last executing test programs: 11.910597443s ago: executing program 3 (id=405): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48002}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x124, r0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xddee}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfbdd}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000070) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r7, 0x0, 0x20008844) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r8, 0x8028640c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r11, r11, 0x2f, 0x0, @void}, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$netlink(0x10, 0x3, 0x0) 11.655538455s ago: executing program 3 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)={0x2d4, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeb}]}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "9ac4a4a277f24788f03424e07c3da486a71dec4f86447baac0a2ac"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x76, 0x3, "a4a9553bf7c741a8767e21fbce2b30744a22c01400b34f1640b62605be0737ebbc62c94d00f52e74303e24b4f091af83685fda383b11768ceaae47f52e0266b79a59ddf7d2b838f322079c3ef58c38dc2e1d202ec4c256e0d650352b621752107c9fc41734b70f1f07da73404465f36522a1"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c527b49c9155d5af4a3340bc1f58a1af6621b90c42af91dbd2351ca2"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x57da}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x35}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1582}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xecf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) 11.59206358s ago: executing program 3 (id=411): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) close_range(r1, 0xffffffffffffffff, 0x200000000000000) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, 0x0, 0x5, 0x5, 0xbc15, 0x12, 0xca, 0xb, 0x4}) 11.517161062s ago: executing program 3 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) syz_clone3(&(0x7f0000000240)={0x24000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='tr}stad.*%\x00']) 11.407699841s ago: executing program 3 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61fbddf000083afffe88000000443d5cd40000000000010100000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b020000000000000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.024529469s ago: executing program 3 (id=421): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x4008031, 0xffffffffffffffff, 0x7dfeb000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r3 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x54, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000040) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x84602, 0x0) mmap$snddsp_control(&(0x7f0000c52000/0x2000)=nil, 0x1000, 0x100000e, 0x4010, r6, 0x83000000) munmap(&(0x7f00001ca000/0x4000)=nil, 0x4000) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.962877675s ago: executing program 32 (id=421): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x4008031, 0xffffffffffffffff, 0x7dfeb000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r3 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x54, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000040) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x84602, 0x0) mmap$snddsp_control(&(0x7f0000c52000/0x2000)=nil, 0x1000, 0x100000e, 0x4010, r6, 0x83000000) munmap(&(0x7f00001ca000/0x4000)=nil, 0x4000) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.909004178s ago: executing program 4 (id=502): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x47, "9490443e476eaf04f3015b50f2424fceaa79d1fe5a3ff367d7aeb978692d18197b0434b0af2f309b09d5d367caaf55064b5127efb0a37c20b010bd154e25d1bc69fd1b4f841cea"}, &(0x7f00000000c0)=0x4f) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7, 0x8001, 0x75577507}, 0x10) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x480d80, 0x10, 0x15}, 0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000200)=@nullb, r5, 0x0) r6 = accept4$phonet_pipe(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000) getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000480)=0x1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000004c0)={0x3ea4}, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x93f52000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000005c0)=@buf={0xa6, &(0x7f0000000500)="425790f160bad63d51a4bb01dba33330e92f0ecadcfbd05ef3aecaf2ece2bccd28e3cf916a44ed53ef0741a9f721c3fb5c901e7366d6b3a3a00bbd37ae11d8b01fa16776e4674a3d01cb639216f50acd6e199d3c1461e660a3810eecfeefb0ae4a7451ff03eff96be14a669c4e77ad260e77e5642fb37fa6c9884a5a9087251c0f482c2a4564766f5aa3b80576b20979f93c44df6c06e46df70ff6bc846ecd28c7789845fdcf"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x10, 0x10, 0x1f58, 0x100, {{0x20, 0x4, 0x1, 0x8, 0x80, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @loopback, {[@noop, @timestamp_addr={0x44, 0x24, 0xfc, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x9, 0x0}, 0x7db}, {@local, 0x1}, {@rand_addr=0x64010102, 0x20000000}, {@multicast1, 0x9}]}, @timestamp_addr={0x44, 0x44, 0xb, 0x1, 0x9, [{@private=0xa010100, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x49}, {@private=0xa010100, 0xb9}, {@local, 0x8}, {@loopback, 0xff}, {@empty, 0x7ff}, {@remote, 0xd09}, {@multicast1, 0x9}]}]}}}}}) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000700)=0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r9 = accept4$netrom(r7, &(0x7f0000000880)={{0x3, @default}, [@null, @remote, @netrom, @default, @bcast, @netrom, @remote, @null]}, &(0x7f0000000900)=0x48, 0x0) shutdown(r9, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000980)={0x2, &(0x7f0000000940)=[{0xfff4, 0x40, 0x8, 0x9}, {0x7, 0x0, 0x8, 0x1}]}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000009c0)={'wlan0\x00', {0x2, 0x0, @initdev}}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x121240, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000a80)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000ac0)={0x0, 0x1, r7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f0000000b00)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r10, 0xc01864cd, &(0x7f0000000c80)={&(0x7f0000000bc0)=[r11, 0x0, r12, r13, r14, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x70, 0xaec6, 0x88, 0x3, 0x4, 0x7, 0x6, 0x100000000, 0xd, 0xffffffffffffffff], 0x8}) 4.908798351s ago: executing program 4 (id=503): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x24) (async) r1 = socket(0x6, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x162}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x8000) 4.800600664s ago: executing program 4 (id=504): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.799811324s ago: executing program 4 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x1, 0x1, 0x2, @local, @remote, 0x80, 0x20, 0x4, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f00000003c0)={'gre0\x00', r0, 0x80, 0x10, 0x8, 0x3a16, {{0x28, 0x4, 0x2, 0x17, 0xa0, 0x67, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@timestamp={0x44, 0x24, 0x2d, 0x0, 0x3, [0x448cc898, 0x2, 0x2b2, 0x2, 0x5, 0x0, 0x0, 0x53]}, @lsrr={0x83, 0x13, 0x5c, [@local, @local, @broadcast, @loopback]}, @timestamp={0x44, 0x20, 0x93, 0x0, 0xd, [0xffffffc0, 0x3, 0xd8, 0x10000, 0x3, 0x28e, 0x636ac741]}, @timestamp_addr={0x44, 0x34, 0x7a, 0x1, 0x2, [{@multicast2, 0x2}, {@rand_addr=0x64010102, 0x398672bb}, {@multicast1, 0x800}, {@multicast2, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@multicast2, 0x5}]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r5, &(0x7f0000000080), 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@mpls_getnetconf={0x4c, 0x52, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r0}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xf}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r0}, @NETCONFA_IFINDEX={0x8, 0x1, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2c00c895) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 4.694774232s ago: executing program 4 (id=507): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e060c"], 0x9) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001380)={0x3, 0x0, [{0x8080000, 0xf2, &(0x7f0000000140)=""/242}, {0x8080000, 0xc7, &(0x7f0000000240)=""/199}, {0x2, 0x1000, &(0x7f0000000380)=""/4096}]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r2) (async) sendmsg$nl_route(r1, 0x0, 0x40000) (async, rerun: 32) r3 = socket$kcm(0x2d, 0x2, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x2fdfdbfd, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x11963}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3a}]}}}]}, 0x3c}}, 0x0) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)={0x5c, r10, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x8801) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r8, r8, 0xd, 0x1, &(0x7f00000009c0)="16", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, 0x0, 0x100580) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) (async, rerun: 64) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 3.786505568s ago: executing program 4 (id=514): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r2}) 3.736616278s ago: executing program 33 (id=514): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r2}) 3.358439736s ago: executing program 2 (id=521): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e10ae8773700255bb84d84551de448f7b30ff2fd833b92c997f61769f801c0796c43c815e6041dc908b452fe2a97750dc20bc011eb22023a6235841b87d197f27c9e78b1f8e33d29ac9ddb139fde284f5ab57976d5b72959058c7d98dadd29a79dfda094fdac9907763d621fd3bcab7da859245e75f544843e932518c20f3028a8639447f37ab163e737d9f9f2171ac12717f917d8657cb947ebddc157a27a112a4a87443dac8494e16f425b9832212c4465f70c5a7efa1250964d809ea7753703a3952a95191d1143df2ec11a5e", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c00000001040500000000000000000000000000060006400000000008000540000000000500010001"], 0x7c}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000ec0)={0x7, 0x8}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006cc72, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x3b}, &(0x7f0000000400)=0x82, &(0x7f00000006c0)=0x1, 0x8, 0x5b20d675, 0x2, 0xe4ea, 0xa, 0xf5}}], 0x58, 0x4}, 0x8044) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000580)={0x5, 0x0, 0x0}) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) read$FUSE(r4, &(0x7f0000000f00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f00000000c0)={0x10, 0x0, r7}, 0x10) r8 = open(&(0x7f0000000300)='.\x00', 0x68401, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x1, 0x5000003a, r9, 0x0) mkdirat(r8, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r11 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r11, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r11, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r10, &(0x7f0000004fc0)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 3.305223179s ago: executing program 2 (id=522): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x3}, &(0x7f0000000100)=0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/197, 0xc5}], 0x1, &(0x7f00000001c0)=""/18, 0x12}, 0x103) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000780)=0x58, 0xa) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f00000002c0)) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x2, 0xa, 0x2, r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0xf, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 2.565332629s ago: executing program 2 (id=524): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1fffc000, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x48}}, 0x40800) 2.51285292s ago: executing program 2 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r1, 0x400, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x3c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$inet(0x2, 0xa, 0x4) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r8 = syz_io_uring_complete(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r5, 0x7, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4040051) setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000300)=0x88, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0xfffffff6, 0x10}, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r10, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f00000028c0)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r11}, 0x10) 2.407034672s ago: executing program 0 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) 2.406498499s ago: executing program 0 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010200000000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000000a0a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 2.278182891s ago: executing program 0 (id=530): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x480) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffffffc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x5) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x40, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe8, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa}, @NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "edb4277cb35735b7ead17f77bf85ea61a2fc2d3ff70657b88e49ae4d1ebd844cb82cb93bf871a9b38b8e9eb266496ad9818f2c803e3ccecf28de9b1844b610a454772499270744faf43ee9568095a05b94113106c4b29108f188ddb86b2c4cef2fe977d59919bab6c1f7f5cc0ba85795044e814087a59e234393e8454ae89299fb1ebbc2a5845d56baf398855ba937bd7d40190dd1d6096fd6b5b16625624703d5818bb55ed6e527087d747cb0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xbc2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf4, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4a}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xca, 0x80, [@ibss={0x6, 0x2, 0x3}, @erp={0x2a, 0x1, {0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xc, 0x28}}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x2b, 0x200}}, @measure_req={0x26, 0x90, {0x0, 0xeb, 0x3, "5c680d486b56abe71c68c601d64e12a8772b3a96730ff49d843183e4e71e32d1db62f5a201237ce3a32600a80e0719ce6f7fdae510cd16b607b466ec84a562bc8c7365ddfc60286f4c9ec83e8e204ff471d4ce9bec3a61d56170824124c0c0553434cb4b3653ce9dde24e7cf8954051748b44363bf2c49d9b09d6563c341cf3b792a7602fc32b2cefff238defe"}}, @supported_rates={0x1, 0x3, [{0x16, 0x1}, {0x48, 0x1}, {0xc}]}, @rann={0x7e, 0x15, {{0x1, 0x22}, 0x2, 0x9, @device_a, 0xfffffff9, 0x5, 0x401}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000002740)=0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x42f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x22d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x778}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x648}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000091}, 0x8814) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002a00)={'syztnl2\x00', &(0x7f0000002900)={'erspan0\x00', 0x0, 0x20, 0x8, 0x9, 0x8, {{0x2e, 0x4, 0x1, 0x35, 0xb8, 0x64, 0x10, 0x81, 0x29, 0x0, @remote, @broadcast, {[@noop, @lsrr={0x83, 0x7, 0x4a, [@private=0xa010102]}, @end, @timestamp={0x44, 0x18, 0x38, 0x0, 0x1, [0x5, 0x0, 0xfffffffa, 0x3, 0x5]}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@broadcast, 0x8}]}, @ssrr={0x89, 0x2b, 0x40, [@local, @private=0xa010101, @loopback, @multicast1, @broadcast, @loopback, @empty, @multicast1, @private=0xa010100, @empty]}, @timestamp_prespec={0x44, 0x2c, 0xe5, 0x3, 0x8, [{@multicast2}, {@local, 0x5}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010101, 0xf15f}, {@multicast2, 0xffffffff}]}, @generic={0x88, 0xa, "66c0c9c45eedcdcc"}, @timestamp={0x44, 0x8, 0xb2, 0x0, 0x6, [0x4]}, @timestamp={0x44, 0xc, 0x43, 0x0, 0x4, [0x8, 0x1d90]}]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000004040)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004000)={&(0x7f0000002a40)=@deltclass={0x15ac, 0x29, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0x9, 0xfff3}, {0xb, 0x2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xfff2}, 0x7, 0x3}}]}}, @c_cbq={{0x8}, {0xc40, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x1, 0x0, 0x7fff, 0xa, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x9, 0x9, 0x8, 0x0, 0x7, 0x6, 0xffff8001, 0x8, 0x6, 0x80000001, 0x2000, 0xac, 0x101, 0x1, 0x52, 0x6, 0xe392, 0xc, 0x4, 0x81, 0xff, 0x8, 0x1, 0x0, 0x6, 0x3, 0x3dd5, 0x6, 0xd, 0x9, 0x8, 0xf, 0x3, 0xffffffff, 0x7, 0x9, 0x1, 0x6, 0xd3, 0x3, 0x9870, 0xfffffff7, 0xfffffffd, 0x1, 0x3, 0x2, 0x1, 0x2, 0x1c000, 0x8000, 0xfa1, 0x3, 0xffff4ddc, 0x1, 0xffffffff, 0xee, 0x65b5, 0x2, 0x0, 0xfffffffa, 0x7f, 0x1, 0x2, 0x80, 0x0, 0x1, 0x4b, 0x1, 0x6ef3, 0x4, 0x91fe, 0xffffff86, 0xffffff18, 0x0, 0x9, 0x100, 0x7ddf73bd, 0x3, 0x6, 0x6, 0x8, 0x1, 0x727e0c7f, 0xdb7b, 0x0, 0x1, 0x80000000, 0x9, 0x128d, 0x3, 0x200, 0x2, 0x100, 0x2, 0x9, 0x1, 0x1, 0x8000, 0x4, 0x1, 0x10000, 0x6, 0x1fc, 0xffff, 0x4, 0xca1, 0xfffffff8, 0x7, 0x3, 0x9, 0x8, 0x8, 0x101, 0x3, 0x2, 0x10001, 0x4c86, 0x4, 0x4012, 0x3, 0x3, 0x4, 0x2, 0x6d6, 0x7, 0x7, 0x0, 0xffffffff, 0x4, 0x2, 0x30000000, 0xff, 0x6, 0xe8, 0x0, 0xd, 0x7, 0x200, 0x2, 0x5f, 0x2, 0xdf, 0xd, 0xffffffff, 0x80000001, 0x4, 0x4, 0x5, 0xd3a7, 0x5, 0x6, 0x20, 0x6, 0x6, 0xc0, 0x2, 0x0, 0x0, 0x1, 0x8ae4, 0x80000001, 0x8f3, 0x6, 0x40, 0xe988, 0xa0d, 0xdf, 0x7, 0x3, 0x9, 0x8000, 0xfffff8ad, 0x6, 0x7, 0x5, 0x9ef, 0x4, 0x9, 0x9, 0x8000, 0x0, 0xa, 0x8, 0x8, 0x1, 0x8, 0x7, 0x0, 0x80000001, 0x6d2, 0x6, 0x2, 0x7145a762, 0x5, 0x5, 0x5, 0x2, 0x5, 0x100, 0x7f, 0x8, 0x89, 0xb, 0x7ca, 0x0, 0x7, 0x6, 0xfffffff8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa4e, 0x5, 0x2, 0x2, 0x3ff, 0xa, 0x5, 0x4, 0x8, 0x4, 0x8ef, 0xab1e, 0x8, 0x100, 0x1000, 0x8, 0x7, 0x6, 0x80000000, 0x81, 0x47, 0x4, 0x5, 0x80, 0x8, 0xf8, 0x96, 0x5, 0x6, 0x89f6, 0x7, 0x66e, 0x6, 0x5a2c, 0x80000001, 0x4, 0x4, 0xa5, 0x3, 0x0, 0x1]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0xffffffff, 0xb55, 0x1, 0x4452, 0xfffffff7, 0x8, 0x1, 0x80000000, 0x6, 0x6, 0x8, 0x3, 0x4, 0x6, 0x3, 0x10000, 0xfffffffd, 0x8001, 0x9, 0x8000, 0xe, 0x5, 0x90, 0x80000001, 0xf53e, 0x9, 0x80000000, 0x8, 0xb, 0x401, 0x6, 0x3, 0x6, 0x4, 0x4, 0x3, 0xd, 0x6, 0x7, 0x7, 0x2, 0x5, 0x7fffffff, 0x2, 0x0, 0x10000, 0x3a7, 0x8, 0x9, 0x9, 0x471, 0x8, 0x1, 0x2, 0x2, 0x3, 0x9, 0x0, 0x25, 0x7, 0x6, 0x800, 0x6, 0x10001, 0x8, 0x0, 0x5c, 0x5, 0x8000, 0x8, 0x6a0, 0x8ae, 0xa6a, 0x0, 0x200, 0x65, 0x8, 0x3, 0x3, 0x101, 0x18ab, 0xc, 0x4, 0x6, 0x5, 0x6, 0x0, 0xfffffff9, 0x8, 0xff, 0x3ff, 0xea21, 0x3, 0x7, 0x36a, 0x3, 0x400, 0xfffffffb, 0x80, 0xb0, 0x7, 0x4, 0x51d, 0x5, 0x6, 0x2, 0x2, 0x2e78, 0x80000000, 0x0, 0x4, 0x3, 0x3, 0x6, 0x1, 0xfd, 0x2, 0x8, 0x1, 0xff, 0x8, 0x2, 0x1, 0x0, 0x7, 0x1b91, 0x7fffffff, 0x1, 0xfffffff9, 0x100, 0x80000, 0x80, 0xf, 0x0, 0x2, 0x7, 0x7, 0x1, 0x1, 0x80, 0x8, 0xa, 0x2, 0xfffffffd, 0x5, 0x2, 0x2, 0x5, 0x4fcc34df, 0x2, 0x200, 0x0, 0x8, 0x8, 0x81, 0x60d2, 0x0, 0x6, 0x7fffffff, 0x8, 0xfff, 0x8000, 0x4, 0x1, 0x1bc, 0x725d, 0x4, 0x80, 0x6c885980, 0x2, 0x400, 0x101, 0x101, 0x2, 0xffff, 0x0, 0x9, 0xffff399e, 0x5, 0x955, 0xff, 0x2, 0xd617, 0x5110571, 0x4, 0x692, 0xfffffff9, 0x800, 0x4, 0x1, 0x95, 0x8, 0x9, 0x2, 0x7fff, 0x9, 0x80000000, 0x2, 0x5, 0x8d4, 0x3, 0x7, 0x2, 0x7, 0xb, 0x5, 0x1000, 0xe5, 0x9, 0x50, 0x6, 0x1, 0x4, 0x7, 0x8001, 0x9, 0xffffffff, 0x0, 0x3, 0x7, 0x9, 0xfffffffc, 0x5, 0x7, 0x70, 0x9, 0x10, 0xee3, 0x7, 0x8, 0x3, 0x0, 0xfffffffa, 0x3, 0x5, 0xf, 0x2, 0x8, 0x8000, 0x2, 0x6, 0x3, 0xe, 0x2, 0x4, 0x2f97, 0x0, 0xa, 0x5, 0x45f, 0x6, 0x4, 0x3, 0x6, 0x8]}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x2, 0x81, 0x7, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8b, 0x0, 0x0, 0x9, 0x4f00}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x70d, 0xfffffffd, 0x4, 0x9, 0x400, 0x80000000, 0x6, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7fffffff, 0x498f8f9, 0x1, 0xb, 0x4, 0x2a66, 0x2, 0x5, 0x1, 0xd79e, 0x7, 0x9, 0x9, 0x5730, 0x4, 0x4, 0x5, 0x3400, 0x5, 0xf, 0x1, 0x0, 0x4, 0x0, 0x6, 0x8, 0x3, 0xd485, 0x7, 0x6, 0x8, 0xfffffffe, 0xb, 0x3, 0xfd, 0xbc2, 0x80000000, 0x6, 0x6, 0x7, 0x7fffffff, 0x6, 0x1, 0x7f, 0xbd, 0x4, 0x7, 0x1, 0x6, 0x9, 0x7, 0xffff, 0x1, 0x0, 0x5, 0x6, 0x4, 0x3ff, 0x4, 0xffff7fff, 0x81, 0x4, 0x4, 0x2, 0x0, 0x80000000, 0x719, 0x3, 0x101, 0x0, 0x80000001, 0x9, 0x8, 0x2, 0x8, 0xe, 0xf, 0xd, 0x3, 0xfffffffe, 0x2, 0xc, 0x9, 0x1b3, 0x7, 0x5, 0x1ff, 0x7f, 0x2, 0x8, 0x9, 0x76b, 0x7, 0xa, 0xf299, 0xfffffff3, 0x5, 0x5, 0x0, 0x6, 0xfffffffb, 0x5, 0x8, 0x3, 0x0, 0x200, 0x7ff, 0x95, 0x9, 0x4, 0x8, 0xffffffc0, 0x2, 0x0, 0x1ff, 0xdb73, 0x6e5, 0x5, 0x10000, 0x0, 0x6, 0x8, 0xc53, 0x8f, 0x7, 0x67, 0x0, 0x6, 0x6, 0x4d8295a7, 0x8, 0xd4, 0x334, 0xd3, 0x2, 0x5, 0x0, 0x80, 0x7, 0xb76, 0x9, 0x6, 0xb8f, 0xa, 0x4, 0x5, 0x9, 0x3, 0x43, 0xd65, 0x2, 0x10001, 0x6, 0x8001, 0x6, 0x0, 0x7, 0x9, 0x80000000, 0x6002, 0x7ff, 0x0, 0xa12, 0x401, 0x1ff, 0x7ff, 0x3, 0xa79, 0xa91, 0x26bf, 0x0, 0x8, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x5, 0xff, 0x8, 0x0, 0x40, 0x9, 0x3, 0x9, 0x7f, 0x3, 0x4, 0x7c, 0x10000, 0x6, 0x2, 0x7, 0x0, 0x9, 0x3, 0x9, 0x6, 0x2e2, 0x0, 0xd06, 0xffff, 0x4, 0x8, 0x7c, 0x3, 0x6, 0x5, 0x38, 0x7, 0x200, 0x3, 0x3, 0x3, 0x2, 0x4, 0x4d, 0x7, 0x7, 0x5, 0x6, 0x4, 0x1, 0x9, 0x516a35e0, 0xb5fc, 0xfff, 0x90, 0x3, 0x7fff, 0x50, 0x0, 0xe3, 0x10001, 0x5, 0x7, 0x5, 0x1ff, 0x80000001, 0x0, 0xa, 0x2]}]}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x3, 0xb, 0x5, 0x1, 0x400, 0x2, 0x6}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4}, 0x2, 0x9}}]}}, @c_cbq={{0x8}, {0x420, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x80, 0x5, 0x4, 0x9, 0x7fffffff, 0x3, 0x7, 0x7, 0x8, 0x0, 0x7, 0x2, 0x3, 0x80000001, 0xfffffff8, 0xffff, 0x9, 0x80000001, 0x7000000, 0x3, 0x3fa3, 0x5, 0x7, 0x40000, 0x80, 0x10001, 0x7, 0x0, 0x3, 0x91, 0x2, 0x68f, 0x94b2, 0xc6, 0x8, 0x2, 0xff, 0x8, 0x6, 0xd0, 0x0, 0x74, 0x10001, 0x3, 0x7, 0x33c1, 0x7ff, 0x7, 0x1, 0x7, 0xb91c, 0xfffffff7, 0x81, 0xfffffff7, 0xa4, 0x9, 0x3, 0x9, 0x9, 0x2040000, 0x7, 0xc1, 0x8, 0x35, 0x1, 0x7, 0x9, 0x3, 0xbc, 0x5, 0xa745, 0x0, 0x0, 0x1, 0x1, 0x5, 0x3a3f, 0x9, 0x300, 0x6, 0x10, 0x5, 0xb, 0x30000000, 0xcfa, 0x7, 0x6, 0x0, 0x6, 0x3, 0xffff, 0x5, 0x7, 0xe, 0xc, 0x1, 0x4, 0xb, 0x4, 0x3, 0x9, 0x6, 0x0, 0x211, 0x2, 0x5, 0x0, 0x5, 0xff, 0x2, 0x6, 0x2, 0x4, 0x2b, 0x3, 0xfffffffc, 0xfffffff7, 0x0, 0xb4, 0x0, 0x10000, 0x80000001, 0x2, 0x6, 0x1000, 0x1000, 0x3, 0x9, 0x6, 0x1, 0x2, 0x80000000, 0x633e, 0x1, 0x3, 0x7, 0xb114, 0xb8a5, 0x2, 0xb910, 0xf, 0x4, 0xb, 0x2, 0x40, 0xfffffff8, 0x9, 0x4, 0x3, 0xd, 0x800, 0x1, 0xffff8000, 0x8000, 0x7f, 0x10, 0x5, 0x4, 0x7, 0x9, 0x3, 0x3ff, 0x2, 0x800, 0x9, 0x5, 0xfffffff6, 0x140, 0x14, 0x4, 0x0, 0x4, 0x530b5057, 0x80000000, 0x80, 0x4, 0x7ff, 0xfffffff3, 0x8, 0x3, 0x4, 0x2, 0xfffffffd, 0x0, 0x0, 0x4, 0x5, 0xa8f8, 0x1, 0x401, 0x3, 0x80, 0x77, 0xc, 0x1, 0x81, 0x7, 0x0, 0x9, 0xfffffc00, 0x1, 0x6, 0x0, 0xc5, 0x10, 0x2, 0x3, 0x4, 0x5, 0x7fffffff, 0x10001, 0x8001, 0x8, 0x80000000, 0x5, 0x25, 0x5, 0x8001, 0x10001, 0x0, 0x8, 0x0, 0xfffff000, 0x3, 0x4, 0x67fe3ebe, 0xa, 0x7, 0x3, 0x7fff, 0x40000, 0x86, 0x6, 0x4, 0x8, 0x5, 0x9, 0x3, 0x8001, 0x3, 0x4, 0x3f8, 0xbaab, 0x9, 0x7f, 0xc, 0x6, 0x8, 0x8, 0xa, 0xe3ac, 0x2, 0x9, 0x6, 0x2]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x27, 0x0, 0x16, 0x40, 0x800, 0x6, 0x7, 0xffffffd5}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x3b}}}, @c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe68330, 0x8b9, 0x1000, 0x9, 0x5, 0x5, 0x7f, 0x2000000, 0x6, 0xe, 0x0, 0x864, 0xd4, 0x10, 0xa5, 0x8000000, 0x0, 0x7, 0x3, 0x104, 0xad5, 0x0, 0x6, 0xf, 0x800, 0x20, 0x1, 0xd, 0x6, 0x7, 0x0, 0x1000, 0x2, 0x8, 0xca94, 0x102, 0xf, 0x10, 0xf, 0x2, 0xc7b0, 0xf, 0x3, 0xc834, 0x0, 0x8, 0x2fc, 0x0, 0x7, 0x80000001, 0x352, 0x5, 0x988c, 0x0, 0x1, 0x40, 0x80000001, 0x4, 0xe75, 0x6, 0x8001, 0x24, 0xfd, 0xcc, 0x6, 0x8, 0x6, 0x3, 0x0, 0x7, 0x1000, 0x0, 0x9, 0x4, 0x8, 0x99b, 0x1ff, 0xd8, 0x1, 0x4, 0x9, 0xec5, 0x9, 0x2, 0x40, 0x7, 0x0, 0xfffffffc, 0x51fc577e, 0x112, 0x200, 0x8001, 0x400, 0x3, 0xf, 0xffffffe6, 0x1, 0x3, 0x0, 0x1, 0x7, 0xc8a, 0x8000, 0x8, 0x0, 0x4, 0x1, 0x7, 0x6, 0x7ff, 0x1ff, 0xfff, 0x0, 0x4, 0xfffffffd, 0x1, 0x4, 0x4, 0x4, 0x2, 0x3, 0x6, 0x1ff, 0x80, 0xfffffffa, 0x10, 0x4, 0x1, 0x2, 0x9, 0x8, 0xd2e9, 0x7ff, 0x1, 0x8, 0x7ff, 0xf4, 0x99a2, 0xbf43, 0x1ff, 0x5, 0x0, 0x1000, 0x0, 0x2, 0x2, 0x81, 0x2, 0x1, 0xb, 0x8000, 0x7, 0x10001, 0x7, 0x4, 0xa, 0x2d5d, 0x5e, 0x80, 0x2, 0x4, 0x4, 0x7, 0x5, 0x3, 0x400, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x1, 0x6, 0x5, 0xd8000000, 0x0, 0x32b, 0x4, 0x1ff, 0x0, 0x3ff, 0x7f, 0x9, 0x14000, 0x5d220dc4, 0xfffffffd, 0x36c2, 0x0, 0x1, 0xbc8, 0x3, 0x0, 0x401, 0xfffffffb, 0x4, 0x0, 0xd1, 0x3, 0x7, 0x7bf, 0x2b19b4d0, 0x1bfc, 0x4, 0x2, 0x6, 0x7ff, 0x5, 0x8, 0x559b, 0xd, 0x3, 0x3, 0x3, 0x1, 0x71335cb2, 0x6, 0x12, 0x6, 0xf, 0x80, 0x0, 0x7ff, 0x6, 0x1, 0x3ff, 0x40, 0x5, 0x2, 0x7, 0x9, 0x9, 0x0, 0x4, 0x7, 0xb71d, 0x2, 0x5, 0x0, 0xe5, 0x101, 0x5, 0x80000000, 0x1, 0x2, 0x7, 0x5, 0xb, 0x9, 0x5, 0x9, 0x2, 0x5, 0x7f, 0x5, 0x6, 0xff]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x3, 0x1e, 0x7f, 0x10000, 0x7fffffff, 0x4, 0x1ff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3b, 0x0, 0x1e, 0x5, 0x7, 0x0, 0xb22, 0x101}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x2, 0x7, 0x7, 0x0, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x26, 0x1, 0x6, 0x3, 0x1, 0x8, 0x100, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0x4, 0x2, 0x3, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xf}, 0xffffff12, 0xffffffff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xffff}, 0x4, 0x6}}]}}]}, 0x15ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) sendmsg$nl_route(r0, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)=@bridge_newvlan={0x28, 0x70, 0x200, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x2}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x1000) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000004180)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000004200), &(0x7f0000004240)=0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000004280)={0x5, 0x0, [{0xbf5, 0x0, 0x7}, {0x260, 0x0, 0x8}, {0x891, 0x0, 0xa}, {0x640, 0x0, 0x7}, {0x3b, 0x0, 0xf}]}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000004300)={0x1, 'ip6gretap0\x00'}) close_range(0xffffffffffffffff, r0, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000004340)=0x4, &(0x7f0000004380)=0x4) r6 = syz_open_dev$dri(&(0x7f00000043c0), 0x1, 0x10800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000004400)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000004440)={r7, 0x80000, 0xffffffffffffffff}) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000004480), 0x1, 0x0) r10 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000044c0), 0x400, 0x0) r11 = accept4$ax25(r0, &(0x7f0000004500)={{0x3, @bcast}, [@bcast, @bcast, @remote, @rose, @default, @null, @rose, @default]}, &(0x7f0000004580)=0x48, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000004600)={0x6, 0x0, &(0x7f00000045c0)=[r0, r9, r10, r8, r11, r6]}, 0x6) writev(r8, &(0x7f0000004840)=[{&(0x7f0000004640)="5e78033a907b74f18cbc846cbfe7d29210000043bfd2364aa785e7dfaa0afd14b25c6da5afbc6279d5fd5537b6efafc6ed7ea2e08116b118ae046305175d7268a59ba79d281b4be149cacdd5113459011a167395c509abb4a464e0b73406baaa2bec3045f378588deb396f4efd443e37966fd833a68726c508a1ded9e103b863be7e3e87b9dc0dc481287de0920d8fbc317d09364533f67933a63fec9cea2909ee57fd437506f6e74c32fdcbff1e04dd67d99afae583e16448a6c47842c4e3ae6ffd28756a186e3e5eb85a31907f3ce81c6729c4d8e0", 0xd6}, {&(0x7f0000004740)="bad7af9eb6c4d9dd7aebc73721ef35d9eb13eeb645e62be8357ff6c9202f780836125ec67292bbe877b8f6512a0509448f2b253983dc32db4f420ea7cc44764f11648e8a808f248aec44f21aa67fe392580bac77b7c3e877a6def18195e43f6dc8d06f9d576c7bf2678de17dc0729e32d3b9fc46a97c13b06df7169f6cc7d2f496358d801f8aa044600e46fa72336e0861276575774d315be3be1c372a81f5e2c1305dc912a608f9243b9bbd6773a6f88e4bee9c77a7a01ce4a397116d6840bc093a4cace9c9e0c2fdfa6ce2b09cfdf90aad74996264", 0xd6}], 0x2) 1.935837374s ago: executing program 1 (id=534): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00008b4300000000000000b1ee5b643a8367a600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi1\x00', 0x16080, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) memfd_secret(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x40000000015, 0x5, 0x0) 1.87028775s ago: executing program 1 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0xc44a81d1a42f846d, 0x0) msgsnd(r2, &(0x7f0000000140)={0x2}, 0x8, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) fsopen(&(0x7f0000000080)='omfs\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) msgget$private(0x0, 0x0) (async) msgrcv(r2, 0x0, 0x0, 0xc44a81d1a42f846d, 0x0) (async) msgsnd(r2, &(0x7f0000000140)={0x2}, 0x8, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.869652123s ago: executing program 5 (id=536): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x859b}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/113, 0x71}], 0x1) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r2, r2) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setpgid(0x0, r2) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031212e4ff020002004788aa96a13bb100001100007fca1a00", 0xc24f, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000030428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8000000b40001000880025ab00000000"], 0x28}, 0x1, 0x2000000000000000}, 0x4044) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x3, 0x3, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.773841162s ago: executing program 1 (id=537): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x4000) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002300)=""/4067, 0xfe3}], 0x1, 0x0, 0x8}, 0xffffffff}], 0x1, 0x0, 0x0) 1.773643502s ago: executing program 1 (id=538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0x72, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r12, @ANYBLOB="01"], 0x20}}, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@ipmr_delroute={0x24, 0x19, 0x100, 0x70bd28, 0x25dfdbff, {0x80, 0x80, 0x80, 0xc9, 0xfe, 0x1, 0xcb, 0x8, 0x1800}, [@RTA_OIF={0x8, 0x4, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000000)) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784, 0x124}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x401, 0x236, 0x4004}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) 1.583504089s ago: executing program 2 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@gettaction={0x58, 0x5a, 0x0, 0x0, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x58}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@gettaction={0x58, 0x5a, 0x0, 0x0, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x58}}, 0x4000) (async) 1.581445228s ago: executing program 2 (id=540): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.579862678s ago: executing program 1 (id=541): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x29}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 1.393700207s ago: executing program 0 (id=542): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f00000014c0)='e\xf4\x01\x88-\x00\xe96\xec\xaf[Uvy*\v\x12\xf9\x88(\xf0\x82\xf9\xcfF*B\x00a\xe2\xf4r\x99%\xbaq4\x16\xd5\x00+\x98s\x88\x1d@Tl\"\x89\xe9\xa0\x13\x83y\xe6\xaa}k6%\xdcG!\x05\xf7\xa0b\x8a\xda\x91B\x05\xc3\x9c/\x8a\x19\x91\xb9\xfc\xfa\xd33\xc2w7H@\xaaG\xf6\x8d\xd9`\xbc\xb8\xc6\xd6\x80\xf9\x83l\x1c\x8b]}S\xe3\x01\x9a\x85\'\xb2\xbfx\xc8=/d\xdc\xbb\xd6Z \xcd\xfe\x8c\x02/\xa1\xa3-\xf7\x00'/149, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r7, 0xee72) sendfile(r6, r7, 0x0, 0x8000fffffffe) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x1, 0x4, 0x4, 0x4}}, 0x2e) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x9, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="0b2a6ec1", 0x4}], 0x1}, 0x4) sendfile(r1, r2, 0x0, 0x8000fb00) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, [0x2]}}) 930.893762ms ago: executing program 5 (id=543): r0 = fsopen(&(0x7f0000000000)='rootfs\x00', 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) copy_file_range(r0, &(0x7f0000000140)=0x3ff, r1, 0x0, 0x83, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x2, 0x0, &(0x7f0000000040)) r4 = io_uring_setup(0x2b34, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x337}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000100)=[0x7fff, 0x520e], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x3, 0x1, 0x1ff, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 855.470365ms ago: executing program 5 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = socket(0x1e, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x2) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1fffffffc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 789.821599ms ago: executing program 5 (id=545): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) close(0x3) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000980)="8bb3", 0x2, 0x6, 0x0, 0x4}]) 622.031898ms ago: executing program 5 (id=546): socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket(0x1e, 0x5, 0x0) (async) r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) (async) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x6fbe, 0x10100, 0xffffffff, 0x203}, &(0x7f0000000000)=0x0, 0x0) fsopen(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r5, &(0x7f0000000480)='\\,*\'^[\\(*-\\)\x00', 0x1) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xed, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xed, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@userptr={0x4e, 0x3, 0x4, 0x1000, 0xc39, {0x77359400}, {0x5, 0x2, 0x9, 0x80, 0xff, 0x1}, 0x7, 0x2, {&(0x7f0000000140)}, 0xbce, 0x0, r6}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@userptr={0x4e, 0x3, 0x4, 0x1000, 0xc39, {0x77359400}, {0x5, 0x2, 0x9, 0x80, 0xff, 0x1}, 0x7, 0x2, {&(0x7f0000000140)}, 0xbce, 0x0, r6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={0x0}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r8, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e) (async) ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e) syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x81, 0x0, 0x0, 0x2, 0x1}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) 471.055489ms ago: executing program 5 (id=547): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000900)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe97) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, 0x0, 0x3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r9, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="070001"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1fc, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 85.91182ms ago: executing program 1 (id=548): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) r5 = fcntl$dupfd(r2, 0x406, r2) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@getlink={0x368, 0x12, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2d238, 0x3000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc537}, @IFLA_EXT_MASK={0x8}, @IFLA_VFINFO_LIST={0x300, 0x16, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @broadcast}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xe4c, 0xee2}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xfffffff7, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x401}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x200, 0x6}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x81, 0x7e, 0x400, 0x88a8}}, {0x14, 0x1, {0x81, 0xdbb, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xd3d, 0x6, 0x88a8}}, {0x14, 0x1, {0xfffffff9, 0xb70, 0x7d0}}, {0x14, 0x1, {0xfffffff7, 0xb45, 0x100, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x1440, 0x1, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x2, 0xff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x44b, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0xf75, 0xb}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0x59e, 0xe, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xc9f, 0x757, 0x100, 0x88a8}}]}]}, {0x12, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xf01, 0x8000}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x5, 0xfffffffa}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @remote}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x506, 0x4}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6fa8, 0x72a, 0x244a}}, {0x14, 0x1, {0x2, 0x522, 0x5, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0xf22}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @local}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x309, @random="d566fd18fbee"}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0xc5}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xffffff00, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x64d0}}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6c6, 0x1ff, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfc, 0x7}}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x4d8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8001, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0x40b, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x7}}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffffffff}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2f570}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r8 = socket(0x10, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) 85.730028ms ago: executing program 0 (id=549): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) 0s ago: executing program 0 (id=550): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32, @ANYBLOB="000000000a0005"], 0x28}}, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) (async) fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:cert_t:s0\x00', 0x1c, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000edff2b000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c000280080002400000000a080003400000008a08000140000000090900010073797a30"], 0xec}}, 0x0) (async) io_setup(0x7ff, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f00000000c0)={0x6, 0x7}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52102' (ED25519) to the list of known hosts. [ 54.978775][ T40] audit: type=1400 audit(1762386103.017:62): avc: denied { name_bind } for pid=5920 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.015928][ T40] audit: type=1400 audit(1762386103.047:63): avc: denied { execute } for pid=5921 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.025065][ T40] audit: type=1400 audit(1762386103.047:64): avc: denied { execute_no_trans } for pid=5921 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.410223][ T40] audit: type=1400 audit(1762386105.447:65): avc: denied { mounton } for pid=5921 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.420464][ T40] audit: type=1400 audit(1762386105.457:66): avc: denied { mount } for pid=5921 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.422418][ T5921] cgroup: Unknown subsys name 'net' [ 57.581471][ T5921] cgroup: Unknown subsys name 'cpuset' [ 57.587956][ T5921] cgroup: Unknown subsys name 'rlimit' [ 57.891850][ T5926] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.719672][ T5921] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.415235][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 62.415245][ T40] audit: type=1400 audit(1762386110.447:80): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.724307][ T40] audit: type=1400 audit(1762386110.757:81): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.732114][ T40] audit: type=1400 audit(1762386110.757:82): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.744412][ T40] audit: type=1400 audit(1762386110.757:83): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.753234][ T40] audit: type=1400 audit(1762386110.767:84): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[6929]" dev="sockfs" ino=6929 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.765472][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.775036][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.778506][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.783004][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.786393][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.791681][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.791784][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.796991][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.797842][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.804473][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.808117][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.812046][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.815173][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.815564][ T40] audit: type=1400 audit(1762386110.847:85): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.816985][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.827574][ T5292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.827996][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.828956][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.829276][ T40] audit: type=1400 audit(1762386110.847:86): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.829314][ T40] audit: type=1400 audit(1762386110.847:87): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.834468][ T5292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.838360][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.847818][ T5292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.009171][ T40] audit: type=1400 audit(1762386111.047:88): avc: denied { module_request } for pid=5934 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.078996][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 63.156923][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 63.331130][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.334115][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.337429][ T5934] bridge_slave_0: entered allmulticast mode [ 63.341365][ T5934] bridge_slave_0: entered promiscuous mode [ 63.358229][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 63.364572][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.367808][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.370256][ T5938] bridge_slave_0: entered allmulticast mode [ 63.372877][ T5938] bridge_slave_0: entered promiscuous mode [ 63.376454][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.379463][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.381803][ T5938] bridge_slave_1: entered allmulticast mode [ 63.384393][ T5938] bridge_slave_1: entered promiscuous mode [ 63.387174][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.389456][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.391759][ T5934] bridge_slave_1: entered allmulticast mode [ 63.394486][ T5934] bridge_slave_1: entered promiscuous mode [ 63.484583][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.495377][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.505323][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.559845][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.573053][ T5934] team0: Port device team_slave_0 added [ 63.620375][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 63.633687][ T5934] team0: Port device team_slave_1 added [ 63.639324][ T5938] team0: Port device team_slave_0 added [ 63.702747][ T5938] team0: Port device team_slave_1 added [ 63.723796][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.725977][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.733997][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.799103][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.801436][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.811179][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.815709][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.818185][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.826192][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.850900][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.853223][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.855494][ T5932] bridge_slave_0: entered allmulticast mode [ 63.858514][ T5932] bridge_slave_0: entered promiscuous mode [ 63.865705][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.868583][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.877195][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.891286][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.893455][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.895548][ T5932] bridge_slave_1: entered allmulticast mode [ 63.898533][ T5932] bridge_slave_1: entered promiscuous mode [ 63.983591][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.985873][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.988843][ T5939] bridge_slave_0: entered allmulticast mode [ 63.991498][ T5939] bridge_slave_0: entered promiscuous mode [ 64.043416][ T5934] hsr_slave_0: entered promiscuous mode [ 64.046198][ T5934] hsr_slave_1: entered promiscuous mode [ 64.051545][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.054687][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.057629][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.059916][ T5939] bridge_slave_1: entered allmulticast mode [ 64.062527][ T5939] bridge_slave_1: entered promiscuous mode [ 64.068888][ T5938] hsr_slave_0: entered promiscuous mode [ 64.071398][ T5938] hsr_slave_1: entered promiscuous mode [ 64.073626][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 64.075546][ T5938] Cannot create hsr debugfs directory [ 64.096298][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.242775][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.250443][ T5932] team0: Port device team_slave_0 added [ 64.257193][ T5932] team0: Port device team_slave_1 added [ 64.261643][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.396556][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.399328][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.409352][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.415206][ T5939] team0: Port device team_slave_0 added [ 64.420366][ T5939] team0: Port device team_slave_1 added [ 64.482827][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.485790][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.497165][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.527897][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.531340][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.541957][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.557387][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.562267][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.572886][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.713210][ T5932] hsr_slave_0: entered promiscuous mode [ 64.715986][ T5932] hsr_slave_1: entered promiscuous mode [ 64.718266][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 64.720069][ T5932] Cannot create hsr debugfs directory [ 64.742873][ T5939] hsr_slave_0: entered promiscuous mode [ 64.745055][ T5939] hsr_slave_1: entered promiscuous mode [ 64.747293][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 64.749054][ T5939] Cannot create hsr debugfs directory [ 64.868011][ T5936] Bluetooth: hci0: command tx timeout [ 64.868018][ T5292] Bluetooth: hci2: command tx timeout [ 64.868024][ T5945] Bluetooth: hci3: command tx timeout [ 64.868224][ T5292] Bluetooth: hci1: command tx timeout [ 64.878660][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.888422][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.893252][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.924097][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.031541][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.038482][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.044837][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.065937][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.097339][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.101883][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.105860][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.111340][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.169057][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.181790][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.189143][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.193393][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.253841][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.264389][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.279726][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.292929][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.295902][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.307638][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.310386][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.324056][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.335944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.338419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.350303][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.359460][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.362304][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.382160][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.405162][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.415572][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.423117][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.425671][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.439915][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.442537][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.448527][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.451224][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.459586][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.461837][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.475468][ T40] audit: type=1400 audit(1762386113.507:89): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.560012][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.594631][ T5938] veth0_vlan: entered promiscuous mode [ 65.603285][ T5938] veth1_vlan: entered promiscuous mode [ 65.617500][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.641651][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.646105][ T5938] veth0_macvtap: entered promiscuous mode [ 65.654366][ T5938] veth1_macvtap: entered promiscuous mode [ 65.673492][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.682923][ T5934] veth0_vlan: entered promiscuous mode [ 65.688237][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.697608][ T5934] veth1_vlan: entered promiscuous mode [ 65.703869][ T100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.710696][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.716744][ T100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.720458][ T100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.725247][ T100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.787232][ T5934] veth0_macvtap: entered promiscuous mode [ 65.794205][ T5939] veth0_vlan: entered promiscuous mode [ 65.802625][ T5939] veth1_vlan: entered promiscuous mode [ 65.821476][ T5932] veth0_vlan: entered promiscuous mode [ 65.824201][ T5934] veth1_macvtap: entered promiscuous mode [ 65.841802][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.847639][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.852278][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.856331][ T5932] veth1_vlan: entered promiscuous mode [ 65.873431][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.888234][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.894903][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.901586][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.905936][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.909031][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.912821][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.937412][ T5939] veth0_macvtap: entered promiscuous mode [ 65.954058][ T5939] veth1_macvtap: entered promiscuous mode [ 65.955221][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.975360][ T5932] veth0_macvtap: entered promiscuous mode [ 65.987793][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.990312][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.992454][ T5932] veth1_macvtap: entered promiscuous mode [ 66.000872][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.033547][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.037059][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.040522][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.046582][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.062536][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.078951][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.082788][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.099402][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.103458][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.116575][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.127856][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.132210][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.150773][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.170297][ T6033] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 66.174715][ T6033] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 66.178353][ T6033] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.182788][ T6033] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 66.187350][ T6033] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 66.188453][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.190555][ T6033] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.193877][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.209675][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.238495][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.240751][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.254128][ T6036] (syz.3.6,6036,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 66.257875][ T6036] (syz.3.6,6036,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 66.262511][ T6038] Zero length message leads to an empty skb [ 66.265089][ T6036] (syz.3.6,6036,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 66.269537][ T6036] (syz.3.6,6036,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 66.271868][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.275304][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.312940][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.328265][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.443915][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.472205][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.475683][ T6051] nbd: illegal input index 1879048192 [ 66.753273][ T6082] team0: Device gtp0 is of different type [ 66.947592][ T5942] Bluetooth: hci3: command tx timeout [ 66.948871][ T5936] Bluetooth: hci0: command tx timeout [ 66.958202][ T5936] Bluetooth: hci1: command tx timeout [ 66.958209][ T5942] Bluetooth: hci2: command tx timeout [ 66.975853][ T6089] erofs (device nbd2): cannot find valid erofs superblock [ 67.206608][ T6100] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 67.209717][ T6100] UDF-fs: Scanning with blocksize 2048 failed [ 67.213229][ T6100] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 67.216159][ T6100] UDF-fs: Scanning with blocksize 4096 failed [ 67.261190][ T6102] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.293908][ T5936] Bluetooth: hci0: unexpected event 0x3c length: 97 > 7 [ 67.293952][ T5936] Bluetooth: hci0: unexpected event 0x3c length: 97 > 7 [ 67.448901][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 67.448912][ T40] audit: type=1400 audit(1762386115.487:175): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.536280][ T40] audit: type=1400 audit(1762386115.567:176): avc: denied { mount } for pid=6115 comm="syz.0.30" name="/" dev="configfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.545072][ T40] audit: type=1400 audit(1762386115.577:177): avc: denied { search } for pid=6115 comm="syz.0.30" name="/" dev="configfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.556341][ T40] audit: type=1400 audit(1762386115.577:178): avc: denied { search } for pid=6115 comm="syz.0.30" name="/" dev="configfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.566114][ T40] audit: type=1400 audit(1762386115.577:179): avc: denied { read open } for pid=6115 comm="syz.0.30" path="/" dev="configfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.575665][ T40] audit: type=1400 audit(1762386115.577:180): avc: denied { write } for pid=6115 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.583997][ T40] audit: type=1400 audit(1762386115.577:181): avc: denied { connect } for pid=6115 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.595934][ T40] audit: type=1400 audit(1762386115.577:182): avc: denied { name_connect } for pid=6115 comm="syz.0.30" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 67.626483][ T40] audit: type=1400 audit(1762386115.657:183): avc: denied { read write } for pid=6120 comm="syz.2.32" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.641884][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 67.645899][ T40] audit: type=1400 audit(1762386115.657:184): avc: denied { open } for pid=6120 comm="syz.2.32" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.724510][ T6133] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 67.754638][ T6135] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 67.785707][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.792273][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 67.878168][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 67.881999][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 67.885685][ T6143] netlink: 'syz.0.41': attribute type 12 has an invalid length. [ 67.951157][ T6146] overlayfs: overlapping lowerdir path [ 68.111628][ T6157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 68.225195][ T6161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6161 comm=syz.0.45 [ 68.360844][ T6166] overlayfs: overlapping lowerdir path [ 68.408187][ T6168] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 68.411019][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.417348][ T6168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.424326][ T6168] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 68.471891][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.733662][ T6181] tmpfs: Unknown parameter 'm:-' [ 68.755217][ T6183] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 68.762549][ T6183] vlan2: entered promiscuous mode [ 68.764703][ T6183] veth0_to_bond: entered promiscuous mode [ 68.775314][ T6183] gretap1: entered promiscuous mode [ 68.786521][ T6185] pim6reg1: entered promiscuous mode [ 68.790038][ T6185] pim6reg1: entered allmulticast mode [ 68.961479][ T6193] overlay: ./file1 is not a directory [ 69.013729][ T6199] capability: warning: `syz.3.58' uses 32-bit capabilities (legacy support in use) [ 69.019686][ T6199] program syz.3.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.070984][ T5945] Bluetooth: hci2: command tx timeout [ 69.071064][ T5936] Bluetooth: hci3: command tx timeout [ 69.081184][ T5936] Bluetooth: hci1: command tx timeout [ 69.081201][ T5945] Bluetooth: hci0: command tx timeout [ 69.110239][ T6202] fuse: Unknown parameter 'fd0x0000000000000003' [ 69.399673][ T6222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6222 comm=syz.3.67 [ 69.739701][ T6242] fuse: Unknown parameter 'fd0x0000000000000003' [ 69.935081][ T6247] netlink: 248 bytes leftover after parsing attributes in process `syz.1.75'. [ 69.990389][ T6251] ======================================================= [ 69.990389][ T6251] WARNING: The mand mount option has been deprecated and [ 69.990389][ T6251] and is ignored by this kernel. Remove the mand [ 69.990389][ T6251] option from the mount to silence this warning. [ 69.990389][ T6251] ======================================================= [ 70.099655][ T5945] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 70.099687][ T5945] Bluetooth: hci0: Malformed LE Event: 0x02 [ 70.194038][ T842] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.302591][ T6274] process 'syz.2.81' launched './file1' with NULL argv: empty string added [ 70.355904][ T842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.359504][ T842] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.363000][ T842] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.368869][ T6282] SELinux: security policydb version 17 (MLS) not backwards compatible [ 70.371165][ T842] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 70.372837][ T6282] SELinux: failed to load policy [ 70.379942][ T842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.384361][ T842] usb 6-1: Product: syz [ 70.386387][ T842] usb 6-1: Manufacturer: syz [ 70.388343][ T842] usb 6-1: SerialNumber: syz [ 70.396385][ T842] hub 6-1:1.0: bad descriptor, ignoring hub [ 70.399441][ T842] hub 6-1:1.0: probe with driver hub failed with error -5 [ 70.441477][ T6284] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 70.444418][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.448691][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 70.455348][ T6285] vhci_hcd: cannot find the pending unlink 1023 [ 70.458111][ T6285] vhci_hcd: connection closed [ 70.460471][ T1152] vhci_hcd: stop threads [ 70.464651][ T1152] vhci_hcd: release socket [ 70.466444][ T1152] vhci_hcd: disconnect device [ 70.499136][ T6290] netlink: 96 bytes leftover after parsing attributes in process `syz.2.87'. [ 70.630842][ T842] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 70.676833][ T842] usb 6-1: USB disconnect, device number 2 [ 70.699047][ T842] usblp0: removed [ 70.719117][ T6301] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.722337][ T6301] overlayfs: failed to set xattr on upper [ 70.724792][ T6301] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.730215][ T6301] overlayfs: ...falling back to index=off. [ 70.732729][ T6301] overlayfs: ...falling back to uuid=null. [ 70.735254][ T6301] overlayfs: ...falling back to xino=off. [ 70.737699][ T6301] overlayfs: conflicting lowerdir path [ 70.750633][ T6308] program syz.0.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.754619][ T6308] ata1.00: non-matching transfer count (1574221512/199) [ 71.121560][ T6338] vlan2: entered promiscuous mode [ 71.133973][ T6338] bridge0: entered promiscuous mode [ 71.242793][ T6359] capability: warning: `syz.1.110' uses deprecated v2 capabilities in a way that may be insecure [ 71.284337][ T5945] Bluetooth: hci1: unknown advertising packet type: 0x7e [ 71.284490][ T5945] Bluetooth: hci1: Malformed LE Event: 0x02 [ 71.296225][ T5945] Bluetooth: hci1: command tx timeout [ 71.296335][ T5936] Bluetooth: hci3: command tx timeout [ 71.296821][ T5942] Bluetooth: hci0: command tx timeout [ 71.296853][ T5942] Bluetooth: hci2: command tx timeout [ 71.392478][ C1] hrtimer: interrupt took 25130 ns [ 71.463747][ T6385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.504975][ T6398] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 71.507650][ T6399] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 71.515124][ T6387] __nla_validate_parse: 1 callbacks suppressed [ 71.515138][ T6387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.118'. [ 71.561828][ T6406] tmpfs: Unknown parameter '&' [ 71.724429][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.727705][ T62] Bluetooth: hci4: Frame reassembly failed (-90) [ 71.728929][ T6423] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 71.799185][ T6428] binder: 6427:6428 ioctl c00c620f 2000000000c0 returned -22 [ 71.913600][ T6432] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 40087543, magic 75 != 6b] [ 72.135533][ T6447] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 72.138892][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.135'. [ 72.143006][ T6447] batadv0: entered promiscuous mode [ 72.145595][ T6447] batadv0: entered allmulticast mode [ 72.148717][ T6447] bridge0: port 3(batadv0) entered blocking state [ 72.152948][ T6447] bridge0: port 3(batadv0) entered disabled state [ 72.157342][ T6447] bridge0: port 3(batadv0) entered blocking state [ 72.160087][ T6447] bridge0: port 3(batadv0) entered forwarding state [ 72.164634][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 72.169133][ T6447] BIDI support in bsg has been removed. [ 72.428619][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 72.432844][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 72.510964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.534372][ T6457] Invalid option length (1048180) for dns_resolver key [ 72.620361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 72.948762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.277439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.280154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.358539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.361260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.364278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.366911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.369693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.956760][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.956779][ T5292] Bluetooth: hci4: command 0x1003 tx timeout [ 74.084809][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 74.084819][ T40] audit: type=1400 audit(1762386121.750:305): avc: denied { append } for pid=6464 comm="syz.1.141" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.240727][ T40] audit: type=1400 audit(1762386121.900:306): avc: denied { append } for pid=6466 comm="syz.3.140" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.249755][ T40] audit: type=1400 audit(1762386121.900:307): avc: denied { map } for pid=6466 comm="syz.3.140" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.259029][ T40] audit: type=1400 audit(1762386121.900:308): avc: denied { execute } for pid=6466 comm="syz.3.140" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.356289][ T40] audit: type=1400 audit(1762386122.012:309): avc: denied { getopt } for pid=6473 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.362406][ T40] audit: type=1400 audit(1762386122.012:310): avc: denied { unmount } for pid=6473 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.372175][ T40] audit: type=1400 audit(1762386122.031:311): avc: denied { read } for pid=6471 comm="syz.1.143" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.379887][ T40] audit: type=1400 audit(1762386122.031:312): avc: denied { open } for pid=6471 comm="syz.1.143" path="/23/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.384599][ T6475] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.390911][ T6475] block device autoloading is deprecated and will be removed. [ 74.394466][ T40] audit: type=1400 audit(1762386122.040:313): avc: denied { ioctl } for pid=6471 comm="syz.1.143" path="/23/file0/file0" dev="fuse" ino=64 ioctlcmd=0x910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.537798][ T40] audit: type=1400 audit(1762386122.180:314): avc: denied { associate } for pid=6478 comm="syz.1.146" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.539272][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 74.550128][ T6479] netlink: 'syz.1.146': attribute type 30 has an invalid length. [ 74.553349][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 74.659718][ T6486] No such timeout policy "syz1" [ 74.848129][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 74.900767][ T6498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46960 sclass=netlink_route_socket pid=6498 comm=syz.0.153 [ 74.908860][ T6498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.153'. [ 75.531488][ T6532] uprobe: syz.1.161:6532 failed to unregister, leaking uprobe [ 75.635451][ T72] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.639361][ T1157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.643112][ T1157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.650536][ T1157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.923938][ T6550] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 75.929712][ T6550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.933087][ T6550] IPv6: NLM_F_CREATE should be set when creating new route [ 76.168809][ T6573] trusted_key: syz.2.171 sent an empty control message without MSG_MORE. [ 76.173517][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 76.197080][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.203711][ T6573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.171'. [ 76.211286][ T6578] gfs2: not a GFS2 filesystem [ 76.858071][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 76.860910][ T6590] cgroup: No subsys list or none specified [ 76.869057][ T6588] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 76.872663][ T6588] team0: Device ipvlan2 is already an upper device of the team interface [ 76.893833][ T6592] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.932733][ T6595] ISOFS: Unable to identify CD-ROM format. [ 76.944442][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.947483][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.012745][ T6603] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.330441][ T6622] netlink: 'syz.1.183': attribute type 12 has an invalid length. [ 77.333055][ T6622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.183'. [ 77.347863][ T6625] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 77.351170][ T6625] netlink: 'syz.3.184': attribute type 4 has an invalid length. [ 77.354479][ T6625] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.184'. [ 77.403709][ T6630] SET target dimension over the limit! [ 77.594318][ T6643] IPVS: length: 8 != 442638929936 [ 77.860376][ T6658] geneve2: entered allmulticast mode [ 78.022939][ T6668] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 78.058820][ T6673] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 78.062083][ T6673] netlink: 232 bytes leftover after parsing attributes in process `syz.3.200'. [ 78.068799][ T6668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.071430][ T6674] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 78.074705][ T6674] netlink: 232 bytes leftover after parsing attributes in process `syz.3.200'. [ 78.119007][ T6679] overlayfs: workdir and upperdir must be separate subtrees [ 78.673649][ T6694] ceph: Unknown parameter 'aclÖÜïÙ„M Ý®(Ì´Àôë' [ 78.933899][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 78.967958][ T6706] could not allocate digest TFM handle sha224-ssse3 [ 78.972669][ T6706] xt_SECMARK: invalid mode: 2 [ 79.019116][ T6713] SQUASHFS error: Failed to read block 0x0: -5 [ 79.021958][ T6713] unable to read squashfs_super_block [ 79.422601][ T6745] warning: `syz.2.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.435988][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 79.436001][ T40] audit: type=1400 audit(1762386126.763:393): avc: denied { read } for pid=6743 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.519807][ T40] audit: type=1400 audit(1762386126.838:394): avc: denied { write } for pid=6749 comm="syz.2.225" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.530857][ T1329] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 79.579469][ T40] audit: type=1400 audit(1762386126.894:395): avc: denied { ioctl } for pid=6753 comm="syz.3.227" path="socket:[13065]" dev="sockfs" ino=13065 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.710429][ T1329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.714964][ T1329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.718732][ T1329] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 79.723093][ T1329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.728708][ T1329] usb 6-1: config 0 descriptor?? [ 79.807196][ T40] audit: type=1400 audit(1762386127.109:396): avc: denied { getopt } for pid=6760 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.172443][ T1329] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 80.177249][ T1329] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 80.185207][ T1329] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0002/input/input5 [ 80.194004][ T40] audit: type=1400 audit(1762386127.474:397): avc: denied { read } for pid=5326 comm="acpid" name="event4" dev="devtmpfs" ino=2873 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.203715][ T40] audit: type=1400 audit(1762386127.474:398): avc: denied { open } for pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2873 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.208596][ T1329] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 80.244425][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.0.230'. [ 80.255072][ T40] audit: type=1400 audit(1762386127.530:399): avc: denied { ioctl } for pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2873 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.280163][ T40] audit: type=1400 audit(1762386127.549:400): avc: denied { read } for pid=6766 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.497813][ T40] audit: type=1400 audit(1762386127.754:401): avc: denied { create } for pid=6778 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.501622][ T6779] netlink: 'syz.0.233': attribute type 30 has an invalid length. [ 80.504601][ T40] audit: type=1400 audit(1762386127.754:402): avc: denied { write } for pid=6778 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.611881][ T6783] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.624380][ T6783] netlink: 256 bytes leftover after parsing attributes in process `syz.3.236'. [ 80.627909][ T6783] netlink: 56 bytes leftover after parsing attributes in process `syz.3.236'. [ 80.745863][ T6790] : entered promiscuous mode [ 80.758118][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 80.825978][ T6805] (syz.2.242,6805,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 80.828680][ T6805] (syz.2.242,6805,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 80.845742][ T6809] [U] zÍ»´iœùÊý®Ò[27| [ 80.847796][ T6809] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 80.853809][ T6809] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 80.857999][ T6809] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 80.872929][ T6809] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 80.875843][ T6809] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 80.878083][ T6809] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 80.880614][ T6809] [U] ‰ϼcEv‹û @ý [ 80.882252][ T6809] [U] aÆ„% [ 80.883752][ T6809] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 80.891899][ T6809] [U] éf1Ïp±3 [ 80.893381][ T6809] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 80.895590][ T6809] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 80.899773][ T6808] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 81.268437][ T6837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.252'. [ 81.344569][ T6839] bond0: option prio: mode dependency failed, not supported in mode balance-rr(0) [ 81.393622][ T6832] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.404784][ T6832] CIFS mount error: No usable UNC path provided in device string! [ 81.404784][ T6832] [ 81.409122][ T6832] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.420540][ T1329] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 81.495795][ T5936] Bluetooth: hci0: unexpected subevent 0x04 length: 10 < 11 [ 82.584781][ T6883] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 82.796355][ T6886] vivid-000: ================= START STATUS ================= [ 82.800230][ T6886] vivid-000: Test Pattern: 75% Colorbar [ 82.803357][ T6886] vivid-000: Fill Percentage of Frame: 100 [ 82.805760][ T6886] vivid-000: Horizontal Movement: No Movement [ 82.808310][ T6886] vivid-000: Vertical Movement: No Movement [ 82.810820][ T6886] vivid-000: OSD Text Mode: All [ 82.812636][ T6886] vivid-000: Show Border: false [ 82.814680][ T6886] vivid-000: Show Square: false [ 82.816585][ T6886] vivid-000: Sensor Flipped Horizontally: false [ 82.818671][ T6886] vivid-000: Sensor Flipped Vertically: false [ 82.821590][ T6886] vivid-000: Insert SAV Code in Image: false [ 82.824021][ T6886] vivid-000: Insert EAV Code in Image: false [ 82.826489][ T6886] vivid-000: Insert Video Guard Band: false [ 82.828996][ T6886] vivid-000: Reduced Framerate: false [ 82.831262][ T6886] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 82.833891][ T6886] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 82.837070][ T6886] vivid-000: Enable Capture Cropping: true grabbed [ 82.839519][ T6886] vivid-000: Enable Capture Composing: true grabbed [ 82.841652][ T6886] vivid-000: Enable Capture Scaler: true grabbed [ 82.845406][ T6886] vivid-000: Timestamp Source: End of Frame [ 82.847230][ T6886] vivid-000: Colorspace: sRGB [ 82.848981][ T6886] vivid-000: Transfer Function: Default [ 82.851246][ T6886] vivid-000: Y'CbCr Encoding: Default [ 82.853187][ T6886] vivid-000: HSV Encoding: Hue 0-179 [ 82.855039][ T6886] vivid-000: Quantization: Default [ 82.857165][ T6886] vivid-000: Apply Alpha To Red Only: false [ 82.859352][ T6886] vivid-000: Standard Aspect Ratio: 4x3 [ 82.861021][ T6886] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 82.864402][ T6886] vivid-000: DV Timings: 640x480p59 inactive [ 82.866497][ T6886] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 82.869245][ T6886] vivid-000: Maximum EDID Blocks: 2 [ 82.871380][ T6886] vivid-000: Limited RGB Range (16-235): false [ 82.873945][ T6886] vivid-000: Rx RGB Quantization Range: Automatic [ 82.876818][ T6886] vivid-000: Power Present: 0x00000001 [ 82.879109][ T6886] tpg source WxH: 320x240 (Y'CbCr) [ 82.881336][ T6886] tpg field: 1 [ 82.882776][ T6886] tpg crop: (0,0)/320x240 [ 82.884624][ T6886] tpg compose: (0,0)/320x240 [ 82.886767][ T6886] tpg colorspace: 8 [ 82.888791][ T6886] tpg transfer function: 0/2 [ 82.890741][ T6886] tpg Y'CbCr encoding: 0/1 [ 82.892753][ T6886] tpg quantization: 0/2 [ 82.894510][ T6886] tpg RGB range: 0/2 [ 82.896246][ T6886] vivid-000: ================== END STATUS ================== [ 83.055996][ T6001] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 83.173609][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 83.218221][ T6001] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 83.222776][ T6001] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 83.226911][ T6001] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 83.233995][ T6001] usb 8-1: string descriptor 0 read error: -22 [ 83.236719][ T6001] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.240231][ T6003] usb 6-1: USB disconnect, device number 3 [ 83.240777][ T6001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.249474][ T6890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.333929][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 83.337838][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 83.341339][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 83.344993][ T53] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.354643][ T53] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 83.362595][ T53] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 83.365685][ T53] usb 7-1: Product: syz [ 83.367665][ T53] usb 7-1: Manufacturer: syz [ 83.369691][ T53] usb 7-1: SerialNumber: syz [ 83.375073][ T6886] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 83.387053][ T53] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input7 [ 83.470708][ T6001] cdc_ncm 8-1:1.0: bind() failure [ 83.477842][ T6001] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 83.480883][ T6001] cdc_ncm 8-1:1.1: bind() failure [ 83.493382][ T6001] usb 8-1: USB disconnect, device number 2 [ 83.664188][ T10] usb 7-1: USB disconnect, device number 2 [ 83.680922][ T10] appletouch 7-1:1.0: input: appletouch disconnected [ 83.754372][ T6909] __nla_validate_parse: 6 callbacks suppressed [ 83.754383][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 84.253631][ T6930] sp0: Synchronizing with TNC [ 84.329100][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 84.425369][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 84.642644][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 84.646526][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 84.691870][ T6001] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 84.827872][ T6966] vlan2: entered promiscuous mode [ 84.830269][ T6966] vlan2: entered allmulticast mode [ 84.832885][ T6966] hsr_slave_1: entered allmulticast mode [ 84.841405][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 84.866331][ T6001] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.871068][ T6001] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.876691][ T6001] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.880558][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.896709][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 84.896719][ T40] audit: type=1400 audit(1762386131.869:425): avc: denied { listen } for pid=6965 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.111071][ T6001] usb 7-1: usb_control_msg returned -32 [ 85.112817][ T6001] usbtmc 7-1:16.0: can't read capabilities [ 85.175030][ T40] audit: type=1400 audit(1762386132.131:426): avc: denied { bind } for pid=6965 comm="syz.1.287" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.181561][ T40] audit: type=1400 audit(1762386132.131:427): avc: denied { name_bind } for pid=6965 comm="syz.1.287" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 85.188526][ T40] audit: type=1400 audit(1762386132.131:428): avc: denied { node_bind } for pid=6965 comm="syz.1.287" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 85.412849][ T40] audit: type=1400 audit(1762386132.356:429): avc: denied { append } for pid=6990 comm="syz.3.294" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.412997][ T6991] random: crng reseeded on system resumption [ 85.420410][ T40] audit: type=1400 audit(1762386132.356:430): avc: denied { open } for pid=6990 comm="syz.3.294" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.435805][ T40] audit: type=1400 audit(1762386132.374:431): avc: denied { ioctl } for pid=6990 comm="syz.3.294" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.478693][ T40] audit: type=1400 audit(1762386132.412:432): avc: denied { bind } for pid=6992 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.485689][ T40] audit: type=1400 audit(1762386132.412:433): avc: denied { setopt } for pid=6992 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.493074][ T40] audit: type=1400 audit(1762386132.421:434): avc: denied { write } for pid=6951 comm="syz.2.282" name="usbtmc0" dev="devtmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.547444][ T6995] netlink: 116 bytes leftover after parsing attributes in process `syz.3.295'. [ 85.550166][ T6995] nbd: couldn't find a device at index 31 [ 85.705723][ T6001] usb 7-1: USB disconnect, device number 3 [ 85.811459][ T7008] netlink: 136 bytes leftover after parsing attributes in process `syz.3.300'. [ 85.816599][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 85.943926][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 85.946828][ T1116] ata1: failed to read log page 10h (errno=-5) [ 85.949435][ T1116] ata1.00: exception Emask 0x1 SAct 0x400000 SErr 0x0 action 0x0 [ 85.952906][ T1116] ata1.00: irq_stat 0x40000000 [ 85.956092][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.958792][ T1116] ata1.00: cmd 61/00:b0:36:11:08/01:00:00:00:00/40 tag 22 ncq dma 131072 out [ 85.958792][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.966406][ T1116] ata1.00: status: { DRDY } [ 85.971959][ T1116] ata1.00: configured for UDMA/100 [ 85.974587][ T1116] ata1: EH complete [ 86.092340][ T7019] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 86.092433][ T7020] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 86.100744][ T7022] syz.0.304 (7022): /proc/7016/oom_adj is deprecated, please use /proc/7016/oom_score_adj instead. [ 86.109881][ T7022] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 86.113227][ T7019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.119139][ T7022] loop9: detected capacity change from 0 to 7 [ 86.125979][ T6025] Dev loop9: unable to read RDB block 7 [ 86.127837][ T7019] bond1: (slave ip6erspan0): making interface the new active one [ 86.128074][ T6025] loop9: unable to read partition table [ 86.132870][ T7019] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 86.133165][ T6025] loop9: partition table beyond EOD, truncated [ 86.142605][ T7022] Dev loop9: unable to read RDB block 7 [ 86.144990][ T7022] loop9: unable to read partition table [ 86.150029][ T7022] loop9: partition table beyond EOD, truncated [ 86.154092][ T7022] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.160652][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 86.573804][ T6001] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 86.757657][ T6001] usb 7-1: not running at top speed; connect to a high speed hub [ 86.761498][ T6001] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.766350][ T6001] usb 7-1: config 1 interface 0 has no altsetting 0 [ 86.771856][ T6001] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.40 [ 86.775321][ T6001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.778635][ T6001] usb 7-1: Product: 욎쵒텿敛Ɇ椙ꟕ憴æ¬è‰¼ïœ€æƒŠìˆšáƒáŸî‚ˆê¨Œå—•â©€ãƒ½ç¼™è¢¬æ†Œá‰Œí—ªàµ‹è‚ˆî‹‹ã¸·ã¢›ç»¸áŒ¹ï¬­ê¦¿ç°Ÿá•­Ä©è¯¢êµ·æ ší˜¯î€«î ¶ç°«â¢è®“ᔔ燲糌ഡæ¯á½¾ä€šçŒ¾ì˜ªá‹è½¬ëº¥å€ç©ƒî‘닼ডì‘☦孙Ἤɻ塂ꃫ틵뜒了✰쩞áœé”‰â¦·ã©µè ³è‚¡â°‚ï®è¦’⥚킀ᄖ늱ᣦ뇟鰡 [ 86.789979][ T6001] usb 7-1: Manufacturer: ჯ瞆á¤ë·µâ™–ä™íŒ·ï€‚꟣ㄯዢ [ 86.792865][ T6001] usb 7-1: SerialNumber: 〠[ 87.244405][ T6001] usbhid 7-1:1.0: can't add hid device: -71 [ 87.246600][ T6001] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 87.251360][ T6001] usb 7-1: USB disconnect, device number 4 [ 87.328619][ T7056] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 87.510470][ T5936] Bluetooth: hci1: unexpected event 0x3c length: 97 > 7 [ 87.517483][ T7065] : entered promiscuous mode [ 87.584891][ T7067] hub 9-0:1.0: USB hub found [ 87.587309][ T7067] hub 9-0:1.0: 1 port detected [ 87.890593][ T24] cfg80211: failed to load regulatory.db [ 88.883481][ T6001] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 89.043990][ T6001] usb 8-1: Using ep0 maxpacket: 16 [ 89.048898][ T6001] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 89.052523][ T6001] usb 8-1: config 0 has no interface number 0 [ 89.055778][ T6001] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.060875][ T6001] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.066193][ T6001] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.073014][ T6001] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 89.080346][ T6001] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 89.084243][ T6001] usb 8-1: Product: syz [ 89.086233][ T6001] usb 8-1: SerialNumber: syz [ 89.093345][ T6001] usb 8-1: config 0 descriptor?? [ 89.097843][ T7095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.103172][ T6001] cm109 8-1:0.8: invalid payload size 1024, expected 4 [ 89.108420][ T6001] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input8 [ 89.210390][ T7113] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.321782][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.390319][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.391084][ T6021] usb 8-1: USB disconnect, device number 3 [ 89.393545][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 89.409099][ T6021] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 89.514136][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 89.517001][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 89.520488][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.523609][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.526824][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.530852][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.533542][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.645666][ T7120] overlay: Unknown parameter 'default_permissions:/' [ 89.753562][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 89.755389][ T24] usbtmc 5-1:16.0: can't read capabilities [ 89.811963][ T7127] fuse: Bad value for 'group_id' [ 89.814620][ T7127] fuse: Bad value for 'group_id' [ 89.981610][ T7111] __nla_validate_parse: 1 callbacks suppressed [ 89.981624][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 89.991663][ T7111] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 90.002031][ T6001] usb 5-1: USB disconnect, device number 2 [ 90.021800][ T7136] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.038181][ T5292] Bluetooth: hci4: command 0x1003 tx timeout [ 90.038225][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.146613][ T7144] netlink: 64 bytes leftover after parsing attributes in process `syz.3.349'. [ 90.323991][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 90.324007][ T40] audit: type=1400 audit(1762386136.938:493): avc: denied { map } for pid=7162 comm="syz.1.353" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.333852][ T40] audit: type=1400 audit(1762386136.938:494): avc: denied { call } for pid=7162 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.340207][ T40] audit: type=1400 audit(1762386136.938:495): avc: denied { transfer } for pid=7162 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.873685][ T7189] tmpfs: Bad value for 'mpol' [ 91.055082][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 91.058969][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.362'. [ 91.070749][ T1157] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.070793][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 91.074501][ T1157] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.078509][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.362'. [ 91.082675][ T1157] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.092418][ T1157] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.102749][ T40] audit: type=1400 audit(1762386137.668:496): avc: denied { create } for pid=7192 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.110945][ T40] audit: type=1400 audit(1762386137.668:497): avc: denied { ioctl } for pid=7192 comm="syz.2.362" path="socket:[17432]" dev="sockfs" ino=17432 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.160847][ T841] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 91.339709][ T841] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 91.343963][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.348099][ T841] usb 8-1: Product: syz [ 91.350029][ T841] usb 8-1: Manufacturer: syz [ 91.352030][ T841] usb 8-1: SerialNumber: syz [ 91.452185][ T40] audit: type=1400 audit(1762386138.005:498): avc: denied { associate } for pid=7204 comm="syz.2.367" name="cpuset.memory_pressure_enabled" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.462541][ T40] audit: type=1400 audit(1762386138.005:499): avc: denied { append } for pid=7204 comm="syz.2.367" path="/98/file0/cpuset.memory_pressure_enabled" dev="9p" ino=72095805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.488911][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 91.488943][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 91.553738][ T7216] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 91.714487][ T40] audit: type=1400 audit(1762386138.238:500): avc: denied { shutdown } for pid=7222 comm="syz.2.373" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.927501][ T40] audit: type=1400 audit(1762386138.444:501): avc: denied { ioctl } for pid=7231 comm="syz.0.376" path="socket:[14321]" dev="sockfs" ino=14321 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.939644][ T40] audit: type=1400 audit(1762386138.453:502): avc: denied { create } for pid=7190 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.390724][ T841] rtl8150 8-1:1.0: couldn't reset the device [ 92.392971][ T841] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 92.403169][ T841] usb 8-1: USB disconnect, device number 4 [ 92.417863][ T7254] netlink: 'syz.2.380': attribute type 1 has an invalid length. [ 92.435942][ T7254] bond3: entered promiscuous mode [ 92.438147][ T7254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.499547][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 92.503399][ T7264] bond3: entered allmulticast mode [ 92.738778][ T7293] No control pipe specified [ 92.783456][ T7300] netlink: 'syz.2.395': attribute type 5 has an invalid length. [ 92.802452][ T7304] netlink: 96 bytes leftover after parsing attributes in process `syz.0.396'. [ 92.849753][ T7312] veth1_to_batadv: entered promiscuous mode [ 92.959890][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.962382][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.965595][ T7326] bridge0: entered allmulticast mode [ 92.977532][ T7326] bridge_slave_1: left allmulticast mode [ 92.980125][ T7326] bridge_slave_1: left promiscuous mode [ 92.982557][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.987461][ T7326] bridge_slave_0: left allmulticast mode [ 92.989514][ T7326] bridge_slave_0: left promiscuous mode [ 92.991679][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.060686][ T7334] xt_TCPMSS: Only works on TCP SYN packets [ 93.165411][ T7333] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.331971][ T7338] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7338 comm=syz.2.409 [ 93.345522][ T7349] evm: overlay not supported [ 93.434515][ T7356] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.684369][ T6021] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 93.855935][ T6021] usb 5-1: Invalid ep0 maxpacket: 32 [ 93.870682][ T72] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.949485][ T72] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.005367][ T6021] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 94.020789][ T5292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.025792][ T5292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.034824][ T5292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.035491][ T72] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.039057][ T5292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.045150][ T5292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.110336][ T72] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.176168][ T6021] usb 5-1: Invalid ep0 maxpacket: 32 [ 94.179204][ T6021] usb usb5-port1: attempt power cycle [ 94.217754][ T7386] chnl_net:caif_netlink_parms(): no params data found [ 94.319462][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.321837][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.324165][ T7386] bridge_slave_0: entered allmulticast mode [ 94.327450][ T7386] bridge_slave_0: entered promiscuous mode [ 94.330652][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.332905][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.335183][ T7386] bridge_slave_1: entered allmulticast mode [ 94.337861][ T7386] bridge_slave_1: entered promiscuous mode [ 94.347678][ T841] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 94.374746][ T7404] sit0: entered promiscuous mode [ 94.378722][ T7404] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 94.401143][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.425023][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.523442][ T72] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 94.533365][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.537003][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.541914][ T841] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.545717][ T841] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.549154][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.550305][ T6021] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 94.555899][ T841] usb 7-1: config 0 descriptor?? [ 94.572174][ T6021] usb 5-1: Invalid ep0 maxpacket: 32 [ 94.722053][ T6021] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 94.756007][ T6021] usb 5-1: Invalid ep0 maxpacket: 32 [ 94.756633][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.758538][ T6021] usb usb5-port1: unable to enumerate USB device [ 94.766655][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.771648][ T72] bond0 (unregistering): Released all slaves [ 94.839290][ T72] bond1 (unregistering): Released all slaves [ 94.852055][ T7386] team0: Port device team_slave_0 added [ 94.856207][ T7386] team0: Port device team_slave_1 added [ 94.914696][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.917481][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.930080][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.936207][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.938458][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.946473][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.997093][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.007848][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.008554][ T7386] hsr_slave_0: entered promiscuous mode [ 95.011462][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.014259][ T7386] hsr_slave_1: entered promiscuous mode [ 95.017288][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.019330][ T7386] debugfs: 'hsr0' already exists in 'hsr' [ 95.022298][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.026142][ T7386] Cannot create hsr debugfs directory [ 95.027424][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.034545][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.037749][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.040821][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.044252][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 95.055445][ T841] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 95.073545][ T841] usb 7-1: USB disconnect, device number 5 [ 95.089286][ T7427] fido_id[7427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 95.252098][ T7440] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.289197][ T7386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.302599][ T7386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.317103][ T72] hsr_slave_0: left promiscuous mode [ 95.320797][ T72] hsr_slave_1: left promiscuous mode [ 95.323685][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.326292][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.332009][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.334636][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.365239][ T72] veth1_macvtap: left promiscuous mode [ 95.367553][ T72] veth0_macvtap: left promiscuous mode [ 95.369387][ T72] veth1_vlan: left promiscuous mode [ 95.371519][ T72] veth0_vlan: left promiscuous mode [ 95.394528][ T7454] usb usb8: usbfs: process 7454 (syz.2.441) did not claim interface 0 before use [ 95.623594][ T841] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.769299][ T841] usb 6-1: device descriptor read/64, error -71 [ 95.896093][ T72] team0 (unregistering): Port device team_slave_1 removed [ 95.958495][ T72] team0 (unregistering): Port device team_slave_0 removed [ 96.026536][ T841] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.186234][ T841] usb 6-1: device descriptor read/64, error -71 [ 96.271837][ T5936] Bluetooth: hci2: command tx timeout [ 96.315522][ T841] usb usb6-port1: attempt power cycle [ 96.365626][ T7386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.375345][ T7386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.435963][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.450699][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.461204][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.464209][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.474210][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.476669][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.555789][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 96.555804][ T40] audit: type=1400 audit(1762386142.774:515): avc: denied { mounton } for pid=7476 comm="syz.2.446" path="/128/file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 96.582069][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.608762][ T40] audit: type=1400 audit(1762386142.821:516): avc: denied { kexec_image_load } for pid=7481 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 96.608901][ T7482] __nla_validate_parse: 4 callbacks suppressed [ 96.608911][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 96.634102][ T40] audit: type=1400 audit(1762386142.840:517): avc: denied { getopt } for pid=7481 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.689221][ T841] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.705423][ T40] audit: type=1400 audit(1762386142.915:518): avc: denied { create } for pid=7495 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.718684][ T40] audit: type=1400 audit(1762386142.924:519): avc: denied { ioctl } for pid=7495 comm="syz.2.450" path="socket:[16115]" dev="sockfs" ino=16115 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.721496][ T841] usb 6-1: device descriptor read/8, error -71 [ 96.768239][ T7386] veth0_vlan: entered promiscuous mode [ 96.779229][ T7386] veth1_vlan: entered promiscuous mode [ 96.800188][ T7386] veth0_macvtap: entered promiscuous mode [ 96.803870][ T7386] veth1_macvtap: entered promiscuous mode [ 96.813833][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.820335][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.826444][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832371][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.835286][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.840431][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.909479][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.911962][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.929241][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.932520][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.943127][ T40] audit: type=1400 audit(1762386143.130:520): avc: denied { mounton } for pid=7386 comm="syz-executor" path="/syzkaller.ssMGeR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.977480][ T841] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 96.986089][ T7512] mmap: syz.0.453 (7512) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.999390][ T841] usb 6-1: device descriptor read/8, error -71 [ 97.071861][ T7522] sctp: [Deprecated]: syz.0.455 (pid 7522) Use of int in max_burst socket option. [ 97.071861][ T7522] Use struct sctp_assoc_value instead [ 97.119801][ T841] usb usb6-port1: unable to enumerate USB device [ 97.319721][ T842] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 97.480345][ T842] usb 7-1: Using ep0 maxpacket: 32 [ 97.492089][ T842] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.496112][ T842] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 97.499310][ T842] usb 7-1: can't read configurations, error -71 [ 98.179210][ T40] audit: type=1400 audit(1762386144.289:521): avc: denied { append } for pid=7547 comm="syz.0.462" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 98.188034][ T7548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16406 sclass=netlink_route_socket pid=7548 comm=syz.0.462 [ 98.495803][ T5936] Bluetooth: hci2: command tx timeout [ 98.642831][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 98.645726][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 98.648520][ T7560] netlink: 'syz.2.467': attribute type 7 has an invalid length. [ 98.724782][ T7565] fuse: Bad value for 'fd' [ 98.734879][ T7565] kvm: emulating exchange as write [ 98.890159][ T40] audit: type=1400 audit(1762386144.953:522): avc: denied { attach_queue } for pid=7576 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 98.983074][ T7590] cgroup2: Unknown parameter 'euid' [ 99.004167][ T7595] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 99.026572][ T7595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.039504][ T7595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.042001][ T7595] bond4: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 99.045507][ T7595] bond4: (slave ip_vti0): Error -95 calling set_mac_address [ 99.048235][ T40] audit: type=1400 audit(1762386145.103:523): avc: denied { create } for pid=7600 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 99.064441][ T40] audit: type=1400 audit(1762386145.122:524): avc: denied { connect } for pid=7602 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.092146][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.239709][ T7618] netlink: 56 bytes leftover after parsing attributes in process `syz.2.488'. [ 99.242499][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.486'. [ 99.253626][ T7617] /dev/sr0: Can't open blockdev [ 99.280323][ T7621] tmpfs: Bad value for 'mpol' [ 99.393601][ T7636] tmpfs: Bad value for 'mpol' [ 99.492626][ T7644] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 100.009854][ T7668] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 100.066119][ T7672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7672 comm=syz.4.506 [ 100.080140][ T7672] netfs: Couldn't get user pages (rc=-14) [ 100.118209][ T7676] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 100.120784][ T7676] netlink: 224 bytes leftover after parsing attributes in process `syz.0.508'. [ 100.124428][ T7676] block nbd0: not configured, cannot reconfigure [ 100.128713][ T7676] netlink: 750 bytes leftover after parsing attributes in process `syz.0.508'. [ 100.537100][ T7691] Bluetooth: MGMT ver 1.23 [ 101.273705][ T5292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.276492][ T5292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.279235][ T5292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.282404][ T5292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.284856][ T5292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.395004][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 101.409375][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 101.412251][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 101.444694][ T7718] netlink: 80 bytes leftover after parsing attributes in process `syz.2.521'. [ 101.464233][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.466510][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.469281][ T7701] bridge_slave_0: entered allmulticast mode [ 101.472335][ T7701] bridge_slave_0: entered promiscuous mode [ 101.476446][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.478797][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.481973][ T7701] bridge_slave_1: entered allmulticast mode [ 101.484606][ T7701] bridge_slave_1: entered promiscuous mode [ 101.538270][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.542952][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.580271][ T7701] team0: Port device team_slave_0 added [ 101.583592][ T7701] team0: Port device team_slave_1 added [ 101.630039][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.632481][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.642965][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.649204][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.653139][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.665615][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.714047][ T7701] hsr_slave_0: entered promiscuous mode [ 101.716503][ T7701] hsr_slave_1: entered promiscuous mode [ 101.719034][ T7701] debugfs: 'hsr0' already exists in 'hsr' [ 101.721440][ T7701] Cannot create hsr debugfs directory [ 101.884485][ T7701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.891478][ T7701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.898160][ T7701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.904459][ T7701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.977793][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.993281][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.001502][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.004594][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.019774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.021934][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.173853][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.210935][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.243780][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 102.243795][ T40] audit: type=1400 audit(1762386148.096:544): avc: denied { mount } for pid=7738 comm="syz.0.523" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.245211][ T7739] geneve2: entered promiscuous mode [ 102.259869][ T7739] geneve2: entered allmulticast mode [ 102.261930][ T41] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.264856][ T41] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.267749][ T41] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.275988][ T41] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.305240][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.348927][ T7701] veth0_vlan: entered promiscuous mode [ 102.354059][ T7753] __nla_validate_parse: 2 callbacks suppressed [ 102.354070][ T7753] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.526'. [ 102.357069][ T7701] veth1_vlan: entered promiscuous mode [ 102.374571][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.410357][ T7701] veth0_macvtap: entered promiscuous mode [ 102.415626][ T7701] veth1_macvtap: entered promiscuous mode [ 102.427459][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.436427][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.444185][ T1152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.447692][ T1152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.458735][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.467770][ T1152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.471414][ T1152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.509074][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.511755][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.524218][ T40] audit: type=1400 audit(1762386148.348:545): avc: denied { append } for pid=7762 comm="syz.0.530" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 102.541855][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.544293][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.588214][ T1157] bridge_slave_1: left allmulticast mode [ 102.589691][ T40] audit: type=1400 audit(1762386148.414:546): avc: denied { ioctl } for pid=7762 comm="syz.0.530" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 102.590259][ T1157] bridge_slave_1: left promiscuous mode [ 102.604121][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.614015][ T1157] bridge_slave_0: left allmulticast mode [ 102.616412][ T1157] bridge_slave_0: left promiscuous mode [ 102.619028][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.622267][ T7766] program syz.5.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.872746][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.877571][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.881951][ T1157] bond0 (unregistering): Released all slaves [ 102.889308][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 102.893146][ T7767] tc_dump_action: action bad kind [ 102.910457][ T40] audit: type=1400 audit(1762386148.713:547): avc: denied { map } for pid=7779 comm="syz.1.534" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.074328][ T7800] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 103.101742][ T7800] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 103.115955][ T7800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.116609][ T100] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 103.119936][ T7800] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 103.128504][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'. [ 103.234165][ T62] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 103.239056][ T40] audit: type=1400 audit(1762386149.022:548): avc: denied { bind } for pid=7813 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.273036][ T7814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.276918][ T7814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.280884][ T7814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.300466][ T40] audit: type=1400 audit(1762386149.078:549): avc: denied { connect } for pid=7816 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.316795][ T1157] hsr_slave_0: left promiscuous mode [ 103.320829][ T1157] hsr_slave_1: left promiscuous mode [ 103.323423][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.326270][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.329975][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.332749][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.366070][ T1157] veth1_macvtap: left promiscuous mode [ 103.368527][ T1157] veth0_macvtap: left promiscuous mode [ 103.371005][ T1157] veth1_vlan: left promiscuous mode [ 103.374564][ T1157] veth0_vlan: left promiscuous mode [ 103.458240][ T5936] Bluetooth: hci2: command tx timeout [ 103.469693][ T40] audit: type=1400 audit(1762386149.246:550): avc: denied { connect } for pid=7820 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.913310][ T40] audit: type=1400 audit(1762386149.648:551): avc: denied { getopt } for pid=7823 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.958288][ T40] audit: type=1400 audit(1762386149.695:552): avc: denied { create } for pid=7826 comm="syz.5.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.964473][ T40] audit: type=1400 audit(1762386149.695:553): avc: denied { write } for pid=7826 comm="syz.5.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.071163][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 104.145011][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 104.292707][ T5936] Bluetooth: hci2: unknown advertising packet type: 0x7f [ 104.295515][ T5936] Bluetooth: hci2: Malformed LE Event: 0x02 [ 104.390524][ T7837] netlink: 'syz.5.547': attribute type 1 has an invalid length. [ 104.447583][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.547'. [ 104.709953][ T7814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.713048][ T7814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.716181][ T7814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 104.793687][ T1329] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 104.808109][ T7814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.811789][ T7814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.816784][ T7814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 104.821174][ T7846] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 104.831583][ T7849] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 104.845885][ T7845] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1f pfn:0x4592c [ 104.855893][ T7845] memcg:ffff888100070d00 [ 104.857323][ T7845] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 104.860085][ T7845] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 104.862865][ T7845] raw: 000000000000001f 0000000000000000 00000001ffffffff ffff888100070d00 [ 104.865817][ T7845] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 104.870007][ T7845] page_owner tracks the page as allocated [ 104.872021][ T7845] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7845, tgid 7845 (syz.0.550), ts 104845870631, free_ts 104841605360 [ 104.878505][ T7845] post_alloc_hook+0x1c0/0x230 [ 104.880994][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 104.884231][ T7845] get_page_from_freelist+0x10a3/0x3a30 [ 104.886129][ T7845] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 104.888036][ T7845] alloc_pages_mpol+0x1fb/0x550 [ 104.889631][ T7845] folio_alloc_noprof+0x20/0x2d0 [ 104.893382][ T7845] filemap_alloc_folio_noprof+0x3a1/0x470 [ 104.895224][ T7845] page_cache_ra_order+0x56f/0xf20 [ 104.896850][ T7845] filemap_fault+0x1583/0x29a0 [ 104.898639][ T7845] __do_fault+0x10d/0x490 [ 104.900119][ T7845] do_pte_missing+0x1a6/0x3ba0 [ 104.902465][ T7845] __handle_mm_fault+0x1556/0x2aa0 [ 104.904253][ T7845] handle_mm_fault+0x589/0xd10 [ 104.905791][ T7845] do_user_addr_fault+0x60c/0x1370 [ 104.907408][ T7845] exc_page_fault+0x64/0xc0 [ 104.909002][ T7845] asm_exc_page_fault+0x26/0x30 [ 104.910880][ T7845] page last free pid 7848 tgid 7845 stack trace: [ 104.914612][ T7845] free_unref_folios+0xa31/0x1610 [ 104.916778][ T7845] folios_put_refs+0x4be/0x750 [ 104.918838][ T7845] truncate_inode_pages_range+0x311/0xe50 [ 104.921511][ T7845] set_blocksize+0x2b8/0x500 [ 104.924013][ T7845] blkdev_bszset+0x19b/0x240 [ 104.926159][ T7845] blkdev_ioctl+0x44e/0x6d0 [ 104.928079][ T7845] __x64_sys_ioctl+0x18e/0x210 [ 104.930014][ T7845] do_syscall_64+0xcd/0xfa0 [ 104.931853][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.935732][ T7845] ------------[ cut here ]------------ [ 104.937957][ T7845] kernel BUG at mm/filemap.c:870! [ 104.940141][ T7845] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 104.943751][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.0.550 Not tainted syzkaller #0 PREEMPT(full) [ 104.947864][ T7845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.951757][ T7845] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 104.953988][ T7845] Code: 52 c7 ff 48 c7 c6 60 70 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 e5 52 c7 ff 48 c7 c6 c0 70 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 ce 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 52 c7 ff 48 [ 104.960737][ T7845] RSP: 0018:ffffc9000486f7e8 EFLAGS: 00010293 [ 104.962970][ T7845] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 104.965862][ T7845] RDX: ffff88802cc44900 RSI: ffffffff81f5baca RDI: ffff88802cc44d84 [ 104.968724][ T7845] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 104.971545][ T7845] R10: ffffffff908204d7 R11: 0000000000000001 R12: 0000000000000002 [ 104.974206][ T7845] R13: ffffea0001164b00 R14: 0000000000000000 R15: 1ffff9200090df27 [ 104.977027][ T7845] FS: 00005555727e8500(0000) GS:ffff8880d6b08000(0000) knlGS:0000000000000000 [ 104.980234][ T7845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.982628][ T7845] CR2: 00007ffb6c8ed9e0 CR3: 000000002b721000 CR4: 0000000000352ef0 [ 104.985436][ T7845] Call Trace: [ 104.986680][ T7845] [ 104.987772][ T7845] ? __pfx___filemap_add_folio+0x10/0x10 [ 104.989829][ T7845] filemap_add_folio+0x19a/0x610 [ 104.991640][ T7845] ? __pfx_filemap_add_folio+0x10/0x10 [ 104.993628][ T7845] ? css_rstat_updated+0x1c2/0x510 [ 104.995516][ T7845] page_cache_ra_order+0x635/0xf20 [ 104.997427][ T7845] filemap_fault+0x1583/0x29a0 [ 104.999196][ T7845] ? __pfx_filemap_fault+0x10/0x10 [ 105.001066][ T7845] ? rcu_is_watching+0x12/0xc0 [ 105.002845][ T7845] ? __free_object+0x286/0x410 [ 105.004597][ T7845] ? __pfx_filemap_map_pages+0x10/0x10 [ 105.006587][ T7845] __do_fault+0x10d/0x490 [ 105.008161][ T7845] ? __pfx_filemap_map_pages+0x10/0x10 [ 105.010086][ T7845] do_pte_missing+0x1a6/0x3ba0 [ 105.011830][ T7845] ? find_held_lock+0x2b/0x80 [ 105.013558][ T7845] ? __handle_mm_fault+0x1529/0x2aa0 [ 105.015487][ T7845] __handle_mm_fault+0x1556/0x2aa0 [ 105.017328][ T7845] ? __pfx___handle_mm_fault+0x10/0x10 [ 105.019317][ T7845] ? lock_vma_under_rcu+0x176/0x530 [ 105.021213][ T7845] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 105.023215][ T7845] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.025117][ T7845] handle_mm_fault+0x589/0xd10 [ 105.026869][ T7845] ? __pkru_allows_pkey+0x11/0xb0 [ 105.028697][ T7845] do_user_addr_fault+0x60c/0x1370 [ 105.030614][ T7845] ? rcu_is_watching+0x12/0xc0 [ 105.032366][ T7845] exc_page_fault+0x64/0xc0 [ 105.034048][ T7845] asm_exc_page_fault+0x26/0x30 [ 105.035766][ T7845] RIP: 0033:0x7efec0665509 [ 105.037278][ T7845] Code: ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 c8 fe ff ff e8 f8 5f 0c 00 85 c0 75 10 48 8b 44 24 68 48 8b b4 24 98 00 00 00 <48> 89 30 64 f0 83 2c 25 90 ff ff ff 01 48 8b 84 24 80 00 00 00 48 [ 105.044210][ T7845] RSP: 002b:00007fffd9d3d8a0 EFLAGS: 00010246 [ 105.046434][ T7845] RAX: 00002000000000c0 RBX: 0000000000000002 RCX: ffffe00000000000 [ 105.049212][ T7845] RDX: 77203f5e9c934eac RSI: 0000000000000000 RDI: 00005555727e83c8 [ 105.052078][ T7845] RBP: 00007efec09e7da0 R08: 0000001b2e820000 R09: 000000000000000f [ 105.054943][ T7845] R10: 0000000000000001 R11: 0000000000000006 R12: 00007efec09e609c [ 105.057818][ T7845] R13: 00007efec09e6090 R14: fffffffffffffffe R15: 00007fffd9d3d9b0 [ 105.060668][ T7845] [ 105.061822][ T7845] Modules linked in: [ 105.063793][ T7845] ---[ end trace 0000000000000000 ]--- [ 105.067137][ T7845] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 105.069478][ T7845] Code: 52 c7 ff 48 c7 c6 60 70 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 e5 52 c7 ff 48 c7 c6 c0 70 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 ce 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 52 c7 ff 48 [ 105.077310][ T7845] RSP: 0018:ffffc9000486f7e8 EFLAGS: 00010293 [ 105.079824][ T7845] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 105.093552][ T7845] RDX: ffff88802cc44900 RSI: ffffffff81f5baca RDI: ffff88802cc44d84 [ 105.094241][ T1329] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 105.096405][ T7845] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 105.099287][ T1329] usb 10-1: config 0 has no interface number 0 [ 105.102690][ T7845] R10: ffffffff908204d7 R11: 0000000000000001 R12: 0000000000000002 [ 105.104994][ T1329] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.107732][ T7845] R13: ffffea0001164b00 R14: 0000000000000000 R15: 1ffff9200090df27 [ 105.115957][ T7814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.120108][ T7814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.121148][ T7845] FS: 00005555727e8500(0000) GS:ffff8880d6a08000(0000) knlGS:0000000000000000 [ 105.121365][ T1329] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 105.121386][ T1329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.121401][ T1329] usb 10-1: Product: syz [ 105.121413][ T1329] usb 10-1: Manufacturer: syz [ 105.121424][ T1329] usb 10-1: SerialNumber: syz [ 105.132047][ T7814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.134481][ T7845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.134842][ T1329] usb 10-1: config 0 descriptor?? [ 105.148827][ T7845] CR2: 00005648a75c8ad0 CR3: 000000002b721000 CR4: 0000000000352ef0 [ 105.149502][ T1329] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 105.152068][ T7845] Kernel panic - not syncing: Fatal exception [ 105.155297][ T7845] Kernel Offset: disabled VM DIAGNOSIS: 23:42:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a43b580 RCX=ffffffff81b11833 RDX=ffff88801da84900 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000157cf8 RSP=ffffc90000157b98 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79ebe R12=1ffff9200002af7c R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4876b1 RIP=ffffffff81bd0da0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c8271c8300 CR3=00000000592c7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1d613850 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07c6213050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07c621305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07c6213057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07c621306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07c62130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07c62131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff852964f0 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc9000486f128 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bb142 R15=dffffc0000000000 RIP=ffffffff85296517 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555727e8500 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffb6c8ed9e0 CR3=000000002b721000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bc13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bc1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bc13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bc1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bc130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bc131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bdb74a8 00007f346bdb74a0 00007f346bdb7498 00007f346bdb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346c91d100 00007f346bdb7460 00007f346bdb7478 00007f346bdb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346bdb74b8 00007f346bdb74b0 00007f346bdb74a8 00007f346bdb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000098 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000009479c RBX=0000000000000002 RCX=ffffffff8b6082a9 RDX=ffffed100d4c6656 RSI=ffffffff8bf06fc0 RDI=ffffffff8192579d RBP=ffffed1003b52920 RSP=ffffc90000187de8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801da94900 R14=ffffffff908204d0 R15=0000000000000000 RIP=ffffffff8b606d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a25d0 CR3=0000000044d57000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000fffffffe11 ffffee0004010010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf62213050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf6221305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf62213057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf6221306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf622130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf622131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000500000001 00090005000000ab 000400050000204e 0005000600000003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000800000001 0009000500000001 000a000500000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000400050000204e 0005000600000003 0003000580020034 00006576656e6567 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000002 RBX=ffff88806a542700 RCX=ffffffff81b100e1 RDX=ffff888027cba480 RSI=ffffffff81b100bb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900049cf660 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4a84e1 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81bd0ddb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffb6c73ac80 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff83438128 CR3=000000004bb09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000003 Opmask02=00000000004fc003 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75722f7261762f87 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0031000055c8271c 99e8000000000000 0000000000006d72 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c82700662d 000055c8271d8ce8 000055c8271d8d08 665f65676e006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c808004902 000055c8081d8cc7 000055c8081d8d08 495f4a484100425d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c8271d50b8 0000000000000000 000000000000000f 000055c82700873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c8271cf918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000