 137.879013][ T8217] bond2: (slave bond3): Enslaving as an active interface with an up link [ 137.925287][ T8193] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.933200][ T8193] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.937795][ T8193] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.948853][ T8193] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.968593][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.975554][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.164560][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.254070][ T1139] hsr_slave_0: left promiscuous mode [ 138.259172][ T1139] hsr_slave_1: left promiscuous mode [ 138.262151][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.264886][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.272308][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.275895][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.363484][ T1139] veth1_macvtap: left promiscuous mode [ 138.385344][ T1139] veth0_macvtap: left promiscuous mode [ 138.389054][ T1139] veth1_vlan: left promiscuous mode [ 138.391395][ T1139] veth0_vlan: left promiscuous mode [ 138.394415][ T8269] xt_l2tp: wrong L2TP version: 0 [ 138.615668][ T5299] Bluetooth: hci2: command tx timeout [ 138.630348][ T6040] usb 10-1: USB disconnect, device number 3 [ 139.222865][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 139.310389][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 139.639549][ T8304] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 139.641857][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.651343][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 139.668434][ T8305] vhci_hcd: connection closed [ 139.675088][ T1141] vhci_hcd: stop threads [ 139.680125][ T1141] vhci_hcd: release socket [ 139.681912][ T1141] vhci_hcd: disconnect device [ 139.896962][ T8193] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.934625][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.937044][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.948573][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.951368][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.996514][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 140.212001][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.381582][ T8193] veth0_vlan: entered promiscuous mode [ 140.393851][ T8346] kvm: emulating exchange as write [ 140.404141][ T8193] veth1_vlan: entered promiscuous mode [ 140.448789][ T8193] veth0_macvtap: entered promiscuous mode [ 140.454685][ T8193] veth1_macvtap: entered promiscuous mode [ 140.467526][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.477567][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.485513][ T8193] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.488408][ T8193] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.491701][ T8193] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.494872][ T8193] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.557031][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.560334][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.590690][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.602345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.616642][ T8367] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 140.619153][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.575'. [ 140.650269][ T8369] netlink: 108 bytes leftover after parsing attributes in process `syz.5.574'. [ 140.653568][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 140.685065][ T5299] Bluetooth: hci2: command tx timeout [ 140.688555][ T8367] team0: Port device geneve0 added [ 140.702854][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 140.702870][ T40] audit: type=1400 audit(1750833750.899:603): avc: denied { create } for pid=8373 comm="syz.5.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.719341][ T40] audit: type=1400 audit(1750833750.899:604): avc: denied { ioctl } for pid=8373 comm="syz.5.576" path="socket:[20278]" dev="sockfs" ino=20278 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.785821][ T8391] xt_hashlimit: size too large, truncated to 1048576 [ 140.788270][ T8392] xt_hashlimit: size too large, truncated to 1048576 [ 140.798845][ T8394] mkiss: ax0: crc mode is auto. [ 140.858364][ T8391] xt_bpf: check failed: parse error [ 140.982403][ T40] audit: type=1400 audit(1750833751.179:605): avc: denied { ioctl } for pid=8417 comm="syz.6.586" path="socket:[23400]" dev="sockfs" ino=23400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.036346][ T8424] overlayfs: missing 'lowerdir' [ 141.048995][ T40] audit: type=1400 audit(1750833751.249:606): avc: denied { create } for pid=8428 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.077237][ T40] audit: type=1400 audit(1750833751.249:607): avc: denied { connect } for pid=8428 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.077283][ T40] audit: type=1400 audit(1750833751.249:608): avc: denied { write } for pid=8428 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.115153][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.589'. [ 141.126829][ T8433] sctp: [Deprecated]: syz.6.590 (pid 8433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.126829][ T8433] Use struct sctp_sack_info instead [ 141.184580][ T40] audit: type=1400 audit(1750833751.379:609): avc: denied { write } for pid=8438 comm="syz.6.591" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 141.221004][ T8427] fuse: Bad value for 'fd' [ 141.374494][ T40] audit: type=1400 audit(1750833751.569:610): avc: denied { create } for pid=8462 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.381849][ T40] audit: type=1400 audit(1750833751.579:611): avc: denied { ioctl } for pid=8462 comm="syz.1.596" path="socket:[21490]" dev="sockfs" ino=21490 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.383577][ T8463] netlink: 'syz.6.595': attribute type 30 has an invalid length. [ 141.405219][ T8463] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 141.408578][ T8463] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 141.413446][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.421722][ T8464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.435913][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.438317][ T8464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.455792][ T8473] overlayfs: missing 'lowerdir' [ 141.549415][ T8485] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 141.574743][ T40] audit: type=1400 audit(1750833751.769:612): avc: denied { view } for pid=8488 comm="syz.6.604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 141.639816][ T8499] netlink: 'syz.6.606': attribute type 9 has an invalid length. [ 141.713289][ T8510] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.916785][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 142.002386][ T8542] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 142.259446][ T34] libceph: connect (1)[b::]:6789 error -101 [ 142.262233][ T34] libceph: mon0 (1)[b::]:6789 connect error [ 142.536468][ T34] libceph: connect (1)[b::]:6789 error -101 [ 142.539266][ T34] libceph: mon0 (1)[b::]:6789 connect error [ 142.618865][ T8569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8569 comm=syz.5.619 [ 142.623605][ T8569] netlink: 'syz.5.619': attribute type 1 has an invalid length. [ 142.626217][ T8569] netlink: 'syz.5.619': attribute type 4 has an invalid length. [ 142.628865][ T8569] netlink: 188 bytes leftover after parsing attributes in process `syz.5.619'. [ 142.632074][ T8569] NCSI netlink: No device for ifindex 458760 [ 142.765308][ T5299] Bluetooth: hci2: command tx timeout [ 142.769752][ T8580] evm: overlay not supported [ 142.916337][ T5299] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 142.979770][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'. [ 143.046410][ T34] libceph: connect (1)[b::]:6789 error -101 [ 143.048622][ T34] libceph: mon0 (1)[b::]:6789 connect error [ 143.064258][ T8559] ceph: No mds server is up or the cluster is laggy [ 143.587266][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.639'. [ 143.616302][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.639'. [ 143.625967][ T5989] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 143.692466][ T8642] overlay: ./file0 is not a directory [ 143.775157][ T5989] usb 11-1: Using ep0 maxpacket: 16 [ 143.783947][ T5989] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.788755][ T5989] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.796551][ T5989] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.816000][ T5989] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.818946][ T5989] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.832193][ T5989] usb 11-1: config 0 descriptor?? [ 144.239341][ T5989] HID 045e:07da: Invalid code 65791 type 1 [ 144.246237][ T5989] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:045E:07DA.0003/input/input11 [ 144.264178][ T5989] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 144.365440][ T6162] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 144.493385][ T8673] loop8: detected capacity change from 0 to 79 [ 144.495908][ T6162] usb 6-1: device descriptor read/64, error -71 [ 144.575760][ T8673] loop8: detected capacity change from 79 to 78 [ 144.628640][ T1336] usb 11-1: USB disconnect, device number 2 [ 144.735180][ T6162] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 144.751321][ T8682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.651'. [ 144.845329][ T5299] Bluetooth: hci2: command tx timeout [ 144.865183][ T6162] usb 6-1: device descriptor read/64, error -71 [ 144.977920][ T6162] usb usb6-port1: attempt power cycle [ 145.315113][ T6162] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 145.336069][ T6162] usb 6-1: device descriptor read/8, error -71 [ 145.393090][ T8743] overlayfs: failed to resolve './file1': -2 [ 145.455352][ T8748] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 145.470637][ T8748] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 145.575040][ T6162] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 145.595612][ T6162] usb 6-1: device descriptor read/8, error -71 [ 145.707266][ T6162] usb usb6-port1: unable to enumerate USB device [ 145.717457][ T8773] netlink: 'syz.6.679': attribute type 1 has an invalid length. [ 145.731709][ T8773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.754549][ T8773] veth3: entered promiscuous mode [ 145.758804][ T8773] bond1: (slave veth3): Enslaving as an active interface with a down link [ 145.767565][ T8773] vlan2: entered allmulticast mode [ 145.769244][ T8773] bond1: entered allmulticast mode [ 145.771561][ T8773] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 145.851006][ T8781] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 145.895179][ T8783] input: syz1 as /devices/virtual/input/input12 [ 145.965302][ T8790] syzkaller1: entered promiscuous mode [ 145.968640][ T8790] syzkaller1: entered allmulticast mode [ 145.971954][ T8790] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 6 [ 145.979330][ T8790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.172598][ T8796] __nla_validate_parse: 4 callbacks suppressed [ 146.172614][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 146.251655][ T8796] kvm: user requested TSC rate below hardware speed [ 146.255658][ T8796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482405019 (445747842432 ns) > initial count (42980439808 ns). Using initial count to start timer. [ 146.262963][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 146.476485][ T8809] IPVS: persistence engine module ip_vs_pe_s not found [ 146.620440][ T8814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.624009][ T8814] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 146.679917][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 146.679928][ T40] audit: type=1400 audit(1750833756.879:630): avc: denied { unmount } for pid=7422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 146.841668][ T40] audit: type=1400 audit(1750833757.039:631): avc: denied { write } for pid=8836 comm="syz.5.699" path="socket:[22382]" dev="sockfs" ino=22382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.878161][ T40] audit: type=1400 audit(1750833757.079:632): avc: denied { read } for pid=8840 comm="syz.6.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 146.921644][ T8847] overlayfs: missing 'lowerdir' [ 147.013092][ T8851] 9pnet_fd: Insufficient options for proto=fd [ 147.162972][ T8875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.708'. [ 147.175269][ T1459] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 147.192434][ T40] audit: type=1400 audit(1750834013.383:633): avc: denied { add_name } for pid=8878 comm="syz.5.709" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.204167][ T40] audit: type=1400 audit(1750834013.383:634): avc: denied { create } for pid=8878 comm="syz.5.709" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.204255][ T8879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.211614][ T40] audit: type=1400 audit(1750834013.383:635): avc: denied { associate } for pid=8878 comm="syz.5.709" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 147.211664][ T40] audit: type=1400 audit(1750834013.393:636): avc: denied { read append open } for pid=8878 comm="syz.5.709" path="/57/file0/cpuset.effective_cpus" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.240191][ T40] audit: type=1400 audit(1750834013.433:637): avc: denied { lock } for pid=8878 comm="syz.5.709" path="/57/file0/cpuset.effective_cpus" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.337757][ T1459] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.342117][ T1459] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.346232][ T1459] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.347287][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 147.349713][ T1459] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.354047][ T8893] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 147.360303][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.361304][ T8849] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 147.382388][ T1459] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.449787][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 147.452662][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 147.466652][ T8905] netlink: 9 bytes leftover after parsing attributes in process `syz.5.713'. [ 147.540146][ T8905] 0·: renamed from hsr0 (while UP) [ 147.546444][ T8905] 0·: entered allmulticast mode [ 147.548308][ T8905] hsr_slave_0: entered allmulticast mode [ 147.550481][ T8905] hsr_slave_1: entered allmulticast mode [ 147.553611][ T8905] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 147.581774][ T34] usb 11-1: USB disconnect, device number 3 [ 147.737651][ T8929] bridge0: port 3(batadv0) entered blocking state [ 147.740872][ T8929] bridge0: port 3(batadv0) entered disabled state [ 147.744616][ T8929] batadv0: entered allmulticast mode [ 147.753548][ T8929] batadv0: entered promiscuous mode [ 147.756949][ T8929] bridge0: port 3(batadv0) entered blocking state [ 147.760442][ T8929] bridge0: port 3(batadv0) entered forwarding state [ 147.767748][ T8929] batadv0: left allmulticast mode [ 147.770371][ T8929] batadv0: left promiscuous mode [ 147.774354][ T8929] bridge0: port 3(batadv0) entered disabled state [ 147.851673][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.854889][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.859458][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.862358][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.864858][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.868803][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.871528][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.874103][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.877635][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.881015][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.883864][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.887070][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.890212][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.893056][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.896348][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.900320][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.903166][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.907013][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.909818][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.915098][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.918165][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.921130][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.923841][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.926540][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.929008][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.931487][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.933948][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.937242][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.941113][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.944692][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.947723][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.950194][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.952689][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.956194][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.958826][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.961650][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.964474][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.967526][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.970236][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.972756][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.975795][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.978792][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.981681][ T53] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 147.990051][ T53] hid-generic 0000:007F:FFFFFFFE.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 148.014909][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.720'. [ 148.024022][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.720'. [ 148.029722][ T8947] fido_id[8947]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.079158][ T8950] pim6reg9: entered allmulticast mode [ 148.139991][ T8954] netlink: 204 bytes leftover after parsing attributes in process `syz.5.725'. [ 148.298737][ T8969] netlink: 'syz.3.728': attribute type 27 has an invalid length. [ 148.309261][ T8970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.391945][ T8969] macvlan2: left promiscuous mode [ 148.393740][ T8969] macvlan2: left allmulticast mode [ 148.398700][ T8969] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 148.401993][ T8969] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 148.410431][ T8969] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 148.415877][ T8969] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 148.423111][ T8969] geneve2: left promiscuous mode [ 148.424903][ T8969] geneve2: left allmulticast mode [ 148.485166][ T40] audit: type=1400 audit(1750834014.663:638): avc: denied { create } for pid=8984 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 148.567135][ T8998] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.616412][ T40] audit: type=1400 audit(1750834014.803:639): avc: denied { nlmsg_read } for pid=9003 comm="syz.6.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.705453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.784838][ T9021] overlayfs: statfs failed on './file0' [ 148.794218][ T9022] syzkaller1: entered promiscuous mode [ 148.796671][ T9022] syzkaller1: entered allmulticast mode [ 148.907646][ T9027] overlayfs: missing 'lowerdir' [ 148.950048][ T9033] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 149.035139][ T6162] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 149.172221][ T9041] 9pnet_virtio: no channels available for device syz [ 149.192073][ T6162] usb 11-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 149.201794][ T6162] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.206096][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 149.209875][ T6162] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.212876][ T6162] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.217991][ T6162] usb 11-1: config 0 descriptor?? [ 149.377386][ T53] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 149.382590][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.386111][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.390723][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.394908][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.399071][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.403094][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.406439][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.409938][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.414347][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.440892][ T6162] usb 11-1: USB disconnect, device number 4 [ 149.446626][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.450172][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.454184][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.466766][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.469788][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.473321][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.487414][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.490558][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.505060][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.509873][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.513220][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.525068][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.528899][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.532420][ T53] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.544839][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 149.549653][ T53] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 149.552822][ T53] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 149.555897][ T53] usb 8-1: Product: syz [ 149.557385][ T53] usb 8-1: Manufacturer: syz [ 149.558966][ T53] usb 8-1: SerialNumber: syz [ 149.561953][ T53] usb 8-1: config 0 descriptor?? [ 149.569801][ T53] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 150.388073][ T9086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.758058][ T9033] syz.3.749 (9033): drop_caches: 1 [ 150.960142][ T9033] syz.3.749 (9033): drop_caches: 1 [ 150.972077][ T53] usb 8-1: USB disconnect, device number 10 [ 150.977841][ T53] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 151.986330][ T9099] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.990119][ T9099] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.993330][ T9099] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.996272][ T9099] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.116176][ T9123] netlink: 'syz.6.776': attribute type 10 has an invalid length. [ 152.120102][ T9123] __nla_validate_parse: 3 callbacks suppressed [ 152.120113][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.6.776'. [ 152.122014][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 152.122031][ T40] audit: type=1400 audit(1750834018.313:648): avc: denied { ioctl } for pid=9120 comm="syz.1.775" path="socket:[26763]" dev="sockfs" ino=26763 ioctlcmd=0x565d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.152043][ T9123] team0: Port device geneve0 added [ 152.160048][ T40] audit: type=1400 audit(1750834018.353:649): avc: denied { mount } for pid=9126 comm="syz.5.777" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 152.171343][ T40] audit: type=1400 audit(1750834018.353:650): avc: denied { unmount } for pid=9126 comm="syz.5.777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 152.201706][ T40] audit: type=1800 audit(1750834018.393:651): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.779" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 152.241816][ T9137] binder: 9126:9137 ioctl ae01 0 returned -22 [ 152.282106][ T9148] 9pnet_virtio: no channels available for device 127.0.0.1 [ 152.289481][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.783'. [ 152.301536][ T9148] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 152.469862][ T9169] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.497093][ T9169] sp0: Synchronizing with TNC [ 152.587150][ T9162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9162 comm=syz.1.785 [ 152.697175][ T40] audit: type=1400 audit(1750834018.893:652): avc: denied { mount } for pid=9179 comm="syz.5.788" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 152.714895][ T40] audit: type=1400 audit(1750834018.903:653): avc: denied { read write } for pid=7422 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.728418][ T40] audit: type=1400 audit(1750834018.903:654): avc: denied { open } for pid=7422 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.738762][ T40] audit: type=1400 audit(1750834018.903:655): avc: denied { ioctl } for pid=7422 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.793223][ T9191] netlink: 36 bytes leftover after parsing attributes in process `syz.5.790'. [ 152.838091][ T9198] Driver unsupported XDP return value 0 on prog (id 132) dev N/A, expect packet loss! [ 152.861065][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.5.791'. [ 152.864224][ T9198] netlink: 'syz.5.791': attribute type 1 has an invalid length. [ 152.869058][ T9198] netlink: 'syz.5.791': attribute type 2 has an invalid length. [ 152.871769][ T9198] netlink: 'syz.5.791': attribute type 3 has an invalid length. [ 152.874410][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.791'. [ 152.938055][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.792'. [ 153.017340][ T9214] overlayfs: missing 'workdir' [ 153.379155][ T40] audit: type=1400 audit(1750834019.573:656): avc: denied { connect } for pid=9247 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.390764][ T9251] 9pnet_fd: Insufficient options for proto=fd [ 153.486467][ T9235] netlink: 44 bytes leftover after parsing attributes in process `syz.5.799'. [ 153.551205][ T9263] fuse: Bad value for 'fd' [ 153.929844][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.810'. [ 153.934128][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.810'. [ 153.952234][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.811'. [ 154.168088][ T9288] netlink: 'syz.5.814': attribute type 1 has an invalid length. [ 154.228296][ T9293] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 154.235285][ T9292] netlink: 'syz.5.815': attribute type 4 has an invalid length. [ 154.238373][ T40] audit: type=1400 audit(1750834020.433:657): avc: denied { lock } for pid=9294 comm="syz.1.817" path="socket:[25506]" dev="sockfs" ino=25506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 154.251477][ T9292] netlink: 'syz.5.815': attribute type 4 has an invalid length. [ 154.405530][ T9313] Bluetooth: MGMT ver 1.23 [ 154.825133][ T9350] xt_TPROXY: Can be used only with -p tcp or -p udp [ 154.827833][ T9349] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.057856][ T9355] overlayfs: missing 'workdir' [ 155.253838][ T9375] sctp: [Deprecated]: syz.6.834 (pid 9375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.253838][ T9375] Use struct sctp_sack_info instead [ 155.393866][ T9391] overlay: ./file1 is not a directory [ 155.503795][ T9399] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 155.506232][ T9399] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.509489][ T9399] vhci_hcd vhci_hcd.0: Device attached [ 155.512577][ T9400] vhci_hcd: connection closed [ 155.512857][ T12] vhci_hcd: stop threads [ 155.518627][ T12] vhci_hcd: release socket [ 155.520514][ T12] vhci_hcd: disconnect device [ 155.626544][ T9406] loop6: detected capacity change from 0 to 524287999 [ 155.632774][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.637269][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.639908][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.643891][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.649032][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.651685][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.654685][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.659051][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.661715][ T9406] ldm_validate_partition_table(): Disk read failed. [ 155.664226][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.667975][ T9406] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.670969][ T9406] Dev loop6: unable to read RDB block 0 [ 155.673269][ T9406] loop6: unable to read partition table [ 155.675283][ T9406] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 156.105815][ T9458] netlink: 'syz.3.861': attribute type 6 has an invalid length. [ 156.108829][ T9458] netlink: 'syz.3.861': attribute type 5 has an invalid length. [ 156.540062][ T9472] tmpfs: Unknown parameter 'grpquota/tun' [ 157.594999][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 157.595011][ T40] audit: type=1400 audit(1750834023.783:665): avc: denied { attach_queue } for pid=9466 comm="syz.6.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.621408][ T9486] overlay: Bad value for 'workdir' [ 157.624487][ T9479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.627573][ T9480] __nla_validate_parse: 11 callbacks suppressed [ 157.627583][ T9480] netlink: 10 bytes leftover after parsing attributes in process `syz.5.866'. [ 157.650395][ T9481] veth3: entered promiscuous mode [ 157.654139][ T9481] bond1: (slave veth3): Enslaving as an active interface with a down link [ 157.668753][ T9482] vlan2: entered allmulticast mode [ 157.670757][ T9482] bond1: entered allmulticast mode [ 157.673459][ T9482] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 157.699598][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.869'. [ 157.818108][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.6.873'. [ 157.895632][ T5299] Bluetooth: hci2: unexpected cc 0x042d length: 1 < 7 [ 157.898817][ T5299] Bluetooth: hci2: unexpected event for opcode 0x042d [ 157.918805][ T9516] sp0: Synchronizing with TNC [ 157.970571][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.880'. [ 157.974152][ T9522] vlan0: entered promiscuous mode [ 157.987905][ T9522] team0: Port device vlan0 added [ 157.992766][ T9522] validate_nla: 2 callbacks suppressed [ 157.992781][ T9522] netlink: 'syz.1.879': attribute type 23 has an invalid length. [ 158.005587][ T9514] [U] è [ 158.032507][ T9527] FAULT_INJECTION: forcing a failure. [ 158.032507][ T9527] name failslab, interval 1, probability 0, space 0, times 1 [ 158.038430][ T9527] CPU: 1 UID: 0 PID: 9527 Comm: syz.1.882 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 158.038457][ T9527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.038468][ T9527] Call Trace: [ 158.038476][ T9527] [ 158.038485][ T9527] dump_stack_lvl+0x16c/0x1f0 [ 158.038531][ T9527] should_fail_ex+0x512/0x640 [ 158.038563][ T9527] ? fs_reclaim_acquire+0xae/0x150 [ 158.038587][ T9527] ? tomoyo_encode2+0x100/0x3e0 [ 158.038611][ T9527] should_failslab+0xc2/0x120 [ 158.038639][ T9527] __kmalloc_noprof+0xd2/0x510 [ 158.038661][ T9527] ? d_absolute_path+0x136/0x1a0 [ 158.038684][ T9527] tomoyo_encode2+0x100/0x3e0 [ 158.038711][ T9527] tomoyo_encode+0x29/0x50 [ 158.038736][ T9527] tomoyo_realpath_from_path+0x18f/0x6e0 [ 158.038771][ T9527] tomoyo_path_perm+0x274/0x460 [ 158.038790][ T9527] ? tomoyo_path_perm+0x260/0x460 [ 158.038813][ T9527] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 158.038832][ T9527] ? stack_depot_save_flags+0x28/0xa40 [ 158.038870][ T9527] ? avc_has_perm_noaudit+0x117/0x3b0 [ 158.038912][ T9527] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 158.038949][ T9527] tomoyo_sb_umount+0x8c/0xd0 [ 158.038977][ T9527] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 158.039011][ T9527] security_sb_umount+0x8e/0x210 [ 158.039035][ T9527] path_umount+0x30e/0x11d0 [ 158.039064][ T9527] ? kmem_cache_free+0x2d1/0x4d0 [ 158.039086][ T9527] ? putname+0x154/0x1a0 [ 158.039113][ T9527] ? __pfx_path_umount+0x10/0x10 [ 158.039140][ T9527] ? putname+0x154/0x1a0 [ 158.039177][ T9527] __x64_sys_umount+0x16a/0x1a0 [ 158.039202][ T9527] ? __pfx___x64_sys_umount+0x10/0x10 [ 158.039231][ T9527] ? rcu_is_watching+0x12/0xc0 [ 158.039257][ T9527] do_syscall_64+0xcd/0x4c0 [ 158.039288][ T9527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.039309][ T9527] RIP: 0033:0x7f0faf78e929 [ 158.039326][ T9527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.039344][ T9527] RSP: 002b:00007f0fb0605038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 158.039365][ T9527] RAX: ffffffffffffffda RBX: 00007f0faf9b5fa0 RCX: 00007f0faf78e929 [ 158.039377][ T9527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000500 [ 158.039389][ T9527] RBP: 00007f0fb0605090 R08: 0000000000000000 R09: 0000000000000000 [ 158.039401][ T9527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.039413][ T9527] R13: 0000000000000000 R14: 00007f0faf9b5fa0 R15: 00007fff02b44d18 [ 158.039442][ T9527] [ 158.039466][ T9527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.137173][ T9531] overlay: filesystem on ./bus not supported as upperdir [ 158.181791][ T9533] futex_wake_op: syz.1.884 tries to shift op by 32; fix this program [ 158.244733][ T40] audit: type=1400 audit(1750834024.433:666): avc: denied { ioctl } for pid=9532 comm="syz.1.884" path="socket:[29855]" dev="sockfs" ino=29855 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.284136][ T40] audit: type=1400 audit(1750834024.473:667): avc: denied { mounton } for pid=9534 comm="syz.3.885" path="/243/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 158.305320][ T9541] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.308236][ T9541] overlayfs: failed to set xattr on upper [ 158.310732][ T9541] overlayfs: ...falling back to redirect_dir=nofollow. [ 158.313910][ T9541] overlayfs: ...falling back to index=off. [ 158.316819][ T9541] overlayfs: ...falling back to uuid=null. [ 158.358178][ T40] audit: type=1400 audit(1750834024.553:668): avc: denied { associate } for pid=9542 comm="syz.1.888" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 158.477618][ T9550] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 158.480121][ T9550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.482773][ T9550] vhci_hcd vhci_hcd.0: Device attached [ 158.485143][ T9551] vhci_hcd: unknown pdu 1 [ 158.487286][ T1145] vhci_hcd: stop threads [ 158.489076][ T1145] vhci_hcd: release socket [ 158.491072][ T1145] vhci_hcd: disconnect device [ 158.564805][ T9560] netlink: 4368 bytes leftover after parsing attributes in process `syz.6.892'. [ 158.620376][ T9563] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 158.622836][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 158.683205][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 158.775636][ T9564] team0 (unregistering): Port device team_slave_0 removed [ 158.781596][ T9564] team0 (unregistering): Port device team_slave_1 removed [ 158.790399][ T9564] team0 (unregistering): Port device geneve0 removed [ 158.798408][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.895'. [ 158.800083][ T9564] team0 (unregistering): Port device vlan0 removed [ 158.876909][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 158.879974][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 158.903891][ T40] audit: type=1400 audit(1750834025.093:669): avc: denied { lock } for pid=9582 comm="syz.6.897" path="socket:[30739]" dev="sockfs" ino=30739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 158.939100][ T9590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9590 comm=syz.5.898 [ 158.956504][ T9590] netlink: 'syz.5.898': attribute type 1 has an invalid length. [ 158.959781][ T9590] netlink: 'syz.5.898': attribute type 2 has an invalid length. [ 158.966911][ T9592] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 159.011787][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.018604][ T9594] batadv_slave_0: entered promiscuous mode [ 159.021203][ T9594] batadv_slave_0: entered allmulticast mode [ 159.146870][ T9603] overlayfs: failed to resolve './file1': -2 [ 159.320792][ T9615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.479915][ T9635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.795207][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 159.870336][ T9661] /dev/sg0: Can't lookup blockdev [ 159.977361][ T34] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.981989][ T34] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 159.985301][ T34] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.988992][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.994348][ T9644] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 160.002717][ T34] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.251411][ T53] usb 11-1: USB disconnect, device number 5 [ 160.437558][ T5299] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 160.576698][ T40] audit: type=1400 audit(1750834026.773:670): avc: denied { accept } for pid=9705 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.986928][ T9712] overlayfs: missing 'workdir' [ 161.212151][ T40] audit: type=1400 audit(1750834027.403:671): avc: denied { setopt } for pid=9717 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.888514][ T9768] netlink: 'syz.6.939': attribute type 2 has an invalid length. [ 161.891255][ T9768] netlink: 'syz.6.939': attribute type 1 has an invalid length. [ 161.893977][ T9768] netlink: 'syz.6.939': attribute type 1 has an invalid length. [ 161.900574][ T9768] overlay: Unknown parameter 'fowner' [ 161.948428][ T9772] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 162.012167][ T9777] tmpfs: Group quota block hardlimit too large. [ 162.122297][ T9782] exfat: Unknown parameter 'discardÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 162.318641][ T9803] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 162.389155][ T9810] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 162.389457][ T40] audit: type=1400 audit(1750834028.593:672): avc: denied { name_bind 0x1000000 } for pid=9809 comm="syz.1.952" path="socket:[28474]" dev="sockfs" ino=28474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 162.413459][ T9803] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 162.497135][ T9809] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 162.538564][ T9825] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 162.545152][ T9826] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 162.551099][ T40] audit: type=1400 audit(1750834028.743:673): avc: denied { map } for pid=9824 comm="syz.1.955" path="/236/file0" dev="tmpfs" ino=1389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 162.562761][ T9826] 9pnet_fd: Insufficient options for proto=fd [ 162.570689][ T9829] 9pnet_fd: Insufficient options for proto=fd [ 162.782351][ T9853] dummy0: entered promiscuous mode [ 162.994613][ T9862] ------------[ cut here ]------------ [ 162.996448][ T9862] WARNING: CPU: 3 PID: 9862 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 162.999744][ T9862] Modules linked in: [ 163.001902][ T9862] CPU: 3 UID: 0 PID: 9862 Comm: syz.5.966 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 163.009441][ T9862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.013284][ T9862] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 163.015677][ T9862] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f 6b 6d 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 33 66 7a 0e 00 75 0b c6 05 2a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 163.022246][ T9862] RSP: 0018:ffffc900211274f8 EFLAGS: 00010246 [ 163.024195][ T9862] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 163.026910][ T9862] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 163.029448][ T9862] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 163.031973][ T9862] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 163.034756][ T9862] R13: 1ffff92004224eb4 R14: 0000000400000000 R15: 0000000000000016 [ 163.037880][ T9862] FS: 00007f3a4a1e26c0(0000) GS:ffff8880d6a52000(0000) knlGS:0000000000000000 [ 163.041243][ T9862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.043357][ T9862] CR2: 0000000000000000 CR3: 0000000052f5f000 CR4: 0000000000352ef0 [ 163.046137][ T9862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.048661][ T9862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.051202][ T9862] Call Trace: [ 163.052295][ T9862] [ 163.053699][ T9862] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.057027][ T9862] ? rcu_is_watching+0x12/0xc0 [ 163.059206][ T9862] ? trace_kmem_cache_alloc+0x28/0xc0 [ 163.061422][ T9862] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 163.063598][ T9862] ? hashtab_init+0x1b1/0x290 [ 163.065853][ T9862] __alloc_pages_noprof+0xb/0x1b0 [ 163.067830][ T9862] ___kmalloc_large_node+0x84/0x1e0 [ 163.069960][ T9862] ? hashtab_init+0x1b1/0x290 [ 163.071615][ T9862] __kmalloc_large_node_noprof+0x1c/0x70 [ 163.073531][ T9862] ? __pfx_ebitmap_read+0x10/0x10 [ 163.075289][ T9862] __kmalloc_noprof.cold+0xc/0x61 [ 163.077000][ T9862] hashtab_init+0x1b1/0x290 [ 163.078631][ T9862] ? __asan_memcpy+0x3c/0x60 [ 163.080441][ T9862] policydb_read+0x7b4/0x3220 [ 163.082115][ T9862] ? __pfx_policydb_read+0x10/0x10 [ 163.083804][ T9862] security_load_policy+0x15c/0x12c0 [ 163.085645][ T9862] ? __pfx_security_load_policy+0x10/0x10 [ 163.087447][ T9862] ? find_held_lock+0x2b/0x80 [ 163.089001][ T9862] ? __might_fault+0xe3/0x190 [ 163.090567][ T9862] ? __might_fault+0xe3/0x190 [ 163.092129][ T9862] ? __might_fault+0x13b/0x190 [ 163.093676][ T9862] sel_write_load+0x332/0x1bd0 [ 163.095261][ T9862] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.096932][ T9862] ? __lock_acquire+0xb8a/0x1c90 [ 163.098494][ T9862] ? __pfx_sel_write_load+0x10/0x10 [ 163.100161][ T9862] ? __pfx_sel_write_load+0x10/0x10 [ 163.101897][ T9862] vfs_write+0x2a0/0x1150 [ 163.103269][ T9862] ? __pfx___mutex_lock+0x10/0x10 [ 163.105029][ T9862] ? __pfx_vfs_write+0x10/0x10 [ 163.106672][ T9862] ? __fget_files+0x20e/0x3c0 [ 163.108287][ T9862] ksys_write+0x12a/0x250 [ 163.109761][ T9862] ? __pfx_ksys_write+0x10/0x10 [ 163.111446][ T9862] do_syscall_64+0xcd/0x4c0 [ 163.113215][ T9862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.115581][ T9862] RIP: 0033:0x7f3a4938e929 [ 163.117028][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.123169][ T9862] RSP: 002b:00007f3a4a1e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.126356][ T9862] RAX: ffffffffffffffda RBX: 00007f3a495b5fa0 RCX: 00007f3a4938e929 [ 163.129185][ T9862] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 163.132187][ T9862] RBP: 00007f3a49410b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.134762][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.137360][ T9862] R13: 0000000000000000 R14: 00007f3a495b5fa0 R15: 00007ffe76c83c18 [ 163.139999][ T9862] [ 163.141038][ T9862] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 163.143360][ T9862] CPU: 3 UID: 0 PID: 9862 Comm: syz.5.966 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 163.147117][ T9862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.150546][ T9862] Call Trace: [ 163.151630][ T9862] [ 163.152621][ T9862] dump_stack_lvl+0x3d/0x1f0 [ 163.154226][ T9862] panic+0x71c/0x800 [ 163.155761][ T9862] ? __pfx_panic+0x10/0x10 [ 163.157594][ T9862] ? show_trace_log_lvl+0x29b/0x3e0 [ 163.159568][ T9862] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 163.161559][ T9862] check_panic_on_warn+0xab/0xb0 [ 163.163127][ T9862] __warn+0xf6/0x3c0 [ 163.164392][ T9862] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 163.166397][ T9862] report_bug+0x3c3/0x580 [ 163.167800][ T9862] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 163.169718][ T9862] handle_bug+0x184/0x210 [ 163.171141][ T9862] exc_invalid_op+0x17/0x50 [ 163.172624][ T9862] asm_exc_invalid_op+0x1a/0x20 [ 163.174267][ T9862] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 163.176516][ T9862] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f 6b 6d 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 33 66 7a 0e 00 75 0b c6 05 2a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 163.183195][ T9862] RSP: 0018:ffffc900211274f8 EFLAGS: 00010246 [ 163.185256][ T9862] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 163.188033][ T9862] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 163.190748][ T9862] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 163.193319][ T9862] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 163.195840][ T9862] R13: 1ffff92004224eb4 R14: 0000000400000000 R15: 0000000000000016 [ 163.198508][ T9862] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.200626][ T9862] ? rcu_is_watching+0x12/0xc0 [ 163.202710][ T9862] ? trace_kmem_cache_alloc+0x28/0xc0 [ 163.205241][ T9862] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 163.207410][ T9862] ? hashtab_init+0x1b1/0x290 [ 163.209021][ T9862] __alloc_pages_noprof+0xb/0x1b0 [ 163.210705][ T9862] ___kmalloc_large_node+0x84/0x1e0 [ 163.212337][ T9862] ? hashtab_init+0x1b1/0x290 [ 163.213856][ T9862] __kmalloc_large_node_noprof+0x1c/0x70 [ 163.215607][ T9862] ? __pfx_ebitmap_read+0x10/0x10 [ 163.217227][ T9862] __kmalloc_noprof.cold+0xc/0x61 [ 163.218830][ T9862] hashtab_init+0x1b1/0x290 [ 163.220304][ T9862] ? __asan_memcpy+0x3c/0x60 [ 163.221820][ T9862] policydb_read+0x7b4/0x3220 [ 163.223462][ T9862] ? __pfx_policydb_read+0x10/0x10 [ 163.225131][ T9862] security_load_policy+0x15c/0x12c0 [ 163.226812][ T9862] ? __pfx_security_load_policy+0x10/0x10 [ 163.228782][ T9862] ? find_held_lock+0x2b/0x80 [ 163.230608][ T9862] ? __might_fault+0xe3/0x190 [ 163.232709][ T9862] ? __might_fault+0xe3/0x190 [ 163.234456][ T9862] ? __might_fault+0x13b/0x190 [ 163.236076][ T9862] sel_write_load+0x332/0x1bd0 [ 163.237708][ T9862] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.239468][ T9862] ? __lock_acquire+0xb8a/0x1c90 [ 163.241085][ T9862] ? __pfx_sel_write_load+0x10/0x10 [ 163.242725][ T9862] ? __pfx_sel_write_load+0x10/0x10 [ 163.244357][ T9862] vfs_write+0x2a0/0x1150 [ 163.245784][ T9862] ? __pfx___mutex_lock+0x10/0x10 [ 163.247389][ T9862] ? __pfx_vfs_write+0x10/0x10 [ 163.249005][ T9862] ? __fget_files+0x20e/0x3c0 [ 163.250591][ T9862] ksys_write+0x12a/0x250 [ 163.252057][ T9862] ? __pfx_ksys_write+0x10/0x10 [ 163.253817][ T9862] do_syscall_64+0xcd/0x4c0 [ 163.255450][ T9862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.257539][ T9862] RIP: 0033:0x7f3a4938e929 [ 163.259061][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.265149][ T9862] RSP: 002b:00007f3a4a1e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.267740][ T9862] RAX: ffffffffffffffda RBX: 00007f3a495b5fa0 RCX: 00007f3a4938e929 [ 163.270266][ T9862] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 163.272836][ T9862] RBP: 00007f3a49410b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.275790][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.278296][ T9862] R13: 0000000000000000 R14: 00007f3a495b5fa0 R15: 00007ffe76c83c18 [ 163.280847][ T9862] [ 163.282710][ T9862] Kernel Offset: disabled [ 163.284323][ T9862] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:42:53 Registers: info registers vcpu 0 CPU#0 RAX=000000000015ce03 RBX=0000000000000000 RCX=ffffffff8b808c59 RDX=0000000000000000 RSI=ffffffff8de19f59 RDI=ffffffff8c157ba0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81250 R15=0000000000000000 RIP=ffffffff8b8077bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000057555000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000082000020 Opmask04=00000000fffffbff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e3d5126c50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e3d5132e50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82893f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 55fa4174b263722f 73732695f85d0a21 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f362e6463685f79 6d6d75642f6d726f 6674616c702f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f0073656c7572 000034746e657600 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c2c346d2c 383261722c463831 2c4538312c443831 2c4338312c423831 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4138312c393831 2c3838312c373831 2c3638312c353831 2c3438312c333831 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c3238312c313831 2c3038312c463731 2c4537312c443731 2c4337312c423731 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4137312c393731 2c3837312c373731 2c3637312c353731 2c3437312c333731 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000012152f RBX=0000000000000001 RCX=ffffffff8b808c59 RDX=0000000000000000 RSI=ffffffff8de19f59 RDI=ffffffff8c157ba0 RBP=ffffed1003bdf488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90a81250 R15=0000000000000000 RIP=ffffffff8b8077bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d8d19 CR3=000000004941d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000030646e6f62 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0faf811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0faf811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0faf811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0faf811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0faf811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0faf811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0400000000000000 0000000000000000 0004000000000000 0200000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fb04ed100 00007f0faf984440 00007f0faf980004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0faf984498 00007f0faf984490 00007f0faf984488 00007f0faf984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f6f13 RBX=0000000000000002 RCX=ffffffff8b808c59 RDX=0000000000000000 RSI=ffffffff8de19f59 RDI=ffffffff8c157ba0 RBP=ffffed1003bdf910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90a81250 R15=0000000000000000 RIP=ffffffff8b8077bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000037f0 CR3=000000002750e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557926b7be 000055557926b5c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555792662d2 0000555579266030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0338100013900300 00000c080603b003 06040003ac031004 0003a80300040003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06080606015dcc02 a0a0080014e00300 100014d003001000 14c00302100014b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342e35312e323038 01ffffffffffffff ffe5080180030380 1000148004010000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff040100000a 0806060159ee0100 0006080601800404 0172d20043414d20 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101808010000004 0100000008060601 7c92748004021000 00100006010dda01 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08006af803000800 6af0030010006ae0 030010006ad00300 10006ac0030fffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff046ab003 0108006aa8030004 006aa4030a04006a a0030008006a9803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008006a90030010 006a80036a800474 8003228810000fff ffffffffff040100 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba755 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90021126e60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b0882e0 R15=ffffffff855ba6f0 RIP=ffffffff855ba77f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3a4a1e26c0 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000052f5f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000eeef000 Opmask01=0000000001000001 Opmask02=00000000fec00000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a49411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a49411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a49411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a49411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a49411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a49411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a49584488 00007f3a49584480 00007f3a49584478 00007f3a49584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d4552555341454d 5f434c00454e4f48 50454c45545f434c 0053534552444441 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f434c00454d414e 5f434c0052455041 505f434c00534547 415353454d5f434c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000