last executing test programs: 15.441675623s ago: executing program 1 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 15.373735747s ago: executing program 1 (id=572): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_io_uring_complete(0x0) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c0001000700000000000000f400a489160a1150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d08000000", @ANYRES32=r0, @ANYBLOB="cc2efe82df36dc2fe250b9cfd2df120189c5dde1c00a875b1c05d3a22d60b694a734e3deaa170b33484ac5b7e33ddf9f984838088810cb2dcaa3f482e21913c54364c6775914d3973d958ffce2cd9074d95a0fc064f4623fff6763e3b37850e985c32f6a0d0e6c5566a2308102674caf974d7fa3b2ce586fd07808b82261182579b63670bfd806d47f9ed621ee819b7adb7041e31e012f"], 0x114}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, r4, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r5}}}, 0x78) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') write$P9_RLCREATE(r7, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, 0x0, &(0x7f0000003500)=0x1e) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000040)=0x2) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x8002) fcntl$dupfd(r13, 0x0, r13) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r12, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r12, 0x1ff, 0xfffffffe, 0x800, 0x800008, 0x1, 0x0, 0x100}) 15.202646349s ago: executing program 1 (id=574): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0xffc5) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x610283) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x200000b, 0x4000010, r2, 0x16be2000) close_range(r2, r2, 0x0) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r1, 0xffffe000) 15.200111858s ago: executing program 1 (id=576): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x131, 0x0) (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x131, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') (async) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000200)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000400)=""/76) (async) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000400)=""/76) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000240)="3751f02b82f73ccfc7c431617753f5b5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d0000000000000000000000000000006cc739738ff2d3a1102c15808e362db91e4e188a04ab0f113f5263fed429ebeaeb91b4a527a906129a4381fe8cdd16a56982b9c971a7bde38eb042a87b865d423e4607396482038da7dd4a591d29f8fe35d2aeea6cb752815c9c8dd0e021c8548f0cbf1141e0c5b3d150102a45c8b6a817315d9b590ede", 0xea}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}], 0x2) (async) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000240)="3751f02b82f73ccfc7c431617753f5b5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d0000000000000000000000000000006cc739738ff2d3a1102c15808e362db91e4e188a04ab0f113f5263fed429ebeaeb91b4a527a906129a4381fe8cdd16a56982b9c971a7bde38eb042a87b865d423e4607396482038da7dd4a591d29f8fe35d2aeea6cb752815c9c8dd0e021c8548f0cbf1141e0c5b3d150102a45c8b6a817315d9b590ede", 0xea}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}], 0x2) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000000c0)=""/250) ioctl$VT_WAITACTIVE(r4, 0x5607) 15.112814367s ago: executing program 1 (id=578): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, &(0x7f0000001400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xfff, [{0x8, 0x1, 0x5}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x6, 0x5}]}, {0x0, [0x61, 0x0, 0x2e, 0x51, 0x0, 0x0, 0x0, 0x5f, 0x61]}}, &(0x7f00000003c0)=""/211, 0x57, 0xd3, 0x0, 0x8}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x0, 0x8, 0xfa400, 0xa20, 0xffffffffffffffff, 0x9, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x4, 0x8, 0x30, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x5e, &(0x7f00000002c0)=""/94, 0x41100, 0xc7, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xa, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r6], 0x0, 0x10, 0x885}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005"], 0x7c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, &(0x7f0000001400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xfff, [{0x8, 0x1, 0x5}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x6, 0x5}]}, {0x0, [0x61, 0x0, 0x2e, 0x51, 0x0, 0x0, 0x0, 0x5f, 0x61]}}, &(0x7f00000003c0)=""/211, 0x57, 0xd3, 0x0, 0x8}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x0, 0x8, 0xfa400, 0xa20, 0xffffffffffffffff, 0x9, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x4, 0x8, 0x30, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x5e, &(0x7f00000002c0)=""/94, 0x41100, 0xc7, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xa, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r6], 0x0, 0x10, 0x885}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005"], 0x7c}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async) 14.96093237s ago: executing program 1 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x557480, 0x0, 0x11}, 0x18) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4b7}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40000000) 14.867300166s ago: executing program 32 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x557480, 0x0, 0x11}, 0x18) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4b7}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40000000) 2.835512713s ago: executing program 4 (id=777): socket(0x200000000000011, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040)=0x7fffffff, 0x4) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c000000090601030000000000000000050000023c0008800c000780050015000f0000000c0007800800084000000000100007800c00168008000140ffffffff100007800a00110001800000020000080009400000b3c705000100070000000900020073797a3200000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xf97}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000002c0)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r10, 0x0, 0x4ffe6, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000500a80016000a0001400200002000060000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef528906301b7ce06bbace8017cb", 0x66}, {&(0x7f0000001680)="66672324118a5a090ddd327d57e4e0e1353bb0cb85933035009e0e5dc3bc161cb6289a3389da904f7557a56e6113e564da5b96c6f863c7b8d71515a1897e1ca95f89d69521011a983e85f57f12a1856c9976f2976e645bf7220fcd53214a466fb3de85e1b1df808f772249265e447c034dd0", 0x72}], 0x2}, 0x4004000) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 2.495773485s ago: executing program 0 (id=790): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001080)=""/4096) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000070900010073797a30"], 0x34}}, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000040)={0x30}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x800, 0x27dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c0000140006"], 0x94}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000580)=0xc3) r10 = socket$netlink(0x10, 0x3, 0xe) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r12, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}}, 0x1) r13 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) setresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r14}], {0x10, 0x2}}, 0x2c, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, &(0x7f0000004280)={&(0x7f0000000600)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x6, 0x40000, 0x1, 0x40, 0x9, 0xc, 0x0, 0x0, 0x4, 0x3d}}, &(0x7f0000000680)={0x18, 0x0, 0x0, {0x6}}, &(0x7f00000006c0)={0x18, 0x0, 0x2, {0x7fff}}, &(0x7f0000000700)={0x18, 0xffffffffffffffda, 0x8, {0x800}}, &(0x7f0000000740)={0x18, 0xfffffffffffffffe, 0x7, {0x1}}, &(0x7f0000000780)={0x28, 0xfffffffffffffffe, 0xfffffffffffffffd, {{0x8, 0xa2d7, 0x1}}}, &(0x7f00000007c0)={0x60, 0x0, 0x4, {{0x6, 0x3, 0x10001, 0x30d, 0x6, 0xff, 0x7fffffff, 0x3}}}, &(0x7f0000000840)={0x18, 0x0, 0xdd, {0x80000000}}, &(0x7f0000000900)={0x14, 0x0, 0x7, {'GPL\x00'}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x0, 0x1c}}, &(0x7f0000000980)={0x78, 0xfffffffffffffff5, 0x8000000000000000, {0xf, 0x8, 0x0, {0x4, 0x0, 0xe7b, 0xfffffffffffffff7, 0x5e2fa53a, 0xffffffffffff2dba, 0xfffffff2, 0x2, 0x78af, 0x6000, 0x200, r8, r9, 0x8c7, 0x3}}}, &(0x7f0000000a00)={0x90, 0x0, 0x2, {0x2, 0x0, 0x4000000000000, 0x6, 0x4, 0xfb, {0x1, 0x6, 0x5, 0x3, 0x0, 0x80, 0x6, 0x9, 0x4c, 0xc000, 0x0, r5, r6, 0x0, 0x2}}}, &(0x7f0000004340)={0x188, 0x0, 0x8, [{0x3, 0x8000000000000000, 0x3, 0x0, '&-!'}, {0x3, 0x41, 0x4, 0x4, 'bpf\x00'}, {0x2, 0x100000001, 0xb, 0x10001, '/dev/iommu\x00'}, {0x4, 0x2da, 0x6, 0x9, ':]\\/%&'}, {0x4, 0x6, 0x4, 0x19, 'bpf\x00'}, {0x5, 0x1da498ed, 0x14, 0xdb, '\xe5+&\'{:--(^^[\'$.{.#(-'}, {0x5, 0x400, 0x10, 0x1ff, '#+%*\a{/}@\\(]~/}\xdb'}, {0x5, 0x0, 0x12, 0x6, '{}2{&,#+*]!+%@)}@$'}, {0x3, 0x3ff, 0x4, 0x80000000, 'GPL\x00'}, {0x1, 0x8, 0x10, 0x200000, '#+%*\a{/}@\\(]~/}\xdb'}]}, &(0x7f0000000c00)=ANY=[@ANYBLOB="d0030000000000009500000000000000000000000000000003000000000000000000000000000000ffffffffffffffff050000000400000006000000000000000a0000000000000006000000000000000700000000000000050000000000000006000000000000000600000006000000001000000060000002000000", @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="ac1400000004000000000000c90200000000000005000000000000000100000006000000210000000000000003000000000000000000000000000000060000000000000000000080000000007e56000003000000020000000000000013ed0000000000000200000000000000bf40557400000000030000000000000001000000000000000900000001000080b9dd000000800000a2ffffff", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000807e75000000000000060000000000000000000100000000000000000008000000060000000000000003000000000000000b00000000000000673c78310000000002000000ed00000000000000000000000000000000000000000001000000000081000000000000000100000000000000090000000000000005000000030000000300000000200000ff010000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="8000000000000000000000000200000000000000030000000000000001000000020000002d00000000000000020000000000000003000000000000000101000000000000040000000000000000100000ff0000000100000000000000010400000000000002000000000000000500000000000000000000000000000008000000000000000200000000100000050000000010000000000000", @ANYRES32=r8, @ANYRES32=r14, @ANYBLOB="fdffffff00000100000000000500000000000000001000000000000003000000400000007d277b00000000000100000000000000020000000000000000010000000000007f00000000000000090000004e0000000100000000000000760000000000000001000100000000000800000000000000040000000000000006000000000000000180000005000000ff00000000600000a8000000", @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB="7b000000de020000000000000000000000000000010400000000000008000000000000008be6235d000000000005000000000004005400000400000000000000000400000005000000000000000900000000000000020000000000000003000700000000007c0c0000000000003eae000000000000010000000400f5000900000000a0000007000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="ffffff7f0900000000000000060000000000000008000000000000000b000000020000001c40212d7d242b2c2c2e7b0000000000"], &(0x7f0000004080)={0xa0, 0x0, 0x8, {{0x1, 0x3, 0x5, 0x8000, 0x2, 0x3, {0x1, 0xb6, 0xffffffffffffffff, 0x28000000, 0x1, 0x4, 0xf1, 0x2, 0x0, 0x8000, 0x1, r5, r6, 0x6}}}}, &(0x7f0000001000)={0x20, 0x0, 0x78c, {0x5, 0x0, 0x8, 0x3}}, &(0x7f0000004140)={0x130, 0xfffffffffffffffe, 0x8, {0x9, 0xffffffff, 0x0, '\x00', {0x20, 0x2, 0x7, 0x85, r5, r9, 0x2000, '\x00', 0xa9, 0x3, 0x7fffffffffffffff, 0x7fff, {0x6, 0xffff}, {0x5, 0xfe6}, {0xc352, 0x8}, {0xa5ad, 0x7}, 0x2, 0x3, 0x3, 0x9}}}}) fcntl$setlease(r13, 0x400, 0x1) fcntl$setlease(r13, 0x400, 0x2) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) getsockopt$inet6_int(r13, 0x29, 0x18, &(0x7f0000000340), &(0x7f0000000540)=0x4) 2.402496803s ago: executing program 0 (id=791): renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000006c0)={'filter\x00', 0x0, 0x3, 0x0, [0x1ff, 0xe, 0xfffffffffffffff7, 0x2, 0x53d, 0x6], 0x4, &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f0000000580)}, &(0x7f0000000740)=0x78) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) fsetxattr$security_evm(r6, &(0x7f0000000400), &(0x7f0000000500)=@v2={0x3, 0x1, 0x1, 0x400, 0x29, "d040a1b11e542b9cd28e9665da4ea022c795b4bf819516baf9e02efdfcde1726d5e8c269a7442bc08e"}, 0x32, 0x2) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x41595556, 0x7, 0x5, [{0x8000006, 0xd382}, {0xdc5, 0x7}, {0x0, 0x4}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x6, 0x6}, {0x1, 0x5}, {0xdfffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f00000001c0)={{0x7b, 0x2}, 0x100, './file0\x00'}) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000006c0)={'filter\x00', 0x0, 0x3, 0x0, [0x1ff, 0xe, 0xfffffffffffffff7, 0x2, 0x53d, 0x6], 0x4, &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f0000000580)}, &(0x7f0000000740)=0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async) fsetxattr$security_evm(r6, &(0x7f0000000400), &(0x7f0000000500)=@v2={0x3, 0x1, 0x1, 0x400, 0x29, "d040a1b11e542b9cd28e9665da4ea022c795b4bf819516baf9e02efdfcde1726d5e8c269a7442bc08e"}, 0x32, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x41595556, 0x7, 0x5, [{0x8000006, 0xd382}, {0xdc5, 0x7}, {0x0, 0x4}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x6, 0x6}, {0x1, 0x5}, {0xdfffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) (async) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f00000001c0)={{0x7b, 0x2}, 0x100, './file0\x00'}) (async) 2.356295083s ago: executing program 0 (id=792): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xa, @local, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000001c0)=0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x400c005) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) 2.355878688s ago: executing program 0 (id=793): r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x6, 0x3, @generic=0x9, 0x9, 0x6, 0x6e}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x8000000000000000, 0x8, 0x7fffffff}) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0x4}, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e1f, 0x10280001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x4000001) 2.355582621s ago: executing program 3 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='rxrpc_call\x00', r1, 0x0, 0x3fc}, 0x18) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.215311107s ago: executing program 3 (id=797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000021000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB="6afe9ee61fb943b945ea094cbcd0898cf2f1d0f3b9141ab3d47da17458ce5a30ffa8434f6a78a1fef1fa9f55853a8c2b9eebc9747c59caf6a42a907d44f0e12adc225460b8ea8281b3cf1be613a9cc688ce8363ce37d7a85e7f141605bf9d3b5e995fff5c6548901da0a386f4c0d6e2d171173c6975a4a34a47a4d789920e6de636b102f", @ANYRES32=r0, @ANYBLOB="04000180"], 0x24}], 0x1}, 0x40000) 2.215003923s ago: executing program 2 (id=798): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_io_uring_complete(0x0) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="cc2efe82df36dc2fe250b9cfd2df120189c5dde1c00a875b1c05d3a22d60b694a734e3deaa170b33484ac5b7e33ddf9f984838088810cb2dcaa3f482e21913c54364c6775914d3973d958ffce2cd9074d95a0fc064f4623fff6763e3b37850e985c32f6a0d0e6c5566a2308102674caf974d7fa3b2ce586fd07808b82261182579b63670bfd806d47f9ed621ee819b7adb7041e31e012f"], 0x114}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, r4, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r5}}}, 0x78) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') write$P9_RLCREATE(r7, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, 0x0, &(0x7f0000003500)=0x1e) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, 0x0) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x8002) fcntl$dupfd(r13, 0x0, r13) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r12, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r12, 0x1ff, 0xfffffffe, 0x800, 0x800008, 0x1, 0x0, 0x100}) 2.207753671s ago: executing program 3 (id=799): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) fsetxattr$security_ima(r1, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000104730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r6, 0x0, 0x0) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r7, r7, 0x21) write$qrtrtun(r3, &(0x7f0000000340)="8f52eb24cc8080", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @void}, 0x10) 2.035339332s ago: executing program 2 (id=800): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x34, 0x28, 0x303, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xfff2, 0x8}, {0x0, 0x1}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x40, 0xb0}}, @TCA_RATE={0x6, 0x5, {0x81, 0x18}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8", 0xe}, {&(0x7f0000000240)="639b3763a5", 0x5}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xdb0890038a23e817, 0x0, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) timer_create(0x3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006160a1400000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.914532113s ago: executing program 4 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="c4100000f9026ad49d63588d946815004a7462ea80e43e59f09f82002006cbe8e1bba919f514bf0de1e5527a49b0b7dc6dd11e190165e5bbe42194f307f62186eb282131a02b0f701a83b1d5458a74f02193e90d55bbffd5a9ea33d21e5fa1f91d1bfb1ab290009ef84a86a4581720ddf37652f7e489ce4e82c4277e05f21d77b13db9081789e268083824c4ea80df2338da9b50b01378183e3ac07d9bd43f7b8c0ccec4a99910ba0534ec7145778646ab43a658e8da1e5bbd230c6caba5c6e1e5817164d1bfa1ee01e83be659e8390f37deeff20bd0c976c5d9", @ANYRES16=r3, @ANYBLOB="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"], 0x10c4}, 0x1, 0x0, 0x0, 0x4000100}, 0x4000881) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="080026006c09000008009f000500"], 0x70}}, 0x40) 951.580842ms ago: executing program 4 (id=802): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000380)="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") close_range(r1, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe, 0x0, r1}) mprotect(&(0x7f0000393000/0x2000)=nil, 0x2000, 0x5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000001780), 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r4, 0x0, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 946.070942ms ago: executing program 0 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x41) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x208000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, "4f6eb400000f72090000cd440100518000000000000322001000", 0x8, 0x0, 0x9}, 0x3c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 28) 945.937103ms ago: executing program 4 (id=804): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x4d3, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000000001, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x3502, 0x2, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x4000050) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) set_tid_address(0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 892.185754ms ago: executing program 2 (id=805): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) r1 = syz_io_uring_setup(0xccb, &(0x7f00000000c0)={0x0, 0x3232, 0x0, 0x0, 0x2eb}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4cac, 0x5d85, 0x40, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="de93c41575931f51193a9b5ce8aa58bd92b5aa0c453f8e686a232e310aaecde9a26603af5137236bd57ecc670827b12721fe6b2a946951a78431f427ef56dd7ce1311402"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 891.560555ms ago: executing program 4 (id=806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="0f20d835200000000f22d826650f004662673e0fae0e546f2e0fc79d00a00000660f384100c4e2959ce80f009a2d000000c4c1f852710066bad104ecf30f09", 0x3f}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000ff5000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x1}) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x100028}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={r7, 0xba, "2f7e7ebfefef866dac45534b41af2fbbe73440a44e4aa01f72329efb530d729346f59d0ce3dd3f2d047b12257983a67b53f07863b302fd6e6ef8295885ecda8ec0b62f39b14a39850a856e46b6fec0d5a4d83a79302670a6a5d27ca8791481f4f7707b30f3a2d859087160cd47784dbf8702fa0b8928dabfe2c2ee7d8b85319b5d4a59ed009432b4170faef568bfd5cf5e5f3bedb2babde4f1d63becce198fd4fcce91ba754c6ec01c1066ee4cf813338ef975490b75022fa817"}, &(0x7f0000000080)=0xc2) listen(r4, 0x1000) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 720.719221ms ago: executing program 2 (id=807): r0 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000400), 0x2000011a) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x74e96c96}], 0x1, 0x40, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{r1}, "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"}) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaa019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c0003e000000600000000ac1414000000008b49ca1f62a8730d00ac1414bb000000000000000000000000ac1414000000000000000000000000000000e0ecad423a047c5120f9d01a881f394e098bd2a803264b152883df3d44a41f9c0ba2345b85a071f0d0a728abe9b922d6dd10dbe546cfdae1cefabb27286ef51475d1356ac7b5dc197186fc24a591a4eecb3db28c344a57c864497f8e691c7720c367d8b41d652bdfee250511fa2d114fb46c8f7510"], 0x0) 719.33396ms ago: executing program 3 (id=808): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r9, @in6={{0xa, 0x0, 0x6, @empty}}, 0xfffd, 0x80}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r9, 0x7}, &(0x7f0000000140)=0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="00bbf7ff", @ANYRES16=0x0, @ANYBLOB="b1032bbd7000000000000200000008006200090000000500590003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x64, r11, 0x1, 0x70bd2a, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x23, 0x2, "845e503af8a2f25dce75efaa0707ec739b82174c0c315bd06898811e6c6e4d"}}]}]}, 0x64}, 0x1, 0x6c00}, 0x40c1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 481.594298ms ago: executing program 3 (id=811): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f00000007c0)={'netdevsim0\x00', @local}) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe39, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x24004804) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x33) close(r2) 481.036891ms ago: executing program 0 (id=812): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r2, 0x851, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x240008d4) sendmsg$nl_xfrm(r2, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)=@getsa={0x98, 0x12, 0x20, 0x70bd27, 0x25dfdbfb, {@in6=@rand_addr=' \x01\x00', 0x4d6, 0xa, 0x32}, [@algo_crypt={0x6d, 0x2, {{'ctr-camellia-aesni\x00'}, 0x128, "7fa3a3124ce900eae8d50341b959777be687f27044279710f3fd3e3d86070ea9644b4a5ff2"}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x20, 0x20, 0xae7, 0x2aec, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@cipso={0x86, 0xa, 0x1, [{0x5, 0x4, "e123"}]}, @generic={0x83, 0xe, "1c7614c7bcef0e6552bc5c58"}]}}}}}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x1c, 0x47, 0x3, 0x26, @dev={0xfe, 0x80, '\x00', 0x25}, @private2, 0x1, 0x8000, 0x0, 0x40}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000006c0)={@multicast2, @multicast1, 0x0}, &(0x7f0000000700)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000dc0)={r13, r12, 0x25, 0x0, @val=@netkit={@void, @value=r13}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @random="fad1e0480100", @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, '&ZV', 0x18, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, 0x2, 0xa5b7, 0x0, 0x1, 0xf, 0x3, 0x0, 0x200, 0x9, 0x0, 0x4e20, 0x4e23}}}}}}}}, 0x0) r14 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000000340)={0x1d, r15, 0x2, {0x2, 0x1, 0x6}, 0x2}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000a80)={'erspan0\x00', 0x0, 0x0, 0x20, 0x1, 0x0, {{0x21, 0x4, 0x1, 0x29, 0x84, 0x64, 0x0, 0x4, 0xce135c17d0ef2ff3, 0x0, @loopback, @remote, {[@noop, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x4, "70d8"}, @lsrr={0x83, 0x1b, 0xf0, [@local, @private=0xa010101, @private=0xa010100, @empty, @empty, @remote]}, @generic={0x83, 0x8, "4edd1db40efd"}, @cipso={0x86, 0x14, 0x0, [{0x0, 0x5, 'q:9'}, {0x1, 0x9, "3619065e2ad93e"}]}, @noop, @generic={0x7, 0x12, "e235d538742a53b60636b2b461994649"}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x0, [{@loopback, 0x5}, {@remote, 0x7}]}, @rr={0x7, 0x7, 0x4a, [@broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x3, 0x3, 0x1, @local, @empty, 0x700, 0x7800, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x12c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffe71) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000c35000/0x2000)=nil, 0x3) 477.272071ms ago: executing program 3 (id=813): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="50f6ec800767a5aab5635d00b2be336698401ac6e7a75353827b8e834b44c5b8a54536bf3ba1a5d4994cd0ccf0158c", @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB="2c673d000000000000006927f0833017f2a4d19a4e46af4b24a637da1788f5745c20776609dd0395a8fe78419e7f3bc3196c9f5c02e1b52557efa119e00d38d9c0336b3f0d57e1cb8928a4222990530c88e99e27f9a9f111b39d280aeb9adfa65208617fda8c8652b7a7f4ad5fcc334643eee8db35c088409b66a90214b0323ee6340945", @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0x2cbfb, 0x0, {0x5, 0xfffffffffffffffc, 0x48b, 0x7, 0x1, 0xd, 0xfff80000, 0x6, 0x40101, 0x4000, 0xbfff1854, 0xffffffffffffffff, 0x0, 0x3, 0x2001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000000340)=""/97, 0x61}], 0x5, 0x0, 0x80000000) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6b24d73f177943b84f00000000000020000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf255e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r5 = socket$inet6(0xa, 0x80802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 0s ago: executing program 4 (id=814): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x5ea, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40280, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r2, 0x511, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) 0s ago: executing program 3 (id=816): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381e007fc6e5539b0d430a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x8, 0x0, 0x25dfdbfd, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0xc0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000060a010400fd0000000000000a0000010900010073797a31000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c0003"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x830600) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="000096000a00"], 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000bc0)={0x157, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x43}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0xfffff32b}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'macvlan0\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x5b}]}, {}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x800}]}]}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "a26479fc171a225e50413cd8b416eb8fa6bb082a"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '%^\x9e):\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'macvlan0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "2e4b9c39ea2fc2ec585abd18704744d3ca9f95c4153d3e103c2a826fc7088ee045d8e072b86a6c0feb0ed578022d48ed9f38b466f1ef98d24da084caa3eb71d21386cd3a9eff2c36d1b81ce152c82334d8d4b7dd5174e70ea8332ff0057e06b1c3834263f13b04d32817e80dee3db8bfce12c832044629c581101c77d7bfba1b52d504f3bc7660c019c3e02312de71e367071bc509415cc25931b2cd2d0e3ac7b4527aa6792d649f2e0d45a6c48f3220143dd7ac1503c3bf3bbdc3a1760af5e45cf1b2b3d691f8fa1b42b5f1a86258f99a848651aa82888f50"}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "3151deb2dd775b20250ae46422ea719aa167ff030055843a9bb6658c8d9b5ed67ee1e3236f354e0f0c72c04da9480917b26f22777159e2555f1da8b5c24df526e2c95527bbed3825b0739e193607d0fe901714d78dea382d8f61b9e6cfc2355fcca50ad73a3927fb183c746981593fc607008e5e7b4d91ca66efacb1738d4ec9eb509c8363ac972cdf9637472f264cb00000000000341194803f4f2f675ca6efe20798844a3fd243f729183d00ecdb28674934d875aaa6ea72c0c3"}]}, @ETHTOOL_A_WOL_SOPASS={0xbf, 0x3, "33d50c6acec6796c324545b44d2e9d853d0e24aa1b0f850227ce65ef97d0f49026ec31f42bbe3de2289103e039d9cc3f4694a18fde74e63c2a72cac3a9f712b5793595f1d41a10381dbf19d3be37702727bc8154910a7c1eb8e4dfed549c114cea1401c6b937c841ee149a834a777bc4481282e29e86a2764727a12b1c97739e49c223a2a04326c9b90ca7dbc62330d5efcf6e667e84406e51e36ef1a7a7cb25778475b1a567b97276e6d7a7e783286c9b1715325f389d0f004ac9"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2400c851}, 0x48c3) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24160}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x54, r14, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x7d602}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d4de8f3274"}]}, 0x54}}, 0x8800) kernel console output (not intermixed with test programs): hid failed with error -71 [ 58.640032][ T10] usb 8-1: USB disconnect, device number 2 [ 58.655952][ T6121] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 58.716717][ T6129] ======================================================= [ 58.716717][ T6129] WARNING: The mand mount option has been deprecated and [ 58.716717][ T6129] and is ignored by this kernel. Remove the mand [ 58.716717][ T6129] option from the mount to silence this warning. [ 58.716717][ T6129] ======================================================= [ 58.742002][ T6129] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.749649][ T6129] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.815547][ T6139] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 58.976906][ T6142] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 59.074813][ T6148] CUSE: unknown device info "" [ 59.076950][ T6148] CUSE: zero length info key specified [ 59.310103][ T6170] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.329384][ T6172] bad cache= option: none [ 59.329384][ T6172] [ 59.332354][ T6172] CIFS: VFS: bad cache= option: none [ 59.366080][ T6177] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 59.366764][ T6176] netlink: 'syz.3.41': attribute type 2 has an invalid length. [ 59.369478][ T6177] netlink: 2 bytes leftover after parsing attributes in process `syz.2.42'. [ 59.372682][ T6176] netlink: 'syz.3.41': attribute type 2 has an invalid length. [ 59.372699][ T6176] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 59.377257][ T6176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=6176 comm=syz.3.41 [ 59.379803][ T6177] team0: entered promiscuous mode [ 59.391954][ T6177] team_slave_0: entered promiscuous mode [ 59.395894][ T6177] team_slave_1: entered promiscuous mode [ 59.398595][ T6177] bridge0: port 3(team0) entered blocking state [ 59.402914][ T6177] bridge0: port 3(team0) entered disabled state [ 59.405562][ T6177] team0: entered allmulticast mode [ 59.407561][ T6177] team_slave_0: entered allmulticast mode [ 59.409852][ T6177] team_slave_1: entered allmulticast mode [ 59.413130][ T6177] bridge0: port 3(team0) entered blocking state [ 59.415155][ T6177] bridge0: port 3(team0) entered forwarding state [ 59.487556][ T6187] CUSE: unknown device info "" [ 59.490065][ T6187] CUSE: zero length info key specified [ 59.579619][ T64] Bluetooth: hci0: command tx timeout [ 59.608822][ T6198] bridge0: entered allmulticast mode [ 59.611705][ T6199] bridge0: left allmulticast mode [ 59.652819][ T6205] x_tables: ip_tables: osf match: only valid for protocol 6 [ 59.659235][ T5939] Bluetooth: hci1: command tx timeout [ 59.659257][ T5935] Bluetooth: hci3: command tx timeout [ 59.661482][ T64] Bluetooth: hci2: command tx timeout [ 59.697614][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 59.892833][ T6223] CUSE: unknown device info "" [ 59.894542][ T6223] CUSE: zero length info key specified [ 60.075678][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 60.105387][ T6240] SELinux: policydb magic number 0x788c does not match expected magic number 0xf97cff8c [ 60.109255][ T6240] SELinux: failed to load policy [ 60.119061][ T6130] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.153504][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.156395][ T6243] batadv_slave_0: entered promiscuous mode [ 60.269400][ T6130] usb 6-1: Using ep0 maxpacket: 16 [ 60.272878][ T6130] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.275949][ T6130] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.278898][ T6130] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.285544][ T6130] usb 6-1: config 1 interface 0 has no altsetting 0 [ 60.289631][ T6130] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 60.292478][ T6130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.294926][ T6130] usb 6-1: Product: syz [ 60.296271][ T6130] usb 6-1: Manufacturer: syz [ 60.297687][ T6130] usb 6-1: SerialNumber: syz [ 60.394864][ T6260] CUSE: unknown device info "" [ 60.396476][ T6260] CUSE: zero length info key specified [ 60.491776][ T6272] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 60.494613][ T6272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 60.514046][ T6274] vxcan1: tx address claim with different name [ 60.518073][ T6130] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 60.531555][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 60.550926][ T10] usb 6-1: USB disconnect, device number 2 [ 60.555444][ T10] usblp0: removed [ 60.634163][ T6286] tipc: Started in network mode [ 60.635901][ T6286] tipc: Node identity 4, cluster identity 4711 [ 60.637903][ T6286] tipc: Node number set to 4 [ 60.670242][ T6298] CUSE: unknown device info "" [ 60.672238][ T6298] CUSE: zero length info key specified [ 60.713907][ T6307] loop2: detected capacity change from 0 to 7 [ 60.721384][ T5943] Dev loop2: unable to read RDB block 7 [ 60.724121][ T5943] loop2: AHDI p1 p2 p3 [ 60.725771][ T5943] loop2: partition table partially beyond EOD, truncated [ 60.728074][ T5943] loop2: p1 start 1601398130 is beyond EOD, truncated [ 60.731743][ T5943] loop2: p2 start 1702059890 is beyond EOD, truncated [ 60.738702][ T6307] Dev loop2: unable to read RDB block 7 [ 60.743867][ T6307] loop2: AHDI p1 p2 p3 [ 60.745691][ T6307] loop2: partition table partially beyond EOD, truncated [ 60.748784][ T6307] loop2: p1 start 1601398130 is beyond EOD, truncated [ 60.751702][ T6307] loop2: p2 start 1702059890 is beyond EOD, truncated [ 60.834691][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.923691][ T6329] process 'syz.2.88' launched './file0' with NULL argv: empty string added [ 60.928447][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 60.933700][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 60.937110][ T6331] batadv0: entered promiscuous mode [ 60.940576][ T6331] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 60.960835][ T6331] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 60.963865][ T6331] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 60.968280][ T6331] bond1: (slave vcan1): making interface the new active one [ 60.970933][ T6331] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 60.974463][ T6331] bond1: entered allmulticast mode [ 60.975971][ T6331] vcan1: entered allmulticast mode [ 60.978460][ T6330] batadv0: left promiscuous mode [ 61.023667][ T1332] IPVS: starting estimator thread 0... [ 61.041113][ T6344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.93'. [ 61.048897][ T6339] CUSE: unknown device info "" [ 61.050762][ T6339] CUSE: zero length info key specified [ 61.089175][ T5938] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 61.109336][ T6343] IPVS: using max 45 ests per chain, 108000 per kthread [ 61.170260][ T6349] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 61.262123][ T5938] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 61.266063][ T5938] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 61.270050][ T5938] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 61.277571][ T5938] usb 6-1: string descriptor 0 read error: -22 [ 61.282353][ T5938] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.285444][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.292336][ T6319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.392658][ T6364] bridge0: entered promiscuous mode [ 61.394836][ T6364] macsec2: entered promiscuous mode [ 61.493560][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.496752][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.519229][ T1332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.536710][ T5938] cdc_ncm 6-1:1.0: bind() failure [ 61.543310][ T6376] qnx4: no qnx4 filesystem (no root dir). [ 61.545341][ T5938] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 61.548612][ T5938] cdc_ncm 6-1:1.1: bind() failure [ 61.553985][ T5938] usb 6-1: USB disconnect, device number 3 [ 61.562414][ T6380] CUSE: unknown device info "" [ 61.564480][ T6380] CUSE: zero length info key specified [ 61.594436][ T6376] Bluetooth: MGMT ver 1.23 [ 61.659616][ T64] Bluetooth: hci0: command tx timeout [ 61.690991][ T6392] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 61.740017][ T64] Bluetooth: hci3: command tx timeout [ 61.750918][ T64] Bluetooth: hci2: command tx timeout [ 61.750950][ T5935] Bluetooth: hci1: command tx timeout [ 62.081996][ T6424] CUSE: unknown device info "" [ 62.083663][ T6424] CUSE: zero length info key specified [ 62.168489][ T6428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6428 comm=syz.0.118 [ 62.187618][ T6428] ipip0: entered promiscuous mode [ 62.204741][ T6430] warning: `syz.1.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.208657][ T6430] __nla_validate_parse: 1 callbacks suppressed [ 62.208665][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 62.228684][ T5997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.244025][ T6435] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 62.247565][ T6435] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 62.251219][ T6435] bond0: (slave wlan1): Opening slave failed [ 62.283350][ T6440] binder: BINDER_SET_CONTEXT_MGR already set [ 62.286279][ T6440] binder: 6439:6440 ioctl 4018620d 200000000040 returned -16 [ 62.300606][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 62.305435][ T6441] uprobe: syz.1.124:6441 failed to unregister, leaking uprobe [ 62.315874][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 62.320134][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 62.335640][ T1149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.336857][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 62.339906][ T1149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.341983][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 62.345587][ T1149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.345619][ T1149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.377477][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.379340][ T5997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.381287][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.431450][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.131'. [ 62.609062][ T1267] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.641101][ T6476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6476 comm=syz.0.135 [ 62.739822][ T1267] usb 7-1: device descriptor read/64, error -71 [ 62.971620][ T6494] vivid-001: disconnect [ 62.974422][ T6494] netlink: 'syz.0.142': attribute type 13 has an invalid length. [ 62.977319][ T6494] veth0_macvtap: left promiscuous mode [ 62.979337][ T6494] macvtap0: entered promiscuous mode [ 62.981076][ T6494] macvtap0: entered allmulticast mode [ 62.989867][ T1267] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.045606][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 63.053470][ T6499] input: syz0 as /devices/virtual/input/input5 [ 63.129069][ T1267] usb 7-1: device descriptor read/64, error -71 [ 63.174549][ T6503] CUSE: unknown device info "" [ 63.176289][ T6503] CUSE: zero length info key specified [ 63.240197][ T1267] usb usb7-port1: attempt power cycle [ 63.358567][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 63.358581][ T40] audit: type=1400 audit(1761266349.115:346): avc: denied { mounton } for pid=6512 comm="syz.0.150" path="/53/file0" dev="gadgetfs" ino=8700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 63.358678][ T6513] overlayfs: missing 'lowerdir' [ 63.373860][ T6513] kAFS: unable to lookup cell '/,c¾ûL' [ 63.392504][ T40] audit: type=1400 audit(1761266349.155:347): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.420674][ T6515] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.467235][ T6520] sit0: entered promiscuous mode [ 63.469440][ T6475] vivid-001: reconnect [ 63.471234][ T6520] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 63.473520][ T6520] netlink: 1 bytes leftover after parsing attributes in process `syz.0.153'. [ 63.478577][ T40] audit: type=1400 audit(1761266349.235:348): avc: denied { connect } for pid=6518 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.518133][ T6526] netlink: 256 bytes leftover after parsing attributes in process `syz.3.155'. [ 63.537459][ T6524] fuse: Bad value for 'fd' [ 63.579205][ T1267] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.599687][ T1267] usb 7-1: device descriptor read/8, error -71 [ 63.717923][ T40] audit: type=1400 audit(1761266349.475:349): avc: denied { append } for pid=6534 comm="syz.1.158" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.764312][ T40] audit: type=1400 audit(1761266349.525:350): avc: denied { connect } for pid=6543 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.791429][ T40] audit: type=1400 audit(1761266349.555:351): avc: denied { write } for pid=6543 comm="syz.1.160" path="socket:[13526]" dev="sockfs" ino=13526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.859057][ T1267] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.880179][ T1267] usb 7-1: device descriptor read/8, error -71 [ 63.941050][ T6551] sock: sock_set_timeout: `syz.0.162' (pid 6551) tries to set negative timeout [ 63.946653][ T40] audit: type=1400 audit(1761266349.705:352): avc: denied { read } for pid=6550 comm="syz.0.162" path="socket:[11868]" dev="sockfs" ino=11868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.989364][ T1267] usb usb7-port1: unable to enumerate USB device [ 63.998073][ T6555] macvlan2: entered promiscuous mode [ 64.000524][ T6555] macvlan2: entered allmulticast mode [ 64.003097][ T6555] bond2: entered promiscuous mode [ 64.005468][ T6555] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 64.011195][ T6555] bond2: left promiscuous mode [ 64.029344][ T40] audit: type=1400 audit(1761266349.785:353): avc: denied { bind } for pid=6557 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.035300][ T5938] Process accounting resumed [ 64.038817][ T40] audit: type=1400 audit(1761266349.795:354): avc: denied { listen } for pid=6557 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.047634][ T6558] Process accounting resumed [ 64.068486][ T40] audit: type=1400 audit(1761266349.825:355): avc: denied { write } for pid=6560 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.156233][ T6576] MINIX-fs: unable to read superblock [ 64.180879][ T6578] ubi0: attaching mtd0 [ 64.185678][ T6578] ubi0: scanning is finished [ 64.187667][ T6578] ubi0: empty MTD device detected [ 64.368496][ T6578] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 64.371845][ T6578] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 64.374221][ T6578] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 64.376496][ T6578] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 64.379065][ T6578] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 64.381685][ T6578] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 64.384914][ T6578] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3487051749 [ 64.389954][ T6578] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 64.394130][ T6584] ubi0: background thread "ubi_bgt0d" started, PID 6584 [ 64.589723][ T5997] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 64.611936][ T6590] capability: warning: `syz.1.174' uses deprecated v2 capabilities in a way that may be insecure [ 64.616283][ T6590] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 64.619875][ T6590] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.625297][ T6590] random: crng reseeded on system resumption [ 64.739058][ T5997] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.869152][ T5997] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 64.958761][ T6593] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 64.965161][ T6593] nbd: illegal input index 1879048192 [ 65.019079][ T5997] usb 5-1: Invalid ep0 maxpacket: 64 [ 65.021356][ T5997] usb usb5-port1: attempt power cycle [ 65.122560][ T6605] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 65.131354][ T6607] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 65.167194][ T6610] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 65.179216][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 65.187052][ T6610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.193096][ T6610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6610 comm=syz.1.179 [ 65.198268][ T6610] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 65.328888][ T6616] CUSE: unknown device info "" [ 65.331019][ T6616] CUSE: zero length info key specified [ 65.374337][ T5997] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 65.405978][ T5997] usb 5-1: Invalid ep0 maxpacket: 64 [ 65.520802][ T6633] loop3: detected capacity change from 0 to 7 [ 65.525807][ T5943] Dev loop3: unable to read RDB block 7 [ 65.528241][ T5943] loop3: unable to read partition table [ 65.530917][ T5943] loop3: partition table beyond EOD, truncated [ 65.537526][ T6633] Dev loop3: unable to read RDB block 7 [ 65.539606][ T5997] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 65.540450][ T6633] loop3: unable to read partition table [ 65.544502][ T6633] loop3: partition table beyond EOD, truncated [ 65.547155][ T6633] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.570217][ T5997] usb 5-1: Invalid ep0 maxpacket: 64 [ 65.576865][ T5997] usb usb5-port1: unable to enumerate USB device [ 65.587010][ T6638] openvswitch: netlink: Unknown nsh attribute 0 [ 65.589508][ T6638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.666489][ T6645] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 65.805544][ T6654] CUSE: unknown device info "" [ 65.807401][ T6654] CUSE: zero length info key specified [ 66.304214][ T6680] sit0: entered promiscuous mode [ 66.306401][ T6680] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 66.369888][ T6687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6687 comm=syz.1.199 [ 66.443886][ T6689] Zero length message leads to an empty skb [ 66.564316][ T6693] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 66.578368][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.592780][ T6693] bond1: (slave ip6gretap1): making interface the new active one [ 66.597162][ T6693] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 66.738892][ T6708] block nbd1: not configured, cannot reconfigure [ 66.803949][ T6712] CUSE: unknown device info "" [ 66.805962][ T6712] CUSE: zero length info key specified [ 67.344172][ T6492] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 67.511472][ T6492] usb 6-1: not running at top speed; connect to a high speed hub [ 67.514768][ T6492] usb 6-1: too many configurations: 45, using maximum allowed: 8 [ 67.519686][ T6492] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 67.522866][ T6492] usb 6-1: can't read configurations, error -61 [ 67.592450][ T6748] CUSE: unknown device info "" [ 67.594494][ T6748] CUSE: zero length info key specified [ 67.661702][ T6492] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 67.661862][ T5935] Bluetooth: hci0: command tx timeout [ 67.703761][ T6752] __nla_validate_parse: 7 callbacks suppressed [ 67.703776][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 67.769779][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.223'. [ 67.817935][ T6492] usb 6-1: not running at top speed; connect to a high speed hub [ 67.820410][ T6492] usb 6-1: too many configurations: 45, using maximum allowed: 8 [ 67.823123][ T6759] ip6t_REJECT: ECHOREPLY is not supported [ 67.825864][ T6492] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 67.828732][ T6492] usb 6-1: can't read configurations, error -61 [ 67.830908][ T6492] usb usb6-port1: attempt power cycle [ 67.836660][ T5997] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.991526][ T5997] usb 5-1: device descriptor read/64, error -71 [ 68.072563][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'. [ 68.077969][ T6766] netlink: 'syz.2.227': attribute type 29 has an invalid length. [ 68.080983][ T6766] netlink: 'syz.2.227': attribute type 29 has an invalid length. [ 68.084152][ T6766] netlink: 500 bytes leftover after parsing attributes in process `syz.2.227'. [ 68.186237][ T6492] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 68.219667][ T6492] usb 6-1: not running at top speed; connect to a high speed hub [ 68.222924][ T6492] usb 6-1: too many configurations: 45, using maximum allowed: 8 [ 68.227839][ T6492] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 68.231011][ T6492] usb 6-1: can't read configurations, error -61 [ 68.247836][ T5997] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.381437][ T6492] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 68.401975][ T5997] usb 5-1: device descriptor read/64, error -71 [ 68.414157][ T6492] usb 6-1: not running at top speed; connect to a high speed hub [ 68.417335][ T6492] usb 6-1: too many configurations: 45, using maximum allowed: 8 [ 68.421870][ T6492] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 68.425000][ T6492] usb 6-1: can't read configurations, error -61 [ 68.427875][ T6492] usb usb6-port1: unable to enumerate USB device [ 68.524417][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 68.524435][ T40] audit: type=1400 audit(1761790642.185:386): avc: denied { connect } for pid=6779 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.527039][ T6780] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.531148][ T5997] usb usb5-port1: attempt power cycle [ 68.534803][ T40] audit: type=1400 audit(1761790642.185:387): avc: denied { write } for pid=6779 comm="syz.2.231" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.813888][ T6492] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.894552][ T5997] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.915895][ T5997] usb 5-1: device descriptor read/8, error -71 [ 68.976655][ T6492] usb 7-1: Using ep0 maxpacket: 32 [ 68.979823][ T6492] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 68.983115][ T6492] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 68.987013][ T6492] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.990461][ T6492] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 68.998037][ T6492] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 69.001837][ T6492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.005249][ T6492] usb 7-1: Product: syz [ 69.007067][ T6492] usb 7-1: Manufacturer: syz [ 69.009181][ T6492] usb 7-1: SerialNumber: syz [ 69.018509][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 69.022912][ T6492] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input6 [ 69.161457][ T5997] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.182725][ T5997] usb 5-1: device descriptor read/8, error -71 [ 69.243572][ T6492] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 69.246983][ T6492] (id 0x00) [ 69.295068][ T6492] rc_core: IR keymap rc-imon-pad not found [ 69.296986][ T6492] Registered IR keymap rc-empty [ 69.298272][ T5997] usb usb5-port1: unable to enumerate USB device [ 69.298513][ T6492] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 69.304439][ T6492] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 69.461095][ T6492] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 69.465579][ T6492] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input7 [ 69.472450][ T6492] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:6> initialized [ 69.635567][ T6492] usb 7-1: USB disconnect, device number 6 [ 70.085409][ T40] audit: type=1400 audit(1761790643.716:388): avc: denied { read } for pid=6787 comm="syz.1.233" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 70.092755][ T40] audit: type=1400 audit(1761790643.716:389): avc: denied { open } for pid=6787 comm="syz.1.233" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 70.138215][ T40] audit: type=1400 audit(1761790643.765:390): avc: denied { write } for pid=6787 comm="syz.1.233" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.188408][ T6792] IPv6: addrconf: prefix option has invalid lifetime [ 70.246683][ T40] audit: type=1400 audit(1761790643.862:391): avc: denied { watch watch_reads } for pid=6800 comm="syz.2.238" path="pipe:[13235]" dev="pipefs" ino=13235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 70.255219][ T40] audit: type=1400 audit(1761790643.862:392): avc: denied { append } for pid=6800 comm="syz.2.238" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.292020][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 70.294934][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.239'. [ 70.450288][ T6813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.451378][ T6814] binder: BINDER_SET_CONTEXT_MGR already set [ 70.453414][ T6813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.455213][ T6814] binder: 6810:6814 ioctl 4018620d 200000000100 returned -16 [ 70.460029][ T6814] binder: BINDER_SET_CONTEXT_MGR already set [ 70.461976][ T6814] binder: 6810:6814 ioctl 4018620d 200000000100 returned -16 [ 70.579498][ T6823] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 70.584651][ T6823] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.620185][ T40] audit: type=1400 audit(1761790644.233:393): avc: denied { read } for pid=6824 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.688151][ T6014] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 70.814447][ T40] audit: type=1400 audit(1761790644.429:394): avc: denied { write } for pid=6832 comm="syz.0.247" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.824537][ T40] audit: type=1400 audit(1761790644.429:395): avc: denied { open } for pid=6832 comm="syz.0.247" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.852128][ T6014] usb 7-1: Using ep0 maxpacket: 8 [ 70.856911][ T6014] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 70.860486][ T6014] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.864750][ T6014] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.868828][ T6014] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.873071][ T6014] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.878237][ T6014] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.882384][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.077918][ T6844] pimreg: entered allmulticast mode [ 71.100568][ T6014] usb 7-1: usb_control_msg returned -71 [ 71.102350][ T6014] usbtmc 7-1:16.0: can't read capabilities [ 71.107299][ T6014] usb 7-1: USB disconnect, device number 7 [ 71.143797][ T6847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.678999][ T6854] sp0: Synchronizing with TNC [ 71.952317][ T6872] capability: warning: `syz.2.257' uses 32-bit capabilities (legacy support in use) [ 72.075170][ T6886] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.077648][ T6886] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 72.080771][ T6886] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.083688][ T6886] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 72.179151][ T6889] CUSE: unknown device info "" [ 72.182685][ T6889] CUSE: zero length info key specified [ 72.284975][ T6898] netlink: 'syz.3.264': attribute type 21 has an invalid length. [ 72.288065][ T6898] netlink: 128 bytes leftover after parsing attributes in process `syz.3.264'. [ 72.292824][ T6898] netlink: 'syz.3.264': attribute type 4 has an invalid length. [ 72.295364][ T6898] netlink: 'syz.3.264': attribute type 3 has an invalid length. [ 72.298435][ T6898] netlink: 3 bytes leftover after parsing attributes in process `syz.3.264'. [ 72.322077][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.325534][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.374469][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.381501][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.437537][ T1149] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.440393][ T1149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.443910][ T1149] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.447837][ T1149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.450593][ T1149] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.453302][ T1149] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.456211][ T1149] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.459912][ T1149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.495405][ T6914] XFS (nbd0): SB validate failed with error -5. [ 72.623848][ T6930] tap0: tun_chr_ioctl cmd 1074025675 [ 72.625780][ T6930] tap0: persist enabled [ 72.866832][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.871353][ T6949] bond0: (slave rose0): Enslaving as an active interface with an up link [ 72.912193][ T6954] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 72.915026][ T6954] SELinux: failed to load policy [ 72.924369][ T6957] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 72.967773][ T6963] netlink: 144 bytes leftover after parsing attributes in process `syz.1.283'. [ 73.050977][ T6967] CUSE: unknown device info "" [ 73.052592][ T6967] CUSE: zero length info key specified [ 73.185129][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 73.232512][ T6984] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.436290][ T7010] CUSE: unknown device info "" [ 73.438263][ T7010] CUSE: zero length info key specified [ 73.471241][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 73.473945][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.296'. [ 73.655336][ T7032] veth1_to_batadv: entered promiscuous mode [ 73.823367][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 73.823378][ T40] audit: type=1400 audit(1761790647.367:433): avc: denied { read } for pid=7034 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.823850][ T7036] cgroup2: Unknown parameter 'obj_role' [ 73.824238][ T7035] overlayfs: workdir and upperdir must be separate subtrees [ 73.838581][ T40] audit: type=1400 audit(1761790647.386:434): avc: denied { name_connect } for pid=7037 comm="syz.2.300" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.847618][ T40] audit: type=1400 audit(1761790647.386:435): avc: denied { lock } for pid=7037 comm="syz.2.300" path="socket:[14316]" dev="sockfs" ino=14316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 73.856574][ T40] audit: type=1400 audit(1761790647.386:436): avc: denied { ioctl } for pid=7037 comm="syz.2.300" path="socket:[14317]" dev="sockfs" ino=14317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.894311][ T40] audit: type=1400 audit(1761790647.435:437): avc: denied { bind } for pid=7044 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.900691][ T40] audit: type=1400 audit(1761790647.455:438): avc: denied { listen } for pid=7044 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.908401][ T40] audit: type=1400 audit(1761790647.455:439): avc: denied { write } for pid=7044 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.913959][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 73.917127][ T40] audit: type=1400 audit(1761790647.455:440): avc: denied { nlmsg_read } for pid=7047 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.920810][ T7048] trusted_key: syz.2.302 sent an empty control message without MSG_MORE. [ 73.931286][ T7048] raw_sendmsg: syz.2.302 forgot to set AF_INET. Fix it! [ 74.008434][ T40] audit: type=1400 audit(1761790647.553:441): avc: denied { accept } for pid=7044 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.053040][ T40] audit: type=1400 audit(1761790647.592:442): avc: denied { ioctl } for pid=7050 comm="syz.2.304" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.103942][ T7053] CUSE: unknown device info "" [ 74.105707][ T7053] CUSE: zero length info key specified [ 74.115286][ T7056] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 74.446509][ T7077] netlink: 76 bytes leftover after parsing attributes in process `syz.3.313'. [ 74.495031][ T7078] CUSE: unknown device info "" [ 74.498678][ T7078] CUSE: zero length info key specified [ 74.545063][ T7087] lo: entered promiscuous mode [ 74.582552][ C2] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 74.585801][ C2] sr 2:0:0:0: [sr0] tag#31 CDB: Test Unit Ready [ 74.849037][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 75.804732][ T7140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.078250][ T7155] program syz.1.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.451748][ T7162] CUSE: unknown device info "" [ 76.453982][ T7162] CUSE: zero length info key specified [ 76.646315][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.648698][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.895024][ T7176] netlink: 'syz.2.345': attribute type 21 has an invalid length. [ 76.921154][ T7176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 76.923354][ T7176] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.927232][ T7176] vhci_hcd vhci_hcd.0: Device attached [ 76.998365][ T7182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.346'. [ 77.034579][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 77.037426][ T7184] netlink: 3 bytes leftover after parsing attributes in process `syz.1.347'. [ 77.138930][ T7194] netem: incorrect ge model size [ 77.141247][ T7194] netem: change failed [ 77.144489][ T7193] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 77.210718][ T1030] usb 42-1: SetAddress Request (2) to port 0 [ 77.213278][ T1030] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.222049][ T7198] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.515424][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 77.677793][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 77.681513][ T29] usb 6-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 77.685162][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.692260][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.695138][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.701778][ T29] usb 6-1: Product: syz [ 77.703116][ T29] usb 6-1: Manufacturer: syz [ 77.704630][ T29] usb 6-1: SerialNumber: syz [ 77.741187][ T7178] vhci_hcd: connection reset by peer [ 77.745254][ T1212] vhci_hcd: stop threads [ 77.747515][ T1212] vhci_hcd: release socket [ 77.749640][ T1212] vhci_hcd: disconnect device [ 77.996946][ T7208] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 78.090934][ T29] usb 6-1: USB disconnect, device number 8 [ 78.151620][ T7219] FAULT_INJECTION: forcing a failure. [ 78.151620][ T7219] name failslab, interval 1, probability 0, space 0, times 1 [ 78.157232][ T7219] CPU: 1 UID: 0 PID: 7219 Comm: syz.1.358 Not tainted syzkaller #0 PREEMPT(full) [ 78.157253][ T7219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.157262][ T7219] Call Trace: [ 78.157275][ T7219] [ 78.157281][ T7219] dump_stack_lvl+0x16c/0x1f0 [ 78.157319][ T7219] should_fail_ex+0x512/0x640 [ 78.157342][ T7219] ? __kmalloc_cache_noprof+0x5f/0x780 [ 78.157366][ T7219] should_failslab+0xc2/0x120 [ 78.157384][ T7219] __kmalloc_cache_noprof+0x72/0x780 [ 78.157404][ T7219] ? __pfx___might_resched+0x10/0x10 [ 78.157421][ T7219] ? vhost_task_create+0xe5/0x370 [ 78.157434][ T7219] ? rcu_is_watching+0x12/0xc0 [ 78.157454][ T7219] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 78.157477][ T7219] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 78.157496][ T7219] ? vhost_task_create+0xe5/0x370 [ 78.157511][ T7219] vhost_task_create+0xe5/0x370 [ 78.157522][ T7219] ? __pfx_vhost_task_create+0x10/0x10 [ 78.157544][ T7219] ? __pfx_vhost_task_fn+0x10/0x10 [ 78.157571][ T7219] kvm_mmu_post_init_vm+0x1b7/0x380 [ 78.157589][ T7219] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 78.157606][ T7219] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 78.157627][ T7219] kvm_vcpu_ioctl+0x5eb/0x1690 [ 78.157651][ T7219] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.157672][ T7219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.157693][ T7219] ? do_vfs_ioctl+0x128/0x14f0 [ 78.157708][ T7219] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 78.157722][ T7219] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 78.157738][ T7219] ? hook_file_ioctl_common+0x145/0x410 [ 78.157755][ T7219] ? selinux_file_ioctl+0x180/0x270 [ 78.157765][ T7219] ? selinux_file_ioctl+0xb4/0x270 [ 78.157776][ T7219] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.157797][ T7219] __x64_sys_ioctl+0x18e/0x210 [ 78.157820][ T7219] do_syscall_64+0xcd/0xfa0 [ 78.157844][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.157857][ T7219] RIP: 0033:0x7f272778efc9 [ 78.157868][ T7219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.157882][ T7219] RSP: 002b:00007f27259f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.157896][ T7219] RAX: ffffffffffffffda RBX: 00007f27279e5fa0 RCX: 00007f272778efc9 [ 78.157906][ T7219] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 78.157914][ T7219] RBP: 00007f27259f6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.157922][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.157931][ T7219] R13: 00007f27279e6038 R14: 00007f27279e5fa0 R15: 00007ffe7f39e8e8 [ 78.157954][ T7219] [ 78.283496][ T7221] __nla_validate_parse: 1 callbacks suppressed [ 78.283506][ T7221] netlink: 56 bytes leftover after parsing attributes in process `syz.2.359'. [ 78.313994][ T7224] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 78.334586][ T7224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.353085][ T7223] bond2: (slave ip6erspan0): making interface the new active one [ 78.362370][ T7223] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 78.369086][ T7229] CUSE: unknown device info "" [ 78.370692][ T7229] CUSE: zero length info key specified [ 78.407529][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 78.434792][ T7224] cgroup: Invalid name [ 78.544524][ T7251] afs: Unknown parameter 'smackfsdef' [ 78.584232][ T7254] can: request_module (can-proto-0) failed. [ 78.602652][ T7259] FAULT_INJECTION: forcing a failure. [ 78.602652][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 78.606635][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(full) [ 78.606649][ T7259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.606655][ T7259] Call Trace: [ 78.606659][ T7259] [ 78.606663][ T7259] dump_stack_lvl+0x16c/0x1f0 [ 78.606682][ T7259] should_fail_ex+0x512/0x640 [ 78.606694][ T7259] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 78.606712][ T7259] should_failslab+0xc2/0x120 [ 78.606724][ T7259] kmem_cache_alloc_node_noprof+0x78/0x770 [ 78.606739][ T7259] ? copy_process+0x4b5/0x76a0 [ 78.606755][ T7259] ? copy_process+0x4b5/0x76a0 [ 78.606767][ T7259] copy_process+0x4b5/0x76a0 [ 78.606786][ T7259] ? __pfx_copy_process+0x10/0x10 [ 78.606801][ T7259] ? lockdep_init_map_type+0x5c/0x280 [ 78.606813][ T7259] ? lockdep_init_map_type+0x5c/0x280 [ 78.606822][ T7259] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 78.606838][ T7259] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 78.606851][ T7259] vhost_task_create+0x1d2/0x370 [ 78.606879][ T7259] ? __pfx_vhost_task_create+0x10/0x10 [ 78.606900][ T7259] ? __pfx_vhost_task_fn+0x10/0x10 [ 78.606916][ T7259] kvm_mmu_post_init_vm+0x1b7/0x380 [ 78.606928][ T7259] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 78.606940][ T7259] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 78.606957][ T7259] kvm_vcpu_ioctl+0x5eb/0x1690 [ 78.606973][ T7259] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.606987][ T7259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.607001][ T7259] ? do_vfs_ioctl+0x128/0x14f0 [ 78.607015][ T7259] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 78.607029][ T7259] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 78.607046][ T7259] ? hook_file_ioctl_common+0x145/0x410 [ 78.607063][ T7259] ? selinux_file_ioctl+0x180/0x270 [ 78.607078][ T7259] ? selinux_file_ioctl+0xb4/0x270 [ 78.607089][ T7259] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.607103][ T7259] __x64_sys_ioctl+0x18e/0x210 [ 78.607118][ T7259] do_syscall_64+0xcd/0xfa0 [ 78.607134][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.607144][ T7259] RIP: 0033:0x7f00a858efc9 [ 78.607153][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.607162][ T7259] RSP: 002b:00007f00a94cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.607172][ T7259] RAX: ffffffffffffffda RBX: 00007f00a87e5fa0 RCX: 00007f00a858efc9 [ 78.607178][ T7259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 78.607184][ T7259] RBP: 00007f00a94cf090 R08: 0000000000000000 R09: 0000000000000000 [ 78.607190][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.607195][ T7259] R13: 00007f00a87e6038 R14: 00007f00a87e5fa0 R15: 00007ffc8843d588 [ 78.607209][ T7259] [ 78.697249][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.857921][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 78.881038][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.895851][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.899040][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.910706][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.913836][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.922514][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 78.922523][ T40] audit: type=1400 audit(1761790652.385:482): avc: denied { create } for pid=7290 comm="syz.3.380" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.925655][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.934155][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.934343][ T7291] 9pnet_virtio: no channels available for device /dev/nullb0 [ 78.937844][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.940676][ T7292] program syz.3.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.941063][ T40] audit: type=1400 audit(1761790652.404:483): avc: denied { write } for pid=7290 comm="syz.3.380" name="file2" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.941094][ T40] audit: type=1400 audit(1761790652.404:484): avc: denied { open } for pid=7290 comm="syz.3.380" path="/61/file2" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.944202][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.944524][ T7291] loop6: detected capacity change from 0 to 128 [ 78.953696][ T40] audit: type=1400 audit(1761790652.404:485): avc: denied { ioctl } for pid=7290 comm="syz.3.380" path="/61/file2" dev="tmpfs" ino=341 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.956735][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.988576][ T24] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.03 Device [syz1] on syz1 [ 79.020751][ T40] audit: type=1400 audit(1761790652.483:486): avc: denied { create } for pid=7295 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 79.030884][ T40] audit: type=1400 audit(1761790652.493:487): avc: denied { sys_admin } for pid=7295 comm="syz.0.381" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 79.035967][ T7294] fido_id[7294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.038119][ C2] ata1: illegal qc_active transition (00000000->80000000) [ 79.055905][ T40] audit: type=1400 audit(1761790652.513:488): avc: denied { unlink } for pid=5937 comm="syz-executor" name="file2" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.085707][ T40] audit: type=1400 audit(1761790652.533:489): avc: denied { getopt } for pid=7298 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.189736][ T7306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 79.193151][ T7306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 79.196564][ T7306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 79.200547][ T7306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 79.203418][ T7306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 79.206366][ T7306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 79.209736][ T7306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 79.364934][ T1117] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 79.369753][ T1117] ata1.00: configured for UDMA/100 [ 79.371333][ T6492] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 79.536728][ T6492] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.541244][ T6492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.545938][ T6492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.549981][ T6492] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 79.557368][ T6492] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 79.561109][ T6492] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 79.564727][ T6492] usb 5-1: Manufacturer: syz [ 79.568835][ T6492] usb 5-1: config 0 descriptor?? [ 79.572164][ T7320] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 79.575713][ T5935] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 79.579194][ T5935] Bluetooth: hci1: Injecting HCI hardware error event [ 79.582458][ T5935] Bluetooth: hci1: hardware error 0x00 [ 79.653251][ T7323] Bluetooth: MGMT ver 1.23 [ 79.828739][ T7332] syzkaller1: entered promiscuous mode [ 79.831123][ T7332] syzkaller1: entered allmulticast mode [ 79.872045][ T7330] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 79.875668][ T7330] bond0: (slave wlan1): Opening slave failed [ 79.971316][ T7336] only policy match revision 0 supported [ 79.971327][ T7336] unable to load match [ 79.987047][ T6492] usbhid 5-1:0.0: can't add hid device: -71 [ 79.989070][ T6492] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.998211][ T6492] usb 5-1: USB disconnect, device number 10 [ 80.026091][ T40] audit: type=1400 audit(1761790653.480:490): avc: denied { ioctl } for pid=7337 comm="syz.1.395" path="socket:[18276]" dev="sockfs" ino=18276 ioctlcmd=0xae65 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 80.120554][ T40] audit: type=1400 audit(1761790653.569:491): avc: denied { read } for pid=7339 comm="syz.1.396" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.265301][ T7359] tipc: Started in network mode [ 80.267229][ T7359] tipc: Node identity ac14140f, cluster identity 4711 [ 80.270505][ T7359] tipc: New replicast peer: 255.255.255.255 [ 80.274357][ T7359] tipc: Enabled bearer , priority 10 [ 80.276631][ T7359] tipc: Disabling bearer [ 80.284566][ T7359] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 80.388820][ T7369] FAULT_INJECTION: forcing a failure. [ 80.388820][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 80.393857][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.2.401 Not tainted syzkaller #0 PREEMPT(full) [ 80.393880][ T7369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.393891][ T7369] Call Trace: [ 80.393906][ T7369] [ 80.393913][ T7369] dump_stack_lvl+0x16c/0x1f0 [ 80.393952][ T7369] should_fail_ex+0x512/0x640 [ 80.393979][ T7369] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 80.394013][ T7369] should_failslab+0xc2/0x120 [ 80.394033][ T7369] kmem_cache_alloc_noprof+0x75/0x6e0 [ 80.394056][ T7369] ? alloc_pid+0xc7/0xbc0 [ 80.394077][ T7369] ? alloc_pid+0xc7/0xbc0 [ 80.394089][ T7369] alloc_pid+0xc7/0xbc0 [ 80.394110][ T7369] copy_process+0x49a3/0x76a0 [ 80.394139][ T7369] ? __pfx_copy_process+0x10/0x10 [ 80.394163][ T7369] ? lockdep_init_map_type+0x5c/0x280 [ 80.394180][ T7369] ? lockdep_init_map_type+0x5c/0x280 [ 80.394195][ T7369] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 80.394220][ T7369] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 80.394256][ T7369] vhost_task_create+0x1d2/0x370 [ 80.394272][ T7369] ? __pfx_vhost_task_create+0x10/0x10 [ 80.394296][ T7369] ? __pfx_vhost_task_fn+0x10/0x10 [ 80.394323][ T7369] kvm_mmu_post_init_vm+0x1b7/0x380 [ 80.394342][ T7369] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 80.394360][ T7369] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 80.394389][ T7369] kvm_vcpu_ioctl+0x5eb/0x1690 [ 80.394414][ T7369] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.394438][ T7369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.394459][ T7369] ? do_vfs_ioctl+0x128/0x14f0 [ 80.394481][ T7369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.394503][ T7369] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.394530][ T7369] ? hook_file_ioctl_common+0x145/0x410 [ 80.394556][ T7369] ? selinux_file_ioctl+0x180/0x270 [ 80.394572][ T7369] ? selinux_file_ioctl+0xb4/0x270 [ 80.394590][ T7369] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.394612][ T7369] __x64_sys_ioctl+0x18e/0x210 [ 80.394633][ T7369] do_syscall_64+0xcd/0xfa0 [ 80.394657][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.394672][ T7369] RIP: 0033:0x7f0b1018efc9 [ 80.394686][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.394701][ T7369] RSP: 002b:00007f0b10fb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.394716][ T7369] RAX: ffffffffffffffda RBX: 00007f0b103e5fa0 RCX: 00007f0b1018efc9 [ 80.394726][ T7369] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 80.394734][ T7369] RBP: 00007f0b10fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 80.394742][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.394750][ T7369] R13: 00007f0b103e6038 R14: 00007f0b103e5fa0 R15: 00007ffe9b0f32e8 [ 80.394772][ T7369] [ 80.497420][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.936814][ T7349] syz.1.398 (7349): drop_caches: 2 [ 80.976552][ T5997] hid (null): report_id 0 is invalid [ 80.980246][ T5997] hid-generic 8000:6928:0008.0003: reserved main item tag 0xe [ 80.982795][ T5997] hid-generic 8000:6928:0008.0003: report_id 0 is invalid [ 80.985617][ T5997] hid-generic 8000:6928:0008.0003: item 0 0 1 8 parsing failed [ 80.988286][ T5997] hid-generic 8000:6928:0008.0003: probe with driver hid-generic failed with error -22 [ 81.206135][ T7413] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 81.276386][ T7420] kAFS: No cell specified [ 81.431688][ T7435] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 81.435046][ T7435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.439492][ T7433] usb usb3: usbfs: process 7433 (syz.0.421) did not claim interface 9 before use [ 81.669605][ T5935] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 81.788238][ T7456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 81.790918][ T7456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.795051][ T7456] vhci_hcd vhci_hcd.0: Device attached [ 81.804999][ T7457] vhci_hcd: unknown pdu 1 [ 81.807208][ T1263] vhci_hcd: stop threads [ 81.812734][ T1263] vhci_hcd: release socket [ 81.814526][ T1263] vhci_hcd: disconnect device [ 82.189751][ T7469] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.268043][ T7477] xt_l2tp: invalid flags combination: 8 [ 82.270370][ T34] kernel read not supported for file /315/timerslack_ns (pid: 34 comm: kworker/3:0) [ 82.329571][ T1030] usb 42-1: device descriptor read/8, error -110 [ 82.344439][ T7484] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 82.346583][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.351041][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 82.448629][ T7486] vhci_hcd: connection closed [ 82.450185][ T7375] vhci_hcd: stop threads [ 82.453651][ T7477] mmap: syz.1.433 (7477) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.453978][ T7375] vhci_hcd: release socket [ 82.461015][ T7375] vhci_hcd: disconnect device [ 82.529785][ T34] vhci_hcd: vhci_device speed not set [ 82.725319][ T1030] usb usb42-port1: attempt power cycle [ 82.751720][ T5938] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 82.823180][ T7520] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 82.833409][ T7520] CIFS mount error: No usable UNC path provided in device string! [ 82.833409][ T7520] [ 82.837642][ T7520] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 82.877481][ T7522] netlink: 'syz.1.449': attribute type 15 has an invalid length. [ 82.916646][ T5938] usb 8-1: unable to get BOS descriptor or descriptor too short [ 82.919847][ T5938] usb 8-1: not running at top speed; connect to a high speed hub [ 82.923727][ T5938] usb 8-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.928481][ T5938] usb 8-1: config 1 interface 0 has no altsetting 0 [ 82.932907][ T5938] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.936268][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.938753][ T5938] usb 8-1: Product: syz [ 82.940077][ T5938] usb 8-1: Manufacturer: syz [ 82.941455][ T5938] usb 8-1: SerialNumber: syz [ 82.945694][ T7529] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 83.028123][ T7536] program syz.2.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.068473][ T7541] overlay: ./file0 is not a directory [ 83.155219][ T5938] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 83.160438][ T5938] usb 8-1: USB disconnect, device number 3 [ 83.204255][ T7549] chnl_net:caif_netlink_parms(): no params data found [ 83.297932][ T1030] usb usb42-port1: unable to enumerate USB device [ 83.746713][ T7569] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 83.841561][ T5347] pmem0: [POWERTEC] [ 83.918965][ T7591] qnx4: no qnx4 filesystem (no root dir). [ 83.927414][ T7591] __nla_validate_parse: 34 callbacks suppressed [ 83.927424][ T7591] netlink: 112 bytes leftover after parsing attributes in process `syz.0.470'. [ 84.009715][ T7600] vlan3: entered promiscuous mode [ 84.067202][ T7593] kvm: kvm [7588]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 84.071677][ T7593] kvm: kvm [7588]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 84.090046][ T7593] kvm: kvm [7588]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 84.111126][ T7593] kvm: kvm [7588]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 84.114486][ T7593] kvm: kvm [7588]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 84.131543][ T7593] kvm_intel: kvm [7588]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 84.968211][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 84.968227][ T40] audit: type=1400 audit(1761790658.366:514): avc: denied { nlmsg_read } for pid=7612 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.984489][ T5997] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.075969][ T7623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.482'. [ 85.135611][ T7634] batman_adv: batadv0: Adding interface: dummy0 [ 85.138140][ T7634] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.150863][ T7634] batman_adv: batadv0: Interface activated: dummy0 [ 85.160779][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 85.164159][ T5997] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.168723][ T5997] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.171685][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.173539][ T40] audit: type=1400 audit(1761790658.564:515): avc: denied { ioctl } for pid=7632 comm="syz.3.487" path="socket:[20709]" dev="sockfs" ino=20709 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 85.176432][ T5997] usb 6-1: config 0 descriptor?? [ 85.186226][ T7607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.294743][ T7643] binder: 7642:7643 ioctl c0306201 200000000240 returned -11 [ 85.303667][ T7633] batadv0: mtu less than device minimum [ 85.306349][ T7633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.310688][ T7633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.315168][ T7633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.319407][ T7633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.323166][ T7633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.327790][ T7633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.332326][ T7633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.347146][ T7644] binder: BINDER_SET_CONTEXT_MGR already set [ 85.347204][ T7645] binder_alloc: binder_alloc_mmap_handler: 7642 200000ffd000-200001000000 already mapped failed -16 [ 85.349564][ T7644] binder: 7642:7644 ioctl 4018620d 200000000040 returned -16 [ 85.498622][ T5938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 85.534160][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 85.540160][ T7653] netlink: 'syz.2.491': attribute type 21 has an invalid length. [ 85.543374][ T7653] netlink: 128 bytes leftover after parsing attributes in process `syz.2.491'. [ 85.547090][ T7653] netlink: 'syz.2.491': attribute type 4 has an invalid length. [ 85.551509][ T7653] netlink: 'syz.2.491': attribute type 3 has an invalid length. [ 85.554517][ T7653] netlink: 3 bytes leftover after parsing attributes in process `syz.2.491'. [ 85.561411][ T40] audit: type=1400 audit(1761790658.961:516): avc: denied { mount } for pid=7649 comm="syz.2.491" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 85.562157][ T7650] devtmpfs: Cannot change global quota limit on remount [ 85.568123][ T40] audit: type=1400 audit(1761790658.961:517): avc: denied { remount } for pid=7649 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 85.590842][ T40] audit: type=1400 audit(1761790658.991:518): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 85.598177][ T5997] usbhid 6-1:0.0: can't add hid device: -32 [ 85.601195][ T5997] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 85.670104][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 85.674164][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.677825][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.681264][ T5938] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 85.684366][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.694588][ T5938] usb 5-1: config 0 descriptor?? [ 85.745829][ T7662] qnx4: no qnx4 filesystem (no root dir). [ 85.756698][ T7662] netlink: 112 bytes leftover after parsing attributes in process `syz.2.493'. [ 85.782116][ T5997] usb 6-1: USB disconnect, device number 9 [ 85.992249][ T7671] CIFS mount error: No usable UNC path provided in device string! [ 85.992249][ T7671] [ 85.996825][ T7671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.080544][ T7683] tap0: tun_chr_ioctl cmd 1074025676 [ 86.082752][ T7683] tap0: owner set to 0 [ 86.121675][ T5938] kye 0003:0458:5016.0004: control desc unexpectedly large [ 86.128871][ T40] audit: type=1400 audit(1761790659.516:519): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.137450][ T5938] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input9 [ 86.209341][ T5938] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input10 [ 86.315282][ T5935] Bluetooth: hci0: Malformed HCI Event [ 86.335090][ T7692] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 86.358260][ T5938] kye 0003:0458:5016.0004: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 86.367049][ T5938] usb 5-1: USB disconnect, device number 11 [ 86.435880][ T7705] fido_id[7705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 86.440241][ T7704] vlan2: entered allmulticast mode [ 86.564866][ T7715] tmpfs: Cannot disable swap on remount [ 86.665087][ T7721] net_ratelimit: 12 callbacks suppressed [ 86.665102][ T7721] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 86.851479][ T40] audit: type=1400 audit(1761790660.240:520): avc: denied { mounton } for pid=7727 comm="syz.0.513" path="/127/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 86.855276][ T7728] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.861663][ T7729] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.876069][ T7728] Bluetooth: MGMT ver 1.23 [ 86.878001][ T7728] Bluetooth: hci1: too big key_count value 16384 [ 86.911811][ T7725] netlink: 'syz.3.512': attribute type 32 has an invalid length. [ 86.915178][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 86.921824][ T40] audit: type=1400 audit(1761790660.309:521): avc: denied { read } for pid=7732 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.939896][ T1212] bond0 (unregistering): Released all slaves [ 86.958412][ T7725] bond1: Setting coupled_control to off (0) [ 86.973653][ T40] audit: type=1400 audit(1761790660.359:522): avc: denied { setopt } for pid=7732 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.014125][ T841] cfg80211: failed to load regulatory.db [ 87.038074][ T7735] netlink: 'syz.0.514': attribute type 2 has an invalid length. [ 87.041033][ T7735] netlink: 46 bytes leftover after parsing attributes in process `syz.0.514'. [ 87.306448][ T7750] CUSE: unknown device info "" [ 87.309122][ T7750] CUSE: zero length info key specified [ 87.424829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.456022][ T7767] MTD: Couldn't look up '/dev/sg0': -15 [ 87.461448][ T7767] /dev/sg0: Can't lookup blockdev [ 87.560286][ T40] audit: type=1400 audit(1761790660.934:523): avc: denied { execute_no_trans } for pid=7771 comm="syz.3.524" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="hugetlbfs" ino=22243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 87.562858][ T7772] netlink: 'syz.3.524': attribute type 3 has an invalid length. [ 87.601643][ T7774] netlink: 'syz.3.525': attribute type 15 has an invalid length. [ 87.605516][ T7775] netlink: 'syz.3.525': attribute type 15 has an invalid length. [ 87.637030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.959373][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 88.130747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 88.140514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.143910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.197255][ T7809] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 88.262567][ T7814] syz.0.533: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 88.269143][ T7814] CPU: 2 UID: 0 PID: 7814 Comm: syz.0.533 Not tainted syzkaller #0 PREEMPT(full) [ 88.269165][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.269176][ T7814] Call Trace: [ 88.269191][ T7814] [ 88.269197][ T7814] dump_stack_lvl+0x16c/0x1f0 [ 88.269241][ T7814] warn_alloc+0x248/0x3a0 [ 88.269268][ T7814] ? __pfx_warn_alloc+0x10/0x10 [ 88.269295][ T7814] ? alloc_pages_mpol+0x25a/0x550 [ 88.269316][ T7814] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.269333][ T7814] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 88.269359][ T7814] ? __kmalloc_node_noprof+0x364/0x8a0 [ 88.269376][ T7814] ? __get_vm_area_node+0x208/0x330 [ 88.269402][ T7814] __vmalloc_node_range_noprof+0x119b/0x1480 [ 88.269432][ T7814] ? vhost_task_create+0x1d2/0x370 [ 88.269458][ T7814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 88.269484][ T7814] ? rcu_is_watching+0x12/0xc0 [ 88.269509][ T7814] ? vhost_task_create+0x1d2/0x370 [ 88.269525][ T7814] __vmalloc_node_noprof+0xad/0xf0 [ 88.269545][ T7814] ? vhost_task_create+0x1d2/0x370 [ 88.269565][ T7814] copy_process+0x2c77/0x76a0 [ 88.269601][ T7814] ? __pfx_copy_process+0x10/0x10 [ 88.269627][ T7814] ? lockdep_init_map_type+0x5c/0x280 [ 88.269646][ T7814] ? lockdep_init_map_type+0x5c/0x280 [ 88.269662][ T7814] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 88.269687][ T7814] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 88.269708][ T7814] vhost_task_create+0x1d2/0x370 [ 88.269724][ T7814] ? __pfx_vhost_task_create+0x10/0x10 [ 88.269750][ T7814] ? __pfx_vhost_task_fn+0x10/0x10 [ 88.269781][ T7814] kvm_mmu_post_init_vm+0x1b7/0x380 [ 88.269801][ T7814] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 88.269820][ T7814] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 88.269850][ T7814] kvm_vcpu_ioctl+0x5eb/0x1690 [ 88.269876][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 88.269901][ T7814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.269924][ T7814] ? do_vfs_ioctl+0x128/0x14f0 [ 88.269948][ T7814] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 88.269978][ T7814] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 88.270014][ T7814] ? hook_file_ioctl_common+0x145/0x410 [ 88.270045][ T7814] ? selinux_file_ioctl+0x180/0x270 [ 88.270062][ T7814] ? selinux_file_ioctl+0xb4/0x270 [ 88.270082][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 88.270107][ T7814] __x64_sys_ioctl+0x18e/0x210 [ 88.270132][ T7814] do_syscall_64+0xcd/0xfa0 [ 88.270159][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.270175][ T7814] RIP: 0033:0x7f00a858efc9 [ 88.270189][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.270205][ T7814] RSP: 002b:00007f00a94ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.270220][ T7814] RAX: ffffffffffffffda RBX: 00007f00a87e6090 RCX: 00007f00a858efc9 [ 88.270231][ T7814] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 88.270240][ T7814] RBP: 00007f00a94ae090 R08: 0000000000000000 R09: 0000000000000000 [ 88.270250][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.270259][ T7814] R13: 00007f00a87e6128 R14: 00007f00a87e6090 R15: 00007ffc8843d588 [ 88.270285][ T7814] [ 88.270291][ T7814] Mem-Info: [ 88.379212][ T7814] active_anon:29878 inactive_anon:0 isolated_anon:0 [ 88.379212][ T7814] active_file:15381 inactive_file:40659 isolated_file:0 [ 88.379212][ T7814] unevictable:1768 dirty:174 writeback:0 [ 88.379212][ T7814] slab_reclaimable:8758 slab_unreclaimable:69248 [ 88.379212][ T7814] mapped:25136 shmem:20106 pagetables:1410 [ 88.379212][ T7814] sec_pagetables:307 bounce:0 [ 88.379212][ T7814] kernel_misc_reclaimable:0 [ 88.379212][ T7814] free:435472 free_pcp:22035 free_cma:0 [ 88.400637][ T7814] Node 0 active_anon:115668kB inactive_anon:0kB active_file:61524kB inactive_file:162436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100544kB dirty:676kB writeback:0kB shmem:73044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13296kB pagetables:5448kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 88.402226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.414580][ T7821] CUSE: unknown device info "" [ 88.418589][ T7821] CUSE: zero length info key specified [ 88.429087][ T7814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 88.440703][ T7814] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 88.452794][ T7814] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 88.455320][ T7814] Node 0 DMA32 free:123340kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:114428kB inactive_anon:0kB active_file:61524kB inactive_file:162436kB unevictable:6884kB writepending:676kB zspages:0kB present:2080628kB managed:1269500kB mlocked:0kB bounce:0kB free_pcp:72956kB local_pcp:19176kB free_cma:0kB [ 88.468798][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 88.470794][ T7814] Node 1 Normal free:1603188kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:20kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16904kB local_pcp:3960kB free_cma:0kB [ 88.483972][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 88.485960][ T7814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 88.491080][ T7814] Node 0 DMA32: 76*4kB (UE) 234*8kB (UME) 220*16kB (UME) 481*32kB (UME) 116*64kB (UME) 47*128kB (UME) 18*256kB (UME) 14*512kB (UM) 1*1024kB (M) 11*2048kB (UME) 13*4096kB (U) = 123104kB [ 88.502817][ T7814] Node 1 Normal: 2*4kB (ME) 8*8kB (ME) 19*16kB (UME) 38*32kB (UME) 21*64kB (UME) 14*128kB (UME) 4*256kB (UE) 6*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 388*4096kB (M) = 1603192kB [ 88.510005][ T7814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.513962][ T7814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.517643][ T7814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.520178][ T7829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.522635][ T7814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.526994][ T7829] block device autoloading is deprecated and will be removed. [ 88.534390][ T7814] 74871 total pagecache pages [ 88.536323][ T7814] 0 pages in swap cache [ 88.538700][ T7814] Free swap = 124996kB [ 88.540431][ T7814] Total swap = 124996kB [ 88.542137][ T7814] 1048443 pages RAM [ 88.547583][ T7814] 0 pages HighMem/MovableOnly [ 88.549499][ T7814] 281755 pages reserved [ 88.551180][ T7814] 0 pages cma reserved [ 88.569837][ T7833] kvm: user requested TSC rate below hardware speed [ 88.702999][ T7844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.703158][ T7843] hpfs: hpfs_map_sector(): read error [ 88.750665][ T7850] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 88.753269][ T7850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.548'. [ 88.801664][ T7852] fuse: Bad value for 'group_id' [ 88.803656][ T7852] fuse: Bad value for 'group_id' [ 88.944172][ T7857] CUSE: unknown device info "" [ 88.946304][ T7857] CUSE: zero length info key specified [ 89.090200][ T7867] FAULT_INJECTION: forcing a failure. [ 89.090200][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 89.094683][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.1.554 Not tainted syzkaller #0 PREEMPT(full) [ 89.094697][ T7867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.094704][ T7867] Call Trace: [ 89.094716][ T7867] [ 89.094724][ T7867] dump_stack_lvl+0x16c/0x1f0 [ 89.094758][ T7867] should_fail_ex+0x512/0x640 [ 89.094801][ T7867] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 89.094822][ T7867] should_failslab+0xc2/0x120 [ 89.094834][ T7867] kmem_cache_alloc_noprof+0x75/0x6e0 [ 89.094849][ T7867] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 89.094864][ T7867] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 89.094881][ T7867] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 89.094896][ T7867] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 89.094919][ T7867] mmu_topup_memory_caches+0x25/0x170 [ 89.094943][ T7867] kvm_mmu_load+0xd6/0x23c0 [ 89.094964][ T7867] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 89.094983][ T7867] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 89.095001][ T7867] ? __pfx_kvm_mmu_load+0x10/0x10 [ 89.095017][ T7867] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 89.095032][ T7867] ? kvm_check_and_inject_events+0x71c/0x1310 [ 89.095051][ T7867] vcpu_run+0x3779/0x54d0 [ 89.095067][ T7867] ? __pfx_vcpu_run+0x10/0x10 [ 89.095080][ T7867] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 89.095093][ T7867] ? __local_bh_enable_ip+0xa4/0x120 [ 89.095108][ T7867] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 89.095119][ T7867] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 89.095133][ T7867] kvm_vcpu_ioctl+0x5eb/0x1690 [ 89.095149][ T7867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 89.095163][ T7867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.095177][ T7867] ? do_vfs_ioctl+0x128/0x14f0 [ 89.095192][ T7867] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 89.095205][ T7867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 89.095224][ T7867] ? hook_file_ioctl_common+0x145/0x410 [ 89.095250][ T7867] ? selinux_file_ioctl+0x180/0x270 [ 89.095265][ T7867] ? selinux_file_ioctl+0xb4/0x270 [ 89.095284][ T7867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 89.095309][ T7867] __x64_sys_ioctl+0x18e/0x210 [ 89.095333][ T7867] do_syscall_64+0xcd/0xfa0 [ 89.095359][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.095377][ T7867] RIP: 0033:0x7f272778efc9 [ 89.095392][ T7867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.095403][ T7867] RSP: 002b:00007f27259f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.095414][ T7867] RAX: ffffffffffffffda RBX: 00007f27279e5fa0 RCX: 00007f272778efc9 [ 89.095420][ T7867] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 89.095426][ T7867] RBP: 00007f27259f6090 R08: 0000000000000000 R09: 0000000000000000 [ 89.095432][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.095438][ T7867] R13: 00007f27279e6038 R14: 00007f27279e5fa0 R15: 00007ffe7f39e8e8 [ 89.095452][ T7867] [ 89.365900][ T7880] tmpfs: Bad value for 'mpol' [ 89.370984][ T7880] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 89.393817][ T7880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.403231][ T7880] bond3: (slave ip6gretap1): making interface the new active one [ 89.406279][ T7880] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 89.437303][ T7886] usb usb8: usbfs: process 7886 (syz.1.558) did not claim interface 0 before use [ 89.442602][ T7888] __nla_validate_parse: 1 callbacks suppressed [ 89.442612][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 89.448526][ T7888] block nbd0: Unsupported socket: should be TCP or UNIX. [ 89.660237][ T7890] team0 (unregistering): Port device team_slave_0 removed [ 89.664997][ T7890] team0 (unregistering): Port device team_slave_1 removed [ 89.779717][ T7897] CUSE: unknown device info "" [ 89.781462][ T7897] CUSE: zero length info key specified [ 89.856115][ T7903] "syz.1.563" (7903) uses obsolete ecb(arc4) skcipher [ 89.873857][ T7908] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 89.916672][ T7910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4225111686 (270407147904 ns) > initial count (130309854528 ns). Using initial count to start timer. [ 90.013592][ T34] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 90.166365][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.170731][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 90.175415][ T34] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 90.179252][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.189668][ T34] usb 7-1: config 0 descriptor?? [ 90.192489][ T7901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.284712][ T7918] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.568'. [ 90.288349][ T7918] ksmbd: Unknown IPC event: 3, ignore. [ 90.305873][ T64] Bluetooth: hci0: command 0x1407 tx timeout [ 90.309192][ T5935] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 90.412986][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 90.415309][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 90.431709][ T34] usb 7-1: USB disconnect, device number 8 [ 90.493023][ T7931] CUSE: unknown device info "" [ 90.495245][ T7931] CUSE: zero length info key specified [ 90.620574][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 90.620591][ T40] audit: type=1400 audit(1761790663.972:539): avc: denied { map } for pid=7935 comm="syz.1.574" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.788450][ T7953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.577'. [ 90.984205][ T40] audit: type=1400 audit(1761790664.340:540): avc: denied { execute } for pid=7960 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 91.005806][ T40] audit: type=1400 audit(1761790664.340:541): avc: denied { execute_no_trans } for pid=7960 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 91.019501][ T40] audit: type=1400 audit(1761790664.370:542): avc: denied { create } for pid=7961 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.022722][ T7964] netlink: 64 bytes leftover after parsing attributes in process `syz.3.584'. [ 91.027982][ T40] audit: type=1400 audit(1761790664.370:543): avc: denied { ioctl } for pid=7961 comm="syz.2.583" path="socket:[20256]" dev="sockfs" ino=20256 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.030965][ T7964] block nbd0: not configured, cannot reconfigure [ 91.061167][ T7964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.134810][ T7974] smc: net device bond0 applied user defined pnetid SYZ2 [ 91.145278][ T7974] netlink: 14 bytes leftover after parsing attributes in process `syz.3.587'. [ 91.156179][ T7974] smc: removing net device bond0 with user defined pnetid SYZ2 [ 91.156873][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.162211][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.163241][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.168981][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.173896][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.174017][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.180351][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.184070][ T7974] bond0 (unregistering): Released all slaves [ 91.228680][ T40] audit: type=1400 audit(1761790664.579:544): avc: denied { create } for pid=7979 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.290965][ T40] audit: type=1400 audit(1761790664.638:545): avc: denied { lock } for pid=7983 comm="syz.2.588" path="socket:[20272]" dev="sockfs" ino=20272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 91.299629][ T40] audit: type=1400 audit(1761790664.648:546): avc: denied { map } for pid=7987 comm="syz.0.591" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.384900][ T7995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.593'. [ 91.403041][ T7975] chnl_net:caif_netlink_parms(): no params data found [ 91.561820][ T1212] bridge_slave_1: left allmulticast mode [ 91.564821][ T1212] bridge_slave_1: left promiscuous mode [ 91.567784][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.571784][ T1212] bridge_slave_0: left allmulticast mode [ 91.575408][ T1212] bridge_slave_0: left promiscuous mode [ 91.577742][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.735267][ T40] audit: type=1400 audit(1761790665.085:547): avc: denied { ioctl } for pid=8019 comm="syz.3.600" path="socket:[20336]" dev="sockfs" ino=20336 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.783627][ T8022] SELinux: syz.0.602 (8022) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 91.795184][ T8025] fuse: Bad value for 'rootmode' [ 91.818627][ T1212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.823924][ T1212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.830562][ T1212] bond0 (unregistering): (slave team0): Releasing backup interface [ 91.836088][ T1212] bond0 (unregistering): Released all slaves [ 91.902873][ T1212] bond1 (unregistering): Released all slaves [ 91.971938][ T1212] bond2 (unregistering): Released all slaves [ 91.982826][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.985364][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.987758][ T7975] bridge_slave_0: entered allmulticast mode [ 91.990320][ T7975] bridge_slave_0: entered promiscuous mode [ 91.993474][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.996226][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.998681][ T7975] bridge_slave_1: entered allmulticast mode [ 92.001637][ T7975] bridge_slave_1: entered promiscuous mode [ 92.059377][ T7975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.073660][ T7975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.081467][ T40] audit: type=1400 audit(1761790665.423:548): avc: denied { ioctl } for pid=8029 comm="syz.3.604" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x5417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.094658][ T8030] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.103857][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 92.107289][ T1212] IPVS: stopping backup sync thread 7809 ... [ 92.135249][ T7975] team0: Port device team_slave_0 added [ 92.166313][ T7975] team0: Port device team_slave_1 added [ 92.199369][ T8039] fuse: Invalid rootmode [ 92.201060][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 92.245359][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.246086][ T8039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.606'. [ 92.251033][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.262217][ T7975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.278137][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.281545][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.292209][ T7975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.386787][ T7975] hsr_slave_0: entered promiscuous mode [ 92.391025][ T7975] hsr_slave_1: entered promiscuous mode [ 92.392247][ T8046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.394043][ T7975] debugfs: 'hsr0' already exists in 'hsr' [ 92.399773][ T7975] Cannot create hsr debugfs directory [ 92.401552][ T8046] overlay: filesystem on ./file0 not supported as upperdir [ 92.418622][ T1212] hsr_slave_0: left promiscuous mode [ 92.422060][ T1212] hsr_slave_1: left promiscuous mode [ 92.424953][ T1212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.429568][ T1212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.446620][ T1212] pimreg (unregistering): left allmulticast mode [ 92.464786][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 93.000062][ T1212] team0 (unregistering): Port device team_slave_1 removed [ 93.058589][ T1212] team0 (unregistering): Port device team_slave_0 removed [ 93.284496][ T5935] Bluetooth: hci3: command tx timeout [ 93.523664][ T8051] bridge_slave_1: left allmulticast mode [ 93.527899][ T8051] bridge_slave_1: left promiscuous mode [ 93.530370][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.538305][ T8051] bridge_slave_0: left promiscuous mode [ 93.541020][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.799708][ T8070] FAULT_INJECTION: forcing a failure. [ 93.799708][ T8070] name failslab, interval 1, probability 0, space 0, times 0 [ 93.803727][ T8070] CPU: 0 UID: 0 PID: 8070 Comm: syz.2.615 Not tainted syzkaller #0 PREEMPT(full) [ 93.803741][ T8070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.803747][ T8070] Call Trace: [ 93.803750][ T8070] [ 93.803754][ T8070] dump_stack_lvl+0x16c/0x1f0 [ 93.803773][ T8070] should_fail_ex+0x512/0x640 [ 93.803791][ T8070] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 93.803814][ T8070] should_failslab+0xc2/0x120 [ 93.803832][ T8070] kmem_cache_alloc_noprof+0x75/0x6e0 [ 93.803849][ T8070] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 93.803865][ T8070] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 93.803882][ T8070] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 93.803896][ T8070] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 93.803916][ T8070] mmu_topup_memory_caches+0x25/0x170 [ 93.803934][ T8070] kvm_mmu_load+0xd6/0x23c0 [ 93.803949][ T8070] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 93.803962][ T8070] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 93.803976][ T8070] ? __pfx_kvm_mmu_load+0x10/0x10 [ 93.803991][ T8070] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 93.804006][ T8070] ? kvm_check_and_inject_events+0x71c/0x1310 [ 93.804025][ T8070] vcpu_run+0x3779/0x54d0 [ 93.804041][ T8070] ? __pfx_vcpu_run+0x10/0x10 [ 93.804054][ T8070] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 93.804067][ T8070] ? __local_bh_enable_ip+0xa4/0x120 [ 93.804082][ T8070] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 93.804092][ T8070] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 93.804107][ T8070] kvm_vcpu_ioctl+0x5eb/0x1690 [ 93.804122][ T8070] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 93.804136][ T8070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.804150][ T8070] ? do_vfs_ioctl+0x128/0x14f0 [ 93.804165][ T8070] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 93.804178][ T8070] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 93.804195][ T8070] ? hook_file_ioctl_common+0x145/0x410 [ 93.804212][ T8070] ? selinux_file_ioctl+0x180/0x270 [ 93.804223][ T8070] ? selinux_file_ioctl+0xb4/0x270 [ 93.804234][ T8070] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 93.804248][ T8070] __x64_sys_ioctl+0x18e/0x210 [ 93.804263][ T8070] do_syscall_64+0xcd/0xfa0 [ 93.804279][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.804289][ T8070] RIP: 0033:0x7f0b1018efc9 [ 93.804298][ T8070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.804312][ T8070] RSP: 002b:00007f0b10fb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.804322][ T8070] RAX: ffffffffffffffda RBX: 00007f0b103e5fa0 RCX: 00007f0b1018efc9 [ 93.804328][ T8070] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 93.804334][ T8070] RBP: 00007f0b10fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 93.804340][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.804346][ T8070] R13: 00007f0b103e6038 R14: 00007f0b103e5fa0 R15: 00007ffe9b0f32e8 [ 93.804359][ T8070] [ 93.896020][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.000192][ T7975] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.005360][ T7975] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.011110][ T7975] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.033516][ T7975] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.066984][ T8101] --map-set only usable from mangle table [ 94.135343][ T8087] team0 (unregistering): Port device team_slave_0 removed [ 94.144603][ T8087] team0 (unregistering): Port device team_slave_1 removed [ 94.207420][ T7975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.223106][ T7975] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.230645][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.233065][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.240896][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.243552][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.266863][ T8119] input: syz1 as /devices/virtual/input/input14 [ 94.367386][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.503094][ T8142] FAULT_INJECTION: forcing a failure. [ 94.503094][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 94.507996][ T8142] CPU: 2 UID: 0 PID: 8142 Comm: syz.2.627 Not tainted syzkaller #0 PREEMPT(full) [ 94.508011][ T8142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.508017][ T8142] Call Trace: [ 94.508021][ T8142] [ 94.508025][ T8142] dump_stack_lvl+0x16c/0x1f0 [ 94.508044][ T8142] should_fail_ex+0x512/0x640 [ 94.508057][ T8142] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 94.508074][ T8142] should_failslab+0xc2/0x120 [ 94.508086][ T8142] kmem_cache_alloc_noprof+0x75/0x6e0 [ 94.508101][ T8142] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 94.508116][ T8142] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 94.508134][ T8142] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 94.508148][ T8142] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 94.508166][ T8142] mmu_topup_memory_caches+0x25/0x170 [ 94.508184][ T8142] kvm_mmu_load+0xd6/0x23c0 [ 94.508200][ T8142] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 94.508213][ T8142] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 94.508227][ T8142] ? __pfx_kvm_mmu_load+0x10/0x10 [ 94.508243][ T8142] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 94.508257][ T8142] ? kvm_check_and_inject_events+0x71c/0x1310 [ 94.508276][ T8142] vcpu_run+0x3779/0x54d0 [ 94.508292][ T8142] ? __pfx_vcpu_run+0x10/0x10 [ 94.508306][ T8142] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 94.508319][ T8142] ? __local_bh_enable_ip+0xa4/0x120 [ 94.508334][ T8142] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 94.508345][ T8142] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 94.508360][ T8142] kvm_vcpu_ioctl+0x5eb/0x1690 [ 94.508375][ T8142] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.508390][ T8142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.508404][ T8142] ? do_vfs_ioctl+0x128/0x14f0 [ 94.508419][ T8142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.508436][ T8142] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.508463][ T8142] ? hook_file_ioctl_common+0x145/0x410 [ 94.508491][ T8142] ? selinux_file_ioctl+0x180/0x270 [ 94.508508][ T8142] ? selinux_file_ioctl+0xb4/0x270 [ 94.508526][ T8142] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.508551][ T8142] __x64_sys_ioctl+0x18e/0x210 [ 94.508566][ T8142] do_syscall_64+0xcd/0xfa0 [ 94.508583][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.508594][ T8142] RIP: 0033:0x7f0b1018efc9 [ 94.508603][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.508613][ T8142] RSP: 002b:00007f0b10fb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.508624][ T8142] RAX: ffffffffffffffda RBX: 00007f0b103e5fa0 RCX: 00007f0b1018efc9 [ 94.508630][ T8142] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 94.508636][ T8142] RBP: 00007f0b10fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 94.508642][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.508648][ T8142] R13: 00007f0b103e6038 R14: 00007f0b103e5fa0 R15: 00007ffe9b0f32e8 [ 94.508662][ T8142] [ 94.508874][ T7975] veth0_vlan: entered promiscuous mode [ 94.614789][ T7975] veth1_vlan: entered promiscuous mode [ 94.629583][ T7975] veth0_macvtap: entered promiscuous mode [ 94.633532][ T7975] veth1_macvtap: entered promiscuous mode [ 94.644468][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.653451][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.662018][ T7374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.665716][ T7374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669823][ T7374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.673706][ T7374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.702850][ T8145] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 94.713800][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.716685][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.734962][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.737728][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.835825][ T8150] CUSE: unknown device info "" [ 94.837424][ T8150] CUSE: zero length info key specified [ 94.945718][ T8161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2073 sclass=netlink_route_socket pid=8161 comm=syz.4.630 [ 94.954623][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 94.960921][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'. [ 95.121543][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 95.374009][ T5935] Bluetooth: hci3: command tx timeout [ 96.079900][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 96.079914][ T40] audit: type=1400 audit(1761790669.403:559): avc: denied { connect } for pid=8203 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.172602][ T8209] netlink: 'syz.4.644': attribute type 2 has an invalid length. [ 96.282880][ T40] audit: type=1400 audit(1761790669.602:560): avc: denied { ioctl } for pid=8213 comm="syz.3.646" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 96.510251][ T8233] netlink: 64 bytes leftover after parsing attributes in process `syz.3.650'. [ 96.532038][ T40] audit: type=1400 audit(1761790669.851:561): avc: denied { firmware_load } for pid=8231 comm="syz.3.650" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 96.550526][ T8233] syz.3.650 (8233) used greatest stack depth: 18232 bytes left [ 96.603865][ T40] audit: type=1400 audit(1761790669.930:562): avc: denied { setattr } for pid=8240 comm="syz.3.653" name="PACKET" dev="sockfs" ino=25005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.623062][ T40] audit: type=1400 audit(1761790669.930:563): avc: denied { getopt } for pid=8240 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.624001][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 96.638087][ T40] audit: type=1400 audit(1761790669.960:564): avc: denied { read } for pid=8242 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.728785][ T8249] CUSE: unknown device info "" [ 96.731332][ T8249] CUSE: zero length info key specified [ 96.856314][ T8263] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.859237][ T8263] overlayfs: missing 'lowerdir' [ 96.910074][ T40] audit: type=1400 audit(1761790670.229:565): avc: denied { create } for pid=8266 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.917959][ T40] audit: type=1400 audit(1761790670.239:566): avc: denied { bind } for pid=8266 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.067740][ T8277] tc_dump_action: action bad kind [ 97.321946][ T40] audit: type=1400 audit(1761790670.637:567): avc: denied { setopt } for pid=8292 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 97.338503][ T8290] CUSE: unknown device info "" [ 97.340214][ T8290] CUSE: zero length info key specified [ 97.404060][ T8300] netlink: 'syz.4.671': attribute type 7 has an invalid length. [ 97.406480][ T8298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.407359][ T8300] netlink: 'syz.4.671': attribute type 8 has an invalid length. [ 97.416574][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 97.419657][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 97.474244][ T64] Bluetooth: hci3: command tx timeout [ 97.503281][ T8311] autofs: Bad value for 'fd' [ 97.597764][ T8319] binder_alloc: binder_alloc_mmap_handler: 8318 200000ffe000-200000fff000 already mapped failed -16 [ 97.604518][ T8319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 97.635652][ T8322] netlink: 'syz.0.681': attribute type 1 has an invalid length. [ 97.638898][ T8322] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 97.641847][ T8322] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.681'. [ 97.648470][ T8315] /dev/sr0: Can't open blockdev [ 97.692619][ T8311] netlink: 256 bytes leftover after parsing attributes in process `syz.2.676'. [ 97.743301][ T40] audit: type=1400 audit(1761790671.056:568): avc: denied { mount } for pid=8326 comm="syz.4.683" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.753178][ T8334] CUSE: unknown device info "" [ 97.756490][ T8334] CUSE: zero length info key specified [ 97.845369][ T8340] netlink: 'syz.4.685': attribute type 15 has an invalid length. [ 97.895382][ T8350] vivid-000: ================= START STATUS ================= [ 97.898894][ T8350] vivid-000: Test Pattern: 75% Colorbar [ 97.903093][ T8350] vivid-000: Fill Percentage of Frame: 100 [ 97.914971][ T8350] vivid-000: Horizontal Movement: Move Right Slow [ 97.917969][ T8350] vivid-000: Vertical Movement: No Movement [ 97.920521][ T8350] vivid-000: OSD Text Mode: All [ 97.928005][ T8350] vivid-000: Show Border: false [ 97.929964][ T8350] vivid-000: Show Square: false [ 97.937020][ T8350] vivid-000: Sensor Flipped Horizontally: false [ 97.939664][ T8350] vivid-000: Sensor Flipped Vertically: false [ 97.942794][ T8350] vivid-000: Insert SAV Code in Image: false [ 97.948401][ T8350] vivid-000: Insert EAV Code in Image: false [ 97.950849][ T8350] vivid-000: Insert Video Guard Band: false [ 97.953365][ T8350] vivid-000: Reduced Framerate: false [ 97.956489][ T8350] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 97.958986][ T8350] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 97.962065][ T8350] vivid-000: Enable Capture Cropping: true [ 97.964832][ T8350] vivid-000: Enable Capture Composing: true [ 97.967301][ T8350] vivid-000: Enable Capture Scaler: true [ 97.969160][ T8350] vivid-000: Timestamp Source: End of Frame [ 97.971229][ T8350] vivid-000: Colorspace: sRGB [ 97.973065][ T8350] vivid-000: Transfer Function: Default [ 97.975598][ T8350] vivid-000: Y'CbCr Encoding: Default [ 97.977739][ T8350] vivid-000: HSV Encoding: Hue 0-179 [ 97.979855][ T8350] vivid-000: Quantization: Default [ 97.981916][ T8350] vivid-000: Apply Alpha To Red Only: false [ 97.984296][ T8350] vivid-000: Standard Aspect Ratio: 4x3 [ 97.987217][ T8350] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 97.990095][ T8350] vivid-000: DV Timings: 640x480p59 inactive [ 97.992483][ T8350] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 97.995828][ T8350] vivid-000: Maximum EDID Blocks: 2 [ 97.997849][ T8350] vivid-000: Limited RGB Range (16-235): false [ 98.000309][ T8350] vivid-000: Rx RGB Quantization Range: Automatic [ 98.002782][ T8350] vivid-000: Power Present: 0x00000001 [ 98.005066][ T8350] tpg source WxH: 320x180 (R'G'B) [ 98.007455][ T8350] tpg field: 1 [ 98.008701][ T8350] tpg crop: (0,0)/320x180 [ 98.010037][ T8350] tpg compose: (0,0)/320x180 [ 98.011375][ T8350] tpg colorspace: 8 [ 98.012486][ T8350] tpg transfer function: 0/0 [ 98.013819][ T8350] tpg quantization: 0/0 [ 98.015042][ T8350] tpg RGB range: 0/2 [ 98.017684][ T8350] vivid-000: ================== END STATUS ================== [ 98.057547][ T8348] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 98.143217][ T8375] overlayfs: overlapping lowerdir path [ 98.228296][ T29] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 98.305097][ T8393] kvm: pic: non byte write [ 98.388440][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.393161][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 98.399736][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 98.404111][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.412477][ T29] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 98.416319][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.419657][ T29] usb 7-1: Product: syz [ 98.421177][ T29] usb 7-1: Manufacturer: syz [ 98.423013][ T29] usb 7-1: SerialNumber: syz [ 98.426741][ T29] usb 7-1: config 0 descriptor?? [ 98.431936][ T29] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input16 [ 98.438090][ C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 98.503166][ T8409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.507283][ T1030] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 98.656246][ T8419] fuse: blksize only supported for fuseblk [ 98.680770][ T1030] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 98.685972][ T1030] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 98.692040][ T1030] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 98.700900][ T1030] usb 5-1: string descriptor 0 read error: -22 [ 98.703772][ T1030] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.707335][ T1030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.721360][ T8395] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 98.750325][ T6014] usb 7-1: USB disconnect, device number 9 [ 98.797744][ T8427] MTD: Couldn't look up '/dev/sg0': -15 [ 98.799666][ T8427] /dev/sg0: Can't lookup blockdev [ 98.849119][ T8429] input: syz0 as /devices/virtual/input/input17 [ 98.933195][ T8395] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 98.940653][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.944516][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.007296][ T8441] gretap0: entered promiscuous mode [ 99.007729][ T1030] cdc_ncm 5-1:1.0: bind() failure [ 99.021771][ T8441] 0ªî{X¹¦: renamed from gretap0 [ 99.022859][ T1030] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 99.027871][ T8441] 0ªî{X¹¦: left promiscuous mode [ 99.029449][ T841] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 99.033259][ T8441] 0ªî{X¹¦: entered allmulticast mode [ 99.037227][ T8441] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.037968][ T1030] cdc_ncm 5-1:1.1: bind() failure [ 99.055684][ T1030] usb 5-1: USB disconnect, device number 12 [ 99.552768][ T24] hid_parser_main: 75 callbacks suppressed [ 99.552783][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 99.553436][ T5935] Bluetooth: hci3: command 0x0419 tx timeout [ 99.555509][ T24] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 99.936998][ T5935] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 99.940102][ T5935] Bluetooth: Wrong link type (-22) [ 99.941998][ T5935] Bluetooth: hci0: link tx timeout [ 99.944070][ T5935] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 100.053488][ T8507] kvm: pic: non byte write [ 100.056759][ T8507] kvm: pic: non byte read [ 100.059333][ T8507] kvm: pic: single mode not supported [ 100.059475][ T8507] kvm: pic: level sensitive irq not supported [ 100.062493][ T8507] kvm: pic: non byte write [ 100.068787][ T8507] kvm: pic: non byte write [ 100.071422][ T8507] kvm: pic: non byte read [ 100.074533][ T8507] kvm: pic: level sensitive irq not supported [ 100.074930][ T8507] kvm: pic: non byte write [ 100.080786][ T8507] kvm: pic: non byte write [ 100.083897][ T8507] kvm: pic: non byte read [ 100.086591][ T8507] kvm: pic: non byte write [ 100.285707][ T8523] __nla_validate_parse: 10 callbacks suppressed [ 100.285725][ T8523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.733'. [ 100.320927][ T8525] random: crng reseeded on system resumption [ 100.411084][ T8533] netlink: 104 bytes leftover after parsing attributes in process `syz.0.737'. [ 100.416339][ T8533] tipc: Started in network mode [ 100.418444][ T8533] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 100.422191][ T8533] tipc: Enabling of bearer rejected, failed to enable media [ 101.194941][ T8551] ata1.00: invalid multi_count 1 ignored [ 101.269994][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 101.270006][ T40] audit: type=1400 audit(1761790674.573:581): avc: denied { transfer } for pid=8552 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 101.281831][ T8555] binder: 8552:8555 ioctl c0306201 200000000140 returned -14 [ 101.404121][ T40] audit: type=1400 audit(1761790674.702:582): avc: denied { nlmsg_write } for pid=8562 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 101.412958][ T8563] binder: binder_mmap: 8562 200000ffc000-200001000000 bad vm_flags failed -1 [ 101.502537][ T40] audit: type=1400 audit(1761790674.802:583): avc: denied { ioctl } for pid=8564 comm="syz.0.747" path="socket:[26567]" dev="sockfs" ino=26567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.648549][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 101.832773][ T40] audit: type=1400 audit(1761790675.141:584): avc: denied { mount } for pid=8581 comm="syz.4.752" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 101.880458][ T8584] EXT4-fs (nbd4): unable to read superblock [ 101.962513][ T64] Bluetooth: hci0: command 0x1407 tx timeout [ 101.983936][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 102.042824][ T8595] loop2: detected capacity change from 0 to 7 [ 102.048981][ T8595] Dev loop2: unable to read RDB block 7 [ 102.051748][ T8595] loop2: unable to read partition table [ 102.054295][ T8595] loop2: partition table beyond EOD, truncated [ 102.056857][ T8595] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.119835][ T8605] nft_compat: unsupported protocol 0 [ 102.166277][ T8611] Can't find a SQUASHFS superblock on nullb0 [ 102.201022][ T8613] loop3: detected capacity change from 0 to 7 [ 102.204598][ T8613] Dev loop3: unable to read RDB block 7 [ 102.207044][ T8613] loop3: unable to read partition table [ 102.209513][ T8613] loop3: partition table beyond EOD, truncated [ 102.212967][ T8613] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.433585][ T8625] kvm: emulating exchange as write [ 102.497350][ T8629] fuse: Unknown parameter '000000000000000000040x000000000000000400000000000000000000004000000000000000000000x0000000000000004' [ 102.611037][ T8641] CUSE: unknown device info "" [ 102.613302][ T8641] CUSE: zero length info key specified [ 102.734534][ T8629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.767'. [ 103.038107][ T8658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8658 comm=syz.4.777 [ 103.102877][ T8663] netlink: 'syz.4.777': attribute type 4 has an invalid length. [ 103.106134][ T8663] netlink: 152 bytes leftover after parsing attributes in process `syz.4.777'. [ 103.113316][ T8663] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 103.116781][ T40] audit: type=1400 audit(1761790676.417:585): avc: denied { audit_read } for pid=8664 comm="syz.0.779" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.158154][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.781'. [ 103.335628][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 103.338910][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 103.342619][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.790'. [ 103.425244][ T8703] Driver unsupported XDP return value 0 on prog (id 129) dev N/A, expect packet loss! [ 103.564901][ T8719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.676991][ T8731] CUSE: unknown device info "" [ 103.679077][ T8731] CUSE: zero length info key specified [ 103.756717][ T40] audit: type=1800 audit(1761790677.045:586): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.799" name="/newroot/180/bus/#966//deleted" dev="tmpfs" ino=966 res=0 errno=0 [ 103.764570][ T1332] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 103.920216][ T40] audit: type=1400 audit(1761790677.215:587): avc: denied { connect } for pid=8738 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.923060][ T8739] netlink: 68 bytes leftover after parsing attributes in process `syz.4.801'. [ 103.929015][ T1332] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.935943][ T1332] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.940169][ T1332] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.943988][ T1332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.950489][ T8712] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.992133][ T1332] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.374038][ T5938] usb 5-1: USB disconnect, device number 13 [ 104.872616][ T8743] tmpfs: Bad value for 'mpol' [ 104.912591][ T8750] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 104.955641][ T8748] FAULT_INJECTION: forcing a failure. [ 104.955641][ T8748] name failslab, interval 1, probability 0, space 0, times 0 [ 104.960919][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.0.803 Not tainted syzkaller #0 PREEMPT(full) [ 104.960936][ T8748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.960942][ T8748] Call Trace: [ 104.960953][ T8748] [ 104.960957][ T8748] dump_stack_lvl+0x16c/0x1f0 [ 104.960989][ T8748] should_fail_ex+0x512/0x640 [ 104.961008][ T8748] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 104.961026][ T8748] should_failslab+0xc2/0x120 [ 104.961040][ T8748] kmem_cache_alloc_noprof+0x75/0x6e0 [ 104.961055][ T8748] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 104.961071][ T8748] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 104.961089][ T8748] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 104.961105][ T8748] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 104.961124][ T8748] mmu_topup_memory_caches+0x25/0x170 [ 104.961144][ T8748] kvm_mmu_load+0xd6/0x23c0 [ 104.961161][ T8748] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 104.961174][ T8748] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 104.961189][ T8748] ? __pfx_kvm_mmu_load+0x10/0x10 [ 104.961205][ T8748] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 104.961222][ T8748] ? kvm_check_and_inject_events+0x71c/0x1310 [ 104.961242][ T8748] vcpu_run+0x3779/0x54d0 [ 104.961259][ T8748] ? __pfx_vcpu_run+0x10/0x10 [ 104.961274][ T8748] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 104.961287][ T8748] ? __local_bh_enable_ip+0xa4/0x120 [ 104.961304][ T8748] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 104.961315][ T8748] kvm_arch_vcpu_ioctl_run+0x1023/0x1970 [ 104.961331][ T8748] kvm_vcpu_ioctl+0x5eb/0x1690 [ 104.961348][ T8748] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.961376][ T8748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.961394][ T8748] ? do_vfs_ioctl+0x128/0x14f0 [ 104.961410][ T8748] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.961425][ T8748] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.961443][ T8748] ? hook_file_ioctl_common+0x145/0x410 [ 104.961461][ T8748] ? selinux_file_ioctl+0x180/0x270 [ 104.961472][ T8748] ? selinux_file_ioctl+0xb4/0x270 [ 104.961484][ T8748] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.961500][ T8748] __x64_sys_ioctl+0x18e/0x210 [ 104.961516][ T8748] do_syscall_64+0xcd/0xfa0 [ 104.961533][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.961543][ T8748] RIP: 0033:0x7f00a858efc9 [ 104.961553][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.961563][ T8748] RSP: 002b:00007f00a94cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.961574][ T8748] RAX: ffffffffffffffda RBX: 00007f00a87e5fa0 RCX: 00007f00a858efc9 [ 104.961583][ T8748] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 104.961589][ T8748] RBP: 00007f00a94cf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.961596][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.961602][ T8748] R13: 00007f00a87e6038 R14: 00007f00a87e5fa0 R15: 00007ffc8843d588 [ 104.961617][ T8748] [ 105.013548][ T8753] team0: Device is already in use. [ 105.014311][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.072274][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.108493][ T40] audit: type=1400 audit(1761790678.392:588): avc: denied { connect } for pid=8764 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.189988][ T8768] 9pnet: Found fid 0 not clunked [ 105.241511][ T40] audit: type=1400 audit(1761790678.531:589): avc: denied { remount } for pid=8767 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.301852][ T40] audit: type=1400 audit(1761790678.591:590): avc: denied { read } for pid=8778 comm="syz.2.810" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.344226][ T8783] ALSA: mixer_oss: invalid OSS volume '' [ 105.433612][ T8791] fuse: Unknown parameter 'Pöì€g¥ªµc]' [ 106.138403][ T8779] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.142332][ T8779] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.150993][ T8779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.153591][ T8779] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.157952][ T8779] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.162960][ T8779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.165567][ T8779] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.201739][ T8810] ================================================================== [ 106.201752][ T8810] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 106.201774][ T8810] Write of size 8 at addr ffffc90005149000 by task syz.3.816/8810 [ 106.201784][ T8810] [ 106.201790][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.3.816 Not tainted syzkaller #0 PREEMPT(full) [ 106.201803][ T8810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.201809][ T8810] Call Trace: [ 106.201814][ T8810] [ 106.201818][ T8810] dump_stack_lvl+0x116/0x1f0 [ 106.201835][ T8810] print_report+0xcd/0x630 [ 106.201846][ T8810] ? __virt_addr_valid+0x81/0x610 [ 106.201863][ T8810] ? sys_imageblit+0x1a6f/0x1e60 [ 106.201878][ T8810] kasan_report+0xe0/0x110 [ 106.201889][ T8810] ? sys_imageblit+0x1a6f/0x1e60 [ 106.201904][ T8810] sys_imageblit+0x1a6f/0x1e60 [ 106.201920][ T8810] ? panic_on_this_cpu+0x32/0x40 [ 106.201934][ T8810] ? __pfx_sys_imageblit+0x10/0x10 [ 106.201950][ T8810] ? __pfx__prb_read_valid+0x10/0x10 [ 106.201961][ T8810] ? __asan_memcpy+0x3c/0x60 [ 106.201975][ T8810] ? panic_on_this_cpu+0x32/0x40 [ 106.201990][ T8810] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 106.202005][ T8810] soft_cursor+0x524/0xa10 [ 106.202018][ T8810] ? find_held_lock+0x2b/0x80 [ 106.202030][ T8810] ? fb_get_color_depth+0x120/0x250 [ 106.202041][ T8810] bit_cursor+0xe8c/0x17e0 [ 106.202054][ T8810] ? __pfx_bit_cursor+0x10/0x10 [ 106.202067][ T8810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.202081][ T8810] ? get_color+0x1da/0x450 [ 106.202090][ T8810] ? __pfx_bit_cursor+0x10/0x10 [ 106.202101][ T8810] fbcon_cursor+0x40c/0x5a0 [ 106.202111][ T8810] ? mark_lock+0x591/0x610 [ 106.202126][ T8810] hide_cursor+0x87/0x220 [ 106.202139][ T8810] do_con_write+0x240c/0x8290 [ 106.202153][ T8810] ? rcu_is_watching+0x12/0xc0 [ 106.202170][ T8810] ? trace_contention_end+0xdd/0x130 [ 106.202180][ T8810] ? n_tty_write+0x53d/0x11e0 [ 106.202191][ T8810] ? __pfx___mutex_lock+0x10/0x10 [ 106.202200][ T8810] ? __pfx_do_con_write+0x10/0x10 [ 106.202214][ T8810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.202232][ T8810] ? con_write+0x93/0xb0 [ 106.202246][ T8810] con_write+0x23/0xb0 [ 106.202260][ T8810] n_tty_write+0x41e/0x11e0 [ 106.202273][ T8810] ? __pfx_n_tty_write+0x10/0x10 [ 106.202283][ T8810] ? trace_kmalloc+0x2b/0xd0 [ 106.202294][ T8810] ? __pfx_woken_wake_function+0x10/0x10 [ 106.202306][ T8810] ? kfree+0x252/0x6d0 [ 106.202318][ T8810] ? __pfx_n_tty_write+0x10/0x10 [ 106.202328][ T8810] file_tty_write.constprop.0+0x503/0x9b0 [ 106.202344][ T8810] vfs_write+0x7d3/0x11d0 [ 106.202353][ T8810] ? __pfx_tty_write+0x10/0x10 [ 106.202367][ T8810] ? __pfx_vfs_write+0x10/0x10 [ 106.202375][ T8810] ? find_held_lock+0x2b/0x80 [ 106.202390][ T8810] ksys_write+0x12a/0x250 [ 106.202399][ T8810] ? __pfx_ksys_write+0x10/0x10 [ 106.202409][ T8810] do_syscall_64+0xcd/0xfa0 [ 106.202424][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.202435][ T8810] RIP: 0033:0x7fc41278efc9 [ 106.202443][ T8810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.202453][ T8810] RSP: 002b:00007fc4136bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.202463][ T8810] RAX: ffffffffffffffda RBX: 00007fc4129e5fa0 RCX: 00007fc41278efc9 [ 106.202470][ T8810] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000003 [ 106.202475][ T8810] RBP: 00007fc412811f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.202481][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.202487][ T8810] R13: 00007fc4129e6038 R14: 00007fc4129e5fa0 R15: 00007fffc9003598 [ 106.202496][ T8810] [ 106.202500][ T8810] [ 106.202503][ T8810] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004e49000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 106.202523][ T8810] Memory state around the buggy address: [ 106.202529][ T8810] ffffc90005148f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.202536][ T8810] ffffc90005148f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.202543][ T8810] >ffffc90005149000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.202548][ T8810] ^ [ 106.202553][ T8810] ffffc90005149080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.202559][ T8810] ffffc90005149100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.202565][ T8810] ================================================================== [ 106.202571][ T8810] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.202579][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.3.816 Not tainted syzkaller #0 PREEMPT(full) [ 106.202590][ T8810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.202595][ T8810] Call Trace: [ 106.202599][ T8810] [ 106.202602][ T8810] dump_stack_lvl+0x3d/0x1f0 [ 106.202657][ T8810] vpanic+0x640/0x6f0 [ 106.202673][ T8810] panic+0xca/0xd0 [ 106.202687][ T8810] ? __pfx_panic+0x10/0x10 [ 106.202704][ T8810] check_panic_on_warn+0xab/0xb0 [ 106.202719][ T8810] end_report+0x107/0x170 [ 106.202730][ T8810] kasan_report+0xee/0x110 [ 106.202741][ T8810] ? sys_imageblit+0x1a6f/0x1e60 [ 106.202762][ T8810] sys_imageblit+0x1a6f/0x1e60 [ 106.202778][ T8810] ? panic_on_this_cpu+0x32/0x40 [ 106.202792][ T8810] ? __pfx_sys_imageblit+0x10/0x10 [ 106.202809][ T8810] ? __pfx__prb_read_valid+0x10/0x10 [ 106.202820][ T8810] ? __asan_memcpy+0x3c/0x60 [ 106.202836][ T8810] ? panic_on_this_cpu+0x32/0x40 [ 106.202852][ T8810] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 106.202867][ T8810] soft_cursor+0x524/0xa10 [ 106.202879][ T8810] ? find_held_lock+0x2b/0x80 [ 106.202891][ T8810] ? fb_get_color_depth+0x120/0x250 [ 106.202902][ T8810] bit_cursor+0xe8c/0x17e0 [ 106.202915][ T8810] ? __pfx_bit_cursor+0x10/0x10 [ 106.202929][ T8810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.202942][ T8810] ? get_color+0x1da/0x450 [ 106.202952][ T8810] ? __pfx_bit_cursor+0x10/0x10 [ 106.202962][ T8810] fbcon_cursor+0x40c/0x5a0 [ 106.202972][ T8810] ? mark_lock+0x591/0x610 [ 106.202987][ T8810] hide_cursor+0x87/0x220 [ 106.202999][ T8810] do_con_write+0x240c/0x8290 [ 106.203013][ T8810] ? rcu_is_watching+0x12/0xc0 [ 106.203026][ T8810] ? trace_contention_end+0xdd/0x130 [ 106.203036][ T8810] ? n_tty_write+0x53d/0x11e0 [ 106.203047][ T8810] ? __pfx___mutex_lock+0x10/0x10 [ 106.203056][ T8810] ? __pfx_do_con_write+0x10/0x10 [ 106.203070][ T8810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.203087][ T8810] ? con_write+0x93/0xb0 [ 106.203101][ T8810] con_write+0x23/0xb0 [ 106.203114][ T8810] n_tty_write+0x41e/0x11e0 [ 106.203126][ T8810] ? __pfx_n_tty_write+0x10/0x10 [ 106.203136][ T8810] ? trace_kmalloc+0x2b/0xd0 [ 106.203146][ T8810] ? __pfx_woken_wake_function+0x10/0x10 [ 106.203159][ T8810] ? kfree+0x252/0x6d0 [ 106.203171][ T8810] ? __pfx_n_tty_write+0x10/0x10 [ 106.203181][ T8810] file_tty_write.constprop.0+0x503/0x9b0 [ 106.203198][ T8810] vfs_write+0x7d3/0x11d0 [ 106.203207][ T8810] ? __pfx_tty_write+0x10/0x10 [ 106.203220][ T8810] ? __pfx_vfs_write+0x10/0x10 [ 106.203228][ T8810] ? find_held_lock+0x2b/0x80 [ 106.203244][ T8810] ksys_write+0x12a/0x250 [ 106.203253][ T8810] ? __pfx_ksys_write+0x10/0x10 [ 106.203264][ T8810] do_syscall_64+0xcd/0xfa0 [ 106.203278][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.203289][ T8810] RIP: 0033:0x7fc41278efc9 [ 106.203296][ T8810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.203306][ T8810] RSP: 002b:00007fc4136bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.203316][ T8810] RAX: ffffffffffffffda RBX: 00007fc4129e5fa0 RCX: 00007fc41278efc9 [ 106.203322][ T8810] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000003 [ 106.203329][ T8810] RBP: 00007fc412811f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.203335][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.203341][ T8810] R13: 00007fc4129e6038 R14: 00007fc4129e5fa0 R15: 00007fffc9003598 [ 106.203351][ T8810] [ 106.204131][ T8810] Kernel Offset: disabled VM DIAGNOSIS: 00:39:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85294ea5 RDI=ffffffff9add6700 RBP=ffffffff9add66c0 RSP=ffffc9000618f020 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9add66c0 R15=ffffffff85294e40 RIP=ffffffff85294ecf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc4136bc6c0 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000003000 CR3=000000004d48b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4136bbbf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc412812fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc412812fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc412812fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc412812ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc41281307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc41281315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000001a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010003 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff88802626a480 RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a520000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81617adc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555835ee500 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f00a93156c0 CR3=000000004c9e7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8843d910 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00a8612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00a8612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00a8612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00a8612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00a861307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00a861315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff888023d58000 RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a620000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81617adc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558489d500 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcca27156c0 CR3=000000005dc7f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc7b36c30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcca1a12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcca1a12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcca1a12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcca1a12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcca1a1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcca1a1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff88805ede0000 RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a720000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81617adc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555d202500 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36997a CR3=0000000055412000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b10212fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b10212fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b10212fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b10212ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b1021307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b1021315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b103b74a8 00007f0b103b74a0 00007f0b103b7498 00007f0b103b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b10f1d100 00007f0b103b7460 00007f0b103b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b103b74b8 00007f0b103b74b0 00007f0b103b74a8 00007f0b103b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000