last executing test programs: 40.070561829s ago: executing program 1 (id=145): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000700040003000400028004000180"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x41, 0xb, 0x70bc27, 0x4000, {0x1}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}}, 0x4040080) r4 = openat(0xffffffffffffffff, &(0x7f0000001d80)='./file0\x00', 0x400000, 0x10d) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000001dc0)=@isdn, &(0x7f0000001e40)=0x80) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x40) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="67a8c9131520493d3b6b", 0xa}, {&(0x7f0000000140)="d7f6dd1cdd6a7e4cc863ad6ad9a413f1c7d6668eb399a3f951a51c47c630f066b0c5eb0948196a3bacaec1f3e21c8af67c06802a59498f8b4b279b566ade424a769d9ed851ba6f28885341038265b99019082c953a450a05011c03798015049a5bb0cec188f9a5263d84c0e38653d223db2d3a5b2f872a802e6fb67db5984b75e0c76712dabd03cf16d94feb0abd4537ee9c2347ab7fa03269447518993d1e3b1e8f476e45c02657404d4679d91d15d735c7dc6cd7b18a1f6409a46aee82301b", 0xc0}, {&(0x7f00000002c0)="0f1e3b772395f40152189e67006dbf823e6b30fc601fff01a6962b578d20adaeaf3a69725092838069493addd4d88cb8400ddcd33bd2141a6787cc7706f82c775d1398a0f4fa6623d72dc93a9167c7698e01c8720a33af4fd0eecc28cde34b7de1b99220f77dbdfe52c655014db9901b3a0c7da164c804792d06055bfa650ab3f8541a2336187782d894fbbd04765b2e4cc43bb9fe7f61103edeacb3ec0839adceff8ac076fb127817cfd36a20d3", 0xae}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f00000003c0)="be759b54503f018ae294f160919595ade078d7be9c0b06b24527ca6f97ee10c5e5e45080cf6932fc8ec2981ec709ec90a9fca357943be584f5f99fd854a71a60bd741655f96888b317eb7eac92a19ae21fe6430de64e144b9f5bcb98981e50b7f2db0566a4fa9f103f8a5c7d08109827feb4e76653b26fd36a1c9df58c06a2a07a9fadf9", 0x84}, {&(0x7f0000000480)="0332ca345ce7240b96a38ebd20e2b7a1807a9cabeff7008cc31890249cb88a3a46506eacf7304be6a639495f47145aefe1e7b47fbe8b7398d0286aee36f4c78a8f965cd6951bd08488f14f863b78828a0526d8e7a915a054642fd394af0824e6da0cd70726dc25a5856457cbcc707bc5f766d5a9c9274dfdcd121f1162f88bc4b01b5b045eb5012d2a9526c4ae0b451fbbd8a9b1fd32a466a1321dfb43f2", 0x9e}], 0x6, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x400}}], 0x1, 0xc0) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) syz_clone(0x2008000, &(0x7f0000001b80)="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", 0xfd, &(0x7f0000000540), &(0x7f0000000a40), &(0x7f0000001c80)="a3f09a63b8c276ad91291a064b90c8ec9c91ddebcc49ff979fe49195ba1ac9438f2127879eda8283dacfc199af10fd07c62e5da73cb33ab2d601c7b97767a0e6e666212b8c7ede42e8d5d955f0b44b1ed928f596d340d26ee44e9c51261efe7caef83edfc09a77940cc93c85caf51a58105517b74aaf1d8df2cb685cb725d1689eb14b3c1122dbc2d0186a8a78a7293e4e12b2f70cb42dfff51502d26018cc2f38a90767125feec033d644169a1e826ae77b76cc923ad5503844f70f06e5a2e29b5f44b76683e5b78f616bb76c93a81ea6cde1") r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x35314258, 0x0, 0x0, [{0x6, 0x1}, {0x9, 0x9}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x6, 0x7}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x1c5f20034c00f9c5, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 39.999434665s ago: executing program 1 (id=148): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delchain={0x24, 0x66, 0xf31, 0xfffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4001) 39.998851236s ago: executing program 1 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x40}}, 0x8044) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x8d}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x400, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xa, 0xffff}}}, 0x24}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x58}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r9) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r10, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) 39.929131314s ago: executing program 1 (id=152): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x4}, @ldst={0x1, 0x3, 0x4, 0x4, 0x0, 0x6, 0xfffffffffffffffc}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000fdff00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 39.928961565s ago: executing program 1 (id=153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c00050002"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 39.850015128s ago: executing program 1 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x541}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7105020602020197bc68d081070601af027f0b"], 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r10 = dup(r9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r11}, 0x18) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x696260df2df97e76, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="1338077512fc9d374b2c393bd69c9a2630fca91b2bd814dd4cefdda19cba77e20612d7eef8a9f330cb89173ef72b40ba76b803e227270566896abea9f35cf5aa4e9697f751dd7a4bb5b01c2fc8f5ef24d00a198972e919bb2f19bf071d58682b29b43ed493c457ffa27961407b4cd5c223f8f1fb576040cf7e258b235ab3c0eb", 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) 24.873608245s ago: executing program 32 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x541}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7105020602020197bc68d081070601af027f0b"], 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r10 = dup(r9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r11}, 0x18) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x696260df2df97e76, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="1338077512fc9d374b2c393bd69c9a2630fca91b2bd814dd4cefdda19cba77e20612d7eef8a9f330cb89173ef72b40ba76b803e227270566896abea9f35cf5aa4e9697f751dd7a4bb5b01c2fc8f5ef24d00a198972e919bb2f19bf071d58682b29b43ed493c457ffa27961407b4cd5c223f8f1fb576040cf7e258b235ab3c0eb", 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) 24.440559674s ago: executing program 3 (id=399): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x800) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2, r0}) read$FUSE(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000000)={0x2, 0x100, 0x1010008}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/53, 0x2c}], 0x0, 0x0, 0xfffffffd) 24.439511149s ago: executing program 3 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x28, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd24, 0x21dfdbfa, {0x0, 0x0, 0x0, r3, {0x4, 0xfff0}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x5, 0xa4a, 0x512, {0x7, 0x0, 0x4, 0x0, 0x5, 0x7a12}, {0x7, 0x2, 0x3, 0x4, 0x6, 0x7}, 0x9ab, 0x2, 0x4}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) chdir(&(0x7f0000000280)='./file0/file0/..\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 24.339615792s ago: executing program 3 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r1, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 32) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) (rerun: 32) 24.018833649s ago: executing program 3 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'veth0_to_bond\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x6125}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file4\x00', 0x2644a0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x308d, r2}, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000005800)='./file0\x00', &(0x7f0000005840)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) ptrace(0x4207, r4) tkill(r4, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000001b00d115000000000000000000000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x40001) 23.900535287s ago: executing program 3 (id=408): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="070000009b2f91a3001dc15515a46f16fd07e8a9f457ae768af5caafd7a73db2b43e08ac3eb8798348eb85f5f0e6bebd2eca70e6ecdb1e9f21ec73a2b374eb032981449ba22d4338f06bee2b5ba930c4cb858b102e9402b5ec6e331223e5b848261705af353027e58e56cabd497ab8928b80a9da29d0e9dfc8c0376afb27673671ec6a047db5fb5e75", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x8085}, 0x24000800) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, r1, 0xd, 0x6, &(0x7f0000000000)="01ffff000000", 0x9, 0x1, 0xb57, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) 23.670056396s ago: executing program 3 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (rerun: 64) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r2}, 0x14) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x5a, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0x1, 0xfff1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) 23.55435277s ago: executing program 33 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (rerun: 64) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r2}, 0x14) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x5a, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0x1, 0xfff1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.589331387s ago: executing program 0 (id=802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000009500"/24], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)={0x8080000000000000, 0xd000, 0x7fffffffffffffff, 0x2, 0x3}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000580)="f7790066baa00066b86b42f3450f0966ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c403394e21820f47a753c3", 0x4c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8801) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000840)=r3}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1a, 0x17, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x1, 0x8d, &(0x7f0000000a40)=""/141, 0x41100, 0x10, '\x00', r9, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r3, 0x1, 0x0, &(0x7f0000000c00)=[{0x2, 0x1, 0x5, 0xa}], 0x10, 0x3}, 0x94) write$sysctl(r6, &(0x7f0000000040)='6\x00', 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000007f00000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000008d3700000300000000000000000000000000000000a90000cf7c9515baee0b1a02d7205026c1de065e77fedaba338b3b12724967baab02d1fb3b1877b4cc2fed2ae9772609"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) r11 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE(r11, 0xab02, 0x3) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="29000c00060001000000018142f7"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) syz_open_dev$mouse(&(0x7f0000000440), 0x1, 0x103080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000423fb4d61a7c1fd8b01f9a26d21700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000400"/28], 0x50) 3.250151487s ago: executing program 0 (id=803): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000040)={0x0, 0xc02, 0xc742, 0x4, 0x1, [0x0, 0x0, 0x0], [0xd831, 0x2, 0x1, 0x401], [0x1, 0x4, 0xbc4, 0x4], [0x10000, 0x4, 0xf38, 0xfff]}) (rerun: 32) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) r3 = dup3(r0, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000400)={0x3, r6}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r0}) (async) r10 = eventfd2(0x4, 0x80800) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={r11, 0x0, r12, 0x5, 0x4, 0x2, 0x5, 0xe0b0, 0x1, 0x6, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000005c0)={0x10002, 0x0, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x2, 0xfd, 0x8001}, {0x4, 0x91, 0x2, 0x9}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000680)={r0, 0x10001, 0x7, 0x6}) (async) socketpair(0x2, 0x2, 0xc2, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r14, r13, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x0, 0x6, 0xe7, 0x7}, {0x6, 0xd, 0x3, 0x1}]}) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f0000000780)={0x1000, 0x7, 0x1, 0x7f}, 0x8) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000a40)={0x4, &(0x7f00000007c0)=[{}, {@none}, {}, {@fixed}]}) (rerun: 64) readv(r10, &(0x7f0000001ec0)=[{&(0x7f0000000a80)=""/124, 0x7c}, {&(0x7f0000000b00)=""/4, 0x4}, {&(0x7f0000000b40)=""/231, 0xe7}, {&(0x7f0000000c40)=""/135, 0x87}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000000e00)=""/133, 0x85}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x7) (async) read$FUSE(r13, &(0x7f0000001f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$security_capability(r14, &(0x7f0000001f40), &(0x7f0000003fc0)=@v3={0x3000000, [{0xf6e4, 0x6}, {0x0, 0xfff}], r16}, 0x18, 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000004000)='htcp\x00', 0x5) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004080), r15) sendmsg$ETHTOOL_MSG_EEE_SET(r14, &(0x7f00000046c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004680)={&(0x7f00000040c0)={0x598, r17, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "7c1817085e7597f2a0abc1aa728e00fdf03269ca9677632088a8ffaf71c9b04b71d7177d1389de42e326b82691b482ea4b62d36ca5950d87dbc27a7cf8700da83cc457193e90904a9b2bf3d092b800af02e7eba50e5da0258f44c13ca43a8049c93e6437eb261a99a9262e5a3750db550c00fecda2dedf07e2990bfad287809d410f36051dbc8ed158"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "89e91f37081904d99c3cd5e2ebc5f4f02310d8a7f101b76829fbab452810b1dff64bd69d15a7e11d57669297d50c51b2f1e41db44b00ff9b6b3c0c69bccfe088b2ecaa5d7edabca578f84198bdc186b958b170fd89b4bd83b6c965c3eae8cc8c52886b11769adfebfe74e4992cf79074ae8659f02f118a7927e4af75d7795908284fe9897968cdd706cad54d6ea91dab932112ae589b6d0fe6f33ac0b865f1de8544596932e6e46b23a157ab028308f6214e82da10356a27e1455ec152646d8c6fb7aaa1a33f384eb2c2d48182246f741edde08f8d5c12c0165bfba7de5e764f7c5fd6acc02ce00903"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x3fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x22, 0x5, "fac3a8cab5c7c34c654ae6a13da7200243ef475b6fd07f7ff1bf32e7bf37"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x21, 0x2, '/selinux/avc/cache_threshold\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe45a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c4b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'security.capability\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x21, 0x2, '/selinux/avc/cache_threshold\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'security.capability\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')})-,{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'htcp\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'htcp\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'htcp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'htcp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%^-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x19}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'security.capability\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce10}]}]}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "ad33abfee3754951d0828605e8aab96d90dd1e069859909dc4361e212177a40e8f825612eb76dd94eec654bf7b96378f44e6cd04"}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "a8fa2b4e9495ac9e016e49c289659b7cceaf90ec946b0578455fa17643b0015067ccc1466e10fed840fe8d89a1f43e270fbf5170562c56b867239733d33ad731ec9bf5e4050979aec420b14026b4b836c461b77a3ecd0a5e4dbb90e4e62b28c06df51e011a7810f176b01260cf2876c4490a1a22cacb37c4efd91a797958906939b574129770381a9fe9ef24605054b7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc2, 0x4, "e9d9d8654a5eba29176e1abe2cff893a0a82a0c73dcb7359477d9059d9af5a9101c68e20446ffeff1d41532c6709e236ce1d0893b7f2316e4b589f1bff9043fbd7242263eafa3726be556a5e19e9ec186c38b66ad5941303be74335ccdfec34af167c46e9ccbed4ea2b54303a011476a26275c238835b81e69ca5b0517e1eed3df0b97615f368248869caf99a08f2040b52558bc17ad8270a6806f860fbb1e347701a233d47661c37cc774f11eeb37ea0c83df99a9bf8dcc630f0ffb9c83"}]}]}, 0x598}, 0x1, 0x0, 0x0, 0x20008810}, 0x8080) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f0000004700)={r12, 0xd4d, 0x20000, 0x5, 0x0, [0x0, 0x0, 0x0], [0xc, 0x6, 0x0, 0x8000], [0x1, 0x8, 0x4, 0x3ff], [0x3, 0x8000000000000000, 0xe749, 0xf6]}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r13, 0xc00c642e, &(0x7f0000004780)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000047c0)={r12, 0x0, 0x4, 0x9, 0x1, [r2, r18, r1, r19], [0x7fff, 0x80000001, 0x4, 0x6], [0x0, 0x0, 0x6], [0xffffffffffffffff, 0x9, 0x0, 0x7]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000004a00)={0x100, 0x2, &(0x7f0000004840)=[r9, r9], &(0x7f0000004880)=[0x0], &(0x7f0000004980)=[r5, r5, r4, r9, r8, 0x0, r7, r9, r4], &(0x7f00000049c0)=[0x2, 0x7232, 0x7, 0xa00, 0x9], 0x0, 0x7}) (rerun: 32) 3.24943456s ago: executing program 0 (id=804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0xffffffffffffffff, 0xa}}, 0x30) r2 = syz_io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0xbd84, 0x0, 0x1, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x22d2, 0x20, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x140c, 0x335, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) syz_genetlink_get_family_id$nfc(&(0x7f0000002f00), r1) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f00), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r9, 0x4068aea3, &(0x7f00000024c0)={0xd5, 0x0, 0x2}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r9, 0x4068aea3, &(0x7f00000024c0)={0xd5, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r13, 0x1, 0xb, 0x0, &(0x7f0000000040)) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r14, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r14, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r14, 0x40083}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r14, 0x40083}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x5, 0x4, {{0x1a, 0x4, 0x2, 0x8, 0x68, 0x66, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@generic={0x7, 0xc, "1786c99ff1dc5f6b1c57"}, @cipso={0x86, 0x2c, 0x1, [{0x2, 0xc, "510ea57a248ab3302c48"}, {0x6, 0xd, "885df9f767add3520a2c78"}, {0x6, 0x3, '\"'}, {0x2, 0xa, "c35f1c0de7cd19e0"}]}, @noop, @end, @cipso={0x86, 0x16, 0x3, [{0x7, 0x2}, {0x0, 0xe, "ca0e184eb440de3fb0eb11e0"}]}, @end, @end]}}}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="b90b226c6b4f72d222603d02a034b5321915828c408997d0ab12726943de3c1b7f55e4725d8a20d7a054fbb27524ddec4a4839580c6d9eb0a9afd60b23350c13e78835614d7c292b33794a0faa22e761629fda11d455ce4690ba525d3d735ea5d2e0548f2dbe14dbd1fcd669802f77c612e93ebb303efdb78e3c4023d3346db606e8f5f5794f778adfddd4460114b19574a3d298b1d6328ef2b80ba331b2e0463bf7b3985ffde2b5a1d360b29e6d453eb64f617f6dd33745caa1a5c54aa660cde937e015bc1677e7b2e5529af37b758f10f81e5cd7ec29f4f2671cf1667c78130ff63acbf213b19ec2", 0xe9}], 0x1, &(0x7f0000000540)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0xb, [@rand_addr=0xfffffffa, @local, @empty, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x74, 0x0, 0x5, [0x4, 0x342, 0x100, 0x2]}, @end, @ssrr={0x89, 0x7, 0x52, [@multicast1]}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @loopback, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @broadcast, @private=0xa010102}}}], 0xe8}, 0x4000081) setsockopt$inet6_opts(r12, 0x29, 0x39, &(0x7f0000000140)=@routing={0x11, 0x4, 0x1, 0x9a, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1]}, 0x28) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000f2b000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000700)="ac66b9620a000066b81800000066ba000000000f3066b99903000066b80d00000066ba000000000f30640f01d1bad004b80000efbaf80c66b8689f6b8f66efbafc0c66b80078000066ef66b9460300000f3266b8f1ffffff0f23d80f21f86635400000b00f23f866dc2f0fdf500f", 0x6e}], 0x1, 0x1, 0x0, 0x0) 2.997806731s ago: executing program 0 (id=810): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x81, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa34a}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd53f, 0x2, 0xb4}, {0x6, 0x24, 0x1a, 0xb8b, 0x65}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x3, 0x46}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf8, 0x18, 0x1}}}}}}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x425}}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) unshare(0x10020000) 2.890205322s ago: executing program 5 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.788100272s ago: executing program 5 (id=818): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ae15000008009f000d000000080026000816"], 0x40}}, 0x200040b4) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) 2.787390055s ago: executing program 5 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e063dbbad441", 0xa6}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc429446bc2ddb467d", 0xc4}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d020203535947f6cf8", 0x5f}, {&(0x7f00000023c0)="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", 0xd20}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c54", 0x11}], 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="140008000000000029000000430000000200000000000000"], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.729595912s ago: executing program 5 (id=821): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000780)="d63e9ffb", 0x4}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) accept4(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0xbb, 0x800) sendmmsg(r1, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000005b80)="e7dae6dd2f4204adea4f9cd63c5ee8355798db7784262fa704fff6d993ffefd17adba7fd6625f6468f117d4d7d13801868530b58e086ad2f1e891d943a83d66747e832fa7654b52e24a43f182178353783acdac1194be4da266436d5f0", 0x5d}, {&(0x7f0000005c00)="1d985594b60079c7a815a46b6e5e8bbf93043852bc15d18ee5c8dce9aa", 0x1d}, {&(0x7f0000005c40)="c8d27b7e6878", 0x6}], 0x3}}], 0x1, 0x4000010) 2.019207232s ago: executing program 4 (id=833): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x3, r1, r1, 0x5, 0x3719, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000140)="11cd", 0x2, 0x7fff800000000002}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r1, r1, 0x1000, 0x5, 0x9}) 2.018995682s ago: executing program 4 (id=834): syz_open_dev$swradio(0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\'@,'}, {}, {0x20, 'sched_switch\x00'}, {0x20, '\xff\xff'}, {0x20, '\x00'}, {0x20, '[/*+)~\xcc/+]]'}], 0xa, "443294e15c228283b7fd27debb664971d98931dd6310e817b45c97b0c8e9464d0e8447730019e4578b538cf495"}, 0x5c) 1.588345992s ago: executing program 0 (id=837): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.420485201s ago: executing program 5 (id=838): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)={0x0, 0xd}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b07, 0x0) 1.068106698s ago: executing program 4 (id=839): prctl$PR_SCHED_CORE(0x3e, 0x8, 0x0, 0x2, 0x0) 1.067863445s ago: executing program 4 (id=840): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x2011}) write$FUSE_NOTIFY_RESEND(r8, &(0x7f0000000000)={0x14}, 0x14) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r10, r10, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 980.355306ms ago: executing program 2 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc993}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) 879.698054ms ago: executing program 2 (id=842): ioprio_set$pid(0x1, 0x0, 0x6000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x4f27, 0x5, 0x80000000, 0x1, 0x66, 0x4c7, 0x0, 0x8000, 0x40a, 0x104, 0xffffffff, 0x1, 0x9, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x400, 0x2086, 0x22, 0xd27, 0x20001e5c, 0x7fff, 0x8002, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 879.511965ms ago: executing program 2 (id=843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2c000804}, 0x0) 819.62068ms ago: executing program 2 (id=844): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000de000002"], 0x48) 689.799602ms ago: executing program 2 (id=845): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 640.244083ms ago: executing program 2 (id=846): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 130.271462ms ago: executing program 4 (id=847): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) gettid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = dup3(r3, r0, 0x80000) ioctl$NBD_DO_IT(r5, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 376.549µs ago: executing program 5 (id=848): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x12, 0x18000, @remote, 0x40000, 0x1000}, 0x80, 0x0}, 0x0) 64.568µs ago: executing program 0 (id=849): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20040600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r3, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240), 0xc) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=850): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0xa, 0xcb392eee3725d5dd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): team_slave_1 added [ 47.072917][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.076057][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.086722][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.093923][ T5944] team0: Port device team_slave_0 added [ 47.097475][ T5944] team0: Port device team_slave_1 added [ 47.179896][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.182092][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.190202][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.194805][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.196953][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.204976][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.208964][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.211182][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.219970][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.235109][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.237344][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.245720][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.299865][ T5949] hsr_slave_0: entered promiscuous mode [ 47.302730][ T5949] hsr_slave_1: entered promiscuous mode [ 47.306216][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 47.308710][ T5949] Cannot create hsr debugfs directory [ 47.389112][ T5945] hsr_slave_0: entered promiscuous mode [ 47.392150][ T5945] hsr_slave_1: entered promiscuous mode [ 47.395235][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 47.397663][ T5945] Cannot create hsr debugfs directory [ 47.433779][ T5944] hsr_slave_0: entered promiscuous mode [ 47.436995][ T5944] hsr_slave_1: entered promiscuous mode [ 47.439069][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 47.440790][ T5944] Cannot create hsr debugfs directory [ 47.735756][ T5311] Bluetooth: hci0: command tx timeout [ 47.735786][ T63] Bluetooth: hci3: command tx timeout [ 47.735859][ T5960] Bluetooth: hci1: command tx timeout [ 47.736097][ T5960] Bluetooth: hci2: command tx timeout [ 47.798504][ T5958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.809429][ T5958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.818301][ T5958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.825791][ T5958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.887585][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.899473][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.906288][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.912953][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.978751][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.983592][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.988600][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.992824][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.035894][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.042868][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.050557][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.057047][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.109012][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.129157][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.134455][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.148254][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.150596][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.157778][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.163572][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.166069][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.176147][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.178376][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.187912][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.190171][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.217124][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.233437][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.251433][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.261260][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.264763][ T40] audit: type=1400 audit(1753767631.265:89): avc: denied { sys_module } for pid=5958 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.266058][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.275557][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.282460][ T5945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.299236][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.301465][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.304720][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.306927][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.310113][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.312322][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.357364][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.373043][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.388348][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.428381][ T5945] veth0_vlan: entered promiscuous mode [ 48.440992][ T5945] veth1_vlan: entered promiscuous mode [ 48.447457][ T5958] veth0_vlan: entered promiscuous mode [ 48.453507][ T5958] veth1_vlan: entered promiscuous mode [ 48.468135][ T5945] veth0_macvtap: entered promiscuous mode [ 48.471895][ T5945] veth1_macvtap: entered promiscuous mode [ 48.475306][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.495611][ T5958] veth0_macvtap: entered promiscuous mode [ 48.500068][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.509856][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.512793][ T5958] veth1_macvtap: entered promiscuous mode [ 48.520906][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.527084][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.530637][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.534014][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.538753][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.555677][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.563058][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.575496][ T5949] veth0_vlan: entered promiscuous mode [ 48.579375][ T5958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.582098][ T5958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.585179][ T5958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.587881][ T5958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.616396][ T5949] veth1_vlan: entered promiscuous mode [ 48.641527][ T5944] veth0_vlan: entered promiscuous mode [ 48.646344][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.649536][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.658697][ T5944] veth1_vlan: entered promiscuous mode [ 48.671173][ T5949] veth0_macvtap: entered promiscuous mode [ 48.679097][ T5949] veth1_macvtap: entered promiscuous mode [ 48.683681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.688658][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.708143][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.714315][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.717376][ T5944] veth0_macvtap: entered promiscuous mode [ 48.724293][ T5944] veth1_macvtap: entered promiscuous mode [ 48.725762][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.729777][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.752208][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.755605][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.756821][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.767833][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.776278][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.780398][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.782969][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.786631][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.789769][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.793739][ T6036] syz.0.1: attempt to access beyond end of device [ 48.793739][ T6036] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 48.795115][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.801278][ T6036] XFS (nbd0): SB validate failed with error -5. [ 48.801496][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.807406][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.810114][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.831810][ T6036] binder: binder_mmap: 6035 200000000000-200000b36000 bad vm_flags failed -1 [ 48.880150][ T6046] netlink: 'syz.0.5': attribute type 3 has an invalid length. [ 48.882914][ T6046] netlink: 'syz.0.5': attribute type 3 has an invalid length. [ 48.891334][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.893823][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.922893][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.926257][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.929483][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.931900][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.953987][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.958755][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.001413][ T838] IPVS: starting estimator thread 0... [ 49.007615][ T6053] ======================================================= [ 49.007615][ T6053] WARNING: The mand mount option has been deprecated and [ 49.007615][ T6053] and is ignored by this kernel. Remove the mand [ 49.007615][ T6053] option from the mount to silence this warning. [ 49.007615][ T6053] ======================================================= [ 49.095082][ T6056] IPVS: using max 41 ests per chain, 98400 per kthread [ 49.198890][ T6071] syz.3.13: attempt to access beyond end of device [ 49.198890][ T6071] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 49.202903][ T6071] XFS (nbd3): SB validate failed with error -5. [ 49.223997][ T6071] binder: binder_mmap: 6070 200000000000-200000b36000 bad vm_flags failed -1 [ 49.236892][ T6065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 49.238950][ T6065] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 49.263018][ T6065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 49.266392][ T6065] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 49.286033][ T6081] netlink: 'syz.3.15': attribute type 3 has an invalid length. [ 49.289458][ T6081] netlink: 'syz.3.15': attribute type 3 has an invalid length. [ 49.302757][ T6065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 49.305508][ T6065] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 49.316654][ T6065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 49.318670][ T6065] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 49.369540][ T838] IPVS: starting estimator thread 0... [ 49.452252][ T6098] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 49.464782][ T6098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.465085][ T6091] IPVS: using max 29 ests per chain, 69600 per kthread [ 49.468829][ T6098] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 49.535096][ T6113] bridge_slave_0: left allmulticast mode [ 49.536435][ T6111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.537007][ T6113] bridge_slave_0: left promiscuous mode [ 49.542224][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.550484][ T6113] bridge_slave_1: left allmulticast mode [ 49.552366][ T6113] bridge_slave_1: left promiscuous mode [ 49.554969][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.569694][ T6113] bond0: (slave bond_slave_0): Releasing backup interface [ 49.577254][ T6113] bond0: (slave bond_slave_1): Releasing backup interface [ 49.583882][ T6116] netlink: 'syz.1.26': attribute type 10 has an invalid length. [ 49.590533][ T6113] team0: Port device team_slave_0 removed [ 49.596317][ T6113] team0: Port device team_slave_1 removed [ 49.599366][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.602566][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.607848][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.610839][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.655285][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.663206][ T6116] team0: Port device bond0 added [ 49.840251][ T6131] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.29'. [ 49.849756][ T6134] program syz.2.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.856957][ T6134] trusted_key: encrypted_key: insufficient parameters specified [ 49.874461][ T6128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.891405][ T6137] nbd: must specify an index to disconnect [ 49.900358][ T6137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.953537][ T6139] program syz.0.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.961345][ T6142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6142 comm=syz.3.36 [ 49.965290][ T6143] tmpfs: Cannot change global quota limit on remount [ 50.021043][ T6142] veth3: entered promiscuous mode [ 50.136637][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 50.151257][ T6157] autofs: Unknown parameter '@' [ 50.180015][ T6160] sp0: Synchronizing with TNC [ 50.198038][ T6162] sg_write: data in/out 1935636032/251 bytes for SCSI command 0x0-- guessing data in; [ 50.198038][ T6162] program syz.2.45 not setting count and/or reply_len properly [ 50.208348][ T6165] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 50.211505][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 50.229548][ T6162] veth0_virt_wifi: entered promiscuous mode [ 50.232678][ T6162] batadv_slave_0: entered promiscuous mode [ 50.295788][ T6170] loop2: detected capacity change from 0 to 7 [ 50.301607][ T6170] loop2: [ 50.302956][ T6170] loop2: partition table partially beyond EOD, truncated [ 50.354205][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 50.358129][ T6176] Zero length message leads to an empty skb [ 50.361136][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 50.375563][ T6176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.456050][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 50.456062][ T40] audit: type=1400 audit(1753767633.465:207): avc: denied { read write } for pid=6184 comm="syz.2.54" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.471118][ T40] audit: type=1400 audit(1753767633.475:208): avc: denied { open } for pid=6184 comm="syz.2.54" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.513899][ T6191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=67 sclass=netlink_tcpdiag_socket pid=6191 comm=syz.2.56 [ 50.583143][ T6198] loop2: detected capacity change from 0 to 7 [ 50.588219][ T5948] loop2: [ 50.589296][ T5948] loop2: partition table partially beyond EOD, truncated [ 50.597176][ T6198] loop2: [ 50.598270][ T6198] loop2: partition table partially beyond EOD, truncated [ 50.622358][ T40] audit: type=1400 audit(1753767633.615:209): avc: denied { write } for pid=6194 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.636991][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 50.643989][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 50.663468][ T6201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.709226][ T40] audit: type=1400 audit(1753767633.715:210): avc: denied { create } for pid=6204 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.715870][ T40] audit: type=1400 audit(1753767633.715:211): avc: denied { connect } for pid=6204 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.716296][ T6207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=6207 comm=syz.2.56 [ 50.721484][ T40] audit: type=1400 audit(1753767633.715:212): avc: denied { write } for pid=6204 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.775873][ T6211] vim2m vim2m.0: vidioc_s_fmt queue busy [ 50.778125][ T40] audit: type=1400 audit(1753767633.785:213): avc: denied { getopt } for pid=6212 comm="syz.0.63" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.810263][ T40] audit: type=1400 audit(1753767633.815:214): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 50.844065][ T40] audit: type=1400 audit(1753767633.845:215): avc: denied { watch } for pid=6220 comm="syz.1.66" path="/9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.857421][ T40] audit: type=1400 audit(1753767633.845:216): avc: denied { watch_sb watch_reads } for pid=6220 comm="syz.1.66" path="/9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.867510][ T6224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.910906][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 50.916147][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 50.927776][ T6226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.975413][ T6230] exFAT-fs (nullb0): invalid boot record signature [ 50.977767][ T6230] exFAT-fs (nullb0): failed to read boot sector [ 50.979834][ T6230] exFAT-fs (nullb0): failed to recognize exfat type [ 51.029129][ T6240] loop2: detected capacity change from 0 to 7 [ 51.032292][ T6240] loop2: [ 51.033272][ T6240] loop2: partition table partially beyond EOD, truncated [ 51.038969][ T5360] loop2: [ 51.039958][ T5360] loop2: partition table partially beyond EOD, truncated [ 51.085002][ T6245] warning: `syz.0.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.169393][ T6247] overlayfs: conflicting lowerdir path [ 51.220526][ T6248] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.933850][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 51.999337][ T6264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.061592][ T6274] loop2: detected capacity change from 0 to 7 [ 52.064630][ T5948] loop2: [ 52.065633][ T5948] loop2: partition table partially beyond EOD, truncated [ 52.070278][ T6274] loop2: [ 52.071276][ T6274] loop2: partition table partially beyond EOD, truncated [ 52.260709][ T6283] loop6: detected capacity change from 0 to 524287999 [ 52.369577][ T6286] process 'syz.3.86' launched './file0' with NULL argv: empty string added [ 52.398034][ T6285] comedi comedi2: dt2814: a I/O base address must be specified [ 52.568430][ T6290] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 52.647451][ T6294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.685608][ T6298] capability: warning: `syz.0.92' uses 32-bit capabilities (legacy support in use) [ 52.757843][ T6302] loop2: detected capacity change from 0 to 7 [ 52.760563][ T6302] loop2: [ 52.761548][ T6302] loop2: partition table partially beyond EOD, truncated [ 53.163420][ T6319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.253728][ T6329] loop2: detected capacity change from 0 to 7 [ 53.260181][ T5948] loop2: [ 53.261229][ T5948] loop2: partition table partially beyond EOD, truncated [ 53.268236][ T6329] loop2: [ 53.269519][ T6329] loop2: partition table partially beyond EOD, truncated [ 53.314486][ T6335] comedi comedi3: s526: I/O port conflict (0x4,64) [ 53.426866][ T6340] could not allocate digest TFM handle vmac64(anubis-generic) [ 53.479087][ T6350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.537212][ T6362] loop2: detected capacity change from 0 to 7 [ 53.540947][ T5948] loop2: [ 53.541981][ T5948] loop2: partition table partially beyond EOD, truncated [ 53.547851][ T6362] loop2: [ 53.548844][ T6362] loop2: partition table partially beyond EOD, truncated [ 53.651936][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.651956][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.651997][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652002][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652042][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652046][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652085][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652089][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652129][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652134][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652171][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652176][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652213][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652218][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652256][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652260][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652299][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652303][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.652341][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 53.652346][ T6376] binder: 6374:6376 ioctl 4018620d 200000000100 returned -16 [ 53.721403][ T6380] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 53.813320][ T6392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 53.847989][ T6397] loop2: detected capacity change from 0 to 7 [ 53.850492][ T6397] loop2: [ 53.851493][ T6397] loop2: partition table partially beyond EOD, truncated [ 54.054177][ T6433] loop2: detected capacity change from 0 to 7 [ 54.064406][ T6431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 54.065174][ T6433] loop2: [ 54.067712][ T6433] loop2: partition table partially beyond EOD, truncated [ 54.138740][ T6436] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 54.282898][ T6459] macvlan0: mtu less than device minimum [ 54.289392][ T6461] loop2: detected capacity change from 0 to 7 [ 54.292236][ T6461] loop2: [ 54.293285][ T6461] loop2: partition table partially beyond EOD, truncated [ 54.332860][ T6464] x_tables: duplicate underflow at hook 2 [ 54.349999][ T6465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 54.391207][ T6471] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.393557][ T6471] overlayfs: failed to set xattr on upper [ 54.395960][ T6471] overlayfs: ...falling back to redirect_dir=nofollow. [ 54.398657][ T6471] overlayfs: ...falling back to index=off. [ 54.400527][ T6471] overlayfs: ...falling back to uuid=null. [ 54.404746][ T5977] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.406585][ T6471] overlayfs: ...falling back to xino=off. [ 54.409108][ T6471] overlayfs: conflicting lowerdir path [ 54.436198][ T6475] macvlan0: entered promiscuous mode [ 54.438104][ T6475] macvlan0: entered allmulticast mode [ 54.439793][ T6475] veth1_vlan: entered allmulticast mode [ 54.477372][ T6481] loop2: detected capacity change from 0 to 7 [ 54.480094][ T6481] loop2: [ 54.481126][ T6481] loop2: partition table partially beyond EOD, truncated [ 54.566537][ T6486] bond5: entered promiscuous mode [ 54.569046][ T6486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 54.574806][ T5977] usb 8-1: Using ep0 maxpacket: 8 [ 54.579720][ T5977] usb 8-1: config 0 has no interfaces? [ 54.587899][ T5977] usb 8-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 54.591243][ T5977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.593841][ T5977] usb 8-1: Product: syz [ 54.595574][ T5977] usb 8-1: Manufacturer: syz [ 54.597113][ T5977] usb 8-1: SerialNumber: syz [ 54.600875][ T5977] usb 8-1: config 0 descriptor?? [ 54.811627][ T6042] usb 8-1: USB disconnect, device number 2 [ 55.393827][ T6500] __nla_validate_parse: 18 callbacks suppressed [ 55.393844][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 55.401987][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 55.422626][ T6500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.511053][ T6509] : renamed from lo (while UP) [ 55.550870][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 55.550880][ T40] audit: type=1400 audit(1753767638.555:294): avc: denied { connect } for pid=6510 comm="syz.2.161" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.560312][ T40] audit: type=1400 audit(1753767638.555:295): avc: denied { write } for pid=6510 comm="syz.2.161" laddr=fe80::a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.562226][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 55.568202][ T40] audit: type=1400 audit(1753767638.565:296): avc: denied { bind } for pid=6510 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.576927][ T40] audit: type=1400 audit(1753767638.565:297): avc: denied { listen } for pid=6510 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.582852][ T40] audit: type=1400 audit(1753767638.565:298): avc: denied { accept } for pid=6510 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.588710][ T40] audit: type=1400 audit(1753767638.565:299): avc: denied { write } for pid=6510 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.627365][ T6513] loop2: detected capacity change from 0 to 7 [ 55.630315][ T5948] loop2: [ 55.631302][ T5948] loop2: partition table partially beyond EOD, truncated [ 55.636721][ T6513] loop2: [ 55.637958][ T6513] loop2: partition table partially beyond EOD, truncated [ 55.734004][ T6520] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'ethtool' [ 55.739050][ T40] audit: type=1400 audit(1753767638.745:300): avc: denied { create } for pid=6519 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 55.748622][ T40] audit: type=1400 audit(1753767638.755:301): avc: denied { sys_admin } for pid=6519 comm="syz.2.165" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 55.761826][ T40] audit: type=1400 audit(1753767638.765:302): avc: denied { create } for pid=6522 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 55.874992][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 55.881112][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 55.907095][ T6527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 55.911293][ T6530] netlink: 72 bytes leftover after parsing attributes in process `syz.0.168'. [ 55.968864][ T40] audit: type=1326 audit(1753767638.975:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.0.169" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e3718e9a9 code=0x0 [ 56.024381][ T6537] pim6reg: entered allmulticast mode [ 56.075005][ T6541] loop2: detected capacity change from 0 to 7 [ 56.078278][ T6541] loop2: [ 56.079544][ T6541] loop2: partition table partially beyond EOD, truncated [ 56.144818][ T6546] binder: 6545:6546 ioctl 6405 0 returned -22 [ 56.613739][ T6556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6556 comm=syz.3.177 [ 56.618039][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 56.779504][ T6559] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 56.813859][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 56.820073][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 56.836733][ T6561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 56.980686][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 57.026165][ T6575] loop2: detected capacity change from 0 to 7 [ 57.029767][ T6575] loop2: [ 57.030788][ T6575] loop2: partition table partially beyond EOD, truncated [ 57.222783][ T6591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.295096][ T6597] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 57.300924][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 57.336989][ T6599] kthread_run failed with err -4 [ 57.364482][ T6605] vim2m vim2m.0: vidioc_s_fmt queue busy [ 57.380029][ T6605] block device autoloading is deprecated and will be removed. [ 57.383343][ T6605] syz.3.193: attempt to access beyond end of device [ 57.383343][ T6605] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.389845][ T6606] block device autoloading is deprecated and will be removed. [ 57.704801][ T6613] loop2: detected capacity change from 0 to 7 [ 57.707839][ T6613] loop2: [ 57.709172][ T6613] loop2: partition table partially beyond EOD, truncated [ 58.007633][ T6626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 58.292866][ T6643] loop2: detected capacity change from 0 to 7 [ 58.300468][ T6643] loop2: [ 58.301417][ T6643] loop2: partition table partially beyond EOD, truncated [ 58.389726][ T6647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 59.324266][ T6669] loop2: detected capacity change from 0 to 7 [ 59.327019][ T6669] loop2: [ 59.328067][ T6669] loop2: partition table partially beyond EOD, truncated [ 59.335080][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 59.335319][ T5311] Bluetooth: hci4: command 0x1003 tx timeout [ 59.460470][ T6678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 59.547088][ T6692] openvswitch: netlink: Message has 5 unknown bytes. [ 59.621932][ T6697] loop2: detected capacity change from 0 to 7 [ 59.626058][ T5948] loop2: [ 59.627098][ T5948] loop2: partition table partially beyond EOD, truncated [ 59.631472][ T6697] loop2: [ 59.632487][ T6697] loop2: partition table partially beyond EOD, truncated [ 59.701734][ T6709] program syz.2.230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.745118][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 59.747489][ T1112] ata1.00: irq_stat 0x40000000 [ 59.749015][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT [ 59.750936][ T1112] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 18 [ 59.750936][ T1112] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 59.756192][ T1112] ata1.00: status: { DRDY ERR } [ 59.757747][ T1112] ata1.00: error: { ABRT } [ 59.759168][ T1112] ata1.00: device reported invalid CHS sector 0 [ 59.793296][ T6716] vivid-004: disconnect [ 59.795449][ T6716] vivid-004: reconnect [ 59.800169][ T6714] 8021q: adding VLAN 0 to HW filter on device bond6 [ 59.945684][ T6731] loop2: detected capacity change from 0 to 7 [ 59.948198][ T6731] loop2: [ 59.949202][ T6731] loop2: partition table partially beyond EOD, truncated [ 60.031088][ T6739] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 60.086536][ T6742] 8021q: adding VLAN 0 to HW filter on device bond6 [ 60.250334][ T6763] loop2: detected capacity change from 0 to 7 [ 60.254011][ T6763] loop2: [ 60.256538][ T6763] loop2: partition table partially beyond EOD, truncated [ 60.300086][ T6753] infiniband syz2: set active [ 60.302964][ T6753] infiniband syz2: added veth1_virt_wifi [ 60.325462][ T6753] RDS/IB: syz2: added [ 60.327458][ T6753] smc: adding ib device syz2 with port count 1 [ 60.330009][ T6753] smc: ib device syz2 port 1 has pnetid [ 60.600907][ T6774] __nla_validate_parse: 10 callbacks suppressed [ 60.600920][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 60.621641][ T6774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 60.754709][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 60.754720][ T40] audit: type=1400 audit(1753767643.755:357): avc: denied { map } for pid=6781 comm="syz.2.254" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.766396][ T40] audit: type=1400 audit(1753767643.765:358): avc: denied { execute } for pid=6781 comm="syz.2.254" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.839118][ T6791] loop2: detected capacity change from 0 to 7 [ 60.842646][ T6791] loop2: [ 60.843670][ T6791] loop2: partition table partially beyond EOD, truncated [ 60.949493][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 60.962127][ T6798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 61.043644][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 61.065975][ T40] audit: type=1400 audit(1753767644.075:359): avc: denied { connect } for pid=6793 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.072727][ T40] audit: type=1400 audit(1753767644.075:360): avc: denied { write } for pid=6793 comm="syz.2.259" laddr=fe80::ccb5:72ff:fec6:8e10 lport=1 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.081170][ T40] audit: type=1400 audit(1753767644.075:361): avc: denied { read } for pid=6793 comm="syz.2.259" laddr=fe80::ccb5:72ff:fec6:8e10 lport=1 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.083863][ T6811] program syz.3.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.098915][ T6794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.206435][ T40] audit: type=1400 audit(1753767644.215:362): avc: denied { append } for pid=6812 comm="syz.2.264" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 61.216735][ T40] audit: type=1400 audit(1753767644.215:363): avc: denied { ioctl } for pid=6812 comm="syz.2.264" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.251781][ T6817] netlink: 80 bytes leftover after parsing attributes in process `syz.3.265'. [ 61.325578][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 61.328385][ T1112] ata1: failed to read log page 10h (errno=-5) [ 61.330400][ T1112] ata1.00: exception Emask 0x1 SAct 0x80000 SErr 0x0 action 0x0 [ 61.333187][ T1112] ata1.00: irq_stat 0x40000000 [ 61.335774][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 61.338179][ T1112] ata1.00: cmd 61/10:98:36:f1:07/00:00:00:00:00/40 tag 19 ncq dma 8192 out [ 61.338179][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 61.343891][ T1112] ata1.00: status: { DRDY } [ 61.348531][ T1112] ata1.00: configured for UDMA/100 [ 61.350547][ T1112] ata1: EH complete [ 61.363309][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 61.410626][ T6826] loop2: detected capacity change from 0 to 7 [ 61.413673][ T5948] loop2: [ 61.415453][ T5948] loop2: partition table partially beyond EOD, truncated [ 61.419665][ T6826] loop2: [ 61.420699][ T6826] loop2: partition table partially beyond EOD, truncated [ 61.477695][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 61.492868][ T6830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 61.519693][ T6834] random: crng reseeded on system resumption [ 61.526875][ T40] audit: type=1400 audit(1753767644.535:364): avc: denied { ioctl } for pid=6833 comm="syz.3.271" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.573832][ T6839] netlink: 'syz.0.273': attribute type 2 has an invalid length. [ 61.577017][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 61.639219][ T40] audit: type=1400 audit(1753767644.645:365): avc: denied { map } for pid=6840 comm="syz.3.274" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.679317][ T40] audit: type=1400 audit(1753767644.685:366): avc: denied { map } for pid=6840 comm="syz.3.274" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 61.777167][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 61.780896][ T6847] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 61.794697][ T6847] syz.3.276: attempt to access beyond end of device [ 61.794697][ T6847] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 61.795848][ T6849] loop2: detected capacity change from 0 to 7 [ 61.799714][ T6847] (syz.3.276,6847,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 61.803371][ T5948] loop2: [ 61.804488][ T6847] (syz.3.276,6847,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 61.807925][ T6847] (syz.3.276,6847,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 61.808907][ T5948] loop2: partition table partially beyond EOD, [ 61.810735][ T6847] (syz.3.276,6847,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 61.816095][ T5948] truncated [ 61.820265][ T6849] loop2: [ 61.821285][ T6849] loop2: partition table partially beyond EOD, truncated [ 61.889534][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 61.905649][ T6856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 62.132343][ T6875] netlink: 'syz.0.285': attribute type 2 has an invalid length. [ 62.136311][ T6875] netlink: 244 bytes leftover after parsing attributes in process `syz.0.285'. [ 62.614737][ T6032] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 62.741001][ T6890] 8021q: adding VLAN 0 to HW filter on device bond7 [ 62.768864][ T6032] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.772223][ T6032] usb 7-1: config 0 has no interface number 0 [ 62.779684][ T6032] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 62.784104][ T6032] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 62.790911][ T6032] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.794868][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.795547][ T6894] loop2: detected capacity change from 0 to 7 [ 62.800740][ T6032] usb 7-1: config 0 descriptor?? [ 62.802717][ T6894] loop2: [ 62.802848][ T6880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.804034][ T6894] loop2: partition table partially beyond EOD, truncated [ 62.823865][ T6032] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 63.018915][ T6042] usb 7-1: USB disconnect, device number 2 [ 63.040697][ T6880] afs: Unknown parameter 'dynv/zero' [ 63.115540][ T6907] usb usb4: usbfs: interface 0 claimed by hub while 'syz.0.296' sets config #1 [ 63.120050][ T6909] usb usb4: usbfs: interface 0 claimed by hub while 'syz.0.296' sets config #1 [ 63.188597][ T6913] 8021q: adding VLAN 0 to HW filter on device bond8 [ 63.248592][ T6917] random: crng reseeded on system resumption [ 63.300882][ T6920] loop2: detected capacity change from 0 to 7 [ 63.303900][ T5948] loop2: [ 63.304941][ T5948] loop2: partition table partially beyond EOD, truncated [ 63.308558][ T6920] loop2: [ 63.309956][ T6920] loop2: partition table partially beyond EOD, truncated [ 63.357975][ T6922] netlink: 'syz.0.301': attribute type 3 has an invalid length. [ 63.361152][ T6922] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 63.365444][ T6922] NCSI netlink: No device for ifindex 0 [ 63.442843][ T6926] erofs (device loop0): cannot find valid erofs superblock [ 63.637185][ T6937] 8021q: adding VLAN 0 to HW filter on device bond8 [ 63.671910][ T6941] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6941 comm=syz.2.308 [ 63.689327][ T6943] loop2: detected capacity change from 0 to 7 [ 63.692521][ T5948] loop2: [ 63.693734][ T5948] loop2: partition table partially beyond EOD, truncated [ 63.705220][ T6943] loop2: [ 63.706219][ T6943] loop2: partition table partially beyond EOD, truncated [ 63.992380][ T6969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 64.170395][ T6995] 8021q: adding VLAN 0 to HW filter on device bond9 [ 64.180268][ T6995] 8021q: adding VLAN 0 to HW filter on device bond9 [ 64.183964][ T6995] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 64.189249][ T6995] bond9: (slave vcan1): Error -95 calling set_mac_address [ 64.206704][ T7003] 8021q: adding VLAN 0 to HW filter on device bond7 [ 64.207080][ T7007] loop2: detected capacity change from 0 to 7 [ 64.211795][ T5948] loop2: [ 64.212745][ T5948] loop2: partition table partially beyond EOD, truncated [ 64.216423][ T7007] loop2: [ 64.217451][ T7007] loop2: partition table partially beyond EOD, truncated [ 64.256298][ T7012] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 64.258838][ T7012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.440612][ T7046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 64.490346][ T7052] NILFS (nbd2): device size too small [ 64.504377][ T7057] loop2: detected capacity change from 0 to 7 [ 64.511848][ T7057] loop2: [ 64.513000][ T7057] loop2: partition table partially beyond EOD, truncated [ 64.554455][ T7061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 64.557118][ T7061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.562301][ T7061] vhci_hcd vhci_hcd.0: Device attached [ 64.574806][ T6015] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.576208][ T7062] vhci_hcd: connection closed [ 64.579868][ T13] vhci_hcd: stop threads [ 64.582930][ T13] vhci_hcd: release socket [ 64.585233][ T13] vhci_hcd: disconnect device [ 64.726553][ T6015] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 64.730632][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.736751][ T6015] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 64.740356][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 64.743256][ T6015] usb 5-1: Product: syz [ 64.745229][ T6015] usb 5-1: Manufacturer: syz [ 64.747079][ T6015] usb 5-1: SerialNumber: syz [ 64.751900][ T6015] usb 5-1: config 0 descriptor?? [ 64.769039][ T6015] usb 5-1: selecting invalid altsetting 0 [ 64.957518][ T6015] usb 5-1: USB disconnect, device number 2 [ 65.027426][ T7074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.069723][ T7076] 8021q: adding VLAN 0 to HW filter on device bond10 [ 65.198441][ T7089] loop2: detected capacity change from 0 to 7 [ 65.200928][ T7089] loop2: [ 65.202009][ T7089] loop2: partition table partially beyond EOD, truncated [ 65.280210][ T7100] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 65.409520][ T7112] 8021q: adding VLAN 0 to HW filter on device bond11 [ 65.662297][ T7120] loop2: detected capacity change from 0 to 7 [ 65.665755][ T5948] loop2: [ 65.666858][ T5948] loop2: partition table partially beyond EOD, truncated [ 65.671637][ T7120] loop2: [ 65.672858][ T7120] loop2: partition table partially beyond EOD, truncated [ 65.744710][ T6015] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.874683][ T6015] usb 5-1: device descriptor read/64, error -71 [ 65.879892][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 65.879903][ T40] audit: type=1400 audit(1753767648.885:395): avc: denied { read } for pid=7125 comm="syz.3.354" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.890467][ T40] audit: type=1400 audit(1753767648.885:396): avc: denied { open } for pid=7125 comm="syz.3.354" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.978688][ T7132] input: syz0 as /devices/virtual/input/input7 [ 65.984072][ T40] audit: type=1400 audit(1753767648.985:397): avc: denied { read } for pid=5345 comm="acpid" name="event4" dev="devtmpfs" ino=2940 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.991050][ T40] audit: type=1400 audit(1753767648.985:398): avc: denied { open } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2940 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.998372][ T40] audit: type=1400 audit(1753767648.995:399): avc: denied { ioctl } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2940 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.134761][ T6015] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.177204][ T40] audit: type=1400 audit(1753767649.185:400): avc: denied { write } for pid=7134 comm="syz.2.356" path="socket:[13112]" dev="sockfs" ino=13112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.177238][ T7135] Bluetooth: MGMT ver 1.23 [ 66.265975][ T6015] usb 5-1: device descriptor read/64, error -71 [ 66.286130][ T7137] __nla_validate_parse: 20 callbacks suppressed [ 66.286147][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 66.293398][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 66.308603][ T7137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 66.370135][ T7141] mmap: syz.2.358 (7141) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.374945][ T6015] usb usb5-port1: attempt power cycle [ 66.419465][ T7143] tmpfs: Bad value for 'mpol' [ 66.457365][ T7145] loop2: detected capacity change from 0 to 7 [ 66.461939][ T5948] loop2: [ 66.462905][ T5948] loop2: partition table partially beyond EOD, truncated [ 66.468054][ T7145] loop2: [ 66.469274][ T7145] loop2: partition table partially beyond EOD, truncated [ 66.658723][ T7151] FAULT_INJECTION: forcing a failure. [ 66.658723][ T7151] name failslab, interval 1, probability 0, space 0, times 1 [ 66.663999][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.2.363 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 66.664023][ T7151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.664032][ T7151] Call Trace: [ 66.664039][ T7151] [ 66.664046][ T7151] dump_stack_lvl+0x16c/0x1f0 [ 66.664095][ T7151] should_fail_ex+0x512/0x640 [ 66.664122][ T7151] ? fs_reclaim_acquire+0xae/0x150 [ 66.664146][ T7151] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 66.664166][ T7151] should_failslab+0xc2/0x120 [ 66.664186][ T7151] __kmalloc_noprof+0xd2/0x510 [ 66.664208][ T7151] tomoyo_realpath_from_path+0xc2/0x6e0 [ 66.664229][ T7151] ? tomoyo_profile+0x47/0x60 [ 66.664252][ T7151] tomoyo_path_number_perm+0x245/0x580 [ 66.664281][ T7151] ? tomoyo_path_number_perm+0x237/0x580 [ 66.664311][ T7151] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.664338][ T7151] ? find_held_lock+0x2b/0x80 [ 66.664383][ T7151] ? find_held_lock+0x2b/0x80 [ 66.664406][ T7151] ? hook_file_ioctl_common+0x145/0x410 [ 66.664433][ T7151] ? __fget_files+0x20e/0x3c0 [ 66.664457][ T7151] security_file_ioctl+0x9b/0x240 [ 66.664477][ T7151] __x64_sys_ioctl+0xb7/0x210 [ 66.664502][ T7151] do_syscall_64+0xcd/0x4c0 [ 66.664541][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.664559][ T7151] RIP: 0033:0x7f78ac98e9a9 [ 66.664572][ T7151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.664589][ T7151] RSP: 002b:00007f78ad7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.664607][ T7151] RAX: ffffffffffffffda RBX: 00007f78acbb5fa0 RCX: 00007f78ac98e9a9 [ 66.664618][ T7151] RDX: 0000200000000240 RSI: 00000000c028ae92 RDI: 0000000000000005 [ 66.664627][ T7151] RBP: 00007f78ad7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 66.664638][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.664648][ T7151] R13: 0000000000000000 R14: 00007f78acbb5fa0 R15: 00007ffc086fcf88 [ 66.664671][ T7151] [ 66.715717][ T6015] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 66.719871][ T7151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.755317][ T6015] usb 5-1: device descriptor read/8, error -71 [ 66.812055][ T40] audit: type=1400 audit(1753767649.815:401): avc: denied { connect } for pid=7154 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.852603][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 66.856694][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 66.867808][ T7157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 66.969537][ T7166] loop2: detected capacity change from 0 to 7 [ 66.972435][ T5948] loop2: [ 66.973390][ T5948] loop2: partition table partially beyond EOD, truncated [ 66.978142][ T7166] loop2: [ 66.979112][ T7166] loop2: partition table partially beyond EOD, truncated [ 67.006882][ T6015] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.024366][ T40] audit: type=1400 audit(1753767650.025:402): avc: denied { read } for pid=7172 comm="syz.2.371" path="socket:[13211]" dev="sockfs" ino=13211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.036383][ T6015] usb 5-1: device descriptor read/8, error -71 [ 67.038969][ T7170] can: request_module (can-proto-5) failed. [ 67.041555][ T7170] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 67.048365][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 67.051736][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 67.159845][ T6015] usb usb5-port1: unable to enumerate USB device [ 67.288959][ T40] audit: type=1400 audit(1753767650.295:403): avc: denied { ioctl } for pid=7178 comm="syz.3.373" path="socket:[14758]" dev="sockfs" ino=14758 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.298662][ T40] audit: type=1400 audit(1753767650.295:404): avc: denied { getopt } for pid=7178 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.381514][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 67.386140][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 67.397376][ T7184] 8021q: adding VLAN 0 to HW filter on device bond12 [ 67.440579][ T7188] FAULT_INJECTION: forcing a failure. [ 67.440579][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 67.445112][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.3.376 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 67.445128][ T7188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.445135][ T7188] Call Trace: [ 67.445140][ T7188] [ 67.445144][ T7188] dump_stack_lvl+0x16c/0x1f0 [ 67.445162][ T7188] should_fail_ex+0x512/0x640 [ 67.445175][ T7188] ? fs_reclaim_acquire+0xae/0x150 [ 67.445190][ T7188] ? tomoyo_encode2+0x100/0x3e0 [ 67.445201][ T7188] should_failslab+0xc2/0x120 [ 67.445213][ T7188] __kmalloc_noprof+0xd2/0x510 [ 67.445226][ T7188] tomoyo_encode2+0x100/0x3e0 [ 67.445239][ T7188] tomoyo_encode+0x29/0x50 [ 67.445249][ T7188] tomoyo_realpath_from_path+0x18f/0x6e0 [ 67.445262][ T7188] ? tomoyo_profile+0x47/0x60 [ 67.445277][ T7188] tomoyo_path_number_perm+0x245/0x580 [ 67.445293][ T7188] ? tomoyo_path_number_perm+0x237/0x580 [ 67.445310][ T7188] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 67.445327][ T7188] ? find_held_lock+0x2b/0x80 [ 67.445352][ T7188] ? find_held_lock+0x2b/0x80 [ 67.445365][ T7188] ? hook_file_ioctl_common+0x145/0x410 [ 67.445382][ T7188] ? __fget_files+0x20e/0x3c0 [ 67.445394][ T7188] security_file_ioctl+0x9b/0x240 [ 67.445406][ T7188] __x64_sys_ioctl+0xb7/0x210 [ 67.445422][ T7188] do_syscall_64+0xcd/0x4c0 [ 67.445436][ T7188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.445447][ T7188] RIP: 0033:0x7f8fd758e9a9 [ 67.445455][ T7188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.445465][ T7188] RSP: 002b:00007f8fd847c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.445475][ T7188] RAX: ffffffffffffffda RBX: 00007f8fd77b5fa0 RCX: 00007f8fd758e9a9 [ 67.445481][ T7188] RDX: 0000200000000240 RSI: 00000000c028ae92 RDI: 0000000000000005 [ 67.445487][ T7188] RBP: 00007f8fd847c090 R08: 0000000000000000 R09: 0000000000000000 [ 67.445498][ T7188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.445506][ T7188] R13: 0000000000000000 R14: 00007f8fd77b5fa0 R15: 00007fff18ac1008 [ 67.445519][ T7188] [ 67.445535][ T7188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.776283][ T7193] bond0: (slave batadv0): Releasing backup interface [ 67.783104][ T7193] bridge_slave_0: left allmulticast mode [ 67.785745][ T7193] bridge_slave_0: left promiscuous mode [ 67.787601][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.792255][ T7193] bridge_slave_1: left allmulticast mode [ 67.794036][ T7193] bridge_slave_1: left promiscuous mode [ 67.798075][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.802913][ T7193] bond0: (slave bond_slave_0): Releasing backup interface [ 67.807949][ T7193] bond0: (slave bond_slave_1): Releasing backup interface [ 67.822447][ T7193] team0: Port device team_slave_0 removed [ 67.829946][ T7193] team0: Port device team_slave_1 removed [ 67.832179][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.832362][ T7194] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 67.834493][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.841542][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.843902][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.868428][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.872067][ T7194] team0: Port device bond0 added [ 67.921887][ T7196] loop2: detected capacity change from 0 to 7 [ 67.926098][ T5948] loop2: [ 67.927070][ T5948] loop2: partition table partially beyond EOD, truncated [ 67.932108][ T7196] loop2: [ 67.933318][ T7196] loop2: partition table partially beyond EOD, truncated [ 68.381805][ T7207] trusted_key: syz.3.383 sent an empty control message without MSG_MORE. [ 68.519268][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 68.523848][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 68.535518][ T7213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 68.672437][ T7222] FAULT_INJECTION: forcing a failure. [ 68.672437][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.677836][ T7222] CPU: 2 UID: 0 PID: 7222 Comm: syz.0.386 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 68.677860][ T7222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.677871][ T7222] Call Trace: [ 68.677878][ T7222] [ 68.677886][ T7222] dump_stack_lvl+0x16c/0x1f0 [ 68.677913][ T7222] should_fail_ex+0x512/0x640 [ 68.677939][ T7222] _copy_from_user+0x2e/0xd0 [ 68.677962][ T7222] kvm_arch_vcpu_ioctl+0x636/0x52d0 [ 68.677986][ T7222] ? stack_trace_save+0x8e/0xc0 [ 68.678012][ T7222] ? stack_depot_save_flags+0x28/0xa40 [ 68.678034][ T7222] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 68.678053][ T7222] ? __lock_acquire+0xb8a/0x1c90 [ 68.678074][ T7222] ? kasan_save_stack+0x42/0x60 [ 68.678089][ T7222] ? kasan_save_stack+0x33/0x60 [ 68.678103][ T7222] ? kasan_save_track+0x14/0x30 [ 68.678117][ T7222] ? kasan_save_free_info+0x3b/0x60 [ 68.678138][ T7222] ? __kasan_slab_free+0x51/0x70 [ 68.678153][ T7222] ? kfree+0x2b4/0x4d0 [ 68.678174][ T7222] ? tomoyo_path_number_perm+0x470/0x580 [ 68.678200][ T7222] ? security_file_ioctl+0x9b/0x240 [ 68.678216][ T7222] ? __x64_sys_ioctl+0xb7/0x210 [ 68.678246][ T7222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.678278][ T7222] ? __mutex_trylock_common+0xe9/0x250 [ 68.678299][ T7222] ? __pfx___mutex_trylock_common+0x10/0x10 [ 68.678318][ T7222] ? __pfx___might_resched+0x10/0x10 [ 68.678344][ T7222] ? rcu_is_watching+0x12/0xc0 [ 68.678368][ T7222] ? trace_contention_end+0xdd/0x130 [ 68.678387][ T7222] ? __mutex_lock+0x1ca/0xb90 [ 68.678411][ T7222] ? kvm_vcpu_ioctl+0x280/0x1690 [ 68.678436][ T7222] ? __pfx___mutex_lock+0x10/0x10 [ 68.678468][ T7222] ? tomoyo_path_number_perm+0x18d/0x580 [ 68.678497][ T7222] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 68.678518][ T7222] kvm_vcpu_ioctl+0x1236/0x1690 [ 68.678545][ T7222] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.678569][ T7222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.678592][ T7222] ? do_vfs_ioctl+0x128/0x14f0 [ 68.678617][ T7222] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.678642][ T7222] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.678669][ T7222] ? hook_file_ioctl_common+0x145/0x410 [ 68.678700][ T7222] ? selinux_file_ioctl+0x180/0x270 [ 68.678716][ T7222] ? selinux_file_ioctl+0xb4/0x270 [ 68.678735][ T7222] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.678759][ T7222] __x64_sys_ioctl+0x18b/0x210 [ 68.678785][ T7222] do_syscall_64+0xcd/0x4c0 [ 68.678809][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.678842][ T7222] RIP: 0033:0x7f8e3718e9a9 [ 68.678857][ T7222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.678873][ T7222] RSP: 002b:00007f8e3805a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.678890][ T7222] RAX: ffffffffffffffda RBX: 00007f8e373b5fa0 RCX: 00007f8e3718e9a9 [ 68.678902][ T7222] RDX: 0000200000000240 RSI: 00000000c028ae92 RDI: 0000000000000005 [ 68.678912][ T7222] RBP: 00007f8e3805a090 R08: 0000000000000000 R09: 0000000000000000 [ 68.678923][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.678933][ T7222] R13: 0000000000000000 R14: 00007f8e373b5fa0 R15: 00007ffd25772d98 [ 68.678957][ T7222] [ 69.227370][ T7228] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 69.461894][ T7231] loop2: detected capacity change from 0 to 7 [ 69.464988][ T5948] loop2: [ 69.466238][ T5948] loop2: partition table partially beyond EOD, truncated [ 69.472138][ T7231] loop2: [ 69.473429][ T7231] loop2: partition table partially beyond EOD, truncated [ 69.698717][ T5311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.702184][ T5311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.705843][ T5311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.710561][ T5311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.713687][ T5311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.721298][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.727289][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.730527][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.735950][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.738291][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.745693][ T7241] 8021q: adding VLAN 0 to HW filter on device bond13 [ 69.820817][ T7248] nftables ruleset with unbound chain [ 69.972285][ T7238] chnl_net:caif_netlink_parms(): no params data found [ 70.086166][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.089936][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.092748][ T7238] bridge_slave_0: entered allmulticast mode [ 70.096173][ T7238] bridge_slave_0: entered promiscuous mode [ 70.111349][ T7273] 8021q: adding VLAN 0 to HW filter on device bond11 [ 70.116899][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.119302][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.121891][ T7238] bridge_slave_1: entered allmulticast mode [ 70.126187][ T7238] bridge_slave_1: entered promiscuous mode [ 70.220188][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.227872][ T7283] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 70.232170][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.265263][ T6042] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 70.282048][ T7238] team0: Port device team_slave_0 added [ 70.290362][ T7238] team0: Port device team_slave_1 added [ 70.319487][ T7283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.331553][ T7283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.336171][ T7283] tmpfs: Bad value for 'mpol' [ 70.339520][ T7285] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 70.348550][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.350833][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.358968][ T7238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.363692][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.366044][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.376456][ T7238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.416866][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.421409][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.425427][ T7238] hsr_slave_0: entered promiscuous mode [ 70.425620][ T6042] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.428269][ T7238] hsr_slave_1: entered promiscuous mode [ 70.431367][ T6042] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.431382][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.434151][ T7238] debugfs: 'hsr0' already exists in 'hsr' [ 70.441437][ T7238] Cannot create hsr debugfs directory [ 70.441949][ T6042] usb 5-1: config 0 descriptor?? [ 70.628761][ T7238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.634864][ T7238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.642004][ T7238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.648148][ T7238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.669484][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.671701][ T7238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.673975][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.676057][ T7238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.709854][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.722474][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.729377][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.759573][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.769121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.771811][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.781634][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.784835][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.895941][ T7238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.958955][ T6042] usbhid 5-1:0.0: can't add hid device: -71 [ 70.961153][ T5311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.961230][ T6042] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 70.964434][ T5311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.969391][ T5311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.973809][ T5311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.976106][ T6042] usb 5-1: USB disconnect, device number 7 [ 70.976749][ T5311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.083976][ T7238] veth0_vlan: entered promiscuous mode [ 71.093036][ T7238] veth1_vlan: entered promiscuous mode [ 71.098388][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.101191][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.115047][ T7238] veth0_macvtap: entered promiscuous mode [ 71.119379][ T7238] veth1_macvtap: entered promiscuous mode [ 71.131164][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.149127][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.175544][ T7238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.178420][ T7238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.181079][ T7238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.183754][ T7238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.284958][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.287452][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.296507][ T7316] 8021q: adding VLAN 0 to HW filter on device bond12 [ 71.315797][ T7308] chnl_net:caif_netlink_parms(): no params data found [ 71.335673][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.338942][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.392448][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 71.392462][ T40] audit: type=1400 audit(1753767654.395:414): avc: denied { mounton } for pid=7238 comm="syz-executor" path="/syzkaller.pdEbx1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.432655][ T7326] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 71.471862][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.474218][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.484706][ T7308] bridge_slave_0: entered allmulticast mode [ 71.487649][ T7308] bridge_slave_0: entered promiscuous mode [ 71.493806][ T7326] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 71.497471][ T7325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.533467][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.537496][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.540324][ T7308] bridge_slave_1: entered allmulticast mode [ 71.543060][ T7308] bridge_slave_1: entered promiscuous mode [ 71.545593][ T7340] binder: 7339:7340 ioctl ca289435 200000000640 returned -22 [ 71.604698][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.609795][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.613055][ T7342] __nla_validate_parse: 13 callbacks suppressed [ 71.613066][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 71.651187][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 71.654232][ T7308] team0: Port device team_slave_0 added [ 71.685305][ T7342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.695444][ T7308] team0: Port device team_slave_1 added [ 71.783709][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.786105][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.794071][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.808760][ T7347] loop2: detected capacity change from 0 to 7 [ 71.811278][ T7347] loop2: [ 71.812299][ T7347] loop2: partition table partially beyond EOD, truncated [ 71.812796][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.816662][ T5311] Bluetooth: hci4: command tx timeout [ 71.819103][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.827915][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.925308][ T7308] hsr_slave_0: entered promiscuous mode [ 71.927862][ T7308] hsr_slave_1: entered promiscuous mode [ 71.929965][ T7308] debugfs: 'hsr0' already exists in 'hsr' [ 71.931729][ T7308] Cannot create hsr debugfs directory [ 72.014710][ T7364] netlink: 'syz.0.425': attribute type 58 has an invalid length. [ 72.040306][ T7366] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 72.049525][ T40] audit: type=1400 audit(1753767655.055:415): avc: denied { nlmsg_read } for pid=7367 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.056301][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 72.094466][ T7372] netlink: 120 bytes leftover after parsing attributes in process `syz.0.429'. [ 72.100299][ T40] audit: type=1400 audit(1753767655.105:416): avc: denied { mounton } for pid=7365 comm="syz.4.426" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.108006][ T7373] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.110538][ T7373] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 72.113288][ T7373] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.116439][ T40] audit: type=1400 audit(1753767655.105:417): avc: denied { create } for pid=7370 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.119156][ T7308] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.122412][ T40] audit: type=1400 audit(1753767655.105:418): avc: denied { setopt } for pid=7370 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.125421][ T7373] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 72.139954][ T7308] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.150931][ T7308] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.157330][ T7308] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.174186][ T7383] loop2: detected capacity change from 0 to 7 [ 72.179607][ T5948] loop2: [ 72.182485][ T5948] loop2: partition table partially beyond EOD, truncated [ 72.189193][ T7383] loop2: [ 72.190447][ T7383] loop2: partition table partially beyond EOD, truncated [ 72.200669][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.223754][ T7308] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.232111][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.235164][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.249040][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.252039][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.263423][ T7385] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 72.279032][ T7385] netlink: 112 bytes leftover after parsing attributes in process `syz.0.433'. [ 72.283445][ T7385] netlink: 112 bytes leftover after parsing attributes in process `syz.0.433'. [ 72.345727][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.371928][ T40] audit: type=1400 audit(1753767655.375:419): avc: denied { map } for pid=7389 comm="syz.2.434" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.374739][ T6034] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.390876][ T40] audit: type=1400 audit(1753767655.375:420): avc: denied { write } for pid=7401 comm="syz.0.435" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.402723][ T40] audit: type=1400 audit(1753767655.375:421): avc: denied { open } for pid=7401 comm="syz.0.435" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.406212][ T7308] veth0_vlan: entered promiscuous mode [ 72.438223][ T7308] veth1_vlan: entered promiscuous mode [ 72.466027][ T7308] veth0_macvtap: entered promiscuous mode [ 72.474304][ T7308] veth1_macvtap: entered promiscuous mode [ 72.478243][ T40] audit: type=1400 audit(1753767655.485:422): avc: denied { create } for pid=7410 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 72.491517][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.510847][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.517077][ T7308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.520382][ T7308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.523754][ T7308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.527949][ T7308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.544642][ T6034] usb 9-1: Using ep0 maxpacket: 16 [ 72.558214][ T6034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.562390][ T6034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.570539][ T7416] loop2: detected capacity change from 0 to 7 [ 72.573638][ T5948] loop2: [ 72.574862][ T6034] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.576977][ T5948] loop2: partition table partially beyond EOD, [ 72.578936][ T6034] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.578942][ T5948] truncated [ 72.578951][ T6034] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.588247][ T7416] loop2: [ 72.588544][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.589237][ T7416] loop2: partition table partially beyond EOD, [ 72.591761][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.593667][ T7416] truncated [ 72.596837][ T6034] usb 9-1: config 0 descriptor?? [ 72.619938][ T7418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.637366][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.640661][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.667129][ T7422] x_tables: ip_tables: osf match: only valid for protocol 6 [ 72.763631][ T7430] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 72.770222][ T7430] team0: Device ipvlan1 failed to register rx_handler [ 72.818970][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 72.836235][ T7432] bridge2: entered promiscuous mode [ 72.837896][ T7434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.838134][ T7432] bridge2: entered allmulticast mode [ 72.875100][ T7437] netlink: 256 bytes leftover after parsing attributes in process `syz.0.449'. [ 72.925733][ T7441] loop2: detected capacity change from 0 to 7 [ 72.928524][ T5948] loop2: [ 72.929581][ T5948] loop2: partition table partially beyond EOD, truncated [ 72.932829][ T7441] loop2: [ 72.933824][ T7441] loop2: partition table partially beyond EOD, truncated [ 72.956734][ T40] audit: type=1326 audit(1753767655.965:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.0.452" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3718e9a9 code=0x0 [ 73.002323][ T7454] netlink: 'syz.0.454': attribute type 83 has an invalid length. [ 73.006013][ T6034] HID 045e:07da: Invalid code 65791 type 1 [ 73.014794][ T5311] Bluetooth: hci2: command tx timeout [ 73.025601][ T6034] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0002/input/input8 [ 73.039651][ T6034] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 73.211759][ T6034] usb 9-1: USB disconnect, device number 2 [ 73.441103][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 73.443881][ T7479] netlink: 'syz.0.461': attribute type 13 has an invalid length. [ 73.446584][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 73.486876][ T7481] loop2: detected capacity change from 0 to 7 [ 73.489467][ T5948] loop2: [ 73.490477][ T5948] loop2: partition table partially beyond EOD, truncated [ 73.493792][ T7481] loop2: [ 73.495437][ T7481] loop2: partition table partially beyond EOD, truncated [ 73.541878][ T7486] ata1.00: invalid multi_count 128 ignored [ 73.807686][ T7502] loop2: detected capacity change from 0 to 7 [ 73.812513][ T7502] loop2: p1 [ 73.813633][ T7502] loop2: partition table partially beyond EOD, truncated [ 73.818085][ T7502] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 73.904670][ T5311] Bluetooth: hci4: command tx timeout [ 74.059210][ T5360] loop2: p1 [ 74.060319][ T5360] loop2: partition table partially beyond EOD, truncated [ 74.062619][ T5360] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 74.125943][ T7515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7515 comm=syz.5.474 [ 74.131872][ T7515] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 74.134413][ T7515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.275800][ T7521] raw_sendmsg: syz.5.476 forgot to set AF_INET. Fix it! [ 74.374078][ T7524] syz.5.477: attempt to access beyond end of device [ 74.374078][ T7524] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 74.378098][ T7524] (syz.5.477,7524,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 74.380427][ T7524] (syz.5.477,7524,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 74.382705][ T7524] (syz.5.477,7524,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 74.386582][ T7524] (syz.5.477,7524,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 74.550494][ T5360] loop2: p1 [ 74.551598][ T5360] loop2: partition table partially beyond EOD, truncated [ 74.553928][ T5360] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 74.563286][ T7535] bond0: Error: Cannot enslave bond to itself. [ 74.608860][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.653001][ T7545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.721532][ T7549] bond1 (unregistering): Released all slaves [ 74.833830][ T7569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7569 comm=syz.0.489 [ 74.877239][ T7569] vlan2: entered allmulticast mode [ 74.879433][ T7569] bond10: entered allmulticast mode [ 75.083947][ T7594] loop2: detected capacity change from 0 to 7 [ 75.087570][ T7594] loop2: [ 75.088542][ T7594] loop2: partition table partially beyond EOD, truncated [ 75.094689][ T5311] Bluetooth: hci2: command tx timeout [ 75.293583][ T7614] ocfs2: Unknown parameter 'acloa?JKд?tȑ%2&"j0Qph eR"s>jո' [ 75.528665][ T7628] loop2: detected capacity change from 0 to 7 [ 75.531570][ T5948] loop2: [ 75.532576][ T5948] loop2: partition table partially beyond EOD, truncated [ 75.544330][ T7628] loop2: [ 75.545663][ T7628] loop2: partition table partially beyond EOD, truncated [ 75.596887][ T7631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.972672][ T7657] loop2: detected capacity change from 0 to 7 [ 75.975571][ T5311] Bluetooth: hci4: command tx timeout [ 75.983312][ T7657] loop2: [ 75.984780][ T7657] loop2: partition table partially beyond EOD, truncated [ 76.056544][ T7659] Illegal XDP return value 4294967274 on prog (id 84) dev syz_tun, expect packet loss! [ 76.107695][ T7664] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 76.311568][ T7688] loop2: detected capacity change from 0 to 7 [ 76.325398][ T5948] loop2: [ 76.326824][ T5948] loop2: partition table partially beyond EOD, truncated [ 76.332545][ T7688] loop2: [ 76.333664][ T7688] loop2: partition table partially beyond EOD, truncated [ 76.402678][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 76.402689][ T40] audit: type=1400 audit(1753767659.405:454): avc: denied { map } for pid=7694 comm="syz.2.530" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.787092][ T7711] openvswitch: netlink: IP tunnel TTL not specified. [ 76.875716][ T7721] loop2: detected capacity change from 0 to 7 [ 76.878128][ T7721] loop2: [ 76.879153][ T7721] loop2: partition table partially beyond EOD, truncated [ 76.912752][ T40] audit: type=1400 audit(1753767659.915:455): avc: denied { setopt } for pid=7722 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.922676][ T40] audit: type=1400 audit(1753767659.925:456): avc: denied { getopt } for pid=7724 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.018071][ T7731] netlink: 'syz.4.541': attribute type 4 has an invalid length. [ 77.046220][ T7739] __nla_validate_parse: 9 callbacks suppressed [ 77.046233][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.544'. [ 77.051982][ T7741] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.545'. [ 77.063373][ T7741] can0: slcan on ptm0. [ 77.135359][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.140239][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.149380][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.155532][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.160096][ T7741] can0 (unregistered): slcan off ptm0. [ 77.164629][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.169133][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.173529][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.175056][ T5311] Bluetooth: hci2: command tx timeout [ 77.186473][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7749 comm=syz.0.548 [ 77.190235][ T7752] loop2: detected capacity change from 0 to 7 [ 77.194407][ T5958] loop2: [ 77.195775][ T5958] loop2: partition table partially beyond EOD, truncated [ 77.201471][ T7752] loop2: [ 77.202507][ T7752] loop2: partition table partially beyond EOD, truncated [ 77.234714][ T40] audit: type=1400 audit(1753767660.235:457): avc: denied { setopt } for pid=7760 comm="syz.4.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.279662][ T7768] netlink: 'syz.0.554': attribute type 2 has an invalid length. [ 77.282643][ T7768] netlink: 'syz.0.554': attribute type 8 has an invalid length. [ 77.285844][ T7768] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.554'. [ 77.292014][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 77.379272][ T7778] netlink: 'syz.2.556': attribute type 5 has an invalid length. [ 77.383580][ T7778] netlink: 100 bytes leftover after parsing attributes in process `syz.2.556'. [ 77.390961][ T40] audit: type=1400 audit(1753767660.395:458): avc: denied { watch watch_reads } for pid=7777 comm="syz.2.556" path="/158/file0" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.452565][ T7785] tmpfs: Bad value for 'mpol' [ 77.473700][ T7784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.509206][ T40] audit: type=1400 audit(1753767660.515:459): avc: denied { map } for pid=7787 comm="syz.2.560" path="socket:[20860]" dev="sockfs" ino=20860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 77.511935][ T838] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 77.522439][ T838] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 77.529687][ T13] wlan1: authenticated [ 77.532337][ T7784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.537444][ T13] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 77.590185][ T40] audit: type=1326 audit(1753767660.595:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.0.564" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3718e9a9 code=0x0 [ 77.592546][ T223] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 77.593016][ T7784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.595963][ T7795] loop2: detected capacity change from 0 to 7 [ 77.596974][ T7795] loop2: [ 77.596990][ T7795] loop2: partition table partially beyond EOD, truncated [ 77.613903][ T223] wlan1: associated [ 77.647956][ T7798] loop4: detected capacity change from 0 to 2560 [ 77.655200][ T5948] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.659407][ T5948] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.662212][ T5948] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.666518][ T5948] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.669732][ T5948] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.700626][ T7799] overlayfs: failed to resolve './file0': -2 [ 77.713569][ T40] audit: type=1400 audit(1753767660.715:461): avc: denied { bind } for pid=7794 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.714346][ T7799] netlink: 68 bytes leftover after parsing attributes in process `syz.0.564'. [ 77.723773][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.564'. [ 77.847959][ T40] audit: type=1400 audit(1753767660.855:462): avc: denied { getopt } for pid=7804 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.934116][ T7807] netlink: 'syz.2.568': attribute type 7 has an invalid length. [ 77.946539][ T7807] : entered promiscuous mode [ 77.957399][ T40] audit: type=1400 audit(1753767660.965:463): avc: denied { mount } for pid=7806 comm="syz.2.568" name="/" dev="autofs" ino=21614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 77.959273][ T7807] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 78.059295][ T5311] Bluetooth: hci4: command tx timeout [ 78.079727][ T7811] overlayfs: failed to resolve './file3': -2 [ 78.321319][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.575'. [ 78.327678][ T7826] loop2: detected capacity change from 0 to 7 [ 78.331389][ T5948] loop2: [ 78.332409][ T5948] loop2: partition table partially beyond EOD, truncated [ 78.337123][ T7826] loop2: [ 78.338516][ T7826] loop2: partition table partially beyond EOD, truncated [ 78.348320][ T6015] hid-generic 0026:F0F1:ABBC.0003: item fetching failed at offset 0/27 [ 78.352813][ T6015] hid-generic 0026:F0F1:ABBC.0003: probe with driver hid-generic failed with error -22 [ 78.401651][ T7828] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.463622][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.578'. [ 78.672453][ T7854] loop2: detected capacity change from 0 to 7 [ 78.676210][ T5948] loop2: [ 78.677280][ T5948] loop2: partition table partially beyond EOD, truncated [ 78.705271][ T7854] loop2: [ 78.707447][ T7854] loop2: partition table partially beyond EOD, truncated [ 79.013868][ T7881] hugetlbfs: Bad value for 'mode' [ 79.095307][ T7883] could not open pipe file descriptor [ 79.211499][ T7895] loop2: detected capacity change from 0 to 7 [ 79.219312][ T7895] loop2: [ 79.222433][ T7895] loop2: partition table partially beyond EOD, truncated [ 79.264789][ T5311] Bluetooth: hci2: command tx timeout [ 79.315487][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.601'. [ 79.431020][ T7912] netlink: 'syz.5.605': attribute type 32 has an invalid length. [ 79.605944][ T7933] loop2: detected capacity change from 0 to 7 [ 79.608629][ T7933] loop2: [ 79.609660][ T7933] loop2: partition table partially beyond EOD, truncated [ 80.078339][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.082721][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.086425][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.089164][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.091702][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.096128][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.099625][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.102881][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.104035][ T7955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 80.109048][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.115736][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.118305][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.121556][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.126504][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.129908][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.137379][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.140071][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.143028][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.146080][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.148840][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.151578][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.154300][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.157701][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.160404][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.163443][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.166760][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.170295][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.173122][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.176597][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.179566][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.182390][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.185368][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.189248][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.192581][ T7958] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.220765][ T7968] loop2: detected capacity change from 0 to 7 [ 80.231244][ T7067] loop2: [ 80.232529][ T7067] loop2: partition table partially beyond EOD, truncated [ 80.237803][ T7968] loop2: [ 80.238132][ T7971] SELinux: policydb version -886497052 does not match my version range 15-34 [ 80.238805][ T7968] loop2: partition table partially beyond EOD, truncated [ 80.241812][ T7971] SELinux: failed to load policy [ 80.388196][ T7986] can0: slcan on ptm0. [ 80.460233][ T7987] netlink: 'syz.0.625': attribute type 15 has an invalid length. [ 80.465495][ T7985] can0 (unregistered): slcan off ptm0. [ 80.510306][ T8000] 9pnet_fd: Insufficient options for proto=fd [ 80.560810][ T8006] loop2: detected capacity change from 0 to 7 [ 80.572886][ T8006] loop2: [ 80.574080][ T8006] loop2: partition table partially beyond EOD, truncated [ 80.634164][ T8014] sctp: [Deprecated]: syz.0.633 (pid 8014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.634164][ T8014] Use struct sctp_sack_info instead [ 80.650687][ T8017] No control pipe specified [ 80.652231][ T8013] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 80.691895][ T8023] SELinux: Context is not valid (left unmapped). [ 80.697884][ T8025] Invalid logical block size (1) [ 80.728521][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.737988][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.776575][ T8023] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 80.779379][ T8023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.785908][ T8023] vhci_hcd vhci_hcd.0: Device attached [ 80.790923][ T8036] vhci_hcd: connection closed [ 80.792026][ T13] vhci_hcd: stop threads [ 80.797080][ T13] vhci_hcd: release socket [ 80.797098][ T13] vhci_hcd: disconnect device [ 81.273909][ T8047] loop2: detected capacity change from 0 to 7 [ 81.277074][ T5948] loop2: [ 81.278094][ T5948] loop2: partition table partially beyond EOD, truncated [ 81.282932][ T8047] loop2: [ 81.283955][ T8047] loop2: partition table partially beyond EOD, truncated [ 81.350323][ T24] cfg80211: failed to load regulatory.db [ 81.358582][ T8052] netlink: 'syz.5.646': attribute type 10 has an invalid length. [ 81.370252][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.374548][ T8052] team0: Failed to send port change of device bond0 via netlink (err -105) [ 81.379471][ T8052] team0: Failed to send options change via netlink (err -105) [ 81.382173][ T8052] team0: Port device bond0 added [ 81.460252][ T8060] tipc: Started in network mode [ 81.461852][ T8060] tipc: Node identity 0e3616bc0ac6, cluster identity 4711 [ 81.464156][ T8060] tipc: Enabled bearer , priority 0 [ 81.469273][ T8059] tipc: Resetting bearer [ 81.739157][ T8071] loop2: detected capacity change from 0 to 7 [ 81.743485][ T5948] loop2: [ 81.747669][ T5948] loop2: partition table partially beyond EOD, truncated [ 81.755566][ T8071] loop2: [ 81.756917][ T8071] loop2: partition table partially beyond EOD, truncated [ 82.397043][ T8059] tipc: Disabling bearer [ 82.402931][ T8067] tipc: Started in network mode [ 82.406812][ T8067] tipc: Node identity 080211000001, cluster identity 4711 [ 82.409419][ T8067] tipc: Enabled bearer , priority 0 [ 82.509886][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 82.509902][ T40] audit: type=1400 audit(1753767665.521:490): avc: denied { mount } for pid=8087 comm="syz.5.657" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 82.520249][ T40] audit: type=1400 audit(1753767665.521:491): avc: denied { search } for pid=8087 comm="syz.5.657" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 82.530381][ T40] audit: type=1400 audit(1753767665.521:492): avc: denied { unmount } for pid=8087 comm="syz.5.657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 82.584850][ T40] audit: type=1400 audit(1753767665.601:493): avc: denied { associate } for pid=8091 comm="syz.0.659" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.645949][ T8098] loop2: detected capacity change from 0 to 7 [ 82.648853][ T5948] loop2: [ 82.649840][ T5948] loop2: partition table partially beyond EOD, truncated [ 82.655833][ T8098] loop2: [ 82.657042][ T8098] loop2: partition table partially beyond EOD, truncated [ 82.696573][ T8103] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.661' resets device [ 82.730192][ T40] audit: type=1400 audit(1753767665.741:494): avc: denied { setopt } for pid=8104 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.874273][ T8102] __nla_validate_parse: 5 callbacks suppressed [ 82.874284][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 82.880140][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 82.923615][ T8119] autofs4:pid:8119:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(24.12), cmd(0xc0189376) [ 82.928546][ T8119] autofs4:pid:8119:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189376) [ 82.972034][ T8125] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 82.976069][ T8125] netlink: 232 bytes leftover after parsing attributes in process `syz.0.669'. [ 82.980024][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 82.984666][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.669'. [ 83.063852][ T8131] loop2: detected capacity change from 0 to 7 [ 83.072383][ T5948] loop2: [ 83.073470][ T5948] loop2: partition table partially beyond EOD, truncated [ 83.079924][ T8131] loop2: [ 83.081086][ T8131] loop2: partition table partially beyond EOD, truncated [ 83.142082][ T8134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.673'. [ 83.145129][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.673'. [ 83.147944][ T40] audit: type=1400 audit(1753767666.161:495): avc: denied { read } for pid=8133 comm="syz.2.673" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 83.154604][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.673'. [ 83.209443][ T40] audit: type=1400 audit(1753767666.221:496): avc: denied { ioctl } for pid=8140 comm="syz.0.675" path="socket:[21484]" dev="sockfs" ino=21484 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.248646][ T40] audit: type=1400 audit(1753767666.261:497): avc: denied { create } for pid=8143 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.256398][ T40] audit: type=1400 audit(1753767666.261:498): avc: denied { setopt } for pid=8143 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.274642][ T8146] capability: warning: `syz.0.677' uses deprecated v2 capabilities in a way that may be insecure [ 83.310542][ T40] audit: type=1400 audit(1753767666.321:499): avc: denied { setattr } for pid=8138 comm="syz.2.674" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 83.328364][ T8153] selinux_netlink_send: 3 callbacks suppressed [ 83.328380][ T8153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34136 sclass=netlink_route_socket pid=8153 comm=syz.0.678 [ 83.416567][ T29] tipc: Node number set to 134418688 [ 83.467054][ T8161] loop2: detected capacity change from 0 to 7 [ 83.472420][ T8161] loop2: [ 83.473443][ T8161] loop2: partition table partially beyond EOD, truncated [ 83.483831][ T8160] netfs: Couldn't get user pages (rc=-14) [ 83.631087][ T8170] vivid-003: ================= START STATUS ================= [ 83.634054][ T8170] vivid-003: Radio HW Seek Mode: Bounded [ 83.636354][ T8170] vivid-003: Radio Programmable HW Seek: false [ 83.638347][ T8170] vivid-003: RDS Rx I/O Mode: Block I/O [ 83.640142][ T8170] vivid-003: Generate RBDS Instead of RDS: false [ 83.642231][ T8170] vivid-003: RDS Reception: true [ 83.643875][ T8170] vivid-003: RDS Program Type: 0 inactive [ 83.647032][ T8170] vivid-003: RDS PS Name: inactive [ 83.648730][ T8170] vivid-003: RDS Radio Text: inactive [ 83.650486][ T8170] vivid-003: RDS Traffic Announcement: false inactive [ 83.652611][ T8170] vivid-003: RDS Traffic Program: false inactive [ 83.654990][ T8170] vivid-003: RDS Music: false inactive [ 83.656728][ T8170] vivid-003: ================== END STATUS ================== [ 83.789508][ T8187] loop2: detected capacity change from 0 to 7 [ 83.792598][ T5948] loop2: [ 83.793657][ T5948] loop2: partition table partially beyond EOD, truncated [ 83.799198][ T8187] loop2: [ 83.800581][ T8187] loop2: partition table partially beyond EOD, truncated [ 83.889577][ T8195] xt_hashlimit: size too large, truncated to 1048576 [ 83.976538][ T8200] tmpfs: Bad value for 'mpol' [ 84.008315][ T8205] bridge_slave_0: left allmulticast mode [ 84.010156][ T8205] bridge_slave_0: left promiscuous mode [ 84.011993][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.018564][ T8205] bridge_slave_1: left allmulticast mode [ 84.021152][ T8205] bridge_slave_1: left promiscuous mode [ 84.023681][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.040597][ T8205] bond0: (slave bond_slave_0): Releasing backup interface [ 84.047421][ T8205] bond0: (slave bond_slave_1): Releasing backup interface [ 84.059857][ T8205] team0: Port device team_slave_0 removed [ 84.067797][ T8205] team0: Port device team_slave_1 removed [ 84.070033][ T8205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.072374][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.085787][ T8205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.088958][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.160284][ T8217] loop2: detected capacity change from 0 to 7 [ 84.163291][ T8217] loop2: [ 84.164334][ T8217] loop2: partition table partially beyond EOD, truncated [ 84.241000][ T8226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 84.318473][ T8236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.318548][ T8235] xt_hashlimit: size too large, truncated to 1048576 [ 84.360709][ T2297] IPVS: starting estimator thread 0... [ 84.444682][ T8244] IPVS: using max 42 ests per chain, 100800 per kthread [ 84.652173][ T8262] loop2: detected capacity change from 0 to 7 [ 84.655134][ T8262] loop2: [ 84.656115][ T8262] loop2: partition table partially beyond EOD, truncated [ 84.693743][ T8264] trusted_key: encrypted_key: master key parameter 'defau2]3qVed:8sX' is invalid [ 84.732706][ T8267] tmpfs: Unknown parameter 'mpoC\qxl' [ 85.001483][ T8293] loop2: detected capacity change from 0 to 7 [ 85.004043][ T8293] loop2: [ 85.005118][ T8293] loop2: partition table partially beyond EOD, truncated [ 85.030345][ T8296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.182848][ T8333] loop2: detected capacity change from 0 to 7 [ 86.185766][ T8333] loop2: [ 86.186814][ T8333] loop2: partition table partially beyond EOD, truncated [ 86.218659][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 86.218711][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 86.222503][ T8338] [U] zͻi[27| [ 86.228211][ T8338] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6][2*/Wb_$0A7 Xۖ(wc# =g< [ 86.232698][ T8338] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 86.236806][ T8338] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 86.250506][ T8338] [U] 8)X)YvxRĻbmbN@ox;JD, [ 86.252597][ T8338] [U] *Cn3v7KEXgt_3 [ 86.254256][ T8338] [U] D/QazҬEHgE1$_ks=R@ [ 86.256701][ T8338] [U] ϼcEv @ [ 86.257932][ T8338] [U] a% [ 86.258957][ T8338] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 86.265772][ T8338] [U] f1p3 [ 86.266848][ T8338] [U] N0[L;a_l&kMC [ 86.268393][ T8338] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 87.049765][ T8336] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 [ 87.096303][ T8362] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 87.125671][ T838] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 87.128784][ T8364] loop2: detected capacity change from 0 to 7 [ 87.129519][ T8364] loop2: [ 87.129535][ T8364] loop2: partition table partially beyond EOD, truncated [ 87.151028][ T8367] geneve2: entered promiscuous mode [ 87.152719][ T8367] geneve2: entered allmulticast mode [ 87.284746][ T838] usb 9-1: Using ep0 maxpacket: 8 [ 87.294292][ T838] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 87.299994][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.305631][ T838] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.312567][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.317660][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.324190][ T838] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 87.329900][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.333504][ T838] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.337706][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.341215][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.346211][ T838] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 87.351276][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.356246][ T838] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.360309][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.363746][ T838] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.371316][ T838] usb 9-1: string descriptor 0 read error: -22 [ 87.373709][ T838] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.376888][ T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.392228][ T838] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 87.762030][ T34] usb 9-1: USB disconnect, device number 3 [ 88.053558][ T8396] loop2: detected capacity change from 0 to 7 [ 88.058001][ T8396] loop2: [ 88.059330][ T8396] loop2: partition table partially beyond EOD, truncated [ 88.193079][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 88.193091][ T40] audit: type=1400 audit(88.108:525): avc: denied { setattr } for pid=8404 comm="syz.5.754" name="udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.203830][ T40] audit: type=1400 audit(88.118:526): avc: denied { listen } for pid=8404 comm="syz.5.754" lport=51094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.245335][ T8409] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 88.250243][ T8409] __nla_validate_parse: 5 callbacks suppressed [ 88.250254][ T8409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'. [ 88.290176][ T8414] netlink: zone id is out of range [ 88.309629][ T8414] netlink: set zone limit has 4 unknown bytes [ 88.527010][ T40] audit: type=1400 audit(88.448:527): avc: denied { bind } for pid=8420 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.584735][ T8426] loop2: detected capacity change from 0 to 7 [ 88.587140][ T8426] loop2: [ 88.588115][ T8426] loop2: partition table partially beyond EOD, truncated [ 88.679410][ T8435] block nbd2: NBD_DISCONNECT [ 88.774681][ T838] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 88.924580][ T838] usb 9-1: Using ep0 maxpacket: 16 [ 88.927696][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.931059][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.934124][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.938203][ T838] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.940995][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.945431][ T838] usb 9-1: config 0 descriptor?? [ 89.167659][ T8444] tmpfs: Unknown parameter 'mp' [ 89.173276][ T40] audit: type=1400 audit(89.088:528): avc: denied { accept } for pid=8445 comm="syz.5.766" lport=46941 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.182693][ T40] audit: type=1400 audit(89.088:529): avc: denied { getopt } for pid=8445 comm="syz.5.766" lport=46941 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.182795][ T8448] netlink: 'syz.2.767': attribute type 15 has an invalid length. [ 89.260476][ T8453] overlayfs: missing 'lowerdir' [ 89.279363][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 89.284075][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 89.303027][ T8455] 8021q: adding VLAN 0 to HW filter on device bond11 [ 89.356243][ T838] HID 045e:07da: Invalid code 65791 type 1 [ 89.361473][ T8461] loop2: detected capacity change from 0 to 7 [ 89.361615][ T838] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0004/input/input9 [ 89.364032][ T8461] loop2: [ 89.367840][ T8461] loop2: partition table partially beyond EOD, truncated [ 89.375933][ T838] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 89.434008][ T40] audit: type=1400 audit(89.348:530): avc: denied { bind } for pid=8463 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.459039][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 89.575943][ T34] usb 9-1: USB disconnect, device number 4 [ 89.788617][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 89.795287][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 89.813578][ T8495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.172816][ T8513] syzkaller0: entered promiscuous mode [ 90.175187][ T8513] syzkaller0: entered allmulticast mode [ 90.177167][ T40] audit: type=1400 audit(90.098:531): avc: denied { write } for pid=8512 comm="syz.5.787" name="file0" dev="9p" ino=36175915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.260475][ T8518] SELinux: policydb version -2077569335 does not match my version range 15-34 [ 90.264186][ T8518] SELinux: failed to load policy [ 90.288400][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 90.291803][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 90.313134][ T8523] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.359303][ T40] audit: type=1400 audit(90.278:532): avc: denied { write } for pid=8529 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.359697][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 90.414588][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 90.564621][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 90.572516][ T34] usb 10-1: config 0 has no interfaces? [ 90.579097][ T8540] loop2: detected capacity change from 0 to 7 [ 90.579235][ T34] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 90.581715][ T8540] loop2: [ 90.583827][ T40] audit: type=1400 audit(90.498:533): avc: denied { watch watch_reads } for pid=8541 comm="syz.2.797" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 90.584929][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.586073][ T8540] loop2: partition table partially beyond EOD, [ 90.595252][ T34] usb 10-1: Product: syz [ 90.595266][ T34] usb 10-1: Manufacturer: syz [ 90.595273][ T34] usb 10-1: SerialNumber: syz [ 90.597413][ T34] usb 10-1: config 0 descriptor?? [ 90.599886][ T8540] truncated [ 90.746210][ T8550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=8550 comm=syz.0.800 [ 90.777017][ T8550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 90.836878][ T40] audit: type=1400 audit(90.758:534): avc: denied { lock } for pid=8512 comm="syz.5.787" path="socket:[24243]" dev="sockfs" ino=24243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.852715][ T34] usb 10-1: USB disconnect, device number 2 [ 91.258607][ T8582] loop2: detected capacity change from 0 to 7 [ 91.262416][ T5948] loop2: [ 91.263464][ T5948] loop2: partition table partially beyond EOD, truncated [ 91.268078][ T8582] loop2: [ 91.269411][ T8582] loop2: partition table partially beyond EOD, truncated [ 91.370261][ T8588] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 91.401775][ T8588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.407304][ T8588] bond3: (slave bond4): making interface the new active one [ 91.409957][ T8588] bond3: (slave bond4): Enslaving as an active interface with an up link [ 91.415839][ T8588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.463010][ T8595] xt_cgroup: xt_cgroup: no path or classid specified [ 91.619146][ T8614] loop2: detected capacity change from 0 to 7 [ 91.622396][ T5948] loop2: [ 91.623707][ T5948] loop2: partition table partially beyond EOD, truncated [ 91.628733][ T8614] loop2: [ 91.630020][ T8614] loop2: partition table partially beyond EOD, truncated [ 91.644619][ T6034] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 91.797795][ T8626] netlink: 'syz.4.822': attribute type 11 has an invalid length. [ 91.828182][ T8628] netlink: 'syz.4.823': attribute type 30 has an invalid length. [ 91.829319][ T6034] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 91.834069][ T6034] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 91.834254][ T8628] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.837546][ T6034] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 91.840199][ T8628] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.840219][ T8628] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.848498][ T6034] usb 5-1: string descriptor 0 read error: -22 [ 91.848926][ T8628] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.853699][ T6034] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.856879][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.865826][ T8592] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.119191][ T6034] cdc_ncm 5-1:1.0: bind() failure [ 92.124400][ T6034] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 92.127186][ T6034] cdc_ncm 5-1:1.1: bind() failure [ 92.127689][ T8644] loop2: detected capacity change from 0 to 7 [ 92.130919][ T6034] usb 5-1: USB disconnect, device number 8 [ 92.131340][ T8644] loop2: [ 92.133918][ T8644] loop2: partition table partially beyond EOD, truncated [ 92.236504][ T8647] efs: Unknown parameter 'wlan1' [ 92.464096][ T8663] binder_alloc: 8662: binder_alloc_buf, no vma [ 93.034689][ T2297] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.204707][ T2297] usb 5-1: Using ep0 maxpacket: 8 [ 93.208614][ T2297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.213209][ T2297] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.217192][ T2297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.217602][ T6015] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 93.221055][ T2297] usb 5-1: config 0 descriptor?? [ 93.414542][ T6015] usb 10-1: Using ep0 maxpacket: 8 [ 93.417980][ T6015] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 93.420517][ T6015] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.424381][ T6015] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.427576][ T6015] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.430683][ T6015] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.434782][ T2297] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 93.438081][ T6015] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.440930][ T6015] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.570209][ T8690] loop6: detected capacity change from 0 to 524287999 [ 93.669079][ T6015] usb 10-1: GET_CAPABILITIES returned 0 [ 93.670925][ T6015] usbtmc 10-1:16.0: can't read capabilities [ 93.715859][ T8695] ptrace attach of "/syz-executor exec"[5958] was attempted by "/syz-executor exec"[8695] [ 93.867703][ T2297] usb 10-1: USB disconnect, device number 3 [ 93.883023][ T6042] usb 5-1: USB disconnect, device number 9 [ 94.014554][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 94.014566][ T40] audit: type=1400 audit(93.928:542): avc: denied { connect } for pid=8696 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.387916][ T8702] block nbd4: NBD_DISCONNECT [ 94.390694][ T8702] block nbd4: Disconnected due to user request. [ 94.392943][ T8702] block nbd4: shutting down sockets [ 94.456424][ T60] ------------[ cut here ]------------ [ 94.458914][ T60] WARNING: CPU: 0 PID: 60 at net/mac80211/mlme.c:4310 ieee80211_mgd_probe_ap_send+0x461/0x510 [ 94.463417][ T60] Modules linked in: [ 94.465779][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u32:3 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 94.472435][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.477130][ T60] Workqueue: events_unbound cfg80211_wiphy_work [ 94.479876][ T60] RIP: 0010:ieee80211_mgd_probe_ap_send+0x461/0x510 [ 94.482748][ T60] Code: c7 c7 44 93 a9 90 e8 ae 74 05 f7 e9 0e fc ff ff e8 74 74 05 f7 e9 4b fc ff ff e8 9a 74 05 f7 e9 8a fc ff ff e8 80 1a a0 f6 90 <0f> 0b 90 e9 e4 fc ff ff 48 89 34 24 e8 9e 75 05 f7 48 8b 34 24 e9 [ 94.491055][ T60] RSP: 0018:ffffc90000adfb78 EFLAGS: 00010293 [ 94.493805][ T60] RAX: 0000000000000000 RBX: ffff888037bb0d80 RCX: ffffc90000adfb14 [ 94.497347][ T60] RDX: ffff88801ee9c880 RSI: ffffffff8b1bdea0 RDI: ffff88801ee9ccc4 [ 94.500706][ T60] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.503451][ T60] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 94.506108][ T60] R13: ffff888037bb2a22 R14: ffff888037bb1720 R15: 0000000000000000 [ 94.508648][ T60] FS: 0000000000000000(0000) GS:ffff8880d66f9000(0000) knlGS:0000000000000000 [ 94.511525][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.513676][ T60] CR2: 00007fffb43f3bf8 CR3: 0000000062d9d000 CR4: 0000000000352ef0 [ 94.516267][ T60] Call Trace: [ 94.517394][ T60] [ 94.518377][ T60] ieee80211_mgd_probe_ap+0x3a6/0x4c0 [ 94.520104][ T60] ieee80211_beacon_connection_loss_work+0xdb/0x1d0 [ 94.522198][ T60] cfg80211_wiphy_work+0x3dc/0x550 [ 94.523848][ T60] process_one_work+0x9cc/0x1b70 [ 94.525630][ T60] ? __pfx_batadv_nc_worker+0x10/0x10 [ 94.527423][ T60] ? __pfx_process_one_work+0x10/0x10 [ 94.529201][ T60] ? assign_work+0x1a0/0x250 [ 94.530742][ T60] worker_thread+0x6c8/0xf10 [ 94.532239][ T60] ? __kthread_parkme+0x19e/0x250 [ 94.533886][ T60] ? __pfx_worker_thread+0x10/0x10 [ 94.535716][ T60] kthread+0x3c5/0x780 [ 94.537128][ T60] ? __pfx_kthread+0x10/0x10 [ 94.538635][ T60] ? rcu_is_watching+0x12/0xc0 [ 94.540195][ T60] ? __pfx_kthread+0x10/0x10 [ 94.541702][ T60] ret_from_fork+0x5d4/0x6f0 [ 94.543255][ T60] ? __pfx_kthread+0x10/0x10 [ 94.544834][ T60] ret_from_fork_asm+0x1a/0x30 [ 94.546451][ T60] [ 94.547497][ T60] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.549774][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u32:3 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 94.553388][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.556732][ T60] Workqueue: events_unbound cfg80211_wiphy_work [ 94.558716][ T60] Call Trace: [ 94.559784][ T60] [ 94.560731][ T60] dump_stack_lvl+0x3d/0x1f0 [ 94.562161][ T60] panic+0x71c/0x800 [ 94.563394][ T60] ? __pfx_panic+0x10/0x10 [ 94.564842][ T60] ? show_trace_log_lvl+0x29b/0x3e0 [ 94.566480][ T60] ? check_panic_on_warn+0x1f/0xb0 [ 94.568100][ T60] ? ieee80211_mgd_probe_ap_send+0x461/0x510 [ 94.569976][ T60] check_panic_on_warn+0xab/0xb0 [ 94.571498][ T60] __warn+0xf6/0x3c0 [ 94.572716][ T60] ? ieee80211_mgd_probe_ap_send+0x461/0x510 [ 94.574623][ T60] report_bug+0x3c3/0x580 [ 94.575988][ T60] ? ieee80211_mgd_probe_ap_send+0x461/0x510 [ 94.577817][ T60] handle_bug+0x184/0x210 [ 94.579185][ T60] exc_invalid_op+0x17/0x50 [ 94.580612][ T60] asm_exc_invalid_op+0x1a/0x20 [ 94.582127][ T60] RIP: 0010:ieee80211_mgd_probe_ap_send+0x461/0x510 [ 94.584198][ T60] Code: c7 c7 44 93 a9 90 e8 ae 74 05 f7 e9 0e fc ff ff e8 74 74 05 f7 e9 4b fc ff ff e8 9a 74 05 f7 e9 8a fc ff ff e8 80 1a a0 f6 90 <0f> 0b 90 e9 e4 fc ff ff 48 89 34 24 e8 9e 75 05 f7 48 8b 34 24 e9 [ 94.590129][ T60] RSP: 0018:ffffc90000adfb78 EFLAGS: 00010293 [ 94.592014][ T60] RAX: 0000000000000000 RBX: ffff888037bb0d80 RCX: ffffc90000adfb14 [ 94.594507][ T60] RDX: ffff88801ee9c880 RSI: ffffffff8b1bdea0 RDI: ffff88801ee9ccc4 [ 94.596986][ T60] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.599438][ T60] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 94.601900][ T60] R13: ffff888037bb2a22 R14: ffff888037bb1720 R15: 0000000000000000 [ 94.604374][ T60] ? ieee80211_mgd_probe_ap_send+0x460/0x510 [ 94.606255][ T60] ? ieee80211_mgd_probe_ap_send+0x460/0x510 [ 94.608146][ T60] ieee80211_mgd_probe_ap+0x3a6/0x4c0 [ 94.609838][ T60] ieee80211_beacon_connection_loss_work+0xdb/0x1d0 [ 94.611884][ T60] cfg80211_wiphy_work+0x3dc/0x550 [ 94.613499][ T60] process_one_work+0x9cc/0x1b70 [ 94.615089][ T60] ? __pfx_batadv_nc_worker+0x10/0x10 [ 94.616761][ T60] ? __pfx_process_one_work+0x10/0x10 [ 94.618465][ T60] ? assign_work+0x1a0/0x250 [ 94.619916][ T60] worker_thread+0x6c8/0xf10 [ 94.621386][ T60] ? __kthread_parkme+0x19e/0x250 [ 94.622974][ T60] ? __pfx_worker_thread+0x10/0x10 [ 94.624575][ T60] kthread+0x3c5/0x780 [ 94.625874][ T60] ? __pfx_kthread+0x10/0x10 [ 94.627347][ T60] ? rcu_is_watching+0x12/0xc0 [ 94.628859][ T60] ? __pfx_kthread+0x10/0x10 [ 94.630321][ T60] ret_from_fork+0x5d4/0x6f0 [ 94.631774][ T60] ? __pfx_kthread+0x10/0x10 [ 94.633238][ T60] ret_from_fork_asm+0x1a/0x30 [ 94.634760][ T60] [ 94.636479][ T60] Kernel Offset: disabled [ 94.637867][ T60] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:41:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8560d865 RDI=ffffffff9b0e1160 RBP=ffffffff9b0e1120 RSP=ffffc90000adf4e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b0e1120 R15=ffffffff8560d800 RIP=ffffffff8560d88f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffb43f3bf8 CR3=0000000062d9d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb43f43b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff93d3a228 RCX=0000000000000002 RDX=1ffffffff1be87b5 RSI=ffffffff8c15bea0 RDI=ffffffff8df43da8 RBP=0000000000000001 RSP=ffffc9000c59ee28 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=000000000000d4f9 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a17a81 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f365c6026c0 ffffffff 00c00000 GS =0000 ffff8880d67f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f365c601f98 CR3=000000005a2d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc086fd0b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78aca11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78aca11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78aca11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78aca11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78aca11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78aca11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffed100d4870f0 RCX=ffffffff93e793c0 RDX=0000000000000000 RSI=ffffffff8de10c25 RDI=ffffffff8c15bf20 RBP=ffff88806a438788 RSP=ffffc900259afa50 R8 =81441afa7c35cfbd R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffffe8fefc4d8020 R13=0000000000000000 R14=dffffc0000000000 R15=ffff88806a438780 RIP=ffffffff8a1dcc45 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557ac5f500 ffffffff 00c00000 GS =0000 ffff8880d68f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8c469802d8 CR3=0000000062d9d000 CR4=00352ef0 DR0=000000006fd0f0ec DR1=0000000800000001 DR2=0000000000000007 DR3=0000002000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb43f54a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c46811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000027800000004 ffffffff00000130 0000009800000000 ffffffffffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffffff00000130 0000009800000000 ffffffff0000000e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000c04df RBX=0000000000000003 RCX=ffffffff8b8d1c99 RDX=0000000000000000 RSI=ffffffff8de35f27 RDI=ffffffff8c15bf20 RBP=ffffed1003c52000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e290000 R14=ffffffff90a96150 R15=0000000000000000 RIP=ffffffff8b8d07ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ab48e CR3=000000005a2d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b986488 00007f365b986480 00007f365b986478 00007f365b986450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365c4ed100 00007f365b986440 00007f365b980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365b986498 00007f365b986490 00007f365b986488 00007f365b986480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000