last executing test programs: 46.349610677s ago: executing program 3 (id=130): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x834080, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = msgget$private(0x0, 0xafb0e20fef6483ff) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x1000) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000200)=""/221) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/331], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000000000000ca33cfab321e282ba948aae02c9cc87a054dcf1690"], 0xb, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000440)}], 0x3, 0xff, 0x8184) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 46.229676045s ago: executing program 3 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_mpls={0x48, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x96e42}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 46.229398552s ago: executing program 3 (id=132): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000001c0)={0x7fff, 0x4, 0xaee}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000340)='./file0\x00', 0x242002, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) (async) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xc030) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x6, 0x200, 0x400, 0x429, 0x10}}) 46.170364628s ago: executing program 3 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='.\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00017b08000140640101000500070084000000060004404e2200000c00028008000140ac141421"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = dup(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000130001002abd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="242600002079000008001300", @ANYRES32=r5, @ANYBLOB="13f0f96620519f31b0485af7ce5596f2a26a36ca025320b098a0d23b334282f1e77055a2e27ecb7f8e94925ff919bc4b9e1f627763ac418d9583c5ef1579ad1020fe0bef73e21c8ef0d5fe9c13afe05f5fc77bd49044f1004050957e90f56dffdb279a0c48e16aea35961bc5820e207d6cdc15100cf902cdab92f0dff0dd135952943fc2b42bb2010984fb502f1ef8e713f008c8b7cb2fa6752ef847bf2d7757398ebc86f3e121b4947af1282c4b8c42f1dc9a3168886d67413c37f530de568b8201ef14b7516cef89f33e0c4bd0949b"], 0x28}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0)={0x1d, r7}, 0x10, &(0x7f0000000200)={0x0, 0x1b}, 0x8, 0x0, 0x0, 0x4000051}, 0x4040095) 46.050312662s ago: executing program 3 (id=134): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x0, r3}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) (async) close(r3) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x0, r3}, 0x10) (async) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) 45.849474679s ago: executing program 3 (id=136): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000040)=']\'}/[\x00') r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='/dev/dsp1\x00') write$dsp(r0, &(0x7f0000000180)="aebdf771fd2d20b5632298527ac79d6cd02f5f913997c178ffcd4e2ee420016bc5bbcb3bacceb8f42d80c3fdf45162e2e6e840a1518b851620e4f32f7a515a1f0efefac12de3834ba8e76c236d8eaf1167b1f089f96c0c2a2eafbc7c3d57f6af4683740a4cbdb44cc962a740a77eeba77ac6c3349f1bcd186065b8027f5bea675b8b6779b4debedfd4ec6bd8d64634bc3996aaa493e5d36976ca83a14207c884174ae03cc38cac91e2cc4059493df7bd5ab1f9cedc1bd0f9", 0xb8) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x84040, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000280)={0x7, [0x8348, 0x1, 0xa, 0x7, 0x51dc, 0xfffc, 0x9, 0x7fff, 0x79, 0x9, 0xf, 0xff, 0x2, 0x3, 0x80, 0x7, 0xe, 0x2, 0x400, 0xb6a, 0x3, 0x3, 0xc, 0x8001, 0x417, 0x8, 0x7, 0x3, 0x5, 0x4, 0x4, 0x7d09, 0x2, 0x3, 0x6, 0x9, 0x3, 0x6, 0x3a, 0xfff, 0x2878, 0x3, 0x0, 0xcd9, 0x8001, 0xa, 0xb0, 0xa], 0x4}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000002380)={0x1, 0x1, [@random="a7e278a26da4"]}) prctl$PR_SET_NAME(0xf, &(0x7f00000023c0)=',&\\$.\\\x00') ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000002400)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @broadcast}, 0x0, {0x2, 0x4e22, @multicast2}, 'veth0_vlan\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x48, r3, 0x8, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) prctl$PR_SET_NAME(0xf, &(0x7f0000002600)=',&\\$.\\\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000002640)=']\'}/[\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000026c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000027c0)={&(0x7f0000002680), 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2e7f369fd158"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4845}, 0x40010) socket$inet(0x2, 0x5, 0x9) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000002800)={{0x2, 0x4e23, @private=0xa010101}, {0x306}, 0x40, {0x2, 0x4e21, @private=0xa010101}, 'veth0_to_team\x00'}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000002880)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000003300), 0x4400, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000003340)=':]{)$\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000003380)='/\x00') ioctl(r2, 0xf, &(0x7f00000033c0)="3dccd7573a3629c3aec85ffb6460b284e0ea8597b77b1c083729e062f3670fb84714eb5e289e1c06f95f03a19ebc17a7985dae65f103ace4e5c43aa5b978983f1315a93410367b6121ba3e395bc629f95f53f3a8d2a6f37c2f022ad08583c0f4a06330695df055ba5e7e318d0d36183fc17c345c599b553635ffb60bd519c0ac1a9c7e240ab48034687397360151eb1ea1aa9fff8ce18b5ed9153728119288ac390407d1d60001f80786330db6366da8f7e8edcd05987cdf1c929a5884631f283f7ea9f3982bba7a044950bad8fab5a90cc94829") socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003500), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000003c80)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003540)={0x6f8, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x6cc, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}, {0x184, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "59ffa9cf758625cacc967a43e68fe0be60890a34246c31b802c5cafb6532683a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fbeffd1f2e6930109159437edfc99c8b6b4e750abd88fdc564a59aba3c7c90e1"}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3a217b85660913cda5ff2b93a4bb037202b8051bf6fec389c90761ae6050e8ce"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x48c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xb, @remote, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @mcast2, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x41c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3f6d102aa0708a562a13104d20e7fc493ed17764edb9a2aed12b08ac6a918460"}]}]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 45.79972357s ago: executing program 32 (id=136): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000040)=']\'}/[\x00') r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='/dev/dsp1\x00') write$dsp(r0, &(0x7f0000000180)="aebdf771fd2d20b5632298527ac79d6cd02f5f913997c178ffcd4e2ee420016bc5bbcb3bacceb8f42d80c3fdf45162e2e6e840a1518b851620e4f32f7a515a1f0efefac12de3834ba8e76c236d8eaf1167b1f089f96c0c2a2eafbc7c3d57f6af4683740a4cbdb44cc962a740a77eeba77ac6c3349f1bcd186065b8027f5bea675b8b6779b4debedfd4ec6bd8d64634bc3996aaa493e5d36976ca83a14207c884174ae03cc38cac91e2cc4059493df7bd5ab1f9cedc1bd0f9", 0xb8) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x84040, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000280)={0x7, [0x8348, 0x1, 0xa, 0x7, 0x51dc, 0xfffc, 0x9, 0x7fff, 0x79, 0x9, 0xf, 0xff, 0x2, 0x3, 0x80, 0x7, 0xe, 0x2, 0x400, 0xb6a, 0x3, 0x3, 0xc, 0x8001, 0x417, 0x8, 0x7, 0x3, 0x5, 0x4, 0x4, 0x7d09, 0x2, 0x3, 0x6, 0x9, 0x3, 0x6, 0x3a, 0xfff, 0x2878, 0x3, 0x0, 0xcd9, 0x8001, 0xa, 0xb0, 0xa], 0x4}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000002380)={0x1, 0x1, [@random="a7e278a26da4"]}) prctl$PR_SET_NAME(0xf, &(0x7f00000023c0)=',&\\$.\\\x00') ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000002400)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @broadcast}, 0x0, {0x2, 0x4e22, @multicast2}, 'veth0_vlan\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x48, r3, 0x8, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) prctl$PR_SET_NAME(0xf, &(0x7f0000002600)=',&\\$.\\\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000002640)=']\'}/[\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000026c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000027c0)={&(0x7f0000002680), 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2e7f369fd158"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4845}, 0x40010) socket$inet(0x2, 0x5, 0x9) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000002800)={{0x2, 0x4e23, @private=0xa010101}, {0x306}, 0x40, {0x2, 0x4e21, @private=0xa010101}, 'veth0_to_team\x00'}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000002880)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000003300), 0x4400, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000003340)=':]{)$\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000003380)='/\x00') ioctl(r2, 0xf, &(0x7f00000033c0)="3dccd7573a3629c3aec85ffb6460b284e0ea8597b77b1c083729e062f3670fb84714eb5e289e1c06f95f03a19ebc17a7985dae65f103ace4e5c43aa5b978983f1315a93410367b6121ba3e395bc629f95f53f3a8d2a6f37c2f022ad08583c0f4a06330695df055ba5e7e318d0d36183fc17c345c599b553635ffb60bd519c0ac1a9c7e240ab48034687397360151eb1ea1aa9fff8ce18b5ed9153728119288ac390407d1d60001f80786330db6366da8f7e8edcd05987cdf1c929a5884631f283f7ea9f3982bba7a044950bad8fab5a90cc94829") socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003500), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000003c80)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003540)={0x6f8, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x6cc, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}, {0x184, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "59ffa9cf758625cacc967a43e68fe0be60890a34246c31b802c5cafb6532683a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fbeffd1f2e6930109159437edfc99c8b6b4e750abd88fdc564a59aba3c7c90e1"}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3a217b85660913cda5ff2b93a4bb037202b8051bf6fec389c90761ae6050e8ce"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x48c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xb, @remote, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @mcast2, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x41c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3f6d102aa0708a562a13104d20e7fc493ed17764edb9a2aed12b08ac6a918460"}]}]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 40.643160705s ago: executing program 1 (id=205): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x40400, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000008c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000940)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x8, 0x103aff, 0x72d90}) sendto$packet(r1, &(0x7f0000000180)="10031300e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) write(r1, &(0x7f00000001c0)="90ef4b20d0c8c1c72a5bf9802217828567e05812968029878d6a5cda578f973eecbf6e639e1be81a6ed76988d6ebd9a37c4db75e6e318e4ec310302df44a8bed11eaa67527ad5f3fe6a4224f7236929a942681212d16c17e4055a62943b4eeec08ceccb50cb77ab8036310c64298e31bbc016556aef9e069a6d3c22723cbc56ca5395a6fc761f619e2309de16473e30d2e49c4dbab2433f4eeaef84249e1a2d35e91119ac73d2340d11969f5cbf903ca12e19cf41805fedbcaf3a2df401a1f2c44285721f301b481a367891c4d5e28df4f7e7d9ede2afcf9fb", 0xd9) 40.536687626s ago: executing program 1 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x84) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r3, 0x82000000) 40.535898363s ago: executing program 1 (id=210): r0 = socket$netlink(0x10, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 40.42229301s ago: executing program 1 (id=211): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8942, &(0x7f00000000c0)) r1 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r4 = memfd_secret(0x80000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r6, 0x18000000000002a0, 0x3f, 0x0, &(0x7f0000000300)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f0007080d0b038da1880b25", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008, 0x12, r4, 0x286b3000) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32, @ANYBLOB="b62f2e7241d1c7d06916bae7fd6a4cfe4557d0213a821eb4ac3596bbd6bd62551269f00467e2779a76debb3c6d4c825e097b30096c51dc47b8d40e4b04b39dbb7ac56fd893258c8d04a32ecab690d25334b77c2dee3e44e6da7ee4f5d3264bc77e9b5f737a6b35bafb11002bb74537981877e525ba78e6cfa17101f9bfaac3420763be2c8936f351b5c582140341867db7035cf66311f461bf76e38ee61e6e336057c0c800286410c3655834411f92353c59ed7726f3301d00000000000000"], 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7ff, 0x8000, 0x63}}]}}}]}, 0x78}}, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0xaa99) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000c5facd5e8ecfe654d33a6500000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a0500000000000000000000000008140000001100010000"], 0xa4}}, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r11, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf0c961ec9cffda02, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) 40.124587431s ago: executing program 1 (id=212): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000280)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)={@broadcast, @remote, 0x1, 0x3, [@remote, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x2b}]}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r2, 0x1e67b000) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r6, 0x0) r7 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r9 = syz_open_procfs(r7, &(0x7f0000000100)='stack\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="87000500000000e3270012800b10010069703674886c00001ceb028014000300ff01000000000000000000000000000104001300"], 0x4c}, 0x1, 0x0, 0x0, 0x9805}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, 0x0, 0x178) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000e8000000010100002f00000001020200", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03833cba21000000000000fd97000000000000b1c403c1368ddc9c67a142fd04000000000000002311b0226108"], 0x50) 39.822090309s ago: executing program 1 (id=216): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x80, 0x1, 0x0, "cb9649f40000315cdd8a771b391c208d2b0000e0a56bade400"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) 39.761126374s ago: executing program 33 (id=216): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x80, 0x1, 0x0, "cb9649f40000315cdd8a771b391c208d2b0000e0a56bade400"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) 3.248087664s ago: executing program 4 (id=866): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000980)={0x80, 0xfd2c, 0x80, 0x3, 0x11dd33e3}) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000240)="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", 0xfc) syz_usbip_server_init(0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) write$nbd(r1, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x3, 0x4, "079850bdce2baac72f9e537e8a10392b85b64662964aac9905103265f7c3aa8695737653c78b6c3cd2bb95a2a36a8d835f7cb6541adbc0f130db7338a1a9cc630cc68672facc4f5fd5effad29be4994ca9442fa802438181ada078d716984ef3c869f516934ec8bd6c6b02943698905c0a8c633cac6eba7a99660a5b9666e0aee5c78dfe4262b564810d431c023162b283ed95f463dc4f9b9e87621010cd01939940990b19246df2dd994eaaa3eb397423b33907943d6314261406bdc9ffce926492ded32d300dde766957ee634d0e9014da"}, 0xe2) syz_usbip_server_init(0x5) 2.683332163s ago: executing program 4 (id=872): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x1f) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000001440)=0x81) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000240)={"ef4a958a", 0x8000, 0x19, 0xe8, 0x9, 0x5, "c47444e3268c8f81869645d16afde1", "3890b074", '|jnf', "a48cb2c7", ["12ca604ab696c19638799203", "f56e192dc8f45310868829ce", "d5f93db71aaccaf10aa9f2c1", "58f9fddf7a4ee23aa7d11b8d"]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000001080003400100000008000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000140)=0xffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x7ff, 0x3, 0x2, 0x7c6b551b, 0x9, "53ff725166628b28da17e5c19cf9233a42d492", 0x0, 0x2}) 2.562695037s ago: executing program 4 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="150500000000ffdbdf250300000008000100", @ANYRES32=r2], 0x140}}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101a00, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0x3, 0x9, 0x5, 0x7fff, 0x28, 0x200, 0x89, 0x16b, 0x7e, 0x5000000, 0x4, 0x0, 0x5, 0x9, 0x8, 0x101, 0x4, 0x1, 0x9, 0xffffff80, 0x3, 0x7ff, 0x0, 0xfbdb, 0x1, 0x6a, 0x149, 0x0, 0x4, 0x10000, 0xff8, 0x1]}) close_range(r0, r4, 0x2) 2.562311159s ago: executing program 4 (id=874): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x9c, 0x97, 0x1b, @private2, @rand_addr=' \x01\x00', 0x8000, 0x8000, 0x14, 0x8}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfef5, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000001608000340000000000800024000000000080008400020000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) (async) r4 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000240)=0x40) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0xd, 0xc}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x24008850) 2.503332572s ago: executing program 4 (id=875): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7, 0x2}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 2.443185306s ago: executing program 4 (id=876): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffb3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2cf2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe017}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x71209188}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000240)=0x1) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x9) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000300)={0x2, 'pimreg1\x00', {0x6}, 0x2}) r4 = syz_open_dev$evdev(&(0x7f0000000340), 0x61590c47, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000480)={0x8, 0xfc, &(0x7f0000000380)="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"}) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000004c0)=0xd6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000540)={r4, 0x4e3e, 0x9, 0x8}) setxattr$trusted_overlay_upper(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x52, 0x0, 0xff, "17e1833c1544343ef1f2471546a87565", "ed079d16bb1141c1c29c2b68835ad17d4e696d384bfb67059fe5b4b1c35a78509b7633d2ceccc5c9940a341051d7d6cc86f13ca054f552a45c7cbe6437"}, 0x52, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = timerfd_create(0x0, 0x80000) close(r6) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x7b}, @l2cap_cid_signaling={{0x77}, [@l2cap_conn_req={{0x2, 0xfa, 0x4}, {0xfff, 0x6}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x0, 0x7f, 0xd}}, @l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x40, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x40, 0x61, 0x6a47, 0xa}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x401, 0xe}}, @l2cap_info_req={{0xa, 0x5a, 0x2}, {0xf822}}, @l2cap_info_rsp={{0xb, 0x6, 0x40}, {0xe, 0x24, "72d68bf9f56a44875858f927af05f589f12c52b4bf0818ee18b054b6400b3d43bea370c6f94ab9530129efff34027194ee985826757a2fc7cf5ce600"}}]}}, 0x80) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000007c0)={0x12, 0x97, &(0x7f0000000700)="78986025430bc64ae9506ff7a3bafbefbdcab5b1658504ad6da77112a1e971c23b7d51cff28af0b40e688f49a0d3f8e18a3c5834571ae9a95d8e7691fd82112a597b7598c6a616a1e595df8f879254828c0b2b95574e224efd8ecf55cb3b712833b2a4d9037b15c70fc7f39a91fd4ed80a402a22b54556ec302c123c5547d8130bc88e31fbc7947e0247b56ab4b735c74528088e1a1cb6"}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000800), &(0x7f0000000840)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@deltaction={0xa8, 0x31, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x20044080) r8 = syz_usb_connect(0x3, 0x210, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x12, 0x73, 0xaa, 0xff, 0x45e, 0x412, 0x308f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1fe, 0x2, 0xff, 0xe, 0x0, 0xf9, [{{0x9, 0x4, 0x94, 0xab, 0x2, 0x72, 0x56, 0x6a, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x2, 0x6, 0x2, 0x9, 0xf1}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x0, "a8cc"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x6, 0xff, "31c7e3d0"}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x0, 0xe5, "6f4da308"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x3, 0x7, 0x1, 0x85, 0x6}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0xf1}]}], [{{0x9, 0x5, 0xa, 0x3, 0x400, 0xd, 0xfe, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6b, 0xb}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x6, 0xb, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x6}]}}]}}, {{0x9, 0x4, 0x13, 0x1, 0x1, 0xc4, 0xb, 0x2c, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x6}, [@selector_unit={0x9, 0x24, 0x5, 0x4, 0xe, "c2ce9581"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x2, 0x6, 0x6, 0x4, 0x8], 0x72}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x6, 0x2, [0x6, 0x2], 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x5, 0x2, 0x8}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x2, 0x0, "b4e68f4e"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0xf, 0x6, "022896"}]}, @hid_hid={0x9, 0x21, 0x7ff, 0x7, 0x1, {0x22, 0x269}}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x2, 0x9, 0x3, [@generic={0x95, 0x21, "af58a2358984a7bb9a578cf2a8ddc7ec942ef970cd92c3c56f360d72494df1ceb183b45911831da9522644103d9c995ad61a504b48c0828fe29328f382d864cde549dd6c3acda1821f4f516cda37fff110e44d28efc61b5e5543afe156b1ababda40952dc7f770788e8250936e16d7a1ea10c1459c96258fbaade6cfa12bc0b2736f73eba68c4154146b515213583a2dfe99b7"}, @generic={0x8d, 0x10, "50e1f3ed37d21ad80f512023fb1d152884a951a0530b1b0e10aa745413152c496104243332561fb41d09049400f4f60f8f0e30110a69004f6dcf15ce6e3cd6cd40ab8767e3c6c18028e4bbcc45c40fc2039b9f8b6f83a4bc74cea3a0ac55da35e311ccb8ace178e1299b0ba03a3d4201a813286a052fc908540dbb400bf2539f68723c66352298c0662d4b"}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x200, 0x3, 0x6, 0x9, 0xff}, 0xec, &(0x7f0000000c80)={0x5, 0xf, 0xec, 0x1, [@generic={0xe7, 0x10, 0xb, "2fe137b8fb4d219e36f8b1cc0bdd186ad4b614f06bc77ba5ebcdf70010b5b637f34453a7ef2d19f0e3b971f91fe31cc50353b41861838108f17fa531cdfa55922bd61b643519907e553e2ee350ebc855e8f66944f02f501901cebad2f1e613252c87fa5b61a988f990a3f47ed74575fcfc523f216cb7decc6833f44ae1e9559e3d7620e2b6f322b1551663b1c5682911f0c15ebb3c3e8a0d2ed1a2201ed18ac12153a751ab156399dd2b6b54b4d888cb2beac9a01bd4007aa3ecc702f1df8f2933b2c9ad4af64ac0e537d0ad9b5351f57b36166b076d6ea9a5ee3e3693266785f08f5622"}]}, 0x1, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io(r8, &(0x7f0000001040)={0x2c, &(0x7f0000000e00)={0x0, 0xc, 0x4c, {0x4c, 0x1, "41c597fc2e0f0d472aab728d10827a79ca45978ddbd7bfffa4907b1a0e048a75917b1425dd1e0306be1d4b2ffffd5015a963dcfa4830e0ed02c547693b2c79f488027644b9862c19e546"}}, &(0x7f0000000e80)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "47b4ec49a6fe050e1b5545fedea644044941a62f78363fa815f0ca6fe647c9c52b4a7f6864b99b9dd2fd4bb9493f2c391a0d91f35bcc9e7d00d4e02651b70fc0369ef555a6f151cf5b0fb58cda4446ee75e830490761d1b54cf20e59631c80f1c61c3be6b245cba547a5b73172aa87a0bf68ca05d22c300efcd372f4b498acf05c02e5d69fb942e3dbb8b4f6992db54d9f1bd7291e3527bd7e4ece2eefd18aaa0b7c57362a888c2fe1920fe38163514ab0f365f42450c3f13e7fad0cb82e819a8949"}}, &(0x7f0000000f80)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xc, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x7, 0xfffd}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4a, 0xdf, 0x2}]}}, &(0x7f0000000fc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x2, 0x1, 0x81, "438cff17", "b12559fd"}}, &(0x7f0000001000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x6, 0x9, 0xd, 0xbf, 0xe16b}}}, &(0x7f00000014c0)={0x84, &(0x7f0000001080)={0x40, 0xe, 0x62, "402706f02db0c1169e057705ddc601246c527ab3b13e5de88df7d24558841416d9249aceda664cb09166130845e919e093e2f9bcd9dc5dc074aac9dc0618577e30dedaf7f6a8c0adcea5ff897c30200e19640c127f28afa5f6848c68d9a83b4c6eef"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000001180)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000011c0)={0x20, 0x0, 0x8, {0x100, 0x4, [0x0]}}, &(0x7f0000001200)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000001240)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001280)={0x40, 0xb, 0x2, "3d1f"}, &(0x7f00000012c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001300)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001340)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001380)={0x40, 0x19, 0x2, "3b7f"}, &(0x7f00000013c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001400)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f0000001440)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000001480)={0x40, 0x21, 0x1, 0x9}}) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000015c0)={{r3}, 0x1, &(0x7f0000001580)=[0x6], 0x8, 0x1c}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001640), 0x200000, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000001680)={0x0, 0x3ff}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000001700)={r11, 0x8, 0x8, [0x1, 0x0, 0x5, 0x8e, 0x6, 0x3, 0x0, 0x8]}, &(0x7f0000001740)=0x18) write$rfkill(r9, &(0x7f0000001780)={0x80000001, 0x3, 0x2, 0x1, 0x1}, 0x8) 1.473311194s ago: executing program 2 (id=896): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'erspan0\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7db1, &(0x7f0000000040)={0x0, 0xcbe5, 0x1cc90, 0x0, 0xe4}) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x7, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4, {0x0, 0x0, 0x0, '\x00', {0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2000000, {}, {}, {}, {0x0, 0x3}}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) getsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.423085674s ago: executing program 2 (id=897): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000001380)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20048051}, 0x0) (async) syz_emit_ethernet(0x24, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@llc={0x8864, {@snap={0x0, 0x0, 'I', '7r~', 0x1b, "02a0c1d834843c6b44bc156b2c1b"}}}}}, 0x0) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async) r5 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="ff6bff120cac44a47d7abfe1fc4a7080800f667b6c2221c51f1f6710e49a", 0x1e, r4) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) listen(r6, 0xfff) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4) (async) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.422830192s ago: executing program 2 (id=898): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) 1.363197435s ago: executing program 2 (id=899): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x20040) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) pselect6(0x40, &(0x7f0000000040)={0x3, 0x10000, 0x3, 0x7, 0x4, 0x7ff, 0xf, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0x100000001, 0x5, 0x100000000, 0x4, 0x262}, 0x0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom$x25(r4, &(0x7f00000000c0)=""/3, 0x3, 0x22162, &(0x7f0000000240), 0x12) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x40000000) sendto$inet6(r7, 0x0, 0x0, 0x4, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r5, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x1, 0x10001011, r8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC], 0xffffffffffffffde}}, 0x24044840) 621.25857ms ago: executing program 5 (id=901): setresgid(0xee00, 0xee01, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) keyctl$setperm(0x5, r0, 0x1c243811) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/34, 0x22) keyctl$read(0xb, r0, &(0x7f0000000080)=""/77, 0x4d) keyctl$get_security(0x11, r0, 0x0, 0x0) 533.008604ms ago: executing program 5 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xffffffffffff9cd2, 0x377d, 0x100000000, 0xe, 0x5, 0xb8, 0x8, 0x3ff, 0x3, 0x100000000, 0x5, 0xe6d4, 0xa, 0x1, 0x4], 0xddd8b000, 0x10}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20240, 0x0) close(0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x2, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xd}, {}, {0xb, 0xfff1}}}, 0x24}}, 0x40004) r11 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x101100) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x3, 0xfffffffd, 0x403, 0x394}}) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0x0, 0x1, 0x2, 0x1000, 0x3, 0x9}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1aa) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1004001, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r15 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r15, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 531.051565ms ago: executing program 2 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="11cd", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r3], 0x1, 0x80000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x40) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x88}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000027c00000400f6000c000180060006008035"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 413.175151ms ago: executing program 2 (id=906): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x80000000) read$dsp(r0, &(0x7f0000000080)=""/48, 0x30) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x101080, 0xb0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x9) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000200)=0xb) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24001000}, 0x40010) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000480)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000500)="10d7ed41b5d298db1699ced6c3a5dd01a47a414d24432bdeb5202a88ce6e6960f847327b0b9a3e403385a1debdcc45585e7126e19c769fab01242aba826374baeb293e47f6a525fad3aea5f10c46675a6cc2585f99463de418fe6f112050baa907db570bdca12d4b0c599bcc239bc8f836e1a9a1ed3665fbc5d5ff92ffb762e8104a35fc164473dd27c6986d98b49133401a6b72e75dfb649101a061a642c27e7d7b17da92a0edd0fa4ca734bcd3d3250f1f5dd90d4d780e797a8db45f5714bde02c1e24b55bb0abe5fb21f8d9983776e68a6a0465") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r8, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000008c0)={0x4, @win={{0xda27, 0x7, 0x9dd, 0x5}, 0x5baf50361152c182, 0x8, &(0x7f0000000800)={{0x8cb1, 0x3, 0xd, 0x10000}, &(0x7f00000007c0)={{0x1, 0x2, 0x1, 0xff}, &(0x7f0000000780)={{0x80000001, 0x10, 0x80000001, 0x2}}}}, 0x200, &(0x7f0000000840)="535682f8a23309e2e0a0600603bbba0eab4166f6569b81ca88ec7177d04dba6d2f5761f91883894b20f63d25e4a32c5bf1cbaf675d7fe6dc62a790d5f7fe98921b37e96d1b64ed4ca484f8bf3970514932d6d15a3245a0877b37bfd154fc8d524d694c8696fac7a7c901a4a2559ea1200cceb64ceba8dead9ed9b99249d01443", 0x5}}) close(r1) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r10, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r8, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000c00)={0x48, 0xb, r1, 0x0, r2}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000c80)={0xc3, 0x4, "0494db4778e77fcc071d57cfe37d89125083bfb6a95a2c54024eb5e3cc770bd4", 0x26d, 0xc22, 0xfffff2a5, 0x8000, 0x10}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000d40), r4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x114, r11, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r7}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4c085) 323.057928ms ago: executing program 0 (id=907): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async, rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x401, 0x2) (async, rerun: 32) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) (async) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x880) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @loopback}, &(0x7f0000000400)=0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded', 0x8000, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0xffe4}, {0x21da430127facaa0, 0xfff3}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044814}, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 322.786759ms ago: executing program 0 (id=908): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, r0, 0xffffc000) io_setup(0xb, &(0x7f0000000000)) 202.693578ms ago: executing program 5 (id=909): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x18, 0xfffffffb, 0xffffffff, 0x12, 0x5, 0xfffffffc}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xd4, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r5, 0x511, 0x4}, 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd66", 0xfdbe, 0x24044084, 0x0, 0xfffffffffffffe6d) 201.846989ms ago: executing program 0 (id=910): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x1, 0x8, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r2, 0xb05, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20008000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x29}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000180)={0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000100)='./bus\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) (async) unlink(&(0x7f0000000040)='./file0\x00') (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 113.259225ms ago: executing program 0 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c045}, 0x4008000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x10c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x99, 0x6, "4101a2ad6a43d9918f47d06224bf2ace99d1372e27d6d8ca2f7556f3377d36fb0510c58e9b62b4cd099d8a6dcf553eb0eff08d6bc05323b0ca1a966f2eccfb55b38f7252803b9f8420f74c9a6a533d0481682cdfa0b81d00acb426e8a0da3dfd0816b4cd6459ccce486f54dec2f0153f2ab0d426cd2b522d014642dc02d85f4ef7c3bb1ef0b365687b9ac2d95de63b156e2d0cf0c7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x2d, 0x6, "ecec807c396fb0134bc22fe3675a3a2312c101f319956f97212255fc4b3ca417201423cadd1c5d5646"}]}, @NFT_MSG_DELSET={0x144, 0xb, 0xa, 0x205, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DESC={0x120, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x74}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbed}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7e8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbcb}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELCHAIN={0xc0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x46706170}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7b83195d}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf76a}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x34c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 112.867465ms ago: executing program 5 (id=912): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) (async) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) (async) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) setreuid(0x0, 0xee00) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 111.472282ms ago: executing program 5 (id=913): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000004ec6eff8d4bf000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) fanotify_mark(r0, 0x1, 0x2d, r2, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000ac0)=[{&(0x7f0000000400)="cb8cabca819f", 0x6}, {&(0x7f0000000800)="e1640adaef3b1beee9ed635d41fc89bf2c9fedac366b0a1e1cd152cc77d2783c73e00bc0f6b56224ff5c0dbb956fb2ed48fdf520e55b2501587e4beff770c804ea7e69b1c8b4e155f701f920e00f4d8c40c0108dc13b38e8c3b3545c79a7d78f58a5e54d93d04ba1ae81372c30fb38d8545d36473f76f86709751d5480985e1f38f6fcfbcc9b908af7", 0x89}, {&(0x7f0000000440)="3b7af69339e6", 0x6}, {&(0x7f00000008c0)="9a63366fe451c8d952dc3e7510500f2b965e5131cd82e20b75511d1e0c25e1cfdfb21d622e8a33286cbfc562968e4daddaa0c7545e855841017a5e8ea7b1ecd4fb2a3b8d690d90c6b67d6db1d363241458d79c271a68f6271b0e423b8363d3e530422fef90c3f9fd3f1b5f8efeaef2bd0d165d3bb4289026d1e828c8d4c24472e0799664d15b02f8ebb8089f00ca63b3d97fb34974d1958e683456d354dfb2284b64ac46a5239ab6d10eb9105c95d4abb50d6a1fe3a864329494a1", 0xbb}, {&(0x7f0000000980)="8cc7dab8efb84fff5f9af8ab0691422f23e5406d658033010c47a1ff756a20f23877efbfdb3efe95396d8f9a8d7299cf21bc33fb2853f6ed090685b75770f23386a48963377cfe533f5dab9ddd824df3bb93653aeac2debce9cebd9dda3cf19c1403ba375e0e5ce47ee631878750", 0x6e}, {&(0x7f0000000480)="d90e35465d75f36e03fac32e234c688dd8a7c8fc6d42b005acc690e5a4e9efe680224baec78062ee3cb2498b017d4575995208fa9048e426380e1518a37c", 0x3e}, {&(0x7f0000000a00)="b86f75bb63bb25fda0151ec9bd1a3bca9f59e9231a5299543754b6c857ba11682567f5a9765da0f0f7baa25686df0c4bdf0badcd79acf4cf12b4765f1eb425ec14d95e1c00a17b968ab3d1b95d0139f4b2809a16ea6547ba6c1e75053e5a5dc8e2c9a1dd1bac405b24b7d8a57eef658eef5f8936d3ff79dfc0dd735576e1e8edda14be384cb92ba81f7ce38b68bab47ce1", 0x91}], 0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/265], 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) unshare(0x6a040000) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x11b, 0x10000}) unshare(0x2000a00) 2.964381ms ago: executing program 0 (id=914): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0xfc, 0x2c, 0xd3f, 0x70ad28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf003, 0x1}, {}, {0xffff, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0xbc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_OPTS={0xa8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x692}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2d6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xab8b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8b3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xb}]}]}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x1}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.421251ms ago: executing program 5 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0x5, 0x3ff, 0x3d, 0x5, 0xd}) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x8a8, 0xc600081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r3, 0x401070c9, &(0x7f0000000040)=0x3) close(r0) 0s ago: executing program 0 (id=916): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r1, 0x80005520, 0x0) (async) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000000)={0x3, "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"}) kernel console output (not intermixed with test programs): hci3: Opcode 0x0406 failed: -4 [ 57.810604][ T6206] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.815733][ T6206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.818494][ T6206] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.822989][ T917] libceph: connect (1)[c::]:6789 error -101 [ 57.825213][ T917] libceph: mon0 (1)[c::]:6789 connect error [ 57.828161][ T6206] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.874556][ T40] audit: type=1400 audit(1764932402.431:240): avc: denied { append } for pid=6180 comm="syz.0.55" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.888203][ T40] audit: type=1400 audit(1764932402.441:241): avc: denied { create } for pid=6219 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.894284][ T9] usb 5-1: USB disconnect, device number 2 [ 57.943278][ T6222] capability: warning: `syz.2.65' uses deprecated v2 capabilities in a way that may be insecure [ 58.018927][ T40] audit: type=1400 audit(1764932402.571:242): avc: denied { map } for pid=6226 comm="syz.2.67" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.028527][ T40] audit: type=1400 audit(1764932402.571:243): avc: denied { read } for pid=6226 comm="syz.2.67" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.342941][ T838] libceph: connect (1)[c::]:6789 error -101 [ 58.347580][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 58.373852][ T6202] ceph: No mds server is up or the cluster is laggy [ 58.592272][ T5946] block nbd0: Receive control failed (result -32) [ 58.892920][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.053458][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 59.060621][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.063956][ T9] usb 5-1: config 0 has no interface number 0 [ 59.065899][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.069408][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 59.073391][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 59.076881][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.081050][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 59.091176][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.097243][ T9] usb 5-1: config 0 descriptor?? [ 59.107070][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 59.131101][ T6216] syz.3.63: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 59.137191][ T6216] CPU: 2 UID: 0 PID: 6216 Comm: syz.3.63 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.137208][ T6216] Tainted: [L]=SOFTLOCKUP [ 59.137211][ T6216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.137217][ T6216] Call Trace: [ 59.137221][ T6216] [ 59.137225][ T6216] dump_stack_lvl+0x16c/0x1f0 [ 59.137245][ T6216] warn_alloc+0x248/0x3a0 [ 59.137259][ T6216] ? __pfx_warn_alloc+0x10/0x10 [ 59.137277][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137290][ T6216] ? __vmalloc_node_noprof+0xad/0xf0 [ 59.137303][ T6216] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 59.137318][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137333][ T6216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 59.137348][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137359][ T6216] __vmalloc_node_noprof+0xad/0xf0 [ 59.137369][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137382][ T6216] __vmalloc_node_range_noprof+0xb3b/0x1480 [ 59.137397][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137412][ T6216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 59.137424][ T6216] ? ___kmalloc_large_node+0x130/0x1a0 [ 59.137437][ T6216] __kvmalloc_node_noprof+0x42c/0xa50 [ 59.137452][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137464][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137478][ T6216] ? hash_netiface_create+0x3ec/0x1250 [ 59.137489][ T6216] hash_netiface_create+0x3ec/0x1250 [ 59.137501][ T6216] ? __nla_parse+0x5b/0x60 [ 59.137513][ T6216] ? __pfx_hash_netiface_create+0x10/0x10 [ 59.137526][ T6216] ip_set_create+0x7e4/0x14d0 [ 59.137546][ T6216] ? __pfx_ip_set_create+0x10/0x10 [ 59.137567][ T6216] ? find_held_lock+0x2b/0x80 [ 59.137582][ T6216] nfnetlink_rcv_msg+0x9fc/0x1200 [ 59.137597][ T6216] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 59.137610][ T6216] ? __lock_acquire+0x433/0x22f0 [ 59.137635][ T6216] ? avc_has_perm_noaudit+0x149/0x3b0 [ 59.137656][ T6216] netlink_rcv_skb+0x158/0x420 [ 59.137670][ T6216] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 59.137681][ T6216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.137700][ T6216] ? ns_capable+0xd7/0x110 [ 59.137718][ T6216] nfnetlink_rcv+0x1b3/0x430 [ 59.137728][ T6216] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 59.137737][ T6216] ? netlink_deliver_tap+0x1ae/0xd30 [ 59.137752][ T6216] netlink_unicast+0x5aa/0x870 [ 59.137767][ T6216] ? __pfx_netlink_unicast+0x10/0x10 [ 59.137786][ T6216] netlink_sendmsg+0x8c8/0xdd0 [ 59.137801][ T6216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.137820][ T6216] ____sys_sendmsg+0xa5d/0xc30 [ 59.137834][ T6216] ? copy_msghdr_from_user+0x10a/0x160 [ 59.137844][ T6216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.137860][ T6216] ? __pfx_futex_wake_mark+0x10/0x10 [ 59.137876][ T6216] ___sys_sendmsg+0x134/0x1d0 [ 59.137887][ T6216] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.137896][ T6216] ? __lock_acquire+0x433/0x22f0 [ 59.137926][ T6216] __sys_sendmsg+0x16d/0x220 [ 59.137936][ T6216] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.137946][ T6216] ? __x64_sys_futex+0x1e0/0x4c0 [ 59.137964][ T6216] do_syscall_64+0xcd/0xf80 [ 59.137981][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.137991][ T6216] RIP: 0033:0x7f5b09f8f7c9 [ 59.138000][ T6216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.138010][ T6216] RSP: 002b:00007f5b0ad7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.138020][ T6216] RAX: ffffffffffffffda RBX: 00007f5b0a1e5fa0 RCX: 00007f5b09f8f7c9 [ 59.138027][ T6216] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 59.138033][ T6216] RBP: 00007f5b0a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 59.138039][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.138044][ T6216] R13: 00007f5b0a1e6038 R14: 00007f5b0a1e5fa0 R15: 00007ffdce375ce8 [ 59.138058][ T6216] [ 59.138062][ T6216] Mem-Info: [ 59.146909][ T6256] futex_wake_op: syz.1.77 tries to shift op by -1; fix this program [ 59.150366][ T6216] active_anon:27406 inactive_anon:8 isolated_anon:0 [ 59.150366][ T6216] active_file:10818 inactive_file:40635 isolated_file:0 [ 59.150366][ T6216] unevictable:1768 dirty:8 writeback:0 [ 59.150366][ T6216] slab_reclaimable:11880 slab_unreclaimable:67533 [ 59.150366][ T6216] mapped:25710 shmem:21658 pagetables:1197 [ 59.150366][ T6216] sec_pagetables:308 bounce:0 [ 59.150366][ T6216] kernel_misc_reclaimable:0 [ 59.150366][ T6216] free:413576 free_pcp:13878 free_cma:0 [ 59.151694][ T6256] fuse: Bad value for 'user_id' [ 59.154242][ T6216] Node 0 active_anon:109624kB inactive_anon:32kB active_file:43272kB inactive_file:162340kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102840kB dirty:32kB writeback:0kB shmem:83096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12624kB pagetables:4588kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 59.161999][ T6256] fuse: Bad value for 'user_id' [ 59.164212][ T6216] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 59.308299][ T6216] Node 0 DMA free:14016kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:4kB free_cma:0kB [ 59.319763][ T6216] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 59.322761][ T6216] Node 0 DMA32 free:57804kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109592kB inactive_anon:32kB active_file:43272kB inactive_file:162340kB unevictable:3536kB writepending:32kB zspages:240kB present:2080628kB managed:1266132kB mlocked:0kB bounce:0kB free_pcp:31572kB local_pcp:3460kB free_cma:0kB [ 59.337996][ T6216] lowmem_reserve[]: 0 0 0 0 0 [ 59.339106][ T9] usb 5-1: USB disconnect, device number 3 [ 59.340073][ T6216] Node 1 Normal free:1584192kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:24824kB local_pcp:32kB free_cma:0kB [ 59.356481][ T6216] lowmem_reserve[]: 0 0 0 0 0 [ 59.358036][ T6216] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 7*16kB (UM) 19*32kB (UM) 14*64kB (U) 14*128kB (UM) 9*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 0*4096kB = 14016kB [ 59.363353][ T6216] Node 0 DMA32: 2*4kB (UE) 0*8kB 3*16kB (UME) 15*32kB (ME) 9*64kB (UME) 3*128kB (E) 2*256kB (E) 3*512kB (UME) 17*1024kB (UE) 8*2048kB (UM) 5*4096kB (UM) = 57816kB [ 59.368515][ T6216] Node 1 Normal: 5*4kB (UE) 10*8kB (UME) 27*16kB (UME) 76*32kB (UME) 24*64kB (UME) 12*128kB (UME) 5*256kB (U) 6*512kB (UME) 3*1024kB (UE) 5*2048kB (UM) 381*4096kB (UM) = 1584276kB [ 59.374373][ T6216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 59.377438][ T6216] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 59.378711][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 59.380470][ T6216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 59.385616][ T6216] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 59.388643][ T6216] 73138 total pagecache pages [ 59.390187][ T6216] 31 pages in swap cache [ 59.391585][ T6216] Free swap = 124800kB [ 59.393070][ T6216] Total swap = 124996kB [ 59.394434][ T6216] 1048443 pages RAM [ 59.395742][ T6216] 0 pages HighMem/MovableOnly [ 59.397334][ T6216] 282597 pages reserved [ 59.398708][ T6216] 0 pages cma reserved [ 59.579963][ T6216] syz.3.63 (6216) used greatest stack depth: 18312 bytes left [ 59.584608][ T6263] x_tables: duplicate underflow at hook 1 [ 59.643462][ T1146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.646609][ T6268] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.708922][ T5946] Bluetooth: hci0: command 0x0419 tx timeout [ 59.773640][ T5946] Bluetooth: hci2: command 0x0419 tx timeout [ 59.853400][ T5946] Bluetooth: hci1: command 0x0419 tx timeout [ 59.853423][ T5945] Bluetooth: hci3: command 0x0419 tx timeout [ 60.066970][ T6296] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.071025][ T6290] MPI: mpi too large (16392 bits) [ 60.222349][ T6315] Bluetooth: MGMT ver 1.23 [ 60.364221][ T6323] qnx6: unable to read the first superblock [ 60.367607][ T6323] qnx6: unable to read the first superblock [ 60.370172][ T6323] qnx6: unable to read the first superblock [ 60.396768][ T6330] tmpfs: Cannot enable quota on remount [ 60.427195][ T6334] ======================================================= [ 60.427195][ T6334] WARNING: The mand mount option has been deprecated and [ 60.427195][ T6334] and is ignored by this kernel. Remove the mand [ 60.427195][ T6334] option from the mount to silence this warning. [ 60.427195][ T6334] ======================================================= [ 60.456566][ T6334] __nla_validate_parse: 5 callbacks suppressed [ 60.456576][ T6334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.104'. [ 60.464507][ T6334] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 60.505228][ T6342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.570748][ T6351] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 60.582380][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.622801][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.626004][ T6351] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 60.675033][ T6370] loop9: detected capacity change from 0 to 7 [ 60.677782][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.680441][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.683269][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.686149][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.689121][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.691845][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.695443][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.698021][ T6370] ldm_validate_partition_table(): Disk read failed. [ 60.700187][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.703060][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.705642][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.708428][ T6370] Dev loop9: unable to read RDB block 0 [ 60.710353][ T6370] loop9: unable to read partition table [ 60.712342][ T6370] loop9: partition table beyond EOD, truncated [ 60.714445][ T6370] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 60.714445][ T6370] ) failed (rc=-5) [ 60.723312][ T6372] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 60.725444][ T6370] syzkaller1: entered promiscuous mode [ 60.726441][ T6372] SELinux: failed to load policy [ 60.728029][ T6370] syzkaller1: entered allmulticast mode [ 60.768307][ T6374] syzkaller0: entered promiscuous mode [ 60.770107][ T6374] syzkaller0: entered allmulticast mode [ 60.771066][ T6370] tmpfs: Unknown parameter 'nr_bÅÊ¡•IèÉa–îïùocksáÅç' [ 60.781299][ T6370] ldm_validate_partition_table(): Disk read failed. [ 60.783825][ T6370] Dev loop9: unable to read RDB block 0 [ 60.785722][ T6370] loop9: unable to read partition table [ 60.787763][ T6370] loop9: partition table beyond EOD, truncated [ 60.883066][ T6369] delete_channel: no stack [ 60.907749][ T6379] selinux_netlink_send: 24 callbacks suppressed [ 60.907760][ T6379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6379 comm=syz.1.117 [ 60.912411][ T6381] netlink: 'syz.2.118': attribute type 23 has an invalid length. [ 61.314309][ T6402] mmap: syz.2.127 (6402) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.782024][ T5945] Bluetooth: hci0: command 0x0419 tx timeout [ 61.932489][ T5945] Bluetooth: hci3: command 0x0419 tx timeout [ 61.942218][ T5945] Bluetooth: hci1: command 0x0419 tx timeout [ 62.005757][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.009760][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.081247][ T6435] program syz.2.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.085827][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.087257][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.089180][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.092548][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.097907][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.101044][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.104089][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.161784][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.168795][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.197372][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.201983][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.204702][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.207659][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.210342][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.213187][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.215863][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.220053][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.238110][ T6444] IPv6: syztnl0: Disabled Multicast RS [ 62.294051][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.298326][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.327132][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 62.387871][ T6464] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 62.391196][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.394342][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.396758][ T6436] bridge_slave_0: entered allmulticast mode [ 62.399384][ T6436] bridge_slave_0: entered promiscuous mode [ 62.405221][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.409560][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.412010][ T6436] bridge_slave_1: entered allmulticast mode [ 62.415231][ T6436] bridge_slave_1: entered promiscuous mode [ 62.455511][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.464227][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.488153][ T1151] bridge_slave_1: left allmulticast mode [ 62.489897][ T1151] bridge_slave_1: left promiscuous mode [ 62.492580][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.498079][ T1151] bridge_slave_0: left allmulticast mode [ 62.499700][ T1151] bridge_slave_0: left promiscuous mode [ 62.501405][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.675878][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 62.722777][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.727156][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.730875][ T1151] bond0 (unregistering): Released all slaves [ 62.737990][ T6436] team0: Port device team_slave_0 added [ 62.746608][ T6436] team0: Port device team_slave_1 added [ 62.787066][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.789418][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.798160][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.804079][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.807289][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.818333][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.819032][ T6489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.151'. [ 62.825407][ T6489] netlink: 35 bytes leftover after parsing attributes in process `syz.0.151'. [ 62.828742][ T6489] netlink: 'syz.0.151': attribute type 5 has an invalid length. [ 62.831498][ T6489] netlink: 'syz.0.151': attribute type 6 has an invalid length. [ 62.834645][ T6489] netlink: 35 bytes leftover after parsing attributes in process `syz.0.151'. [ 62.869675][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 62.869685][ T40] audit: type=1400 audit(1764932407.421:351): avc: denied { write } for pid=6491 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.884276][ T6436] hsr_slave_0: entered promiscuous mode [ 62.887386][ T6436] hsr_slave_1: entered promiscuous mode [ 62.891488][ T6436] debugfs: 'hsr0' already exists in 'hsr' [ 62.896935][ T6436] Cannot create hsr debugfs directory [ 62.902383][ T6489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=6489 comm=syz.0.151 [ 62.918755][ T40] audit: type=1400 audit(1764932407.471:352): avc: denied { read open } for pid=6497 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.927916][ T40] audit: type=1400 audit(1764932407.471:353): avc: denied { getattr } for pid=6497 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.938486][ T40] audit: type=1400 audit(1764932407.481:354): avc: denied { add_name } for pid=6493 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.947469][ T40] audit: type=1400 audit(1764932407.481:355): avc: denied { create } for pid=6493 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.957237][ T40] audit: type=1400 audit(1764932407.481:356): avc: denied { write } for pid=6493 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.968589][ T40] audit: type=1400 audit(1764932407.481:357): avc: denied { append } for pid=6493 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.007027][ T40] audit: type=1400 audit(1764932407.561:358): avc: denied { remove_name } for pid=6501 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.017925][ T40] audit: type=1400 audit(1764932407.561:359): avc: denied { unlink } for pid=6501 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.099483][ T1151] hsr_slave_0: left promiscuous mode [ 63.103048][ T1151] hsr_slave_1: left promiscuous mode [ 63.105953][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.109222][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.114764][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.117904][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.134415][ T1151] veth1_macvtap: left promiscuous mode [ 63.136982][ T1151] veth0_macvtap: left promiscuous mode [ 63.140077][ T1151] veth1_vlan: left promiscuous mode [ 63.142374][ T1151] veth0_vlan: left promiscuous mode [ 63.172019][ T1026] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.217590][ T40] audit: type=1400 audit(1764932407.771:360): avc: denied { ioctl } for pid=6514 comm="syz.0.156" path="socket:[11689]" dev="sockfs" ino=11689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.223282][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 63.261951][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.344596][ T1026] usb 6-1: New USB device found, idVendor=1604, idProduct=800b, bcdDevice=44.1f [ 63.347826][ T1026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.350366][ T1026] usb 6-1: Product: syz [ 63.352438][ T1026] usb 6-1: Manufacturer: syz [ 63.353943][ T1026] usb 6-1: SerialNumber: syz [ 63.362310][ T1026] usb 6-1: config 0 descriptor?? [ 63.411979][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 63.415800][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.418746][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 63.423013][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.429082][ T9] usb 7-1: config 0 descriptor?? [ 63.464783][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 63.497059][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 63.572970][ T6020] usb 6-1: USB disconnect, device number 2 [ 63.731089][ T6516] hsr_slave_1 (unregistering): left promiscuous mode [ 63.771517][ T6436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.779337][ T6436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.786157][ T6436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.793979][ T6436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.854545][ T9] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 63.862493][ T5946] Bluetooth: hci0: command 0x0419 tx timeout [ 63.867476][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.881995][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.890168][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.893331][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.906586][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.909701][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.929980][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 63.954264][ T6436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.967321][ T6532] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.969882][ T6532] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.973664][ T6532] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.976291][ T6532] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 64.014020][ T5946] Bluetooth: hci1: command 0x0419 tx timeout [ 64.014034][ T5945] Bluetooth: hci3: command 0x0419 tx timeout [ 64.015869][ T6532] omfs: Invalid superblock (0) [ 64.049456][ T6504] i2c i2c-2: unsupported multi-msg i2c transaction [ 64.054770][ T9] usb 7-1: USB disconnect, device number 2 [ 64.092295][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.096281][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.116009][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.173448][ T5946] Bluetooth: hci2: command tx timeout [ 64.179278][ T6550] bridge0: entered promiscuous mode [ 64.181221][ T6550] macsec1: entered promiscuous mode [ 64.310263][ T6436] veth0_vlan: entered promiscuous mode [ 64.315369][ T6436] veth1_vlan: entered promiscuous mode [ 64.336957][ T6436] veth0_macvtap: entered promiscuous mode [ 64.350736][ T6436] veth1_macvtap: entered promiscuous mode [ 64.359319][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.365346][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.372080][ T1151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.375725][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.379914][ T1151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.382882][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.423440][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.426733][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.432534][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'. [ 64.455876][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.458376][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.619626][ T6590] loop2: detected capacity change from 0 to 7 [ 64.632155][ T5938] Dev loop2: unable to read RDB block 7 [ 64.634393][ T5938] loop2: unable to read partition table [ 64.636762][ T5938] loop2: partition table beyond EOD, truncated [ 64.653118][ T6590] Dev loop2: unable to read RDB block 7 [ 64.655275][ T6590] loop2: unable to read partition table [ 64.663612][ T6590] loop2: partition table beyond EOD, truncated [ 64.667064][ T6590] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 64.722146][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 64.725743][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 64.733767][ T6601] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 64.807252][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.811953][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.817698][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.821077][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.829775][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.832887][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.835986][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.839638][ T5347] ldm_validate_partition_table(): Disk read failed. [ 64.842209][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.845350][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.848428][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.851510][ T5347] Dev loop2: unable to read RDB block 0 [ 64.863908][ T5347] loop2: unable to read partition table [ 64.866235][ T5347] loop2: partition table beyond EOD, truncated [ 65.221954][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.281147][ T6634] ptrace attach of "/syz-executor exec"[5935] was attempted by "/syz-executor exec"[6634] [ 65.290210][ T6634] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 65.373651][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 65.378264][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 65.381426][ T9] usb 6-1: config 0 has no interface number 0 [ 65.383894][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 65.387442][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 65.391416][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.398732][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.404734][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 65.412167][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.420948][ T9] usb 6-1: config 0 descriptor?? [ 65.425790][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 65.694140][ T6655] xt_limit: Overflow, try lower: 271964/0 [ 65.715091][ T6002] usb 6-1: USB disconnect, device number 3 [ 65.720904][ T6002] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 65.860677][ T6664] netlink: 'syz.4.188': attribute type 10 has an invalid length. [ 65.863239][ T6664] __nla_validate_parse: 2 callbacks suppressed [ 65.863247][ T6664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.188'. [ 65.874059][ T6664] team0: Port device geneve0 added [ 65.905634][ T6667] netlink: 120 bytes leftover after parsing attributes in process `syz.4.189'. [ 65.911611][ T6667] netlink: 64 bytes leftover after parsing attributes in process `syz.4.189'. [ 65.914547][ T6667] nbd: socks must be embedded in a SOCK_ITEM attr [ 65.919067][ T6667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 65.922953][ T6668] netlink: 120 bytes leftover after parsing attributes in process `syz.4.189'. [ 65.947574][ T5946] Bluetooth: hci0: command 0x0419 tx timeout [ 66.113166][ T5946] Bluetooth: hci3: command 0x0419 tx timeout [ 66.126303][ T5946] Bluetooth: hci1: command 0x0419 tx timeout [ 66.181336][ T6684] futex_wake_op: syz.0.194 tries to shift op by -1; fix this program [ 66.228408][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 66.236528][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 66.277994][ T5946] Bluetooth: hci2: command tx timeout [ 66.435687][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.436660][ T6709] SELinux: policydb magic number 0x7379732f does not match expected magic number 0xf97cff8c [ 66.441231][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.442691][ T6709] SELinux: failed to load policy [ 66.448722][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.448965][ T6709] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 66.452532][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.457012][ T62] Bluetooth: (null): Invalid header checksum [ 66.567947][ T75] Bluetooth: (null): Invalid header checksum [ 66.669640][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.680481][ T75] Bluetooth: (null): Invalid header checksum [ 66.793596][ T1146] Bluetooth: (null): Invalid header checksum [ 66.827058][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.832733][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.836179][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.840319][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.843246][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.851236][ T9] usb 5-1: config 0 descriptor?? [ 66.906865][ T1149] Bluetooth: (null): Invalid header checksum [ 67.068078][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 67.070032][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.077161][ T6002] IPVS: starting estimator thread 0... [ 67.083283][ T9] usb 5-1: USB disconnect, device number 4 [ 67.184778][ T6721] IPVS: using max 44 ests per chain, 105600 per kthread [ 67.231872][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'. [ 67.268085][ T29] net_ratelimit: 17 callbacks suppressed [ 67.268102][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.011337][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.120428][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.123808][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.127195][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.130671][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.133555][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.266039][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 68.319288][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.321726][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.324002][ T6759] bridge_slave_0: entered allmulticast mode [ 68.326932][ T6759] bridge_slave_0: entered promiscuous mode [ 68.330652][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.333002][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.335261][ T6759] bridge_slave_1: entered allmulticast mode [ 68.338067][ T6759] bridge_slave_1: entered promiscuous mode [ 68.347421][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.353951][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.360947][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.382261][ T6759] team0: Port device team_slave_0 added [ 68.387026][ T6759] team0: Port device team_slave_1 added [ 68.400632][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.402867][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.411547][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.416149][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.418468][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.426765][ T5945] Bluetooth: hci2: command tx timeout [ 68.428980][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.461965][ T6759] hsr_slave_0: entered promiscuous mode [ 68.465160][ T6759] hsr_slave_1: entered promiscuous mode [ 68.582727][ T6759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.588378][ T6759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.592557][ T6759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.598920][ T6759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.634849][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.638393][ T6759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.642270][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.645336][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.679560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034604400: rx timeout, send abort [ 68.684342][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034607400: rx timeout, send abort [ 68.688334][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888034604400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 68.688508][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 68.688518][ T40] audit: type=1400 audit(1765456701.150:405): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 68.695124][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888034607400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 68.699005][ T40] audit: type=1400 audit(1765456701.160:406): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.718270][ T40] audit: type=1400 audit(1765456701.160:407): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.718988][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.725097][ T40] audit: type=1400 audit(1765456701.160:408): avc: denied { add_name } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.725121][ T40] audit: type=1400 audit(1765456701.160:409): avc: denied { create } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.725141][ T40] audit: type=1400 audit(1765456701.160:410): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.725161][ T40] audit: type=1400 audit(1765456701.160:411): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.725183][ T40] audit: type=1400 audit(1765456701.179:412): avc: denied { getopt } for pid=6776 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.725764][ T6779] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.220'. [ 68.725765][ T6783] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.220'. [ 68.772171][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.811485][ T40] audit: type=1400 audit(1765456701.267:413): avc: denied { write } for pid=6790 comm="syz.2.223" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.823468][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.824246][ T40] audit: type=1400 audit(1765456701.267:414): avc: denied { open } for pid=6790 comm="syz.2.223" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.828672][ T6794] IPVS: Error connecting to the multicast addr [ 68.850338][ T6792] IPVS: Error connecting to the multicast addr [ 68.896231][ T6795] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 68.923981][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.940087][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.942321][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.959847][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.962137][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.146659][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.158623][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.255184][ T6840] usb usb8: usbfs: process 6840 (syz.0.230) did not claim interface 0 before use [ 69.278480][ T6759] veth0_vlan: entered promiscuous mode [ 69.298356][ T6759] veth1_vlan: entered promiscuous mode [ 69.322882][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.329833][ T6759] veth0_macvtap: entered promiscuous mode [ 69.344395][ T6759] veth1_macvtap: entered promiscuous mode [ 69.352586][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.359143][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.369759][ T1146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.372622][ T1146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.378810][ T1146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.390801][ T1146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.405770][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.459609][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.462979][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.497370][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.500668][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.576148][ T6873] syzkaller1: entered promiscuous mode [ 69.578052][ T6873] syzkaller1: entered allmulticast mode [ 70.219506][ T5945] Bluetooth: hci1: command tx timeout [ 70.324972][ T6943] random: crng reseeded on system resumption [ 70.348816][ T6944] macsec0: entered promiscuous mode [ 70.351313][ T6944] macsec0: entered allmulticast mode [ 70.353694][ T6944] veth1_macvtap: entered allmulticast mode [ 70.472255][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.477210][ T6953] tmpfs: Bad value for 'mpol' [ 70.480186][ T6953] Device name not specified. [ 70.480186][ T6953] [ 70.539213][ T5945] Bluetooth: hci2: command tx timeout [ 70.558914][ T6966] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 70.567044][ T6966] CIFS mount error: No usable UNC path provided in device string! [ 70.567044][ T6966] [ 70.570379][ T6966] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 70.586002][ T6959] hsr_slave_1 (unregistering): left promiscuous mode [ 70.788832][ T6977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.835204][ T6982] capability: warning: `syz.2.273' uses 32-bit capabilities (legacy support in use) [ 70.909346][ T6973] ip6erspan0: entered promiscuous mode [ 70.915672][ T6973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6973 comm=syz.0.270 [ 70.924782][ T6994] macsec1: entered promiscuous mode [ 70.926641][ T6994] macsec1: entered allmulticast mode [ 71.409850][ T7016] __nla_validate_parse: 9 callbacks suppressed [ 71.409861][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.282'. [ 71.452165][ T7018] veth0_to_bridge: entered promiscuous mode [ 71.454868][ T7017] veth0_to_bridge: left promiscuous mode [ 71.499377][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.531188][ T7022] sctp: [Deprecated]: syz.4.285 (pid 7022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.531188][ T7022] Use struct sctp_sack_info instead [ 71.764734][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 71.768239][ T7046] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 72.178818][ T6022] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 72.203687][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.206357][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.209700][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.212254][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.214688][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.217387][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.220585][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.223102][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.225549][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.228091][ T7074] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 72.308771][ T5945] Bluetooth: hci1: command tx timeout [ 72.331728][ T6022] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 72.334703][ T6022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.337385][ T6022] usb 10-1: Product: syz [ 72.338986][ T6022] usb 10-1: Manufacturer: syz [ 72.340559][ T6022] usb 10-1: SerialNumber: syz [ 72.370726][ T7079] "syz.2.306" (7079) uses obsolete ecb(arc4) skcipher [ 72.389364][ T6020] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.539841][ T838] net_ratelimit: 1 callbacks suppressed [ 72.539859][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.551512][ T6020] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.555017][ T6020] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.558214][ T6020] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.562774][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.567250][ T7071] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.572158][ T6020] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.596375][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.621030][ T5945] Bluetooth: hci2: command tx timeout [ 72.632696][ T7087] input: syz0 as /devices/virtual/input/input6 [ 72.633307][ T6022] rtl8150 10-1:1.0: couldn't reset the device [ 72.637665][ T6022] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 72.647626][ T6022] usb 10-1: USB disconnect, device number 2 [ 72.691539][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.730718][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.791562][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 72.818879][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 72.821901][ T7071] nbd: device at index 64 is going down [ 72.885956][ T5944] udevd[5944]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 72.902852][ T5938] udevd[5938]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 73.015305][ T62] bridge_slave_1: left allmulticast mode [ 73.018509][ T62] bridge_slave_1: left promiscuous mode [ 73.022159][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.027939][ T62] bridge_slave_0: left allmulticast mode [ 73.030764][ T62] bridge_slave_0: left promiscuous mode [ 73.032871][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.108485][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 73.131369][ T6022] usb 5-1: USB disconnect, device number 5 [ 73.279109][ T7122] netlink: 60 bytes leftover after parsing attributes in process `syz.5.316'. [ 73.368706][ T47] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.465758][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.470545][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.474133][ T62] bond0 (unregistering): Released all slaves [ 73.520184][ T47] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 73.523871][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.528782][ T47] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 73.532718][ T47] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 73.536136][ T47] usb 9-1: Manufacturer: syz [ 73.544769][ T47] usb 9-1: config 0 descriptor?? [ 73.578928][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.599052][ T47] rc_core: IR keymap rc-hauppauge not found [ 73.601622][ T47] Registered IR keymap rc-empty [ 73.606771][ T47] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 73.615574][ T47] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input7 [ 73.746046][ T7139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.750313][ T7139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.754150][ T7139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.757293][ T7139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.757634][ T6019] usb 9-1: USB disconnect, device number 2 [ 73.763605][ T7139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.862883][ T62] hsr_slave_0: left promiscuous mode [ 73.867389][ T62] hsr_slave_1: left promiscuous mode [ 73.873699][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.876965][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.885446][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.887911][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.900730][ T62] veth1_macvtap: left promiscuous mode [ 73.902604][ T62] veth0_macvtap: left promiscuous mode [ 74.081655][ T1025] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.159903][ T62] team0 (unregistering): Port device team_slave_1 removed [ 74.188244][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 74.188256][ T40] audit: type=1400 audit(1765456706.604:452): avc: denied { ioctl } for pid=7157 comm="syz.5.324" path="socket:[18024]" dev="sockfs" ino=18024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.201750][ T62] team0 (unregistering): Port device team_slave_0 removed [ 74.248682][ T1025] usb 7-1: Using ep0 maxpacket: 8 [ 74.252305][ T1025] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.257052][ T1025] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.261746][ T1025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.267953][ T1025] usb 7-1: config 0 descriptor?? [ 74.475959][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.482356][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.482713][ T1025] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 74.528765][ T7165] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 74.533582][ T7165] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 74.537890][ T7165] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 74.565531][ T7139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.619522][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.735904][ T1026] usb 7-1: USB disconnect, device number 3 [ 74.858997][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.939401][ T7202] hfs: can't find a HFS filesystem on dev sr0 [ 74.994447][ T7208] ip6erspan0: entered promiscuous mode [ 74.997926][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.335'. [ 74.997995][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.335'. [ 75.029034][ T60] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 75.032930][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.036552][ T60] usb 5-1: Product: syz [ 75.038384][ T60] usb 5-1: Manufacturer: syz [ 75.043248][ T60] usb 5-1: SerialNumber: syz [ 75.051074][ T60] usb 5-1: config 0 descriptor?? [ 75.070701][ T40] audit: type=1400 audit(1765456707.494:453): avc: denied { getopt } for pid=7214 comm="syz.5.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.260216][ T6019] usb 5-1: USB disconnect, device number 6 [ 75.260669][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.365026][ T40] audit: type=1400 audit(1765456707.784:454): avc: denied { shutdown } for pid=7242 comm="syz.5.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.421394][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.344'. [ 75.471036][ T40] audit: type=1400 audit(1765456707.894:455): avc: denied { connect } for pid=7260 comm="syz.5.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.482856][ T40] audit: type=1400 audit(1765456707.904:456): avc: denied { ioctl } for pid=7265 comm="syz.2.348" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.488493][ T7268] overlayfs: overlapping lowerdir path [ 75.506659][ T40] audit: type=1400 audit(1765456707.924:457): avc: denied { read write } for pid=7264 comm="syz.4.347" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.516770][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.349'. [ 75.520660][ T40] audit: type=1400 audit(1765456707.924:458): avc: denied { open } for pid=7264 comm="syz.4.347" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.752015][ T40] audit: type=1400 audit(1765456708.174:459): avc: denied { bind } for pid=7290 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.860014][ T40] audit: type=1400 audit(1765456708.284:460): avc: denied { connect } for pid=7306 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.889637][ T7307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.960867][ T40] audit: type=1400 audit(1765456964.383:461): avc: denied { listen } for pid=7312 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 75.989417][ T5945] Bluetooth: hci1: command tx timeout [ 76.071459][ T7329] 9pnet_fd: Insufficient options for proto=fd [ 76.328709][ T6020] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.393703][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.395871][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.468777][ T6020] usb 5-1: device descriptor read/64, error -71 [ 76.491305][ T7356] __nla_validate_parse: 3 callbacks suppressed [ 76.491315][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.370'. [ 76.501015][ T7356] geneve2: entered promiscuous mode [ 76.502723][ T7356] geneve2: entered allmulticast mode [ 76.549282][ T7366] fuse: Bad value for 'fd' [ 76.615643][ T7377] "syz.5.377" (7377) uses obsolete ecb(arc4) skcipher [ 76.618509][ T7377] trusted_key: syz.5.377 sent an empty control message without MSG_MORE. [ 76.625329][ T7377] binder: 7376:7377 ioctl ae80 0 returned -22 [ 76.683592][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 76.686782][ T7385] chnl_net:caif_netlink_parms(): no params data found [ 76.718793][ T6020] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 76.734889][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 76.737959][ T7390] chnl_net:caif_netlink_parms(): no params data found [ 76.848745][ T6020] usb 5-1: device descriptor read/64, error -71 [ 76.972402][ T6020] usb usb5-port1: attempt power cycle [ 77.016773][ T7408] 9pnet_fd: Insufficient options for proto=fd [ 77.085243][ T7412] trusted_key: encrypted_key: key user:syz not found [ 77.136253][ T7415] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.143429][ T7415] overlayfs: conflicting options: userxattr,metacopy=on [ 77.149330][ T7417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.152501][ T7417] overlayfs: conflicting options: userxattr,metacopy=on [ 77.193230][ T5945] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 77.197330][ T5946] Bluetooth: hci3: hardware error 0x06 [ 77.199204][ T5945] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 77.199247][ T5945] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 77.199325][ T5945] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 77.312140][ T6020] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.330730][ T6020] usb 5-1: device descriptor read/8, error -71 [ 77.491899][ T7438] netlink: 32 bytes leftover after parsing attributes in process `syz.5.393'. [ 77.494938][ T7437] netlink: 32 bytes leftover after parsing attributes in process `syz.5.393'. [ 77.548783][ T7435] pimreg: entered allmulticast mode [ 77.578768][ T6020] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 77.583494][ T7444] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 77.599450][ T6020] usb 5-1: device descriptor read/8, error -71 [ 77.631553][ T7435] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.392'. [ 77.636004][ T7435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.392'. [ 77.661052][ T9] net_ratelimit: 3 callbacks suppressed [ 77.661068][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.720133][ T6020] usb usb5-port1: unable to enumerate USB device [ 77.741313][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.000393][ T7481] bond0: (slave rose0): Enslaving as an active interface with an up link [ 78.127687][ T7489] bond0: (slave caif0): Error: Device type is different from other slaves [ 78.128315][ T7490] netlink: 88 bytes leftover after parsing attributes in process `syz.4.410'. [ 78.191759][ T7494] netlink: 56 bytes leftover after parsing attributes in process `syz.4.411'. [ 78.208801][ T838] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 78.380557][ T838] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.384310][ T838] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.388569][ T838] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.392339][ T838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.606353][ T838] usb 10-1: GET_CAPABILITIES returned 0 [ 78.608212][ T838] usbtmc 10-1:16.0: can't read capabilities [ 78.689558][ T7512] bond1: entered promiscuous mode [ 78.752798][ T7519] JFS: charset not found [ 78.778932][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.789656][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.822403][ T1025] usb 10-1: USB disconnect, device number 3 [ 79.164557][ T7535] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 79.251172][ T7529] cgroup: Unknown subsys name 'cpuset' [ 79.258808][ T5946] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 79.418557][ T838] hid-generic 0002:0002:0006.0003: unknown main item tag 0x1 [ 79.427165][ T838] hid-generic 0002:0002:0006.0003: unknown main item tag 0x5 [ 79.430891][ T838] hid-generic 0002:0002:0006.0003: unknown main item tag 0x0 [ 79.435220][ T838] hid-generic 0002:0002:0006.0003: item fetching failed at offset 25/29 [ 79.440481][ T838] hid-generic 0002:0002:0006.0003: probe with driver hid-generic failed with error -22 [ 79.487634][ T7562] validate_nla: 48 callbacks suppressed [ 79.487650][ T7562] netlink: 'syz.0.427': attribute type 5 has an invalid length. [ 79.500219][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 79.508794][ T7562] nbd: illegal input index 1879048192 [ 79.583961][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 79.583971][ T40] audit: type=1400 audit(1765456968.003:470): avc: denied { execute } for pid=7572 comm="syz.0.431" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.701634][ T7573] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 79.769068][ T60] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 79.825512][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.852905][ T40] audit: type=1400 audit(1765456968.283:471): avc: denied { setattr } for pid=7597 comm="syz.4.436" name="ttyS3" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 79.940663][ T60] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 79.943882][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.946704][ T60] usb 10-1: Product: syz [ 79.948515][ T60] usb 10-1: Manufacturer: syz [ 79.952202][ T60] usb 10-1: SerialNumber: syz [ 79.963976][ T60] usb 10-1: config 0 descriptor?? [ 80.007997][ T7614] vxfs: unable to read disk superblock at 1 [ 80.019462][ T7614] vxfs: unable to read disk superblock at 8 [ 80.021553][ T7614] vxfs: can't find superblock. [ 80.062415][ T40] audit: type=1400 audit(1765456968.483:472): avc: denied { mount } for pid=7606 comm="syz.4.438" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 80.161223][ C3] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 80.165368][ C3] sr 2:0:0:0: [sr0] tag#11 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 80.172544][ T47] usb 10-1: USB disconnect, device number 4 [ 80.183481][ T40] audit: type=1400 audit(1765456968.603:473): avc: denied { unmount } for pid=6436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 80.263701][ T7654] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 80.281112][ T40] audit: type=1400 audit(1765456968.703:474): avc: denied { setopt } for pid=7656 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 80.361301][ T7660] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 80.532022][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.535157][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.540029][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.544439][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.575459][ T40] audit: type=1400 audit(1765456968.993:475): avc: denied { bind } for pid=7679 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.620117][ T40] audit: type=1400 audit(1765456969.043:476): avc: denied { ioctl } for pid=7681 comm="syz.0.454" path="socket:[19235]" dev="sockfs" ino=19235 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.677572][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.680566][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.683454][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.687916][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.691421][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.130877][ T40] audit: type=1400 audit(1765456969.553:477): avc: denied { listen } for pid=7717 comm="syz.5.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 81.206528][ T7730] erspan2: entered promiscuous mode [ 81.212114][ T7731] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 81.245764][ T7738] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 81.251401][ T7743] hpfs: hpfs_map_sector(): read error [ 81.296551][ T40] audit: type=1400 audit(1765456969.713:478): avc: denied { write } for pid=7748 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.313592][ T40] audit: type=1400 audit(1765456969.733:479): avc: denied { rename } for pid=7747 comm="syz.2.472" name="file0" dev="9p" ino=71827911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.560694][ T7777] __nla_validate_parse: 11 callbacks suppressed [ 81.560712][ T7777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.477'. [ 81.567570][ T7777] tipc: Invalid UDP bearer configuration [ 81.567614][ T7777] tipc: Enabling of bearer rejected, failed to enable media [ 81.828861][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 81.978779][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 81.983102][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.985852][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 81.989032][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 81.991979][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.995092][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.998126][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1160, setting to 1024 [ 82.002143][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.005550][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.009992][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.012984][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.017335][ T9] usb 9-1: config 0 descriptor?? [ 82.019643][ T7773] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.100850][ T7835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.485'. [ 82.232492][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.243586][ T9] usb 9-1: USB disconnect, device number 3 [ 82.251547][ T9] usblp0: removed [ 82.444315][ T7895] bridge_slave_0: left allmulticast mode [ 82.446820][ T7895] bridge_slave_0: left promiscuous mode [ 82.449677][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.455208][ T7895] bridge_slave_1: left allmulticast mode [ 82.457623][ T7895] bridge_slave_1: left promiscuous mode [ 82.461496][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.467690][ T7899] netlink: 'syz.5.498': attribute type 1 has an invalid length. [ 82.474732][ T7895] bond0: (slave bond_slave_0): Releasing backup interface [ 82.479684][ T7895] bond0: (slave bond_slave_1): Releasing backup interface [ 82.487978][ T7895] team0: Port device team_slave_0 removed [ 82.497234][ T7895] team0: Port device team_slave_1 removed [ 82.500151][ T7895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.502585][ T7895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.508171][ T7895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.510975][ T7895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.538864][ T838] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 82.678883][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 82.681686][ T838] usb 5-1: device descriptor read/64, error -71 [ 82.687548][ T7920] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 82.770582][ T7939] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 82.815750][ T7944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.509'. [ 82.842441][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 82.846617][ T29] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.850250][ T29] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.853762][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.857554][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.862563][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.865705][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1160, setting to 1024 [ 82.870149][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.874219][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.879761][ T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.882810][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.887892][ T29] usb 9-1: config 0 descriptor?? [ 82.891878][ T7773] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 82.918821][ T838] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 82.948856][ T917] net_ratelimit: 273 callbacks suppressed [ 82.948867][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.068718][ T838] usb 5-1: device descriptor read/64, error -71 [ 83.068749][ T60] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 83.096893][ T29] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 83.189691][ T838] usb usb5-port1: attempt power cycle [ 83.231763][ T60] usb 7-1: not running at top speed; connect to a high speed hub [ 83.236198][ T60] usb 7-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.242231][ T60] usb 7-1: config 1 interface 0 has no altsetting 0 [ 83.247461][ T60] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 83.251435][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.254801][ T60] usb 7-1: Product:   [ 83.256608][ T60] usb 7-1: Manufacturer: 먃솎 [ 83.259034][ T60] usb 7-1: SerialNumber: “銪⅓芡Ῠ屆쥤å™î—‡ã–à¡ä¼‰ [ 83.300140][ C3] usblp0: nonzero read bulk status received: -71 [ 83.309111][ T7773] Bluetooth: hci0: load_link_keys: too big key_count value 65317 [ 83.313477][ T7773] omfs: Invalid superblock (0) [ 83.320249][ T1025] usb 9-1: USB disconnect, device number 4 [ 83.327687][ T1025] usblp0: removed [ 83.558781][ T838] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 83.590176][ T838] usb 5-1: device descriptor read/8, error -71 [ 83.828876][ T838] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 83.850321][ T838] usb 5-1: device descriptor read/8, error -71 [ 83.896264][ T7981] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.900001][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.928798][ T7985] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 83.931690][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 83.936492][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 83.940004][ T5946] Bluetooth: hci2: Malformed LE Event: 0x0b [ 83.947327][ T7988] vhci_hcd: connection closed [ 83.949279][ T75] vhci_hcd: stop threads [ 83.955292][ T75] vhci_hcd: release socket [ 83.957523][ T75] vhci_hcd: disconnect device [ 83.970385][ T838] usb usb5-port1: unable to enumerate USB device [ 83.979897][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.999634][ T60] usb 7-1: USB disconnect, device number 4 [ 84.003215][ T5938] udevd[5938]: setting mode of /dev/bus/usb/007/004 to 020664 failed: No such file or directory [ 84.009512][ T5938] udevd[5938]: setting owner of /dev/bus/usb/007/004 to uid=0, gid=7 failed: No such file or directory [ 84.447269][ T8021] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 84.530710][ T8029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.534536][ T8029] block device autoloading is deprecated and will be removed. [ 84.641557][ T8021] md: could not open device unknown-block(0,0). [ 84.643860][ T8021] md: md_import_device returned -6 [ 84.699449][ T5946] Bluetooth: hci2: command 0x0401 tx timeout [ 84.701809][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.744598][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.744613][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.745538][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.745557][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.795385][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 84.799093][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.523'. [ 84.834341][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.840632][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.011016][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 85.011030][ T40] audit: type=1400 audit(1765456973.433:505): avc: denied { bpf } for pid=8084 comm="syz.5.527" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.022052][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.038863][ T40] audit: type=1400 audit(1765456973.453:506): avc: denied { perfmon } for pid=8084 comm="syz.5.527" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.083050][ T8104] fuse: Unknown parameter '00000000000000000000003ÿÿ' [ 85.106797][ T8106] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 85.111613][ T8106] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 85.115998][ T8106] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 85.133592][ T8109] IPv6: addrconf: prefix option has invalid lifetime [ 85.218297][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 85.254280][ T8131] netlink: 92 bytes leftover after parsing attributes in process `syz.5.536'. [ 85.344902][ T8145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.992700][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.059314][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.147939][ T8137] syz.5.537 (8137): drop_caches: 2 [ 86.180656][ T8153] netlink: 'syz.4.540': attribute type 83 has an invalid length. [ 86.354779][ T40] audit: type=1400 audit(1765456974.773:507): avc: denied { block_suspend } for pid=8170 comm="syz.4.544" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.536996][ T8186] netlink: 52 bytes leftover after parsing attributes in process `syz.0.545'. [ 86.626502][ T8193] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 86.633176][ T1461] cfg80211: failed to load regulatory.db [ 86.683904][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.549'. [ 86.693412][ T8213] ip6t_rpfilter: unknown options [ 86.714187][ T8225] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 86.739555][ T40] audit: type=1400 audit(1765456975.163:508): avc: denied { write } for pid=8233 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.821419][ T40] audit: type=1400 audit(1765456975.243:509): avc: denied { read write } for pid=8245 comm="syz.5.557" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.833377][ T40] audit: type=1400 audit(1765456975.253:510): avc: denied { open } for pid=8245 comm="syz.5.557" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.892641][ T8255] can: request_module (can-proto-0) failed. [ 87.123470][ T40] audit: type=1400 audit(1765456975.543:511): avc: denied { search } for pid=8289 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.138744][ T40] audit: type=1400 audit(1765456975.543:512): avc: denied { search } for pid=8289 comm="rm" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.146208][ T40] audit: type=1400 audit(1765456975.543:513): avc: denied { search } for pid=8289 comm="rm" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.153395][ T40] audit: type=1400 audit(1765456975.543:514): avc: denied { setopt } for pid=8285 comm="syz.5.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.181428][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.564'. [ 87.185060][ T8293] netlink: 'syz.5.564': attribute type 7 has an invalid length. [ 87.188079][ T8293] netlink: 'syz.5.564': attribute type 8 has an invalid length. [ 87.191238][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.564'. [ 87.280374][ T8325] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 87.346926][ T8327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.350680][ T8327] block device autoloading is deprecated and will be removed. [ 87.468300][ T8325] md: could not open device unknown-block(0,0). [ 87.472022][ T8325] md: md_import_device returned -6 [ 87.686768][ T8359] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 87.699772][ T47] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.828756][ T6022] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 87.849282][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 87.852478][ T47] usb 7-1: too many configurations: 10, using maximum allowed: 8 [ 87.860163][ T47] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 87.862606][ T47] usb 7-1: can't read configurations, error -61 [ 87.947076][ T8373] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.988952][ T47] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 87.994799][ T6022] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 87.998343][ T6022] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 88.002105][ T6022] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 88.005920][ T6022] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 88.010745][ T6022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 88.014942][ T6022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 88.019079][ T6022] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 88.027760][ T6022] usb 10-1: string descriptor 0 read error: -22 [ 88.031943][ T6022] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 88.035610][ T6022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.042162][ T6022] usb 10-1: config 0 descriptor?? [ 88.047789][ T6022] hub 10-1:0.0: bad descriptor, ignoring hub [ 88.051180][ T6022] hub 10-1:0.0: probe with driver hub failed with error -5 [ 88.058506][ T6022] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input9 [ 88.148779][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 88.149422][ T917] net_ratelimit: 2 callbacks suppressed [ 88.149433][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.150919][ T47] usb 7-1: too many configurations: 10, using maximum allowed: 8 [ 88.158419][ T47] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 88.161143][ T47] usb 7-1: can't read configurations, error -61 [ 88.163279][ T47] usb usb7-port1: attempt power cycle [ 88.241624][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 88.251874][ T1026] usb 10-1: USB disconnect, device number 5 [ 88.399762][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 88.422812][ T8408] team0: Port device team_slave_1 removed [ 88.497819][ T8408] IPv6: sit1: Disabled Multicast RS [ 88.501189][ T8408] sit1: entered allmulticast mode [ 88.509172][ T47] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 88.530522][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 88.533152][ T47] usb 7-1: too many configurations: 10, using maximum allowed: 8 [ 88.536977][ T47] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 88.539971][ T47] usb 7-1: can't read configurations, error -61 [ 88.688747][ T47] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 88.710003][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 88.712393][ T47] usb 7-1: too many configurations: 10, using maximum allowed: 8 [ 88.716807][ T47] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 88.719394][ T47] usb 7-1: can't read configurations, error -61 [ 88.721603][ T47] usb usb7-port1: unable to enumerate USB device [ 89.179398][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.846860][ T8451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.850033][ T8451] block device autoloading is deprecated and will be removed. [ 89.942369][ T8448] md: could not open device unknown-block(0,0). [ 89.945315][ T8448] md: md_import_device returned -6 [ 89.982802][ T8469] program syz.5.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.988883][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.017488][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'. [ 90.022698][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 90.022707][ T40] audit: type=1400 audit(1765456978.443:608): avc: denied { create } for pid=8474 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.030575][ T8475] netlink: 'syz.5.587': attribute type 1 has an invalid length. [ 90.031050][ T40] audit: type=1400 audit(1765456978.453:609): avc: denied { setopt } for pid=8474 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.119339][ T40] audit: type=1400 audit(1765456978.543:610): avc: denied { bind } for pid=8485 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.138375][ T40] audit: type=1400 audit(1765456978.543:611): avc: denied { setopt } for pid=8485 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.148737][ T40] audit: type=1400 audit(1765456978.543:612): avc: denied { accept } for pid=8485 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.174282][ T40] audit: type=1400 audit(1765456978.583:613): avc: denied { read } for pid=8490 comm="syz.0.591" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.188235][ T40] audit: type=1400 audit(1765456978.583:614): avc: denied { open } for pid=8490 comm="syz.0.591" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.195914][ T40] audit: type=1400 audit(1765456978.593:615): avc: denied { sys_module } for pid=8487 comm="syz.4.589" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.205226][ T8491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8491 comm=syz.0.591 [ 90.206339][ T40] audit: type=1400 audit(1765456978.623:616): avc: denied { write } for pid=8495 comm="syz.5.592" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.222559][ T40] audit: type=1400 audit(1765456978.623:617): avc: denied { write } for pid=8495 comm="syz.5.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.227534][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.240613][ T8491] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 90.402396][ T8517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.405752][ T8517] block device autoloading is deprecated and will be removed. [ 90.469848][ T8527] 9p: Unknown Cache mode or invalid value mmapsec [ 90.469848][ T8527] stack depth [ 90.469848][ T8527] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 90.469848][ T8527] [ 90.496296][ T8511] md: could not open device unknown-block(0,0). [ 90.498424][ T8511] md: md_import_device returned -6 [ 90.647229][ T8527] bridge0: entered allmulticast mode [ 90.690017][ T8573] input: syz1 as /devices/virtual/input/input10 [ 90.732687][ T8582] sp0: Synchronizing with TNC [ 90.737613][ T8582] netlink: 1 bytes leftover after parsing attributes in process `syz.2.608'. [ 90.771469][ T8581] [U] è [ 90.828797][ T47] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 90.905001][ T8591] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 91.002246][ T47] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 91.007146][ T8595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.010467][ T47] usb 9-1: can't read configurations, error -22 [ 91.013133][ T8595] block device autoloading is deprecated and will be removed. [ 91.079655][ T8593] md: could not open device unknown-block(0,0). [ 91.081854][ T8593] md: md_import_device returned -6 [ 91.099402][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.148736][ T47] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 91.259348][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.301351][ T47] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 91.303878][ T47] usb 9-1: can't read configurations, error -22 [ 91.306118][ T47] usb usb9-port1: attempt power cycle [ 91.503677][ T8623] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 91.547703][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 91.578047][ T8630] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.582130][ T8630] block device autoloading is deprecated and will be removed. [ 91.668823][ T47] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 91.682777][ T8623] md: could not open device unknown-block(0,0). [ 91.684989][ T8623] md: md_import_device returned -6 [ 91.692568][ T47] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 91.695152][ T47] usb 9-1: can't read configurations, error -22 [ 91.818832][ T47] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 91.843418][ T47] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 91.846068][ T47] usb 9-1: can't read configurations, error -22 [ 91.848331][ T47] usb usb9-port1: unable to enumerate USB device [ 91.998801][ T1026] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 92.153922][ T8671] tap0: tun_chr_ioctl cmd 1074025677 [ 92.156308][ T8671] tap0: linktype set to 517 [ 92.162415][ T1026] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 92.165986][ T1026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.166675][ T8671] ISOFS: Unable to identify CD-ROM format. [ 92.170521][ T1026] usb 5-1: Product: syz [ 92.170538][ T1026] usb 5-1: Manufacturer: syz [ 92.170552][ T1026] usb 5-1: SerialNumber: syz [ 92.172977][ T1026] usb 5-1: config 0 descriptor?? [ 92.298885][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.382211][ T8696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 92.384977][ T8696] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.386993][ T8698] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 92.390409][ T8696] vhci_hcd vhci_hcd.0: Device attached [ 92.393648][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.397691][ T8699] vhci_hcd: connection closed [ 92.397892][ T1151] vhci_hcd: stop threads [ 92.401478][ T1151] vhci_hcd: release socket [ 92.403277][ T1151] vhci_hcd: disconnect device [ 92.404105][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.408507][ T47] usb 5-1: USB disconnect, device number 15 [ 92.469793][ T8715] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.473832][ T8715] block device autoloading is deprecated and will be removed. [ 92.569446][ T8698] md: could not open device unknown-block(0,0). [ 92.571571][ T8698] md: md_import_device returned -6 [ 92.684908][ T8732] input: syz0 as /devices/virtual/input/input11 [ 92.957544][ T8774] program syz.2.639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.008104][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 93.055597][ T8790] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 93.101896][ T8790] bridge_slave_0: left allmulticast mode [ 93.103724][ T8790] bridge_slave_0: left promiscuous mode [ 93.106107][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.112338][ T8790] bridge_slave_1: left allmulticast mode [ 93.114199][ T8790] bridge_slave_1: left promiscuous mode [ 93.116578][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.123175][ T8790] bond0: (slave bond_slave_0): Releasing backup interface [ 93.135842][ T8790] bond0: (slave bond_slave_1): Releasing backup interface [ 93.153330][ T8790] team0: Port device team_slave_0 removed [ 93.160266][ T8790] team0: Port device team_slave_1 removed [ 93.163885][ T8790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.180365][ T8790] netlink: 'syz.5.642': attribute type 10 has an invalid length. [ 93.189285][ T8790] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 93.199177][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.205934][ T8790] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.262144][ T8829] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.268988][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.273742][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.287105][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 93.290796][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 93.345030][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.371017][ T8844] tmpfs: User quota inode hardlimit too large. [ 93.407712][ T8836] dlm: no locking on control device [ 93.421669][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.425862][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.430313][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.432876][ T8850] pimreg: left allmulticast mode [ 93.435226][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.448823][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.513385][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.517426][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.572532][ T8865] netlink: 'syz.0.652': attribute type 12 has an invalid length. [ 93.575104][ T8865] netlink: 'syz.0.652': attribute type 29 has an invalid length. [ 93.577568][ T8865] netlink: 148 bytes leftover after parsing attributes in process `syz.0.652'. [ 93.584603][ T8865] netlink: 'syz.0.652': attribute type 2 has an invalid length. [ 93.587873][ T8865] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 93.591469][ T8865] netlink: 15 bytes leftover after parsing attributes in process `syz.0.652'. [ 93.624602][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.653'. [ 93.630948][ T8874] dlm: no locking on control device [ 93.694467][ T8880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.940667][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 94.082386][ T8913] 9pnet: Unknown protocol version 9p20\++} [ 94.195861][ T8929] @: renamed from vlan0 (while UP) [ 94.254611][ T8939] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.257740][ T8939] 8021q: VLANs not supported on gre0 [ 94.656823][ T8957] veth0_to_bridge: entered promiscuous mode [ 94.661738][ T8954] veth0_to_bridge: left promiscuous mode [ 94.689432][ T8962] IPv6: syztnl0: Disabled Multicast RS [ 94.756309][ T8970] fuse: Bad value for 'fd' [ 94.778859][ T5946] Bluetooth: hci0: command 0x0419 tx timeout [ 94.778951][ T60] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.784162][ T60] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 94.827137][ T8975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8975 comm=syz.2.680 [ 94.987613][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.687'. [ 95.102096][ T9019] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.105976][ T9020] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 95.109724][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 95.140562][ T9027] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 95.155210][ T9027] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 95.157690][ T9027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.693'. [ 95.167101][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 95.167110][ T40] audit: type=1400 audit(1765456983.583:822): avc: denied { remount } for pid=9006 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.871812][ T40] audit: type=1400 audit(1765456984.293:823): avc: denied { unmount } for pid=6436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 95.878850][ T47] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 95.902739][ T40] audit: type=1400 audit(1765456984.323:824): avc: denied { unlink } for pid=9080 comm="syz.2.698" name="#d" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.911539][ T40] audit: type=1400 audit(1765456984.323:825): avc: denied { mount } for pid=9080 comm="syz.2.698" name="/" dev="overlay" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.918142][ T40] audit: type=1804 audit(1765456984.333:826): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.698" name="/newroot/190/bus/file0" dev="overlay" ino=1036 res=1 errno=0 [ 95.926225][ T40] audit: type=1400 audit(1765456984.343:827): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.951041][ T40] audit: type=1400 audit(1765456984.373:828): avc: denied { read append } for pid=9082 comm="syz.4.697" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.970225][ T40] audit: type=1400 audit(1765456984.383:829): avc: denied { open } for pid=9082 comm="syz.4.697" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.978282][ T40] audit: type=1400 audit(1765456984.383:830): avc: denied { ioctl } for pid=9082 comm="syz.4.697" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.040343][ T47] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 96.043836][ T47] usb 5-1: config 1 has no interface number 0 [ 96.046145][ T47] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.058784][ T47] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.065012][ T40] audit: type=1400 audit(1765456984.483:831): avc: denied { bind } for pid=9108 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.065054][ T47] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 96.073260][ T5946] Bluetooth: hci2: unexpected event for opcode 0x080f [ 96.086102][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.089639][ T47] usb 5-1: Product: syz [ 96.091424][ T47] usb 5-1: Manufacturer: syz [ 96.098869][ T47] usb 5-1: SerialNumber: syz [ 96.111693][ T9074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.120226][ T47] usb 5-1: Expected 3 endpoints, found: 1 [ 96.460891][ T9150] netlink: 'syz.4.710': attribute type 10 has an invalid length. [ 96.468724][ T47] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 96.470223][ T9150] syz_tun: entered promiscuous mode [ 96.486120][ T9150] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.533332][ T8744] usb 5-1: USB disconnect, device number 16 [ 96.628719][ T47] usb 10-1: Using ep0 maxpacket: 16 [ 96.634543][ T47] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.638077][ T47] usb 10-1: config 0 has no interfaces? [ 96.640766][ T47] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.644585][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.651049][ T47] usb 10-1: config 0 descriptor?? [ 96.855185][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.859522][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.863496][ T1461] usb 10-1: USB disconnect, device number 6 [ 96.868721][ T6020] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 96.938766][ T60] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 96.948694][ T60] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 97.023186][ T6020] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 97.026401][ T6020] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.029490][ T6020] usb 9-1: Product: syz [ 97.031439][ T6020] usb 9-1: Manufacturer: syz [ 97.033253][ T6020] usb 9-1: SerialNumber: syz [ 97.037162][ T6020] usb 9-1: config 0 descriptor?? [ 97.243456][ T6020] usb 9-1: USB disconnect, device number 9 [ 97.432840][ T9239] program syz.2.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.511923][ T9246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9246 comm=syz.2.722 [ 97.830685][ T9314] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 97.840265][ T9313] IPVS: stopping master sync thread 9314 ... [ 98.051440][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.549429][ T917] net_ratelimit: 16 callbacks suppressed [ 98.549441][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.588490][ T9407] __nla_validate_parse: 11 callbacks suppressed [ 98.588502][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 98.683060][ T9475] openvswitch: netlink: IP tunnel dst address not specified [ 98.739325][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 98.868895][ T47] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 98.886824][ T9522] xt_l2tp: missing protocol rule (udp|l2tpip) [ 98.998784][ T47] usb 7-1: device descriptor read/64, error -71 [ 99.028936][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.029126][ T60] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 99.033029][ T60] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 99.084791][ T9566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17664 sclass=netlink_route_socket pid=9566 comm=syz.4.760 [ 99.238807][ T47] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 99.368773][ T47] usb 7-1: device descriptor read/64, error -71 [ 99.478912][ T47] usb usb7-port1: attempt power cycle [ 99.578977][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.665883][ T1461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.670902][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.819019][ T47] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 99.820405][ T9657] binder: 9656:9657 ioctl c0306201 200000000d00 returned -14 [ 99.840680][ T47] usb 7-1: device descriptor read/8, error -71 [ 99.861810][ T9664] program syz.5.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.948149][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.775'. [ 100.034321][ T9685] netlink: 348 bytes leftover after parsing attributes in process `syz.5.777'. [ 100.040320][ T9685] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 100.042582][ T9685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.045200][ T9685] vhci_hcd vhci_hcd.0: Device attached [ 100.080095][ T47] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 100.099114][ T47] usb 7-1: device descriptor read/8, error -71 [ 100.180387][ T9690] /dev/sr0: Can't open blockdev [ 100.208961][ T47] usb usb7-port1: unable to enumerate USB device [ 100.219265][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.222789][ T1461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.226633][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.239133][ T9686] vhci_hcd: connection closed [ 100.240545][ T62] vhci_hcd: stop threads [ 100.243804][ T62] vhci_hcd: release socket [ 100.247320][ T62] vhci_hcd: disconnect device [ 100.298749][ T917] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 100.301300][ T917] usb 47-1: enqueue for inactive port 0 [ 100.368772][ T917] vhci_hcd: vhci_device speed not set [ 100.484738][ T9717] netlink: 296 bytes leftover after parsing attributes in process `syz.0.785'. [ 100.488291][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 100.488301][ T40] audit: type=1400 audit(1765456988.903:883): avc: denied { listen } for pid=9716 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.640104][ T9657] binder: 9656:9657 ioctl c0306201 200000000040 returned -14 [ 100.710982][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.729407][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 100.733052][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 100.738802][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 100.792493][ T40] audit: type=1400 audit(1765456989.213:884): avc: denied { write } for pid=9742 comm="syz.4.791" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.804315][ T9735] openvswitch: netlink: Unknown key attributes 2 [ 100.805126][ T40] audit: type=1400 audit(1765456989.233:885): avc: denied { map } for pid=9742 comm="syz.4.791" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.857128][ T9751] bond1: Unable to set down delay as MII monitoring is disabled [ 100.867151][ T9751] bond1 (unregistering): Released all slaves [ 100.927073][ T9834] netlink: 80 bytes leftover after parsing attributes in process `syz.0.797'. [ 101.014092][ T9849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.800'. [ 101.029387][ T40] audit: type=1400 audit(1765456989.453:886): avc: denied { getopt } for pid=9843 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.058002][ T9855] tmpfs: User quota block hardlimit too large. [ 101.115460][ T40] audit: type=1400 audit(1765456989.543:887): avc: denied { bind } for pid=9872 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.169505][ T9882] 9pnet_fd: Insufficient options for proto=fd [ 101.226581][ T9887] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 101.252856][ T40] audit: type=1400 audit(1765456989.673:888): avc: denied { name_bind } for pid=9879 comm="syz.0.808" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 101.383511][ T40] audit: type=1400 audit(1765456989.803:889): avc: denied { connect } for pid=9902 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.390313][ T40] audit: type=1400 audit(1765456989.803:890): avc: denied { bind } for pid=9902 comm="syz.4.811" lport=40671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.396769][ T40] audit: type=1400 audit(1765456989.803:891): avc: denied { name_bind } for pid=9902 comm="syz.4.811" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 101.412460][ T40] audit: type=1400 audit(1765456989.803:892): avc: denied { node_bind } for pid=9902 comm="syz.4.811" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 101.520952][ T9912] netlink: 'syz.4.813': attribute type 2 has an invalid length. [ 101.553913][ T9925] syz.5.816 uses old SIOCAX25GETINFO [ 101.785130][ T9949] random: crng reseeded on system resumption [ 101.891229][ T9937] kvm: MONITOR instruction emulated as NOP! [ 102.238441][T10007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=10007 comm=syz.5.831 [ 102.243230][T10007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10007 comm=syz.5.831 [ 102.269653][ T838] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 102.327805][T10017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10017 comm=syz.5.833 [ 102.340876][T10017] evm: overlay not supported [ 102.441887][ T838] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 102.444762][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.447346][ T838] usb 7-1: Product: syz [ 102.448785][ T838] usb 7-1: Manufacturer: syz [ 102.450256][ T838] usb 7-1: SerialNumber: syz [ 102.454527][ T838] usb 7-1: config 0 descriptor?? [ 102.659599][ T838] usb 7-1: USB disconnect, device number 13 [ 103.158663][ T9996] comedi comedi0: reset error (fatal) [ 103.291036][T10081] unsupported nlmsg_type 40 [ 103.295468][T10082] syz.0.841 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.296745][T10081] netlink: 'syz.2.843': attribute type 3 has an invalid length. [ 103.403222][T10088] Illegal XDP return value 80877248 on prog (id 222) dev syz_tun, expect packet loss! [ 103.648818][ T6019] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 103.670761][T10120] __nla_validate_parse: 10 callbacks suppressed [ 103.670773][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 103.739306][T10130] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9232 sclass=netlink_xfrm_socket pid=10130 comm=syz.5.853 [ 103.745067][T10130] netlink: 64 bytes leftover after parsing attributes in process `syz.5.853'. [ 103.775648][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'. [ 103.828773][ T6019] usb 7-1: Using ep0 maxpacket: 8 [ 103.828929][ T29] net_ratelimit: 8 callbacks suppressed [ 103.828940][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.832859][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 103.836884][ T6019] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.839876][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.844560][ T6019] usb 7-1: config 0 descriptor?? [ 103.901224][T10149] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.856'. [ 103.909412][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.913177][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.919058][ T1461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.250038][ T6019] usbhid 7-1:0.0: can't add hid device: -71 [ 104.252016][ T6019] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 104.265731][ T6019] usb 7-1: USB disconnect, device number 14 [ 104.301374][T10173] trusted_key: encrypted_key: insufficient parameters specified [ 104.307603][T10174] trusted_key: encrypted_key: insufficient parameters specified [ 104.461132][T10200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.866'. [ 104.465315][T10200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 104.467954][T10200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.471310][T10200] vhci_hcd vhci_hcd.0: Device attached [ 104.477639][T10200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 104.479917][T10200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.484742][T10200] vhci_hcd vhci_hcd.0: Device attached [ 104.487600][T10203] vhci_hcd: connection closed [ 104.488325][T10201] vhci_hcd: connection closed [ 104.488668][ T62] vhci_hcd: stop threads [ 104.498743][ T62] vhci_hcd: release socket [ 104.500590][ T62] vhci_hcd: disconnect device [ 104.504004][ T62] vhci_hcd: stop threads [ 104.505709][ T62] vhci_hcd: release socket [ 104.507517][ T62] vhci_hcd: disconnect device [ 104.831014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.833971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.836827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.858926][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.868837][ T838] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 104.961897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.022666][ T838] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 105.026458][ T838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.035526][ T838] usb 10-1: Product: syz [ 105.039754][ T838] usb 10-1: Manufacturer: syz [ 105.042469][ T838] usb 10-1: SerialNumber: syz [ 105.046435][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 105.047557][ T838] usb 10-1: config 0 descriptor?? [ 105.135945][T10245] netlink: 292 bytes leftover after parsing attributes in process `syz.4.873'. [ 105.221598][T10253] netlink: 'syz.4.875': attribute type 30 has an invalid length. [ 105.249557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.266020][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.276252][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.285812][ T838] usb 10-1: USB disconnect, device number 7 [ 105.359782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 105.395735][T10310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.568880][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 105.642661][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 105.642672][ T40] audit: type=1400 audit(1765456994.063:920): avc: denied { getattr } for pid=10320 comm="syz.0.878" name="/" dev="9p" ino=71827885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.643380][T10321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.659356][ T40] audit: type=1400 audit(1765456994.083:921): avc: denied { read } for pid=10320 comm="syz.0.878" name="file0" dev="overlay" ino=71827913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 105.698796][ T29] usb 9-1: device descriptor read/64, error -71 [ 105.791794][T10330] xt_SECMARK: invalid mode: 2 [ 105.864810][ T40] audit: type=1400 audit(1765456994.283:922): avc: denied { mount } for pid=10343 comm="syz.0.884" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.880182][ T40] audit: type=1400 audit(1765456994.303:923): avc: denied { write } for pid=10348 comm="syz.5.885" path="socket:[26609]" dev="sockfs" ino=26609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.899590][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.904886][ T40] audit: type=1400 audit(1765456994.323:924): avc: denied { setopt } for pid=10353 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.938215][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.938220][ T40] audit: type=1400 audit(1765456994.353:925): avc: denied { setopt } for pid=10379 comm="syz.5.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.946767][ T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 105.952875][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.955136][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.957331][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.963377][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.967118][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.968314][ T40] audit: type=1400 audit(1765456994.393:926): avc: denied { write } for pid=10385 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.969698][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.977224][ T40] audit: type=1400 audit(1765456994.393:927): avc: denied { setopt } for pid=10385 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.977616][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.977633][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.984985][ T40] audit: type=1400 audit(1765456994.403:928): avc: denied { execute } for pid=10385 comm="syz.2.888" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 105.986098][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 105.996758][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.887'. [ 105.997152][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.006170][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.008352][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.010633][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.012983][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.015125][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.017337][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.026581][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.028984][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.031131][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.033340][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.035560][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.037725][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.040858][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.043014][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.045250][T10384] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 106.071042][ T40] audit: type=1400 audit(1765456994.493:929): avc: denied { write } for pid=10405 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.088738][ T29] usb 9-1: device descriptor read/64, error -71 [ 106.198932][ T29] usb usb9-port1: attempt power cycle [ 106.288689][ T1461] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 106.308918][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.441902][ T1461] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.444844][ T1461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.447412][ T1461] usb 5-1: Product: syz [ 106.449073][ T1461] usb 5-1: Manufacturer: syz [ 106.450639][ T1461] usb 5-1: SerialNumber: syz [ 106.453641][ T1461] usb 5-1: config 0 descriptor?? [ 106.538881][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 106.559342][ T29] usb 9-1: device descriptor read/8, error -71 [ 106.659317][ T917] usb 5-1: USB disconnect, device number 17 [ 106.798897][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 106.819239][ T29] usb 9-1: device descriptor read/8, error -71 [ 106.929337][ T29] usb usb9-port1: unable to enumerate USB device [ 106.939096][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.134152][T10455] program syz.5.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.191828][T10458] KVM: debugfs: duplicate directory 10458-4 [ 107.234840][T10471] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 107.237339][T10471] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.904'. [ 107.595238][T10495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10495 comm=syz.0.911 [ 107.601158][T10495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=10495 comm=syz.0.911 [ 107.606566][T10495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=10495 comm=syz.0.911 [ 107.611924][T10495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10495 comm=syz.0.911 [ 107.750130][ T47] ================================================================== [ 107.750140][ T47] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 107.750174][ T47] Write of size 8 at addr ffffc900053523e0 by task kworker/2:1/47 [ 107.750183][ T47] [ 107.750190][ T47] CPU: 2 UID: 0 PID: 47 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.750204][ T47] Tainted: [L]=SOFTLOCKUP [ 107.750208][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.750216][ T47] Workqueue: events_power_efficient fb_flashcursor [ 107.750232][ T47] Call Trace: [ 107.750236][ T47] [ 107.750240][ T47] dump_stack_lvl+0x116/0x1f0 [ 107.750261][ T47] print_report+0xcd/0x630 [ 107.750271][ T47] ? __virt_addr_valid+0x81/0x610 [ 107.750285][ T47] ? sys_imageblit+0x1a6f/0x1e60 [ 107.750296][ T47] kasan_report+0xe0/0x110 [ 107.750305][ T47] ? sys_imageblit+0x1a6f/0x1e60 [ 107.750318][ T47] sys_imageblit+0x1a6f/0x1e60 [ 107.750332][ T47] ? __pfx_sys_imageblit+0x10/0x10 [ 107.750348][ T47] ? trace_kmalloc+0x2b/0xb0 [ 107.750368][ T47] ? __kmalloc_noprof+0x34f/0x8f0 [ 107.750381][ T47] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 107.750396][ T47] soft_cursor+0x524/0xa10 [ 107.750407][ T47] bit_cursor+0xe8c/0x17e0 [ 107.750418][ T47] ? __pfx_bit_cursor+0x10/0x10 [ 107.750429][ T47] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.750444][ T47] ? get_color+0x1da/0x450 [ 107.750458][ T47] ? __pfx_bit_cursor+0x10/0x10 [ 107.750466][ T47] fb_flashcursor+0x333/0x420 [ 107.750481][ T47] process_one_work+0x9ba/0x1b20 [ 107.750499][ T47] ? __pfx_process_one_work+0x10/0x10 [ 107.750516][ T47] ? assign_work+0x1a0/0x250 [ 107.750531][ T47] worker_thread+0x6c8/0xf10 [ 107.750548][ T47] ? __kthread_parkme+0x19e/0x250 [ 107.750560][ T47] ? __pfx_worker_thread+0x10/0x10 [ 107.750575][ T47] kthread+0x3c5/0x780 [ 107.750589][ T47] ? __pfx_kthread+0x10/0x10 [ 107.750603][ T47] ? rcu_is_watching+0x12/0xc0 [ 107.750616][ T47] ? __pfx_kthread+0x10/0x10 [ 107.750630][ T47] ret_from_fork+0x983/0xb10 [ 107.750642][ T47] ? __pfx_ret_from_fork+0x10/0x10 [ 107.750654][ T47] ? __switch_to+0x7af/0x10d0 [ 107.750668][ T47] ? __pfx_kthread+0x10/0x10 [ 107.750682][ T47] ret_from_fork_asm+0x1a/0x30 [ 107.750701][ T47] [ 107.750705][ T47] [ 107.750708][ T47] The buggy address belongs to a vmalloc virtual mapping [ 107.750716][ T47] Memory state around the buggy address: [ 107.750722][ T47] ffffc90005352280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.750729][ T47] ffffc90005352300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.750736][ T47] >ffffc90005352380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.750742][ T47] ^ [ 107.750748][ T47] ffffc90005352400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.750755][ T47] ffffc90005352480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.750760][ T47] ================================================================== [ 107.750766][ T47] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.750774][ T47] CPU: 2 UID: 0 PID: 47 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.750788][ T47] Tainted: [L]=SOFTLOCKUP [ 107.750791][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.750798][ T47] Workqueue: events_power_efficient fb_flashcursor [ 107.750813][ T47] Call Trace: [ 107.750816][ T47] [ 107.750820][ T47] dump_stack_lvl+0x3d/0x1f0 [ 107.750835][ T47] vpanic+0x640/0x6f0 [ 107.750848][ T47] panic+0xca/0xd0 [ 107.750860][ T47] ? __pfx_panic+0x10/0x10 [ 107.750874][ T47] ? check_panic_on_warn+0x1f/0xb0 [ 107.750888][ T47] check_panic_on_warn+0xab/0xb0 [ 107.750902][ T47] end_report+0x107/0x160 [ 107.750910][ T47] kasan_report+0xee/0x110 [ 107.750920][ T47] ? sys_imageblit+0x1a6f/0x1e60 [ 107.750934][ T47] sys_imageblit+0x1a6f/0x1e60 [ 107.750947][ T47] ? __pfx_sys_imageblit+0x10/0x10 [ 107.750963][ T47] ? trace_kmalloc+0x2b/0xb0 [ 107.750978][ T47] ? __kmalloc_noprof+0x34f/0x8f0 [ 107.750990][ T47] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 107.751004][ T47] soft_cursor+0x524/0xa10 [ 107.751016][ T47] bit_cursor+0xe8c/0x17e0 [ 107.751026][ T47] ? __pfx_bit_cursor+0x10/0x10 [ 107.751037][ T47] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.751052][ T47] ? get_color+0x1da/0x450 [ 107.751066][ T47] ? __pfx_bit_cursor+0x10/0x10 [ 107.751074][ T47] fb_flashcursor+0x333/0x420 [ 107.751089][ T47] process_one_work+0x9ba/0x1b20 [ 107.751106][ T47] ? __pfx_process_one_work+0x10/0x10 [ 107.751123][ T47] ? assign_work+0x1a0/0x250 [ 107.751137][ T47] worker_thread+0x6c8/0xf10 [ 107.751154][ T47] ? __kthread_parkme+0x19e/0x250 [ 107.751166][ T47] ? __pfx_worker_thread+0x10/0x10 [ 107.751181][ T47] kthread+0x3c5/0x780 [ 107.751195][ T47] ? __pfx_kthread+0x10/0x10 [ 107.751209][ T47] ? rcu_is_watching+0x12/0xc0 [ 107.751221][ T47] ? __pfx_kthread+0x10/0x10 [ 107.751235][ T47] ret_from_fork+0x983/0xb10 [ 107.751246][ T47] ? __pfx_ret_from_fork+0x10/0x10 [ 107.751258][ T47] ? __switch_to+0x7af/0x10d0 [ 107.751272][ T47] ? __pfx_kthread+0x10/0x10 [ 107.751285][ T47] ret_from_fork_asm+0x1a/0x30 [ 107.751303][ T47] [ 107.752116][ T47] Kernel Offset: disabled VM DIAGNOSIS: 11:00:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010003 RBX=0000000000000000 RCX=ffffffff8161b033 RDX=ffff88802c53c980 RSI=ffffffff8161b07b RDI=ffffffff93b11fe0 RBP=ffff88806a420000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27623fc R10=ffffffff93b11fe7 R11=00000000ffffffff R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b07c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557b914500 ffffffff 00c00000 GS =0000 ffff8880d6960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1ec41156c0 CR3=00000000503e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000316e61637876 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007374617473 5f74726f705f626c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4314d04992b9d99e addea8eb4cb6ce0c 20a19e55a2a40004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 528dfc54d1bf377b 87a045325ad1d632 49517039bff884a4 4ced641b6de9371b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65046a8ae6763798 d9f821fbe5abb05b b5241e2ce0bd1457 5fb48d7a790e784d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0dd95d1f0f25d3d3 bc34a74cfad0eda0 92da177b7d7ec242 a661a0019164fb5d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7726b1a403391b4 986d98c627dd7344 16fc354a10e862b7 ff92ffd5c5fb6536 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eda1a9e136f8c89b 23cc9b590c4b2da1 dc0b57db07a9ba50 20116ffe18e43d46 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8161b033 RDX=ffff88801de9a4c0 RSI=ffffffff8161b07b RDI=ffffffff93b11fe0 RBP=ffff88806a520000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27623fc R10=ffffffff93b11fe7 R11=00000000ffffffff R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b07c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000a000 CR3=0000000028111000 CR4=00350ef0 DR0=0000000000000001 DR1=fffffffffffffff3 DR2=0000000000000000 DR3=000000000000000a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2955fb30 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc398615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc39861505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc398615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc39861506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3986150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3986151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f4acefaad37be6b be9025acace32444 345a7c6b58ef8827 54fe1fb3436f7592 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 149b66b99c2189d6 e8842398016df983 dedffd720a68b3f0 933aa876fe4f532e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852bacd5 RDI=ffffffff9ae80e20 RBP=ffffffff9ae80de0 RSP=ffffc90000a0f2a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=000000000000002e R14=ffffffff9ae80de0 R15=ffffffff852bac70 RIP=ffffffff852bacff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35d46b CR3=0000000028111000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3994babf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc398615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc39861505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc398615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc39861506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3986150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3986151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010100 RBX=0000000000000000 RCX=ffffffff8161b033 RDX=ffff88801e2e24c0 RSI=ffffffff8161b07b RDI=ffffffff93b11fe0 RBP=ffff88806a720000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27623fc R10=ffffffff93b11fe7 R11=00000000ffffffff R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b07c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000050066000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8236ef50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd95ee151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000