last executing test programs: 5.156886109s ago: executing program 3 (id=256): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000001c0)={r1, r1, 0x0, 0x80000001, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, r3, 0x5cc8000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 5.097557395s ago: executing program 3 (id=258): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000200)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002380), 0x701, 0x0) lseek(r2, 0xa, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) write$selinux_validatetrans(r2, &(0x7f0000000340)={'system_u:object_r:faillog_t:s0', 0x20, 'system_u:object_r:semanage_exec_t:s0', 0x20, 0x10, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x77) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_io_uring_setup(0x6b9a, &(0x7f0000000140)={0x0, 0x6971, 0x400, 0x0, 0x22f, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000280)) r6 = epoll_create1(0x0) r7 = eventfd2(0x0, 0x0) epoll_pwait2(r6, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000180)={0x20000005}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @remote, 0x18dd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8) write$FUSE_STATFS(r1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40eeff0010008105000000f9fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d0040000000000140012800c0001006d61637674617000040002800a000200aaaaaaaaaabb0000"], 0x40}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 4.216632574s ago: executing program 3 (id=276): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x148, 0x168, 0x0, 0x0, 0xa, 0x248, 0x250, 0x250, 0x248, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {0x0, 0x28e}, [@common=@srh={{0x30}, {0x5e, 0x3, 0x3, 0x7f, 0x1, 0x2000, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_batadv\x00', {0xbe0d}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r1 = epoll_create1(0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207f0455c000000000000109022d0001000060020904000407030003000921000007012205000905810300040c0206090503"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064d1, &(0x7f0000000080)={0x0, 0x0, 0x0}) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000e57"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x148, 0x168, 0x0, 0x0, 0xa, 0x248, 0x250, 0x250, 0x248, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {0x0, 0x28e}, [@common=@srh={{0x30}, {0x5e, 0x3, 0x3, 0x7f, 0x1, 0x2000, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_batadv\x00', {0xbe0d}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) epoll_create1(0x0) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207f0455c000000000000109022d0001000060020904000407030003000921000007012205000905810300040c0206090503"], 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064d1, &(0x7f0000000080)={0x0, 0x0, 0x0}) (async) syz_usb_disconnect(r2) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000e57"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 2.889974408s ago: executing program 2 (id=295): r0 = socket$kcm(0xa, 0x3, 0x3a) (async, rerun: 64) pipe(0x0) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3a) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x81, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) (async) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$inet6(r3, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.88973227s ago: executing program 2 (id=296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x2200}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x48}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d90777d6435a3e2be3d4539f0b25319fe333834c4becbd241b0e600", @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2.829023964s ago: executing program 2 (id=297): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f00000001c0)={0xb0, 0x16, 0xe, 0x28}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) (async) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f00000001c0)={0xb0, 0x16, 0xe, 0x28}) (async) 2.738011596s ago: executing program 2 (id=298): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6005, &(0x7f0000000540)=0xa, 0x6, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0200000040"], 0x10) 2.73754471s ago: executing program 2 (id=299): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="f136071073ffc5f9a1ab54bf5cdbcb24818ace5fa3b70156c92dcf64fc96794f293c668e0b58a91501da60051cec5e87ff7bbddcabe06960055a258f03918b7ffd0dfd4d8ed2d31bd7d34726c1fc1f614beffc0b007036b2bd9566509e32fe8307b2d9ebde606769f5fae9785746d9d1ee9832ae94f1ed7daad202aabc2594449637a9a36847523054cef0bbe78c06cd947815be9dbaf19e25d566e0ab48bfb7b883fa09497b95bee79e4f58298218a36c3555417ea7490acd5f145df7ef974531f0f4720587d5f6997ad65ccf4d66c53d4b28e2ef54f72b036760", &(0x7f0000000140)=@tcp=r0, 0x1}, 0x20) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)}], 0x4, &(0x7f0000000480)=""/110, 0x6e}, 0x10000) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r5 = fsmount(r0, 0x1, 0x58fb59fd4409d8b1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe4, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b700a7e8eda2ee82d961e455845f646a07ab9a0f38215501"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5a010d60e8c8d2eb8974f1829b4de60418923ddeb64b7b3a"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4b2b83ff9a1a8c9edbb1f142072a69d4ad5595980b43f2b7"}]]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = syz_open_dev$admmidi(&(0x7f0000000800), 0xcfd4, 0xa00) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x80045700, &(0x7f0000000840)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000900)={0xb1, 0x18, '\x00', 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000940)={'ipvlan1\x00', 0x4000}) r9 = syz_open_dev$sg(&(0x7f0000000980), 0x7ff, 0x20800) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000001c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000a00)={0x11f0, r6, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x58}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x7b, 0xfa, "47072cb0d98c8815335ad6d80b669e21e1e00d84f9e5ad0586251f0c59e34df296be8c2e3a37ae4a29aff08982e0b7aa911eb10a19419909c1dc68a7eeb99d422950d9e636ad1ac9f0c8a895ce67193b15edbd6fc38a7d152356f83ff0fe0a4d8a4092e09ed17b4bad6400214377551104ebb7048861d3"}, @NL80211_ATTR_FILS_ERP_REALM={0x86, 0xfa, "355481978fd6c00557809f52b7266e4723bcea137371d1ed38098c6e95e807df8a4f0a52cdc2e189dad88668c7579d0de27b4bd6a42db454566186e1d9da2e0aac5129b710823b511739928cdc90f431840500484b5d08de50b64ab26afce67d8309cfbd60409b613b1ef50f2722aff8b3afd2a3753c406fc83cab55ce0222d0c292"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x1d, 0xfa, "d7e7c9da91f704a861bbfff2c5119c72881ca8b977ddd8c2e3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_KEYS={0x7c, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f0991c5249a8eca3eb00da51a0"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "61b9d7a697"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2d74051aa609366fe0dcaf74c2"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "18420dacde7ad5555d944c9f1a"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x40805}, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x30) connect$can_bcm(r1, &(0x7f0000001c80)={0x1d, r2}, 0x10) ioctl$BLKCRYPTOPREPAREKEY(r5, 0xc040128b, &(0x7f0000001d80)={&(0x7f0000001cc0)="d6cefe008bc540bf548e627f4b32fe58136d931f85ceeefade17412868345146fb0b5ef14b488ba398779776ae579770", 0x30, &(0x7f0000001d00)=""/76, 0x4c}) socketpair(0xa, 0xa, 0xc24, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f0000001e00)=0x1, 0x4) fstatfs(r10, &(0x7f0000001e40)=""/4096) close_range(r9, r11, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = open(&(0x7f0000002e40)='./file0\x00', 0x200400, 0xc7) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0xf502, 0x0) ioctl$COMEDI_SUBDINFO(r12, 0x80486402, &(0x7f0000002e80)) read$FUSE(r5, &(0x7f00000035c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r12, &(0x7f0000007740)=[{{&(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f0000002f80)}, {&(0x7f0000002fc0)="26fb8627389eef5a3bc03f900f12b4f8e77be62a6b5ec14f0971c85d0b96f3a47902218c0352a4128e24997d87997f75f0ec9047b849a647b4f62d55572556236147957a5b01835c33a8f5d9b667f4b2aa8a31f537edc6cb59efa3b8b14705e56c5c49f274b97f72690e7dbaa360580d4cfb4a37e5d67d373d", 0x79}, {&(0x7f0000003040)="463b158224fdfe07a72275e6b28576a81ec7727308684950ffec6877055d73ca228da8", 0x23}, {&(0x7f0000003080)="d58f5c7dfa6b21eaeecaad977b0ca716b720a58496fbf924183e2b5704fe65ce93dbc911e693b6530715978a4a3dc43aa455794d4cc1ee5686856a15e57cf819dbd70ca8dac11e373e9f70c3e372f5da725c6a733e7313c894", 0x59}, {&(0x7f0000003100)="e7bb249bf83dcc233ca91dd574b48ec1f375d7bb482542044c40abe7885304584379f3c6f4c5b2408afe1878ea8e7344288d68cf82d34ca97bc1c7216edde211b80bfd93741625ad889e9834c49939169c4e59f20ba20db8a7aa0f81ebfa22789fc3c9da8034310d7ac58f3fffc3d96e3b667d0b37a415682d35b430b72c91715e5999113b098b7338fd83708c5837b3cf3407f3ecf8e6be639e4ee6d6bca4292563be", 0xa3}, {&(0x7f00000031c0)="e97684df255cf5e4e83e1f7484c7262c53cff443d73f1bc6071229fe790639a9bd24454e5e892000638cb976ad6a37fdda67e4e03188a3c17e0052fb4d6742a15bfa7f76e51572d388e7994580adb5c96c3597d516cd928b7190c70e283b2d551d7eb81bdaab678ac727611e06ecde677eb9711dbdfcb93b957961e27fb4b76ba5e5beaa90a4555ea00840114735aa64779f638ce15b181ab2610c8efaaa94ecdb50db67a7d05f8052d64a0a5ccf9b80fb61b11b05a0e40cb85990c249df1a4440fd12e26b4e12fa0cd770873eb005ec93f25d8337589c0b5acc13b4689f983af6b97bbb594eae3ec610e74f45", 0xed}, {&(0x7f00000032c0)="5232bbedf3b1c6e47e8dd7317c9d6d47fa691b964743c08c2498dcd0edf0462bdaaf42ddcec915a62bee238bd1ceba9ae6d2425e5154fabf265f2075fac33e1f7f3b5c83dc5eac673c780ede74ab72df1f504d9766a731c189f0735a6396b8418ec37185d458df9461301a729e553c114767a1b8c005984022ec9c6e25df5bd2dab479b23ff2e992e1cc26c6ed99c7a878644c2771c41150c6dfb6251d230931b8f2a7ad00162abf738584382b230cb70d526182c31ffa88dd96d301696c07ff6019c4ef2f3c4c5f2339926ea6540c68a4380acff1795472ceaccf677e91055c488c3dbec9f3a116535050644e3375b72c1df1", 0xf3}, {&(0x7f00000033c0)="e7104f835a7b84eb73e4e4727b43ddc72c90507e1ce5e2ba407ea0dbd15321b84b00", 0x22}, {&(0x7f0000003400)="3023873f7bffa1142a18323ee304c45ca6aa6e2477395475d21dce8cee156755a1970873d0031307f68e08818b3085b9b98736cdca92b839dff468b7e31a0bad15d160a4589e83ef9c7e3c64d5ebaf5332ab5883a1b812a397e2ca3cc8d381a49f39c48290e13baa78f8dbcc9f524ceb15755f8819f71f02d73b60f34d1f9b42d3312497a20f5d457eb014868f5118da048d5fc5642b38688cc273eab3a60ccb05e5e1ed78eca427774f56aa6b18a4a4fb3c97c2257d19359e9a96c614868557995a85bb8b211556c8cbaab5e9ec2f8e4e1b35fcab410737cd631e", 0xdb}], 0x9, &(0x7f0000007680)=[@cred={{0x1c, 0x1, 0x2, {r13, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r11]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r4}}}], 0x98, 0x8800}}], 0x1, 0x4081) 2.644435502s ago: executing program 1 (id=300): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace0000"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141e42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000020000040"]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080002000400000008001b"], 0x34}}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1003ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="890a0240000000000000000000000000000000000000000000000000000000000000000000000001fe80000000000000000000000000003100000000000000000000000000000001fc000000000000000000ca0000000000"], 0x58) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x13c, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x128, 0x1, [@m_sample={0x124, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x8, 0x8, 0xfffffffc}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0xd0, 0x6, "9152d70714fb5ca457e6550f4eb218f8977064b309e1cddc7ec23752d43278ed0dd53b31b792bb09ce716261043112ef42a663d5b714e75b9bece875b0b0d1891d303c714a2c36c04a82257c21668f90342fd78593062eb6edd4c7d2a7c07bcd5545fdd5021fb2600189e34644e7a36e3d45745b2eecb578d4ae135a2e46dd911191f5b2464c900c40c092b80712f8bdccaa9c163a6b32a16547d760f9f391dd2b67101fc223027cddee17fc3204deb08e80204930ac245ed17fd5903ffaac1d0e5288c24e2d5904ed80e9e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x13c}}, 0x0) 2.441673629s ago: executing program 1 (id=301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1785, '\x00', 0x0, r1, 0x0, 0x4, 0x2}, 0x50) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x70, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffff7fff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0xc080) 2.439835865s ago: executing program 2 (id=302): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='net/packet\x00') (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x58, "00000000000000000000a200"}) (async) r3 = syz_open_pts(r2, 0x101000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@volatile}]}) (async) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000880)={"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"}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) ioctl$NBD_SET_SOCK(r7, 0xab00, r0) pread64(r1, &(0x7f0000000000)=""/232, 0xe8, 0x40) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='efs\x00', 0x2000802, 0x0) 2.439157975s ago: executing program 1 (id=303): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x48, &(0x7f0000000040), 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) 1.786720929s ago: executing program 0 (id=304): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8809}, @val={0x2, 0x3, 0x0, 0x9, 0x1, 0x8}, @x25={0x2, 0x9, 0xf3, "05ca4ca06c38ba597ca77b7243cbdb5d4f70167b69f86b44370289d05ae6c6416463c18505f1a07e9cc0ae0f4a84e4ed06bfe4c803614abb3c1ee1806e60af43cf77a7ca"}}, 0x55) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x2}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f0000000040)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], &(0x7f00000001c0)='GPL\x00', 0x8cc9, 0x2, &(0x7f0000000300)=""/2, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x10001, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r0, r0, r0, r0], &(0x7f00000004c0)=[{0x5, 0x1, 0xf, 0x7}, {0x5, 0x4, 0x4, 0xb}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0xa, @val=@netfilter={0xa, 0x0, 0x8cb5}}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000087300fec00000000000000000000000000000ff020000000000000000000000000001"], 0x0) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000140), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) getsockopt$packet_int(r4, 0x107, 0x12, 0x0, &(0x7f00000000c0)) 1.73514355s ago: executing program 0 (id=305): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=@ipmr_delroute={0x4c, 0x19, 0x100, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0x0, 0x3, 0xfc, 0x5, 0xc8, 0x4, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_IP_PROTO={0x5, 0x1b, 0x7}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_TABLE={0x8, 0xf, 0x3}, @RTA_PRIORITY={0x8, 0x6, 0x68000}, @RTA_FLOW={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x840) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff, 0x0, 0x0, 0x3], [0x0, 0x0, 0xf], [0x6, 0x0, 0x0, 0xff]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f00000001c0)={0x4376ea830d41549b, 0x0, [0xffffffffffffffff, 0xa, 0x40, 0x7fff, 0x5, 0x8000000000000003, 0xffffffffffffffff, 0x7fffff]}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x8, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @generic={0xa, 0x0, 0xa, 0xa70, 0x5}, @generic={0x9, 0x1, 0xd, 0xce8, 0x51}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0xffff, 0x3, &(0x7f0000000180)=""/3, 0x41100, 0x7a, '\x00', r2, @cgroup_sock_addr=0x8, r6, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0x10, 0xa}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r12, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.466576886s ago: executing program 0 (id=306): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56061, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xa}, {0x1c, 0xfff2}}}, 0x24}}, 0x4b880) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mq_open(&(0x7f0000000100)='#.\x1e$@#\x00', 0x40, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x408100) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r5, 0x6, 0x0, @val=@kprobe_multi=@syms={0x1, 0x3, &(0x7f0000000200)=[&(0x7f00000000c0)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='*\x00'], 0x0, 0x7fff}}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x460bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x80, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4882) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) 1.390275071s ago: executing program 0 (id=307): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) (async) 1.320044064s ago: executing program 0 (id=308): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x74c, 0x2f00, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="66b9800000c00f326635000100000f300f011e71f8dadc0f080f0f3796ba420066b8223fc7ba66ef3e0f79fd66b80500000066b9dd7000000f01c1", 0x3b}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x45833af92e4b19df, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000140)={@local, @multicast2}, 0x8) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x10}) 1.213547109s ago: executing program 1 (id=309): mlockall(0x7) (async, rerun: 64) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000004380)={0x1, 0x3, 0x101, 0x0, 0x5}) (async) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000800000000000090000000000000028fceafdffff"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket(0x1e, 0x5, 0x0) listen(r2, 0x0) (async) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x1f, 0x0, @tid=r3}, &(0x7f0000000080)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) accept4$inet6(r2, 0x0, 0x0, 0x0) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r1}, 0x38) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x7, [0x4ceb90bf, 0x3, 0x5, 0x7, 0xffffffffffffff00, 0x1]}) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) (async) unshare(0x62040200) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000140)={0xa00, 0xa0, 0x550, 0x600, 0x1800, 0x8, 0x0, 0x1, {0x3ff, 0x10001, 0x1}, {0x1c9, 0x7, 0x1}, {0xc7}, {0x3, 0x100, 0x1}, 0x0, 0x1dd, 0x4, 0x200, 0x0, 0x26b, 0x20a, 0xff, 0xa1fb, 0x101, 0x80000003, 0x5, 0x8, 0x2, 0x2, 0xa}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e1f, @rand_addr=0x64010101}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 32) 1.146862505s ago: executing program 1 (id=310): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800b00010062726964fc6500000c0002800500190084000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @multicast, @void, {@x25={0x805, {0x0, 0x7, 0x5, "2891b80c0d4567210f9d15b5f1"}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) socket$packet(0x11, 0x2, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {0xfff1, 0x6}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x12}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.145617476s ago: executing program 3 (id=311): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc500, 0x8003) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x55, 0x7f, 0x0, {0x81, 0x7}, {0xfff9, 0xd}, @const={0x8, {0xd, 0x4f, 0x7, 0x5}}}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x7, 0x2, 0x6, {{0x14, 0x4, 0x0, 0x1c, 0x50, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x96, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x1c, 0xac, 0x0, 0x3, [0x0, 0xc, 0xc4f4, 0x101, 0x200, 0x60]}, @end]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x616ca20d, 0x6, 0xfffff9db, 0x200, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x3}, 0x50) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/183) (async) ioctl$FICLONE(r1, 0x40049409, r3) fallocate(r3, 0x11, 0x4, 0x9) (async) read$usbfs(r1, &(0x7f00000002c0)=""/8, 0x8) (async) fsync(r3) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000300)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000340)="1517d0eeed33644c1bb6c37ff513bddc4962c5d377e7d0984becab856927d6a06270ab7b1492240ea26240aa27765d4cea559e33550e02eea6f8c2c11ddf1ce43df876abfe6cbbd993687cbd129cbd28be5150601fe9d9b26d04b90802ffd2057335724542c2dbf8170bd2fa0b3a556d13957773143fe09db7553edd0984f2b16a40b1292ce45faef46e2e19e4872f06fe00c28f951df388c103d90ca60c2a5b8aec555c1b2dd05df4a6fcf538e1", &(0x7f0000000400)=""/206, &(0x7f0000000500)="31cee193075ee6b70f5344ed2701b39209f4659c2ee32c28f4cd0e6821acd391271108aa9582a1bf2ea508e3f9bc1754c72e983e873fb99a49c09bfe1d1b3567bc1f459c27c12771bf8ac0a9974cf56793e65379ab350bd5ac4f2d09d00a1e986e5c785e4c", &(0x7f0000000580)="e9cbaffc3e29f9f8b1453e3a0b685aef67fa8cca5d9b0b1b1d4e21417dc965787f5e400872e4c52730999bc4a5fac18821eacad607b20155d74235da47c7f47d77dd0b05ae283afaf44f14d2342b51a405b53e155ef6d4cc6b9a42ffc6a5c9d4", 0x7f, r1, 0x4}, 0x38) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000640)={'tunl0\x00', r2, 0x7800, 0x8, 0xffff, 0x4, {{0x3d, 0x4, 0x3, 0x2, 0xf4, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @local, {[@rr={0x7, 0xb, 0x39, [@multicast2, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xe, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x10001}, {@rand_addr=0x64010100, 0xfffffff9}, {@local, 0x800}, {@rand_addr=0x64010100, 0xc}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x1f, 0x93, [@multicast1, @empty, @empty, @private=0xa010102, @multicast1, @rand_addr=0x64010102, @empty]}, @timestamp_addr={0x44, 0x1c, 0xd1, 0x1, 0x8, [{@multicast1, 0x8}, {@empty}, {@rand_addr=0x64010100, 0x80}]}, @noop, @lsrr={0x83, 0x23, 0x52, [@broadcast, @private=0xa010101, @loopback, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x14, 0x1, 0x4, [{@private=0xa010101}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x2}, {@empty}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x2}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x4}]}]}}}}}) getpeername$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) (async) syz_open_dev$sg(&(0x7f0000000840), 0xffff, 0x40000) (async, rerun: 64) socketpair(0x28, 0x5, 0x1, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = syz_usb_connect$cdc_ncm(0x3, 0x17c, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16a, 0x2, 0x1, 0x2, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0xa, 0x1}, {0x6, 0x24, 0x1a, 0x101}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xfa, 0x2, 0x3, 0xb, 0x800, 0x2}, @mdlm_detail={0xde, 0x24, 0x13, 0x7c, "8f3880d126adc87fd04f8be5449ae298afb26cfd7e5398ca5ed1b61bcbc27ba0d2eecdbd4d5f9e2329681e02a85ca9adc7cbbc359e4194381c1ccdfff7f85817546487ce775a7e4cbf9c4e3d319f80e7839301ac962487d78b9ee5627b018f95e9fc17ae674a123daeed6ce3f0b6ad7322c0a7ebc16278ecc5e1d78134ea64ddfe6123e6a8dc606fba08ef830bd755437c3d9c2ceb4c8fe8fe88b560a95cee36fafe03ec50e57ac9df46b0f7c136dc97b0a50757426857a77d9d64f93bbb5fc9c9184f77ac67020e1d7ea325974969621833e8986ec090525b75"}, @dmm={0x7, 0x24, 0x14, 0xfff8, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x1c15, 0xfb, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x8, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x1, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x7}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x0, 0x56, 0x7, 0xd7, 0xff, 0x52}, 0xf, &(0x7f0000000a80)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x17, 0x1, 0x5, 0x8}]}, 0x5, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x42c}}, {0xab, &(0x7f0000000b00)=@string={0xab, 0x3, "2d557adf7ab07bd9057fd32f23cd13d79b201c77f22f67423f3024fd924a5444eab6af4dfbe02f6843141ebf4a683d5a86175595c0a6d4f44875d0e6965d8b5b6a9f15a5f0aff9aad695c60850061ae5ccd4021abe7adca0e6ccd92d0edc91ae74c8cf22be1966000fd8949b5bbb62050ead5383de4d6989d5fcc354e3f7e245dfd006f8c976bad628fc5e9f8d6470f129c76cd64478e3d9eb7cba53c718e9e3d91e77d07db62253d0"}}, {0x66, &(0x7f0000000bc0)=@string={0x66, 0x3, "1683de2a9fc40bf0fd19d382151372b42aa9590b6ec5d73df4901bf4cc890451af8ca6e40d4e08055d9f27ab1826fa7af6b53219f8fd7abe2281b49e3d3bce4c24baebae1ba2bf3f79ea2eb85867ce2afa8a4f0ef73025056fae90fcfb5051f5d8bac8fe"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x843}}, {0xa7, &(0x7f0000000c80)=@string={0xa7, 0x3, "962893ab9b8b32196cdb14406c99e1bf18a89194f6eb68718e3bece143aa69d3a907bb6217a5a5995404822d8ac5abf5e8f3a73d494cbee38bdb87c7312e943b72c46a73ecc2c12d44bd23adfde8773c0f556baa087cfa04b0ceab737a0f5dfe0e8f9a5ea8b3eb887732ca8e452bc0b29474f9ea4e24ae377883962d6ff59188c627b8dcdb1c582bd68a54e89e7b2355dfd387b0b157a36a70d346ba7bf4fbfec210cd9ce0"}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000f00)={0x14, &(0x7f0000000dc0)={0x40, 0x30, 0xdf, {0xdf, 0x7, "6790325b064a1c1c1fad25f381b412098fdca507be7196aa95b522e8f4c299c979d6381fc42b7d2e344ee92b3f5582a187b8f077a911f3d21bc290dda819d9a9b480e48428e418ad5456dfdea8f4af46f011928e6eb636743ca00c0da017cc0adc8703788443c73b0059d165fdee79c4c9df520a4ed72071660fd6d4bd1170b2a136a4b06acddc68351f0378d1fa77a139c2068b02a136ad686a96927d4a87e2dda536ec8af03c199c3aa2a0c0eff233aa51abaedadbbe237bbd59f7d7b82fca401e38d99f838da090982ad28446b9c4c4dd683390d8468b5891162dd2"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x0, 0x9, 0x4d, "af195e251f738d2eedacbb8bcc8f9a1dcb30a2ee853d73f1b90fd7405b65e368b9777839dff05f59a915dc73197abf3b8a6373ddda7665211eeb975c1265e97c3ad1d89cb7404a53ee4217fb87"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x83}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x6bf0, 0x74f4, 0x4633, 0x8, 0x81, 0x4, 0x2, 0x1, 0x9, 0x3, 0x1, 0xf2}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x28}, &(0x7f00000010c0)={0x20, 0x83, 0x2}, &(0x7f0000001100)={0x20, 0x87, 0x2, 0x6a1}, &(0x7f0000001140)={0x20, 0x89, 0x2, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000001200)) (async, rerun: 64) r7 = getpgrp(0x0) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001280)={r1, r1, 0x24, 0x0, @val=@iter={&(0x7f0000001240)=@task={r7, 0x0, r1}, 0x10}}, 0x20) (async) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000012c0)) (async, rerun: 64) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000001300)) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x48, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="b6d4e8c74b64f877a91e2f9865bdd0e2e0e94ac2"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008001}, 0x40800) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x54, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x851f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000095}, 0x4004000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000021c0)={0x24, &(0x7f0000002040)={0x20, 0xf, 0x8f, {0x8f, 0x3, "3195d647bc97962d620a9683c262fa3060261f6aa14a5fe277c98ca1b3a5a74e126711b0f0177560fe9689eade5cc0a995a9e6b1db09aca193e9003a31fa60a05f52617064f561bf724a2a4c98dcf530babb27153c92b13eccb76dac1d0d5cc2bc9ac111c9040e6788d0d437694ae2f658f2be7c3c9304fa76021a90d39a278bf8bb69dba40dc30c5250db797b"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000002140)={0x0, 0x22, 0x1f, {[@main=@item_012={0x2, 0x0, 0x9, "ff50"}, @main=@item_012={0x1, 0x0, 0x8, "e4"}, @local=@item_4={0x3, 0x2, 0xa, "c3daa979"}, @local=@item_4={0x3, 0x2, 0x2, "625e964a"}, @global=@item_4={0x3, 0x1, 0x4, "632f95a2"}, @main=@item_012={0x2, 0x0, 0xa, 'f\\'}, @main=@item_4={0x3, 0x0, 0xc, "1b9a1706"}, @global=@item_012={0x2, 0x1, 0x6, "114d"}]}}, &(0x7f0000002180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffa, 0x8d, 0x1, {0x22, 0xa43}}}}, &(0x7f00000024c0)={0x2c, &(0x7f0000002200)={0x40, 0x17, 0xc5, "60d3bbf21e14571bc8257aad48b61043fb6025481562feeb14954c1ace5f4c5e23479e30226ba110a385299ac2b259dcfc9118cf3f6a9b2a1bea7865dbdd36fc1af57b2e031176ff0b02a795e2e4f7c0e1b7b59e4ee22f9e78163d1099aa5e9e03a6a7777d7de55da7e2d72ecd0ae8c85b734fec9b376db7ec3bac8f36bedfca16a93f835e010b595945d18f769bb97156d72ab40a4f275ff9821639c67df1ac2423f9cc8e86cb379edcc9415e24562e05bc059fae051541fdbacaa06fd364bc205f11698a"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000002380)={0x20, 0x1, 0xf8, "f33669de0396080ae1d8bf5aa7804c2751e589d4de31b6588adc33a8d7e30967dbc94c1d88de2246d18b22fdb5e130ef37b874fbf42a5a0f4b3018500bbf8e6bdccfe74b62a9173b59462f7b778cdd907cad2ed31c4cca7f80d815c3a8f35558b8d38c6fcf0b0c12b6a8ce5f24eb3992e50298e9734d7f4fac9775cc297d0012b1c57370306c29c7ff832f56a3588141400187d7ed8b7e4ec18ac1d4ff013d30615cdaa6063c8cbedfa8149569ef5c4f26cd32ce574c8e0eff9ab3418988f469cff6de008a1301f8a5b22e6ab0238f9760275c8422b51cd74a9082ff14adf4ce03f7d1ad2df6cf87be9bb85a297cbf202f81a03dccf67633"}, &(0x7f0000002480)={0x20, 0x3, 0x1, 0x4}}) 1.053602534s ago: executing program 3 (id=312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x329b, 0x0, 0x1, 0x6b4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x1, 0x11, 0xd, 0x100, &(0x7f00000000c0)="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"}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f030000000100000007000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004814) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x25, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x2, 0x2, 0x6, 0x10, 0xffffffffffffffe0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf98aa45d02ed4bbb}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x94) 912.645Āµs ago: executing program 0 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)={0x1044, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc322, 0x24}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf4c}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x1044}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)={0x1044, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc322, 0x24}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf4c}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x1044}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) (async) 243.088Āµs ago: executing program 1 (id=314): r0 = syz_io_uring_setup(0x2502, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0xfffffffc, 0x37f}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000440)='./file0\x00', 0x280000, 0x100) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0xdbdd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x500000}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1) (rerun: 64) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRES16=r5, @ANYRESHEX=r1, @ANYRES64=r4], 0x38}}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x11000, 0x0) (async) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r7) (async) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f00000002c0)={0xc, r9}) (async) r10 = io_uring_setup(0x5cda, &(0x7f0000000a80)={0x0, 0xd3d6, 0x80, 0x5, 0x2b2}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r12 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000240)={0x20000006}) (async) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0x4}) close_range(r10, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 0s ago: executing program 3 (id=315): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x8, 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRESDEC], 0x52) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async, rerun: 64) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) (rerun: 64) 0s ago: executing program 1 (id=323): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x9e1, 0x2166, 0x0, 0x100000, 0x88d7, 0x96, 0x1, 0x10, 0x1002, 0xffffffff, 0x3, 0x7, 0x344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x9, 0x10000, 0x100, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1]}) r4 = io_uring_setup(0x37c, &(0x7f0000000080)={0x0, 0xe916, 0x8000, 0x1, 0x249}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) io_uring_enter(r4, 0x7394, 0xab47, 0x11, &(0x7f0000000000)={[0x8000000000000000]}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:7364' (ED25519) to the list of known hosts. [ 46.317359][ T40] audit: type=1400 audit(1751900684.981:62): avc: denied { name_bind } for pid=5894 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.351118][ T40] audit: type=1400 audit(1751900685.011:63): avc: denied { write } for pid=5895 comm="sh" path="pipe:[6401]" dev="pipefs" ino=6401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.369404][ T40] audit: type=1400 audit(1751900685.031:64): avc: denied { execute } for pid=5895 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.382025][ T40] audit: type=1400 audit(1751900685.031:65): avc: denied { execute_no_trans } for pid=5895 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.711850][ T5895] cgroup: Unknown subsys name 'net' [ 48.713024][ T40] audit: type=1400 audit(1751900687.371:66): avc: denied { mounton } for pid=5895 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.906890][ T5895] cgroup: Unknown subsys name 'cpuset' [ 48.913377][ T5895] cgroup: Unknown subsys name 'rlimit' [ 49.127004][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 49.127019][ T40] audit: type=1400 audit(1751900687.791:69): avc: denied { setattr } for pid=5895 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.138270][ T40] audit: type=1400 audit(1751900687.791:70): avc: denied { create } for pid=5895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.146534][ T40] audit: type=1400 audit(1751900687.791:71): avc: denied { write } for pid=5895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.154967][ T40] audit: type=1400 audit(1751900687.791:72): avc: denied { read } for pid=5895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.163484][ T40] audit: type=1400 audit(1751900687.801:73): avc: denied { mounton } for pid=5895 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.173506][ T40] audit: type=1400 audit(1751900687.801:74): avc: denied { mount } for pid=5895 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.180566][ T40] audit: type=1400 audit(1751900687.811:75): avc: denied { read } for pid=5663 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.192637][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.196616][ T40] audit: type=1400 audit(1751900687.861:76): avc: denied { relabelto } for pid=5940 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.207756][ T40] audit: type=1400 audit(1751900687.861:77): avc: denied { write } for pid=5940 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 49.226014][ T40] audit: type=1400 audit(1751900687.891:78): avc: denied { read } for pid=5895 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.922208][ T5895] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.583112][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.588419][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.591505][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.594684][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.596952][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.603929][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.606728][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.609156][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.612163][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.615345][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.618107][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.620770][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.642592][ T5311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.647155][ T5311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.649512][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.650995][ T5311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.653819][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.654097][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.660438][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.661851][ T5311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.880750][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 54.006927][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 54.048843][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 54.079759][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.082481][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.085094][ T5951] bridge_slave_0: entered allmulticast mode [ 54.087863][ T5951] bridge_slave_0: entered promiscuous mode [ 54.112049][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.114777][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.117667][ T5951] bridge_slave_1: entered allmulticast mode [ 54.121256][ T5951] bridge_slave_1: entered promiscuous mode [ 54.153356][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 54.231194][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.242270][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.362511][ T5951] team0: Port device team_slave_0 added [ 54.368047][ T5951] team0: Port device team_slave_1 added [ 54.438119][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.441362][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.444816][ T5955] bridge_slave_0: entered allmulticast mode [ 54.448780][ T5955] bridge_slave_0: entered promiscuous mode [ 54.453814][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.456195][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.458400][ T5959] bridge_slave_0: entered allmulticast mode [ 54.462166][ T5959] bridge_slave_0: entered promiscuous mode [ 54.486800][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.490319][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.493777][ T5955] bridge_slave_1: entered allmulticast mode [ 54.498919][ T5955] bridge_slave_1: entered promiscuous mode [ 54.502345][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.505463][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.508494][ T5959] bridge_slave_1: entered allmulticast mode [ 54.512316][ T5959] bridge_slave_1: entered promiscuous mode [ 54.550844][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.554043][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.563751][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.636478][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.638792][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.641129][ T5962] bridge_slave_0: entered allmulticast mode [ 54.643919][ T5962] bridge_slave_0: entered promiscuous mode [ 54.647107][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.649689][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.660499][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.668053][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.694416][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.698221][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.701021][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.704128][ T5962] bridge_slave_1: entered allmulticast mode [ 54.707951][ T5962] bridge_slave_1: entered promiscuous mode [ 54.736623][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.741655][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.782105][ T5959] team0: Port device team_slave_0 added [ 54.859668][ T5959] team0: Port device team_slave_1 added [ 54.867802][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.897414][ T5955] team0: Port device team_slave_0 added [ 54.929650][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.959745][ T5955] team0: Port device team_slave_1 added [ 54.974523][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.977264][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.987919][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.008789][ T5951] hsr_slave_0: entered promiscuous mode [ 55.011221][ T5951] hsr_slave_1: entered promiscuous mode [ 55.030222][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.032529][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.041179][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.075665][ T5962] team0: Port device team_slave_0 added [ 55.095944][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.098158][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.106636][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.130237][ T5962] team0: Port device team_slave_1 added [ 55.173979][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.176183][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.184167][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.218795][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.221724][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.233038][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.239734][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.241943][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.249845][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.341844][ T5955] hsr_slave_0: entered promiscuous mode [ 55.345018][ T5955] hsr_slave_1: entered promiscuous mode [ 55.347143][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.350163][ T5955] Cannot create hsr debugfs directory [ 55.356419][ T5959] hsr_slave_0: entered promiscuous mode [ 55.358676][ T5959] hsr_slave_1: entered promiscuous mode [ 55.360952][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.363998][ T5959] Cannot create hsr debugfs directory [ 55.473137][ T5962] hsr_slave_0: entered promiscuous mode [ 55.475597][ T5962] hsr_slave_1: entered promiscuous mode [ 55.478277][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.481440][ T5962] Cannot create hsr debugfs directory [ 55.703943][ T5961] Bluetooth: hci3: command tx timeout [ 55.703996][ T5956] Bluetooth: hci0: command tx timeout [ 55.704016][ T5311] Bluetooth: hci2: command tx timeout [ 55.710978][ T5958] Bluetooth: hci1: command tx timeout [ 55.776230][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.782345][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.793763][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.804493][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.830294][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.837874][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.848008][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.854326][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.920548][ T5962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.928741][ T5962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.944093][ T5962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.948871][ T5962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.994965][ T5959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.005395][ T5959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.020035][ T5959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.033716][ T5959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.041237][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.054565][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.074944][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.087672][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.090745][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.095255][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.097745][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.103921][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.123530][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.125823][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.147848][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.150173][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.194945][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.201202][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.215994][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 56.216004][ T40] audit: type=1400 audit(1751900694.881:89): avc: denied { sys_module } for pid=5955 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.220953][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.237462][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.240440][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.247692][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.250664][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.257664][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.272720][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.283028][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.285834][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.297915][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.300807][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.356351][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.364739][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.417200][ T5955] veth0_vlan: entered promiscuous mode [ 56.426780][ T5951] veth0_vlan: entered promiscuous mode [ 56.431615][ T5955] veth1_vlan: entered promiscuous mode [ 56.441799][ T5951] veth1_vlan: entered promiscuous mode [ 56.462006][ T5955] veth0_macvtap: entered promiscuous mode [ 56.466952][ T5955] veth1_macvtap: entered promiscuous mode [ 56.478689][ T5951] veth0_macvtap: entered promiscuous mode [ 56.488394][ T5951] veth1_macvtap: entered promiscuous mode [ 56.504886][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.511780][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.517115][ T5955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.519678][ T5955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.522141][ T5955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.526893][ T5955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.532564][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.541144][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.551420][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.557240][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.560668][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.564563][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.567713][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.585505][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.649214][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.652512][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.668513][ T5962] veth0_vlan: entered promiscuous mode [ 56.688797][ T5959] veth0_vlan: entered promiscuous mode [ 56.689240][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.693366][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.696073][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.696084][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.714319][ T5962] veth1_vlan: entered promiscuous mode [ 56.724696][ T5959] veth1_vlan: entered promiscuous mode [ 56.732706][ T40] audit: type=1400 audit(1751900695.391:90): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.733348][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.744485][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.746338][ T40] audit: type=1400 audit(1751900695.411:91): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.XpCkZ7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.756431][ T5959] veth0_macvtap: entered promiscuous mode [ 56.758601][ T5959] veth1_macvtap: entered promiscuous mode [ 56.759597][ T40] audit: type=1400 audit(1751900695.411:92): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.769812][ T40] audit: type=1400 audit(1751900695.411:93): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.XpCkZ7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.770206][ T5962] veth0_macvtap: entered promiscuous mode [ 56.782553][ T40] audit: type=1400 audit(1751900695.411:94): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.XpCkZ7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.792003][ T5962] veth1_macvtap: entered promiscuous mode [ 56.793179][ T40] audit: type=1400 audit(1751900695.421:95): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.802348][ T40] audit: type=1400 audit(1751900695.431:96): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.804400][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.810546][ T40] audit: type=1400 audit(1751900695.431:97): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="gadgetfs" ino=8556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.821761][ T40] audit: type=1400 audit(1751900695.441:98): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.823668][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.828813][ T5955] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.842129][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.849568][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.855708][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.858583][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.861483][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.865288][ T5959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.872729][ T5962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.878556][ T5962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.881381][ T5962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.885873][ T5962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.956097][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.959380][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.977517][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.980266][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.002049][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.005176][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.023300][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.2.5 [ 57.025446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.029665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.100841][ T6049] netlink: 'syz.1.2': attribute type 39 has an invalid length. [ 57.151865][ T6051] random: crng reseeded on system resumption [ 57.231694][ T6064] process 'syz.3.10' launched './file1' with NULL argv: empty string added [ 57.240150][ T6065] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 57.284568][ T6070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 57.313664][ T6072] capability: warning: `syz.3.13' uses deprecated v2 capabilities in a way that may be insecure [ 57.339968][ T6074] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 57.347967][ T6074] Mount JFS Failure: -22 [ 57.409596][ T6079] input: syz1 as /devices/virtual/input/input5 [ 57.473694][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 57.783906][ T5958] Bluetooth: hci2: command tx timeout [ 57.783946][ T5956] Bluetooth: hci1: command tx timeout [ 57.788177][ T6088] Zero length message leads to an empty skb [ 57.793099][ T5956] Bluetooth: hci3: command tx timeout [ 57.793116][ T5958] Bluetooth: hci0: command tx timeout [ 57.837362][ T6092] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 57.842002][ T6092] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 57.998995][ T6107] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6107 comm=syz.2.24 [ 58.286623][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 58.326904][ T6141] ata1.00: invalid multi_count 128 ignored [ 58.475284][ T6153] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 58.772651][ T6183] openvswitch: netlink: EtherType 0 is less than min 600 [ 58.835036][ T6185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6185 comm=syz.2.39 [ 58.842108][ T6185] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 59.173215][ T6203] bridge_slave_0: left allmulticast mode [ 59.175766][ T6203] bridge_slave_0: left promiscuous mode [ 59.178254][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.184391][ T6203] bridge_slave_1: left allmulticast mode [ 59.186174][ T6203] bridge_slave_1: left promiscuous mode [ 59.187988][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.195216][ T6203] bond0: (slave bond_slave_0): Releasing backup interface [ 59.201665][ T6203] bond0: (slave bond_slave_1): Releasing backup interface [ 59.220991][ T6203] team0: Port device team_slave_0 removed [ 59.221289][ T6204] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 59.230243][ T6203] team0: Port device team_slave_1 removed [ 59.233754][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.236901][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.242159][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.245781][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.262698][ T6204] lo: entered promiscuous mode [ 59.266293][ T6204] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 59.273218][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.277529][ T6204] bond0: (slave lo): Enslaving as an active interface with an up link [ 59.370444][ T6206] warning: `syz.0.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.376103][ T6206] xt_cluster: node mask cannot exceed total number of nodes [ 59.390886][ T6208] gfs2: path_lookup on ™6(ļ+‰d‹QĢnB“!eU‚ēVč!š`:Ń 8×DSEķÄšĆÄčĪ Įy|YT¢®{-€ķźĀ°”,mb/ returned error -2 [ 59.473155][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'. [ 59.476819][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 59.879810][ T5958] Bluetooth: hci3: command tx timeout [ 59.880019][ T5956] Bluetooth: hci1: command tx timeout [ 59.888456][ T6223] binder: 6222:6223 ioctl c018620b 0 returned -14 [ 59.891229][ T5958] Bluetooth: hci2: command tx timeout [ 59.891415][ T5956] Bluetooth: hci0: command tx timeout [ 60.208278][ T6240] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 60.211965][ T6240] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 60.214862][ T6240] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 60.217830][ T6240] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 60.221968][ T6240] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 60.225365][ T6240] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 60.381840][ T6251] block device autoloading is deprecated and will be removed. [ 60.594276][ T6266] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 60.597003][ T6266] SELinux: failed to load policy [ 60.745911][ T6270] ip6t_srh: unknown srh match flags B153 [ 60.999473][ T6286] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.008497][ T6286] xt_socket: unknown flags 0x50 [ 61.237102][ T6301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.240108][ T6301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.269333][ T6303] overlayfs: workdir and upperdir must be separate subtrees [ 61.276064][ T6303] random: crng reseeded on system resumption [ 61.282653][ T40] kauditd_printk_skb: 22190 callbacks suppressed [ 61.282662][ T40] audit: type=1326 audit(1752424987.881:22290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd73c78d3df code=0x50000 [ 61.292948][ T40] audit: type=1326 audit(1752424987.881:22266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73c78e929 code=0x50000 [ 61.301137][ T40] audit: type=1326 audit(1752424987.891:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd73c78d3df code=0x50000 [ 61.307973][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.76'. [ 61.314192][ T40] audit: type=1326 audit(1752424987.891:22292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73c78e929 code=0x50000 [ 61.321964][ T40] audit: type=1326 audit(1752424987.891:22293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd73c78d3df code=0x50000 [ 61.331219][ T40] audit: type=1326 audit(1752424987.891:22294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73c78e929 code=0x50000 [ 61.340352][ T40] audit: type=1326 audit(1752424987.891:22295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73c78e929 code=0x50000 [ 61.349828][ T40] audit: type=1326 audit(1752424987.891:22296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd73c78d3df code=0x50000 [ 61.358763][ T40] audit: type=1326 audit(1752424987.891:22297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73c78e929 code=0x50000 [ 61.367974][ T40] audit: type=1326 audit(1752424987.891:22299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.2.52" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73c78e929 code=0x50000 [ 61.563077][ T6312] Unsupported ieee802154 address type: 0 [ 61.758328][ T6314] overlayfs: failed to resolve './file1': -2 [ 61.792982][ T6314] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.022507][ T5956] Bluetooth: hci2: command tx timeout [ 62.023783][ T5958] Bluetooth: hci3: command tx timeout [ 62.030635][ T6319] trusted_key: syz.1.80 sent an empty control message without MSG_MORE. [ 62.033499][ T5958] Bluetooth: hci0: command tx timeout [ 62.033523][ T5958] Bluetooth: hci1: command tx timeout [ 62.200645][ T6330] validate_nla: 28 callbacks suppressed [ 62.200656][ T6330] netlink: 'syz.1.82': attribute type 2 has an invalid length. [ 62.205203][ T6330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.335475][ T6340] : entered promiscuous mode [ 62.587234][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.594915][ T6352] bond0: (slave rose0): Enslaving as an active interface with an up link [ 62.900102][ T6370] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 63.018302][ T6379] netlink: 'syz.2.91': attribute type 9 has an invalid length. [ 63.027240][ T6379] netlink: 'syz.2.91': attribute type 12 has an invalid length. [ 63.032057][ T6379] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 63.035344][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.91'. [ 63.039757][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.043335][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.046442][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.149154][ T6370] netlink: 212204 bytes leftover after parsing attributes in process `syz.1.90'. [ 63.286742][ T6398] netlink: 124 bytes leftover after parsing attributes in process `syz.1.93'. [ 63.292392][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 63.349734][ T6398] kvm: emulating exchange as write [ 63.632454][ T6419] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 63.654907][ T72] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.811880][ T72] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 63.815765][ T72] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 63.820845][ T72] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.824360][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.832642][ T72] usb 7-1: config 0 descriptor?? [ 63.843988][ T72] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 64.035899][ T6436] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.055312][ T6018] usb 7-1: USB disconnect, device number 2 [ 64.257131][ T6449] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 64.264261][ T6449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6449 comm=syz.1.106 [ 64.305259][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 64.308932][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.107'. [ 64.765720][ T6477] input: syz1 as /devices/virtual/input/input7 [ 64.855118][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 64.920369][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.925727][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.929536][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.934567][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.941726][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.947419][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.951912][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.957367][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.960974][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.964159][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.968122][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.972360][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.976771][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.980246][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.983674][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.987047][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.988921][ T6488] debugfs: Bad value for 'mode' [ 64.992139][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.995194][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.998864][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.001930][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.005070][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.009599][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.012793][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.015915][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.019776][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.022802][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.026132][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.030623][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.033671][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.036760][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.040195][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.043286][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.046403][ T6483] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 65.072219][ T6497] program syz.1.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.105341][ T6499] fuseblk: Bad value for 'max_read' [ 65.140185][ T6501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.346401][ T6512] binder: 6509:6512 ioctl 40045565 8f returned -22 [ 65.416487][ T6524] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 65.419426][ T6524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.129'. [ 65.456700][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.130'. [ 65.521828][ T6531] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 65.524732][ T6531] ref_ctr increment failed for inode: 0x12b offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888036734600 [ 65.624236][ T6533] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.713121][ T6537] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 65.715820][ T6537] ref_ctr increment failed for inode: 0xca offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888039915a00 [ 65.792825][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 65.850690][ T6543] hsr_slave_1 (unregistering): left promiscuous mode [ 65.965389][ T6548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6548 comm=syz.2.136 [ 66.075418][ T6570] SELinux: policydb magic number 0x240 does not match expected magic number 0xf97cff8c [ 66.079052][ T6570] SELinux: failed to load policy [ 66.123367][ T6578] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 66.324301][ T6600] sit0: Master is either lo or non-ether device [ 66.471768][ T40] kauditd_printk_skb: 26845 callbacks suppressed [ 66.471779][ T40] audit: type=1400 audit(1752424992.944:49144): avc: denied { create } for pid=6623 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.494207][ T40] audit: type=1400 audit(1752424992.964:49145): avc: denied { write } for pid=6623 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.512655][ T40] audit: type=1400 audit(1752424992.983:49146): avc: denied { create } for pid=6626 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.520176][ T40] audit: type=1400 audit(1752424992.983:49147): avc: denied { setopt } for pid=6626 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.620446][ T40] audit: type=1400 audit(1752424993.091:49148): avc: denied { wake_alarm } for pid=6638 comm="syz.1.159" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.698629][ T40] audit: type=1400 audit(1752424993.170:49149): avc: denied { setopt } for pid=6638 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.714271][ T6639] bond0: Error: Cannot enslave bond to itself. [ 66.725503][ T6641] overlayfs: failed to get inode (-116) [ 66.727683][ T6641] overlayfs: failed to get inode (-116) [ 66.933025][ T40] audit: type=1400 audit(1752424993.395:49150): avc: denied { ioctl } for pid=6650 comm="syz.2.162" path="socket:[11745]" dev="sockfs" ino=11745 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.007098][ T40] audit: type=1400 audit(1752424993.464:49151): avc: denied { read write } for pid=6656 comm="syz.2.164" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.015649][ T40] audit: type=1400 audit(1752424993.464:49152): avc: denied { open } for pid=6656 comm="syz.2.164" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.072623][ T40] audit: type=1400 audit(1752424993.542:49153): avc: denied { bind } for pid=6660 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.126919][ T6665] fuse: Unknown parameter '’’' [ 67.236583][ T6668] binder: BC_ATTEMPT_ACQUIRE not supported [ 67.238547][ T6668] binder: 6666:6668 ioctl c0306201 2000000003c0 returned -22 [ 67.440281][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6684 comm=syz.3.170 [ 68.181070][ T6689] vxcan1: entered promiscuous mode [ 68.221692][ T6693] netlink: 'syz.3.175': attribute type 29 has an invalid length. [ 68.227970][ T6693] netlink: 'syz.3.175': attribute type 29 has an invalid length. [ 68.232015][ T6693] __nla_validate_parse: 5 callbacks suppressed [ 68.232024][ T6693] netlink: 500 bytes leftover after parsing attributes in process `syz.3.175'. [ 68.238083][ T6693] unsupported nla_type 58 [ 68.390824][ T6710] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 68.393150][ T6711] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 69.150028][ T6705] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.152809][ T6705] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.160789][ T6705] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.163674][ T6705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.166401][ T6705] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.170065][ T6705] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.172607][ T6705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.174877][ T6705] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.177490][ T6705] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.182967][ T6705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.185943][ T6705] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.190568][ T6705] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.229467][ T5956] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 69.233238][ T6726] netlink: 27 bytes leftover after parsing attributes in process `syz.3.186'. [ 69.289957][ T5956] Bluetooth: hci3: SCO packet too small [ 69.410686][ T6743] Cannot find add_set index 4 as target [ 69.413539][ T6743] Device name not specified. [ 69.413539][ T6743] [ 69.694344][ T5956] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 69.733938][ T6771] sctp: [Deprecated]: syz.2.200 (pid 6771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.733938][ T6771] Use struct sctp_sack_info instead [ 69.743385][ T6771] sctp: [Deprecated]: syz.2.200 (pid 6771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.743385][ T6771] Use struct sctp_sack_info instead [ 69.786750][ T6777] Invalid ELF header type: 0 != 1 [ 69.828251][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 69.834674][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 69.837828][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 69.840776][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 69.844371][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 69.847929][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 69.850808][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 69.855415][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.204'. [ 70.072760][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.117761][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.262943][ T6813] mmap: syz.2.214 (6813) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.405948][ T6824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.409210][ T6825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.552599][ T6040] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.589786][ T6833] binder: 6832:6833 ioctl c018620c 2000000000c0 returned -22 [ 70.604374][ T5956] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.705428][ T6040] usb 7-1: Using ep0 maxpacket: 8 [ 70.709701][ T6040] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 70.713765][ T6040] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.717983][ T6040] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.721578][ T6040] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.725991][ T6040] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.731115][ T6040] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.734716][ T6040] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.789997][ T6844] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.792827][ T6844] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.795544][ T6844] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.799229][ T6844] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.803401][ T6844] vxlan0: entered promiscuous mode [ 70.933196][ T6849] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.933249][ T6849] overlayfs: failed to set xattr on upper [ 70.933254][ T6849] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.933259][ T6849] overlayfs: ...falling back to metacopy=off. [ 70.933263][ T6849] overlayfs: ...falling back to index=off. [ 70.933267][ T6849] overlayfs: ...falling back to uuid=null. [ 70.950311][ T6040] usb 7-1: usb_control_msg returned -32 [ 70.950339][ T6040] usbtmc 7-1:16.0: can't read capabilities [ 71.020405][ T6853] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 71.031527][ T6852] evm: overlay not supported [ 71.185043][ T6861] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 71.254706][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.254726][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.356506][ T6875] program syz.0.234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.532069][ T6894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6894 comm=syz.3.239 [ 71.542887][ T6898] syz.2.217: attempt to access beyond end of device [ 71.542887][ T6898] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 71.549173][ T6898] syz.2.217: attempt to access beyond end of device [ 71.549173][ T6898] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 71.555335][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 71.560412][ T6898] syz.2.217: attempt to access beyond end of device [ 71.560412][ T6898] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 71.565779][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 71.570552][ T6898] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 71.573709][ T6898] UDF-fs: Scanning with blocksize 512 failed [ 71.576475][ T6898] syz.2.217: attempt to access beyond end of device [ 71.576475][ T6898] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 71.581169][ T6898] syz.2.217: attempt to access beyond end of device [ 71.581169][ T6898] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 71.585436][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 71.589597][ T6898] syz.2.217: attempt to access beyond end of device [ 71.589597][ T6898] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 71.594457][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 71.598201][ T6898] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 71.601010][ T6884] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 71.601848][ T6898] UDF-fs: Scanning with blocksize 1024 failed [ 71.607086][ T6898] syz.2.217: attempt to access beyond end of device [ 71.607086][ T6898] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 71.612800][ T6898] syz.2.217: attempt to access beyond end of device [ 71.612800][ T6898] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 71.618104][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 71.622364][ T6898] syz.2.217: attempt to access beyond end of device [ 71.622364][ T6898] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 71.627643][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 71.632113][ T6898] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 71.635174][ T6898] UDF-fs: Scanning with blocksize 2048 failed [ 71.638997][ T6898] syz.2.217: attempt to access beyond end of device [ 71.638997][ T6898] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 71.645182][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 71.649196][ T6898] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 71.653856][ T6898] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 71.657037][ T6898] UDF-fs: Scanning with blocksize 4096 failed [ 71.660602][ T6898] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 71.785392][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 71.785404][ T40] audit: type=1400 audit(1752424998.171:49201): avc: denied { map } for pid=6921 comm="syz.0.245" path="socket:[12245]" dev="sockfs" ino=12245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.795532][ T40] audit: type=1400 audit(1752424998.171:49202): avc: denied { read } for pid=6921 comm="syz.0.245" path="socket:[12245]" dev="sockfs" ino=12245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.803031][ T40] audit: type=1400 audit(1752424998.181:49203): avc: denied { mount } for pid=6923 comm="syz.3.246" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.810383][ T5958] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 71.813847][ T24] usb 7-1: USB disconnect, device number 3 [ 71.895964][ T40] audit: type=1400 audit(1752424998.279:49204): avc: denied { unmount } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.987977][ T6936] xt_hashlimit: size too large, truncated to 1048576 [ 72.143557][ T40] audit: type=1400 audit(1752424998.516:49205): avc: denied { connect } for pid=6943 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.146411][ T60] tipc: Subscription rejected, illegal request [ 72.154791][ T40] audit: type=1400 audit(1752424998.516:49206): avc: denied { write } for pid=6943 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.170223][ T40] audit: type=1400 audit(1752424998.546:49207): avc: denied { write } for pid=6946 comm="syz.1.253" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.182110][ T40] audit: type=1400 audit(1752424998.555:49208): avc: denied { map } for pid=6946 comm="syz.1.253" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.183841][ T6947] binder_alloc: 6946: binder_alloc_buf, no vma [ 72.192236][ T40] audit: type=1400 audit(1752424998.555:49209): avc: denied { call } for pid=6946 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.194819][ T6948] binder: BINDER_SET_CONTEXT_MGR already set [ 72.205535][ T6948] binder: 6946:6948 ioctl 4018620d 2000000000c0 returned -16 [ 72.273463][ T40] audit: type=1400 audit(1752424998.644:49210): avc: denied { map } for pid=6958 comm="syz.3.256" path="socket:[15559]" dev="sockfs" ino=15559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.275267][ T6959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.381336][ T6970] input: syz0 as /devices/virtual/input/input8 [ 72.383981][ T6970] input: failed to attach handler leds to device input8, error: -6 [ 72.391344][ T6971] sp0: Synchronizing with TNC [ 72.548511][ T6992] tmpfs: Unknown parameter 'r_inodesF“x(’`¬œŠLäąäź½+·ś' [ 72.715513][ T5958] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.990072][ T7032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.156008][ T7043] binder: 7042:7043 ioctl c0306201 200000000080 returned -14 [ 73.205433][ T7045] Cannot find add_set index 0 as target [ 73.223257][ T7043] binder: 7042:7043 ioctl c0306201 200000000040 returned -14 [ 73.266295][ T7048] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 73.270806][ T7048] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 73.326446][ T7050] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 73.363647][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.363664][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.454687][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 73.483717][ T7073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 73.486206][ T7073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.490333][ T7073] vhci_hcd vhci_hcd.0: Device attached [ 73.519446][ T7071] __nla_validate_parse: 68 callbacks suppressed [ 73.519458][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 73.619450][ T24] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 73.625799][ T24] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.628895][ T24] usb 8-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 73.633075][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.635247][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 73.638214][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.641933][ T24] usb 8-1: config 0 descriptor?? [ 73.645199][ T7045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.748698][ T2298] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 73.752605][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.764825][ T7081] can0: slcan on ttyS3. [ 73.822577][ T7084] nbd: must specify a device to reconfigure [ 73.825477][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 73.828257][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 73.852123][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.856398][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.862542][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 73.865407][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 73.870561][ T7081] can0 (unregistered): slcan off ttyS3. [ 73.870648][ T24] usb 8-1: USB disconnect, device number 2 [ 73.920855][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 73.924869][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 73.928320][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.936128][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.940188][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.944595][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.949723][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.953890][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.985233][ T7094] geneve2: entered promiscuous mode [ 73.987388][ T7094] geneve2: entered allmulticast mode [ 74.107541][ T7097] netlink: 'syz.2.291': attribute type 12 has an invalid length. [ 74.110856][ T7097] netlink: 120 bytes leftover after parsing attributes in process `syz.2.291'. [ 74.166675][ T29] usb 5-1: usb_control_msg returned -32 [ 74.169013][ T29] usbtmc 5-1:16.0: can't read capabilities [ 74.256725][ T7101] ubi31: attaching mtd0 [ 74.259698][ T7101] ubi31: scanning is finished [ 74.262225][ T7101] ubi31: empty MTD device detected [ 74.316295][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.324626][ T7101] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 74.327074][ T7101] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 74.329477][ T7101] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 74.331770][ T7101] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 74.334225][ T7101] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 74.336791][ T7101] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 74.339362][ T7101] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 465770860 [ 74.342569][ T7101] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.346312][ T7104] ubi31: background thread "ubi_bgt31d" started, PID 7104 [ 74.404363][ T7107] netlink: 'syz.2.293': attribute type 6 has an invalid length. [ 74.407923][ T7107] netlink: 'syz.2.293': attribute type 6 has an invalid length. [ 74.467738][ T34] usb 8-1: device descriptor read/64, error -71 [ 74.556319][ T7118] 9pnet_fd: Insufficient options for proto=fd [ 74.741106][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.781417][ T7127] netlink: 'syz.1.300': attribute type 2 has an invalid length. [ 74.785858][ T7127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.881237][ T7128] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 9 [ 74.884804][ T34] usb 8-1: device descriptor read/64, error -71 [ 74.997605][ T34] usb usb8-port1: attempt power cycle [ 74.999540][ T1238] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.072418][ T1238] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.085040][ T6018] usb 5-1: USB disconnect, device number 2 [ 75.086202][ T7074] vhci_hcd: connection reset by peer [ 75.093174][ T12] vhci_hcd: stop threads [ 75.095087][ T12] vhci_hcd: release socket [ 75.097299][ T12] vhci_hcd: disconnect device [ 75.164515][ T1238] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.266547][ T1238] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.267341][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.280866][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.284704][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.288048][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.291068][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.293874][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.349004][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.371506][ T34] usb 8-1: device descriptor read/8, error -71 [ 75.422504][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.426088][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.430367][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 75.434380][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.441807][ T24] usb 6-1: config 0 descriptor?? [ 75.457270][ T7135] chnl_net:caif_netlink_parms(): no params data found [ 75.466869][ T1238] bridge_slave_1: left allmulticast mode [ 75.468813][ T1238] bridge_slave_1: left promiscuous mode [ 75.471218][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.471281][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.477573][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.483213][ T1238] bridge_slave_0: left allmulticast mode [ 75.484988][ T1238] bridge_slave_0: left promiscuous mode [ 75.486808][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.611499][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 75.642560][ T34] usb 8-1: device descriptor read/8, error -71 [ 75.654283][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 75.657284][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 75.663567][ T24] usb 6-1: USB disconnect, device number 2 [ 75.740834][ T1238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.747739][ T1238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.752212][ T1238] bond0 (unregistering): Released all slaves [ 75.762075][ T34] usb usb8-port1: unable to enumerate USB device [ 75.884219][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.888022][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.890846][ T7135] bridge_slave_0: entered allmulticast mode [ 75.893866][ T7135] bridge_slave_0: entered promiscuous mode [ 75.898006][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.900365][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.902751][ T7135] bridge_slave_1: entered allmulticast mode [ 75.907780][ T7135] bridge_slave_1: entered promiscuous mode [ 75.969986][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.980130][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 75.986568][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.064967][ T7166] batadv_slave_0: entered promiscuous mode [ 76.067964][ T7166] batadv_slave_0: entered allmulticast mode [ 76.073934][ T7135] team0: Port device team_slave_0 added [ 76.077699][ T7135] team0: Port device team_slave_1 added [ 76.169928][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.172878][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.184053][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.196072][ T1238] hsr_slave_0: left promiscuous mode [ 76.199053][ T1238] hsr_slave_1: left promiscuous mode [ 76.201526][ T1238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.204637][ T1238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.239220][ T1238] veth1_macvtap: left promiscuous mode [ 76.241885][ T1238] veth0_macvtap: left promiscuous mode [ 76.244232][ T1238] veth1_vlan: left promiscuous mode [ 76.246577][ T1238] veth0_vlan: left promiscuous mode [ 76.293244][ T7187] netfs: Couldn't get user pages (rc=-14) [ 76.624371][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.821763][ T1238] team0 (unregistering): Port device team_slave_1 removed [ 76.874693][ T1238] team0 (unregistering): Port device team_slave_0 removed [ 77.331317][ T5961] Bluetooth: hci0: command tx timeout [ 77.366540][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.368791][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.378143][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.435272][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 77.435282][ T40] audit: type=1400 audit(1752425003.751:49235): avc: denied { read } for pid=7200 comm="syz.0.313" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.448843][ T40] audit: type=1400 audit(1752425003.761:49236): avc: denied { open } for pid=7200 comm="syz.0.313" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.581646][ T7219] netlink: 'syz.1.318': attribute type 64 has an invalid length. [ 77.584616][ T7219] netlink: 'syz.1.318': attribute type 4 has an invalid length. [ 77.587082][ T7219] netlink: 152 bytes leftover after parsing attributes in process `syz.1.318'. [ 77.625681][ T7135] hsr_slave_0: entered promiscuous mode [ 77.628306][ T7135] hsr_slave_1: entered promiscuous mode [ 77.634087][ T7076] e1000 0000:00:06.0 eth0: Reset adapter [ 77.657655][ T7221] binfmt_misc: register: failed to install interpreter file ./file0 [ 77.707494][ T40] audit: type=1400 audit(1752425004.018:49237): avc: denied { read write } for pid=5962 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.718601][ T40] audit: type=1400 audit(1752425004.018:49238): avc: denied { open } for pid=5962 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.728376][ T40] audit: type=1400 audit(1752425004.018:49239): avc: denied { ioctl } for pid=5962 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.736825][ T40] audit: type=1400 audit(1752425004.018:49240): avc: denied { ioctl } for pid=7201 comm="syz.3.315" path="socket:[14833]" dev="sockfs" ino=14833 ioctlcmd=0x8949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.752159][ T40] audit: type=1400 audit(1752425004.058:49241): avc: denied { read write } for pid=5962 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.760801][ T40] audit: type=1400 audit(1752425004.068:49242): avc: denied { open } for pid=5962 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.768453][ T40] audit: type=1400 audit(1752425004.068:49243): avc: denied { ioctl } for pid=5962 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.776770][ T40] audit: type=1400 audit(1752425004.068:49244): avc: denied { execmem } for pid=7225 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.777368][ T7227] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 77.854558][ T7240] ------------[ cut here ]------------ [ 77.856567][ T7240] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9 [ 77.859940][ T7240] shift exponent 8550 is too large for 32-bit type 'int' [ 77.863285][ T7240] CPU: 2 UID: 0 PID: 7240 Comm: syz.1.323 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 77.863300][ T7240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.863308][ T7240] Call Trace: [ 77.863312][ T7240] [ 77.863317][ T7240] dump_stack_lvl+0x16c/0x1f0 [ 77.863353][ T7240] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 77.863383][ T7240] aio_iiro_16_attach.cold+0x19/0x1e [ 77.863399][ T7240] comedi_device_attach+0x3b3/0x900 [ 77.863419][ T7240] do_devconfig_ioctl+0x1a7/0x580 [ 77.863436][ T7240] ? avc_has_extended_perms+0xa4b/0x1090 [ 77.863447][ T7240] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 77.863508][ T7240] ? find_held_lock+0x2b/0x80 [ 77.863526][ T7240] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 77.863542][ T7240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.863555][ T7240] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 77.863567][ T7240] ? do_vfs_ioctl+0x523/0x1a60 [ 77.863579][ T7240] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.863594][ T7240] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 77.863610][ T7240] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 77.863626][ T7240] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.863652][ T7240] ? hook_file_ioctl_common+0x145/0x410 [ 77.863673][ T7240] ? selinux_file_ioctl+0x180/0x270 [ 77.863687][ T7240] ? selinux_file_ioctl+0xb4/0x270 [ 77.863704][ T7240] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 77.863717][ T7240] __x64_sys_ioctl+0x18e/0x210 [ 77.863731][ T7240] do_syscall_64+0xcd/0x4c0 [ 77.863749][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.863761][ T7240] RIP: 0033:0x7f2f9f58e929 [ 77.863770][ T7240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.863781][ T7240] RSP: 002b:00007f2fa045b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.863791][ T7240] RAX: ffffffffffffffda RBX: 00007f2f9f7b6080 RCX: 00007f2f9f58e929 [ 77.863798][ T7240] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 77.863805][ T7240] RBP: 00007f2f9f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 77.863811][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.863817][ T7240] R13: 0000000000000001 R14: 00007f2f9f7b6080 R15: 00007fff30b38b08 [ 77.863831][ T7240] [ 77.863835][ T7240] ---[ end trace ]--- [ 77.914508][ T7076] e1000 0000:00:06.0 eth0: Reset adapter [ 77.916263][ T7240] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 77.916279][ T7240] CPU: 3 UID: 0 PID: 7240 Comm: syz.1.323 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 77.916297][ T7240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.916304][ T7240] Call Trace: [ 77.916309][ T7240] [ 77.916314][ T7240] dump_stack_lvl+0x3d/0x1f0 [ 77.916335][ T7240] panic+0x71c/0x800 [ 77.916354][ T7240] ? __pfx_panic+0x10/0x10 [ 77.916390][ T7240] ? __pfx__printk+0x10/0x10 [ 77.916430][ T7240] check_panic_on_warn+0xab/0xb0 [ 77.916452][ T7240] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 77.916478][ T7240] aio_iiro_16_attach.cold+0x19/0x1e [ 77.916495][ T7240] comedi_device_attach+0x3b3/0x900 [ 77.916525][ T7240] do_devconfig_ioctl+0x1a7/0x580 [ 77.916549][ T7240] ? avc_has_extended_perms+0xa4b/0x1090 [ 77.916567][ T7240] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 77.916599][ T7240] ? find_held_lock+0x2b/0x80 [ 77.916624][ T7240] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 77.916648][ T7240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.916668][ T7240] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 77.916685][ T7240] ? do_vfs_ioctl+0x523/0x1a60 [ 77.916705][ T7240] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.916729][ T7240] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 77.916752][ T7240] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 77.916769][ T7240] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.916789][ T7240] ? hook_file_ioctl_common+0x145/0x410 [ 77.916810][ T7240] ? selinux_file_ioctl+0x180/0x270 [ 77.916826][ T7240] ? selinux_file_ioctl+0xb4/0x270 [ 77.916848][ T7240] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 77.916868][ T7240] __x64_sys_ioctl+0x18e/0x210 [ 77.916888][ T7240] do_syscall_64+0xcd/0x4c0 [ 77.916914][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.916934][ T7240] RIP: 0033:0x7f2f9f58e929 [ 77.916949][ T7240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.916965][ T7240] RSP: 002b:00007f2fa045b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.916983][ T7240] RAX: ffffffffffffffda RBX: 00007f2f9f7b6080 RCX: 00007f2f9f58e929 [ 77.916993][ T7240] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 77.917007][ T7240] RBP: 00007f2f9f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 77.917017][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.917027][ T7240] R13: 0000000000000001 R14: 00007f2f9f7b6080 R15: 00007fff30b38b08 [ 77.917050][ T7240] [ 77.923112][ T7240] Kernel Offset: disabled VM DIAGNOSIS: 15:05:16 Registers: info registers vcpu 0 CPU#0 RAX=00000000000d9f7b RBX=0000000000000000 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de31064 RDI=ffffffff8c158660 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6718000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2fa045bd58 CR3=0000000033efa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f9f785488 00007f2f9f785480 00007f2f9f785478 00007f2f9f785450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fa02ed100 00007f2f9f785440 00007f2f9f785458 00007f2f9f7854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f9f785498 00007f2f9f785490 00007f2f9f785488 00007f2f9f785480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000823e3 RBX=0000000000000001 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de31064 RDI=ffffffff8c158660 RBP=ffffed1003bd8488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6818000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2fa047bf98 CR3=00000000556fb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af385488 00007fe4af385480 00007fe4af385478 00007fe4af385450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4afeed100 00007fe4af385440 00007fe4af385458 00007fe4af3854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af385498 00007fe4af385490 00007fe4af385488 00007fe4af385480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000027 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb315 RDI=ffffffff9b0c22a0 RBP=ffffffff9b0c2260 RSP=ffffc900032374e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000027 R14=ffffffff9b0c2260 R15=ffffffff855bb2b0 RIP=ffffffff855bb33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2fa045b6c0 ffffffff 00c00000 GS =0000 ffff8880d6918000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2fa045af98 CR3=0000000033efa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000010000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea48c4670 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13f3811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13f3811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13f3811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13f3811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13f3811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13f3811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000083ec5 RBX=0000000000000003 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de31064 RDI=ffffffff8c158660 RBP=ffffed1003c5b000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2d8000 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a18000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559391e5c918 CR3=00000000556fb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006e61 6c765f3068746576 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af385488 00007fe4af385480 00007fe4af385478 00007fe4af385450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4afeed100 00007fe4af385440 00007fe4af385458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4af385498 00007fe4af385490 00007fe4af385488 00007fe4af385480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000