last executing test programs: 1m31.574861991s ago: executing program 3 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c5a, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x9, {0xffffffff, 0x300, 0x300, 0x300}}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRESHEX=r0], 0x2c, 0x1) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400050000000000100004000000000020"], 0x24, 0x2) 1m31.520863587s ago: executing program 3 (id=194): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4080) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1009}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4080) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1009}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) 1m31.403529934s ago: executing program 3 (id=195): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={0x0, 0x10000, 0x1, [0x0, 0x8, 0x8, 0x200, 0x7], [0xffffffffffffffff, 0x2, 0x8cb, 0xfffffffffffffffb, 0x3, 0x4, 0x6, 0x101, 0x5d4ff7e8, 0x7fffffff, 0x5, 0x9, 0x3, 0xb556, 0x9eab, 0x6, 0xffffffff7fffffff, 0x8, 0x3, 0x101, 0x2, 0x5bb6, 0x2, 0x65, 0xff, 0x3, 0x8001, 0x2, 0x50e8, 0x1, 0x9c, 0xb0, 0x1, 0x8, 0x5, 0x3, 0x3, 0x125, 0x0, 0x3, 0x7d8ef185, 0x7, 0x100000001, 0x8000000000000000, 0x5, 0x8f400000000000, 0x6, 0xfffffffffffffffa, 0x9, 0x5, 0x1, 0xff, 0xffffffffffffffff, 0x0, 0x5, 0x8000, 0x3, 0x6, 0x1000, 0x3, 0x3, 0x0, 0x5, 0x1, 0x100000001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x8, 0x4, 0x8, 0x96d, 0x0, 0x6, 0x1, 0x7, 0x3, 0x5, 0x1, 0x4, 0x2, 0xd, 0x3, 0x2, 0x1, 0x8000, 0x1, 0x5, 0x100000001, 0x100000000, 0x6, 0xd, 0x1, 0x5, 0x80, 0x8, 0x9, 0xba84, 0x9f, 0x8000, 0x24ad, 0xc, 0x8, 0x10001, 0x5, 0x2, 0xb, 0x400, 0x10000, 0x6c8fbf24, 0x7fffffff, 0x8000000000000001, 0x80000001, 0x5, 0xff, 0x3, 0xffff, 0x9, 0x55]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000780)={r2, 0x9, 0xfffffffffffffffc}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mlockall(0x7) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00007db000/0x2000)=nil, 0x2000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) 1m31.327601231s ago: executing program 3 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040)) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000004c0)=[@wrmsr={0x1e, 0x20, {0x580, 0xb9}}, @uexit={0x0, 0x18}, @in_dx={0x82, 0x20, {0xeb66, 0x6}}, @wrmsr={0x1e, 0x20, {0x2a6, 0x5}}, @wr_crn={0x46, 0x20, {0x4, 0xffffffff}}, @in_dx={0x82, 0x20, {0x2fe7, 0x2}}, @wrmsr={0x1e, 0x20, {0x818, 0x100}}, @uexit={0x0, 0x18}, @wrmsr={0x1e, 0x20, {0xbc6, 0xffffffff}}, @wr_drn={0x6e, 0x20, {0x5, 0x8}}, @wr_drn={0x6e, 0x20, {0x0, 0x6}}, @wr_drn={0x6e, 0x20, {0x3, 0x6}}, @wr_drn={0x6e, 0x20, {0x1}}, @in_dx={0x82, 0x20, {0xa08a}}, @wr_drn={0x6e, 0x20, {0x6, 0x3}}, @out_dx={0xaa, 0x28, {0x2e2e, 0x4, 0x5a00}}, @code={0xa, 0x74, {"f2a566baf80cb838b6b680ef66bafc0c66b8790066efc74424005f000000c744240200000080ff2c2466b863000f00d8b9130800000f32b9800000c00f3235004000000f30440f20c0350f000000440f22c026646dc42190c6ab01000000b50f015e80"}}, @code={0xa, 0x67, {"66b81f008ed8894156440f0ef20f7080676c000000640fbf5f0066430f38811f66baf80cb81c22b884ef66bafc0c66b8ac7866ef673666470f3a22342b943e2e0f01cac74424009b000000c74424027e000000ff2c24"}}, @wr_drn={0x6e, 0x20, {0x1, 0x4b681e36}}, @cpuid={0x14, 0x18, {0x10003a, 0x1000}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0xd}], 0x33b}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r10, {0x8}}, './file1\x00'}) 1m31.157795214s ago: executing program 3 (id=199): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'pimreg0\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'pimreg0\x00'}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) 1m30.343781024s ago: executing program 3 (id=207): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000000c0)={0x6, 0x3, 0x5, 0x7}) 1m30.230853506s ago: executing program 32 (id=207): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000000c0)={0x6, 0x3, 0x5, 0x7}) 1m8.791442766s ago: executing program 2 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x4, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0xf8, 0xbc, ']', "bbef723f3dfc70cdc469ac20be17aca53fb041cf8173e1180eed"}}}}}, &(0x7f0000000040)={0x1, 0x3, [0x4ea, 0x447, 0x250, 0xaf2]}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x700}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m8.172345921s ago: executing program 2 (id=425): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, r3, 0x309, 0x2, 0x25dfdbfb, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f00000000c0)={0x40000000000000b0, [0x0, 0x0, 0x0]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, r3, 0x309, 0x2, 0x25dfdbfb, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f00000000c0)={0x40000000000000b0, [0x0, 0x0, 0x0]}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) 1m8.171963207s ago: executing program 2 (id=426): syz_emit_ethernet(0xfc0, &(0x7f0000001500)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010526", 0xf8a, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f, 0x19, "9df8869c24c505b7d471402a31e6ea98307116e5d84627360d9f4eed8e743b0a5631de7eb2af6781b38261e2ca88016e2bf001896cdfa7fc8170ab9adb87a391d8e02124fa9dfc4d572402ea66f17f88eeb6f25953faff57b27820bfe984332773e6f52bd686cf5e7bd0796180260e419b51620df7e8d9a8fc812c38cde15d9ae250850e519b044586e7bd0537f0b62ff3ee6e1b592140da9cef727f98361e77ad3c9c574dc00f3813d78ec38bf0639a73f5620eb2712015d316bf81edc0ee2334608a65cd2fa59aa2f8"}, {0x22, 0x5, "0e8ea79a6ce39825120e696373c2cb5b842a188554365fcc7635f93b6b0cf7183c1473add686df2b883aed0b5a"}, {0x18, 0x16, "164812996b35d1b9e2f009bfa0918189ad27dd4a3d46585c7d16ce907c5504011d36dea981a80b504f997c2ed526ad05711a33c9b09415e65278bdb063fd5588fc70a76509a5aa4aab42b570d3da4dc3da6880bc1677389dae6d0f72189dd3807350da1da304211d879a6b952cc3ae70ff339f7dc3891b890464a8f8e817e7dfb439eb3e220f99e7be4abd1954d0e48cbcb2f991a0669584e702c34c2675ed3952a32e09d61359fbc7edb7dfd1d1c780"}, {0x0, 0x11, "b5fbe47cdb0b36345cc09f83e901dae4e362a963a13d4e5a77cd4635f762afac9637356d83e8410668207a283af51ec73dcccd5e34b888c9d6caf39b588d14ba163d0397375dfb1cb3f3a525b67095c43745f91ac908c1af4a0e62cc0730bb558e8a52746023e8f17ff22a41f825a7acb5902c8b2983e30fa5c18e28bcbc5ef7151c720cb0bf141365"}, {0xe, 0x19, "37ee356bee650bdd6af02cea4cad621cf827ed7ecb805aac800dcc61eae89f6d389087b862cf9558a7a289b4b959ba78102a42520fabfcd675eb5da12d23af9b213046ebfe548c661623d918704b93e0e8c093bb33c345ed4ef134f209875aae46e8c5687fead9814b3add68478c4ca286bb4e3419e54c20df53b7c7f256093a0e04867445fd011a78cfad22ac7ad2db83e0648fe231839ae93cc75254879267f4327ef43aa4739e70f9578f96825c35f9642d3f4df76bd6ff7612674ae918944cceedccc72228c1"}, {0x5, 0x1b, "2890ab98d2047b0789f6e5e4ab99c79937d655f7876ca184567615000e9ac4aedcbeccbec4fa8ffeec4e3e94d0da137df21b2b6d4b16ae78bcb72d4f797d51192b56f4bf2922764899880660eedc0194bffc872df8a661bb891a4d118f560e11c5eaab7fe8e436799d26d5fda68bd1ef3763f9b93693a2a8282aab9b9962124857784bb5462c3d76113cc913796214e0f2f9ea8e6bde667578b5c1293ff8cc710816c5be206317edfa4b99e90e5ddc976669468bdd6cbbb350e24da20228c725f686fe97201078aaa5f9028fb68cd6e66610fe937a4c4e2d"}, {0x1f, 0xa, "0f078023085bc803dc3c68c0c4e6e790e139b1650b0dbd28073aae4a74e6b2d13e92eab598a25147b369a7d2585c1d562f2cc0b6b20c730e4236a6b856e36eb32ae0902a49e36d8c2cf4ef89c55cded5ba000000"}, {0x1f, 0x9, "87b62409876b32a091ad326971e24d0c74d96b20f59e34c1afef8d39b944eb7f0a49d314c3bbe43250158a11806d0784a37b9a3f3bd14e34b971a03cab740eb95caccb968bcf478e"}, {0x1, 0x160, "4362bd3c8fb53fdc0789108e678121349149537c2cf5fdc60f77fceb21d70c365ec022f9c38d8b29e06cdf40a74c768332ad46a1ee239dc7b69610779389deed18b78ac6ceaa432f4b76c017b744821e640510bb1ddca726d86ac74fd0914ead0f931b3d8d24ac2adc6ab6c60bcdc448eeb5beb3fba14e2e1c2ddc37215a41d70e535b8d9e5f9930e9f3f0a6a7d8bcf966a9edd02bcb79dca7129235edd89e256729533f2035057f6722923e16eb8067996328365535c510ba31f0c60829d8d91a991e872c3770d2544b3ddd7c1f35380575cd0b691477aa775d515a885f3e354b7576ef2d7ead8b551b08a50c127e21f15dfbb87ba8da007f2af2853064363b73fb079a419b719f4c3aaa799cc42cdbbbff19ea8b093390f633e0044e90a4977d2bd15add1bd2ff5bce7484191a7d6ef1e8db6f0a53e3993ba6578bbf9030adfccfd41b9f94ae6fb7eefa0a31ca1c809540e13562670d5677a2ef0ccdfd71c0947641d9ce973ebc07cb64b1dd3b6fb4238849dc66cd1c799ce4817b842c30db35e801579d09ff2ac6839723c3ffc7fc8b5e36a830a0876056df7aee3ec7e834a30ca3ef60e2584fc20d2290c96825ec5255c542f941891587e8469a99deee5ca40123ec1c3cc6a74a6b97fcd3c651df13c9e4c6596bca5b88eded8f252f89dd0b5dd1eb619940b861296ac569ca95e4eea259e4a2575e3eb69ffe753239066daab6b9daeff5e0afbb4cceee1ebd876483fab12ca4c807a440dde8dce20ea67ae730d9840b81a86851a5226d3e07d490178774a46fa0d6b631abe4fe95998784f3946375af462432cef418f7c76b043f66587c9fb22a63f6fd051d73205d0d5fe2537d71eba14415e08831568eef320309e8f26ecfcc5d4d3404b68588ea71ce7546820d6af1f6fde67b2428c8fbaf62897c8aef7b3bd1b5c1d6fa2baca1ecdfb31524045273d0d3d616f73232c0e64c3ab3c7c0cb070930ba895cf322171535806e925367a66b657f3eae52675d26dc1262b51f8e6b6be2d427a2b957159d5f336e568226f29bb34f78949567e129f087f82efdb7db75e7caf35f579e07f0fc0e41e27919a8d7c66148dd1461b2a0a0d1d2ed0f10b5069ae1ab13d617f696a2fea282de63159b5cef7dbb64fc1847abefb53b4398832c1fc5a300abcd7d3d20058d77a2221d2c2bd13a50f01013ba78e1ee4dde1d8946a45cc17a495cfda6783a6ef3bd3b23c9b030a87eb9384d38c95ffc3e097a1f313a48c08d7fe73287b02edb43cf89a1cbb81ca888d09f065863b650b58d604d8b32a43d07e4b9f9a8ab325d97298329aa88a4bce02bf5c9228220954b866c60ca4876c523c530a3817ac27b8d965809c410fc1e3b3a2f91cb39bec94bf8208320084a00b9337e98395cc513b952288e9631656c4a65b91e1128be69178623ad53f193c966d25c4f16ccfc2ae88edf102a38f5ed8428c0c4f34252d384dcbba3bd5eafa7e377f3500f44a2f5bf094cd65c510579a7e79c69d6aa6be268db492d702349dd0de09486f65209c1a19ddcd93b8e493069697562622bc35e711af9815be2cad0af82291781652f9bc83dd4fe3902f02bb09906e4622973eb9b978642c80a8e188461c8dec71ff93981498a228783df6b2ecb86bcc29e37a380b2706057fd6300a71d69268b4bf71ac564d3857f5a27bc35ce50bd380f03affd4a54e720a88dc12f0189032905d69d063727b076aad1a71cb1b462a68b63b4ea5c62b657f815b2a3c324a15f417f40d7b5ea178106846f29822f2efac2d84f02348efa4357076097f707a6fec53de36d6afaf4802a088bfc9893439c5080c4eab496e841e5c252e1a63fd5f973b1e427eb8327093d9c5ef94bd51a2d22a657144e74b7b83178a833fffc3ac90919c2658fcee4e1bf9bdd7274c2bd767d4b38bf587852c10681a8880770655f706da5d88bc2d148bc2ba8e51135cab852381caad8f2da981aad0402c8909d8660cbf5caffac219eb787497d817a0f8ab6d5357c19cdb7424d26df16fb48c4dcc82bae45a2cf9c8c2837b4f1b731249e6d3945f9e3ee1a29dc1ba10591ccf736737df66d386d1e9850500c7b674ec1cc890114a6815659eabe6b5e2603e43c12d566a68474fd2e6e73a09d8343ca7d04169235cd3803764925448b54e27cd7d92d207079865e3982e813e78c8dc029291e5a8869d9cac53df7f02c502c3c14bd5ecc0d5a43be5bf93d03fd8c10370b0fb83dfcdd486fa32f543d569178e30e76f23560aa3ddc0be81e9dc20eec1d0e6288723049893c22d6748901b0cfc4d88a73a733c79e69a38bb7f305d148cb64a8b143f182932f802ff7640e1fd861450e5a48f825f7ae4f2c9e9455eb9f316648f14334d1132d1c45e895942a12077062947876d258f309458b7d8f498c5eaaefa0279dc93f242b7e56f9e7371bcfb38acd080282cde1271c1a08cb3b0c762f20a95e198ef37b36282669d56e434615e1c6c2825e31a4dedcc92a9929adc0a7da4a78e659f4d4552bd27447bbed6955c8fb315799a1bd83d070e1795aa4a0b5e6dddc1dbace6e7ee110a943e81690ea2effbc60bf918a406f0e9e0cde058fe3a02113b76abdf915530ef0a7c1b1b1974d8ff815b1c85ff0aab3c366d9c0a6ddd14f42389538372062ef7f35ba15921bd3a06be09a437dbd4cdfff859a431260290a3792e75e87aa884d09d5ac111dc5d85a966bdd05ba39bdcc565e59f4f38e67b5b15c479aae6780a446c755e8d9fb6f61b4a9c39ff80edce0c60809ecd07eedadcd37cf4aabb40fc7340597b9f2be1a5c4600298b106de7a9ffdef86de58706c3e9b3da74a87a42ca1e0a93cba9fd8fec9e29183a151aedb06fe756e852d1cbb7fb3e9c2be9e62c03a9419472719c6f05f9be892890607e638765ffed1108c202402a3b88bbe65feb12e70b269bd62864d4495528ec07cf321d24ab36d85d73301363e116eb74ffdb6cc410c241a1b806c8972b68eb6889f4ac73ea8c2eb5aedfc4c64db53ea916ee3e17495598800bf1c0bcbff471ba0876d70cc27a3fbb3a2d29d5ba6508bbb43d0b50b1d758d0bef51791d5a5b981e78c4b96e5e41d2d7d165674b34da8ea8dfb23e7d73c036a819d165c9923a597861e6755b372f63b83e292fd3200c2ce8366e276d8cdc55af195e094d638ee366b03cd054d621e9b705e4ec893580c40654cb81eb659b2f4e24ebb0faa89c3d418d6200aa9c531f1eed3216f3c45575a02834599fa5d58b466442ece978f352e71a992f2cef31c603d96a3c2fdae530eb7774abf80cfa09cd5cb04c2f81dafd80168b74df48155bc7f877d623dd15e152d39078b67f24bba2435b2729485f4c73e2a749571d0691bec31ed218bffbd173bfd3c676053e1f7b1e0375e670b380e1af76798bbe90a7e5de70e7a8a2e7253cbb2bac02253646dbbf68ee96744a678c9524ae95641baf8f2d2ac824ecfbb0d8fd7330d48967b6abc762b083c123d529d5062fca87d1ad4b9c3d6ab95d14408860553216b468ecadcefc22d41b0be0fad83ec7dbaeb2dee642828c8f25de2768375d879176b28f6f506ca2ccd4e92ca0dbbaa1113a9e819aa94ab02a959f144795f9e75f282c1a153a27ce50f3454333bc88c4e86cadc4662337bfd18424444f6a5af29acc0b137bd8397cc4e0e1c3bb8b655422c6557a65fbf7edf37a197f2a21f724b189e7ee5a91db0959c52eb4cc59d215e74bac417711f744f9e7d6c20cae76b0907e26dd821e6ef774a1b603b7ac2623b54725ba4f9f10b73e623f298f92cdf72bf57bf32e3313164a277354286e8d666f7fab1d89dce5970ff52b8a65335175aab97e372ffba69d8ea3a3744013c4a1d99764c2a4a813c79bd7abc5440dc68ab5140fe25c6797f959f068b4d7e5e12169caa02c8f805c47c93496b734cb8d39e5413bcece47cbafe6eacdfc902cf0bbd5d3499a50c4b7b7d7976391fc630a3814e171469b7c0f045264e"}]}}}}}}, 0x0) 1m8.119172322s ago: executing program 2 (id=428): r0 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) accept$netrom(r2, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @rose, @bcast, @rose, @bcast, @default, @null, @bcast]}, &(0x7f0000000100)=0x48) getpeername$netrom(r2, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b63, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u8=0x0}}) 1m8.117403351s ago: executing program 2 (id=429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x20000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee00) setpriority(0x1, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1f0, r4, 0x220, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab2f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6f, 0x3, "db5b2b18faf0fda6c801740c382aa51274573f38f4466fdb072f1fc5b88d2ecf8d0e98a68a25edbd1b0002eff4b0b5aeb9c396d10379cf4aa39aacc55426218d804065e74f4b72b31ae284df1389bc6116cec3b70a9ce3b351b4add58c76a4a8d87a6396540c8beae74264"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "225e221fd6896bd90e84eef2daa3b54ed8063e7f6ae581a39c81"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b42bc50e3d1871cfe2c7fdb4e0abc8c30dde77be2017b59c13"}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x221}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x2) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x20000040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setuid(0xee00) (async) setpriority(0x1, 0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1f0, r4, 0x220, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab2f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6f, 0x3, "db5b2b18faf0fda6c801740c382aa51274573f38f4466fdb072f1fc5b88d2ecf8d0e98a68a25edbd1b0002eff4b0b5aeb9c396d10379cf4aa39aacc55426218d804065e74f4b72b31ae284df1389bc6116cec3b70a9ce3b351b4add58c76a4a8d87a6396540c8beae74264"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "225e221fd6896bd90e84eef2daa3b54ed8063e7f6ae581a39c81"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b42bc50e3d1871cfe2c7fdb4e0abc8c30dde77be2017b59c13"}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x221}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) socket$inet6(0xa, 0xa, 0x2) (async) 1m8.010350388s ago: executing program 2 (id=432): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000002c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7}, {0xe}, @broadcast, @from_mac, @random="1f4c3126096e", {0x2, 0x2}}, @random="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"}, 0x1d8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m3.306435207s ago: executing program 4 (id=482): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setreuid(0xee00, 0xee00) setreuid(0x0, 0xee01) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000020c0)=0x496, 0x4) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0xfffffffffffffeb5}, 0xffff}], 0x1, 0x2000, 0x0) 1m3.212137363s ago: executing program 4 (id=483): r0 = syz_io_uring_setup(0x3447, &(0x7f0000000100)={0x0, 0x8a, 0x400, 0x2, 0x314}, &(0x7f0000000000), &(0x7f0000000080)) signalfd4(r0, &(0x7f0000000180)={[0x9]}, 0x8, 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x40001, 0x86) write$binfmt_misc(r1, &(0x7f0000000040)="2d7ef2", 0x3) 1m3.211283728s ago: executing program 4 (id=484): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0xd, 0x7, 0x9}) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r7, 0x3) accept4(r7, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'pim6reg0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x0, 0xf9, "f263374904e02ffe3d5ca5984faebfe68130514e23570e35ff0300fd83c9d8da2f5bc9600285c50262e1b58f5bbd86472b81947215634360ebf3884c7d18c19d7c64b4bc59e9d9c92c63622752d8d60c31c0aece0a1abc29a60b0debd2c03a78d448a37ac02595118f641763cf6be079f7f2c0335a83acd2398736f88cf1f7571b6c8becf17c6cdc7edf77dbfb81bf429a937ad895200e8df3f1a49fa32a5505788690d631e1c148ee2feb6ee970296584a1c3632b2206dc5d25579663ae252b97e111ccf05f36ee6bcf536d022b8f7daf169b9c99d3818a6032753efb6c897e906cc323d591c439dd5c2be3dab93be33a94185124f18c420f"}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="7f5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xd9c, 0x0, r8, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x1a, &(0x7f0000000580)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9f8}, @map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xd61b70b7}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 1m2.249902095s ago: executing program 4 (id=490): setreuid(0xee01, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r1, r2, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000800)={0x90, 0x0, 0x0, {0x0, 0x2, 0x5, 0x1000, 0x9, 0x3, {0x6, 0x9, 0x10, 0x1c, 0x8, 0x2, 0x13e2, 0x1, 0xdd83, 0x4000, 0xff, r1, 0xee00, 0x5, 0x5f}}}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00070000000100000070000000000000000000", @ANYRES32=r5, @ANYBLOB="00050000000000000a000100aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r7 = getpid() r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x5, 0x4000, 0xff98, {0x3, 0x0, 0x1, 0xfffffffffffffffe, 0x3, 0x14, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, r11, 0x800, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000001240)={0x50, 0x0, r10, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r12 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r12, 0x401070ca, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000ac0)={0x11, 0x2, 0x0, "f78772b8b72b71a9340ae4c7caa29b4d6e0dceee2da304af885b3c302db04a7d"}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r14 = syz_pidfd_open(r7, 0x0) setns(r14, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m2.079024343s ago: executing program 4 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x4, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000040010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$isdn(0x22, 0x3, 0x11) getsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r6, {0xf, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xbf1dcb64ffce4437}, 0x27fe6e9aeca1b5e7) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_usb_connect(0x4, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000040010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$isdn(0x22, 0x3, 0x11) (async) getsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r6, {0xf, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xbf1dcb64ffce4437}, 0x27fe6e9aeca1b5e7) (async) 1m1.885030091s ago: executing program 4 (id=492): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073"], 0x5c}}, 0x0) (async) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb910021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000040012000a00ff150048035c3b61c1d67f6f94007134cf6efb80073f6a5aa8457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001252c330f973f4953d2a6823a45", 0xd8}], 0x1}, 0x4000044) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x10000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r4, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000002d40), 0x3, 0x0) preadv(r9, &(0x7f0000003f80)=[{&(0x7f0000002d80)=""/4096, 0x1000}], 0x1, 0x5, 0x7) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000096000a00"], 0x30}}, 0x0) (async) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010002, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',*']) 1m1.862244964s ago: executing program 33 (id=492): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073"], 0x5c}}, 0x0) (async) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb910021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000040012000a00ff150048035c3b61c1d67f6f94007134cf6efb80073f6a5aa8457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001252c330f973f4953d2a6823a45", 0xd8}], 0x1}, 0x4000044) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x10000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r4, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000002d40), 0x3, 0x0) preadv(r9, &(0x7f0000003f80)=[{&(0x7f0000002d80)=""/4096, 0x1000}], 0x1, 0x5, 0x7) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000096000a00"], 0x30}}, 0x0) (async) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010002, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',*']) 51.935781477s ago: executing program 34 (id=432): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000002c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7}, {0xe}, @broadcast, @from_mac, @random="1f4c3126096e", {0x2, 0x2}}, @random="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"}, 0x1d8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.64580254s ago: executing program 5 (id=1069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a050000000000000000000200000a0c00034000df6d1c670000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "8a166ea699f82fd3", "73bcc54aa45dba3c88660d3bb2fb1c9bc00bf1216d8a65948e938d3758e599cb", "00f2551b", "05feff0b9a940c3e"}, 0x38) listen(r2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 4.541611812s ago: executing program 5 (id=1071): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000640)={r0, 0x5, 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x4400) getsockopt$inet6_buf(r2, 0x29, 0x1f, 0x0, &(0x7f0000000980)) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010300000000ffdbdf2517"], 0x14}}, 0x0) 4.541180195s ago: executing program 5 (id=1072): syz_usb_connect(0x3, 0x9ca, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x42c281) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000100)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) write$binfmt_aout(r5, 0x0, 0xfffffecc) write$9p(r5, &(0x7f00000000c0)="8439c00166ce0beb7c46de044cda4ac15e0a0c13f26c243fcf658bf9c08febee17fff3e0f00202e4464a611853844b09703a37c8688c92ddd8f1cddabef52fa823f17894fcb1824295270fb1fed749e99aeb8d4cbbf313bd492942f9b9d4307370aa3524ea2992d1", 0x68) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) socket$phonet_pipe(0x23, 0x5, 0x2) fchown(r5, 0xee01, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 4.42375351s ago: executing program 6 (id=1076): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0xfffffffffffffdf4, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0001000000000000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bfd71265fc18882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbec101000000010000008b9482565856555ee923c644021a85a985773b82f27d006bdbf137115a40040000004875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.306444639s ago: executing program 6 (id=1077): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r6 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) close(0x3) r9 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYRES8=r5, @ANYRESOCT=r4], 0x28}}, 0x0) timer_create(0x6, &(0x7f0000000140)={0x0, 0x39, 0x0, @tid=r9}, &(0x7f0000000180)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES16=r9], 0x4c}}, 0x44) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r11, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r12], &(0x7f0000000080), 0x1, 0x1}) 3.290074061s ago: executing program 5 (id=1083): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0x3, 0x80000001, 0x1, 0x6b79, 0x5}) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/249, 0xf9}, {&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f0000000500)}], 0x8) readv(r0, &(0x7f0000002980)=[{&(0x7f00000005c0)=""/35, 0x23}, {&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/216, 0xd8}, {&(0x7f0000001740)=""/169, 0xa9}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/107, 0x6b}, {&(0x7f0000002880)}, {&(0x7f00000028c0)}, {&(0x7f0000002900)=""/76, 0x4c}], 0xa) r2 = socket(0xf, 0x5, 0x7) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002a40)={0x0, 0x3}, &(0x7f0000002a80)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002ac0)={r3, 0x5, 0x20}, &(0x7f0000002b00)=0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002b40), 0x2080, 0x0) r5 = add_key(&(0x7f0000002b80)='id_resolver\x00', &(0x7f0000002bc0)={'syz', 0x1}, &(0x7f0000002c00)="02b4adfecbf77cadec1c0d0491890a62bc238c39c55aa4568f066704c7cfcc7ec44c8866c0a933e83aa1f4566dbaa3725fff39122fc684009ade7a07a824bdced2a2911271f9cc5876bdde65cb4f882caaa6eff645638a317bc611f05b7d7c85cd7f050e2ca5e3b2d198920c8ae013df9d57a13305f2f07697251313317de960d7a16af87e4b52f11a7072b2e40849a13370e31b1958978522bc433164441b03a6554133b4f879394ce5b8375008488b2e57fbf3d9", 0xb5, 0x0) r6 = add_key$keyring(&(0x7f0000003d40), &(0x7f0000003d80)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key(&(0x7f0000002cc0)='ceph\x00', &(0x7f0000002d00)={'syz', 0x2}, &(0x7f0000002d40)="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", 0x1000, r6) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003dc0), 0x18200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r8, 0x3b71, &(0x7f0000003e40)={0x20, 0x1, &(0x7f0000003e00)='?B\r', 0x7, 0x9}) r9 = dup3(r0, r2, 0x80000) readv(r4, &(0x7f0000005440)=[{&(0x7f0000003e80)=""/212, 0xd4}, {&(0x7f0000003f80)=""/248, 0xf8}, {&(0x7f0000004080)=""/167, 0xa7}, {&(0x7f0000004140)=""/38, 0x26}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/112, 0x70}, {&(0x7f0000005200)=""/131, 0x83}, {&(0x7f00000052c0)=""/198, 0xc6}, {&(0x7f00000053c0)=""/91, 0x5b}], 0x9) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000005500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xde3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0xb2, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xc5, 0x7, 0x3}}]}}}]}}]}}, &(0x7f00000057c0)={0xa, &(0x7f0000005540)={0xa, 0x6, 0x201, 0x4, 0x9, 0x10, 0xff, 0x7}, 0x27, &(0x7f0000005580)={0x5, 0xf, 0x27, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x7f, 0x15, 0x101, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf8, 0xa, 0x3}, @ptm_cap={0x3}]}, 0x8, [{0x30, &(0x7f00000055c0)=@string={0x30, 0x3, "ec763e6a25c87fe28d5d14b4d8c79073494ee8a8071a88fbc611569f77b980c27e283f7d6db0270048cb6600a05e"}}, {0x4, &(0x7f0000005600)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000005640)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000005680)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000056c0)=@lang_id={0x4, 0x3, 0x820}}, {0x2, &(0x7f0000005700)=@string={0x2}}, {0x4, &(0x7f0000005740)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000005780)=@lang_id={0x4, 0x3, 0x801}}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000005840)={{0x1, 0x1, 0x18, r4}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000005a80)={0x1e, 0x6, &(0x7f0000005880)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r9}, @ldst={0x9567d044163b056e, 0x1, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, r10}, @jmp={0x5, 0x0, 0x6, 0x8, 0x7, 0x16, 0x1}], &(0x7f00000058c0)='GPL\x00', 0x6, 0x68, &(0x7f0000005900)=""/104, 0x41000, 0x4f, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005980)={0x5, 0x0, 0x0, 0xb1}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000059c0)=[{0x2, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x5, 0x6}, {0x1, 0x5, 0x5, 0xa}, {0x0, 0x3, 0xe, 0x4}, {0x2, 0x5, 0xc, 0x6}, {0x1, 0x5, 0x3, 0x4}, {0x4, 0x4, 0x2, 0x9}, {0x2, 0x3, 0x1, 0x5}, {0x5, 0x5, 0x1, 0x2}], 0x10, 0x4}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000005b40)={r7, 0xc4, 0x69}, 0x0, &(0x7f0000005b80)="4d86dc41f3097ceb2e45a6123b73756308aea18046d902e4dc29c733136d9e58b6809fc791cf7ad31d108beb8a64153644b32df3a5f24df88766beae2d13e192846bf99db51f9963ad1b1e44ed8b649ed9f3082fe33481b0629f38b341954e5a244b11aa9f979141523a878f06dcf282027e701f246f72fcdca90e0ba3298b0160ed89891bb3f83263d307d227ab5ff39afea5cd16c48c41617b09aed2f9f5562e7d45f62558c4804eaa2180a846d9f09071b96b47c89e724c1b2c4b68cf7868e8c84e05", &(0x7f0000005c80)="dbd3bc98ae13cefcf5b7ada202d5ba6494e89f1901174ab4a3fa0647748c11799b381be48551fd212c75974b6c5baa2d9a17bcd674dd24be87d94d195f6ab86eb1c18810ec4f60afb83ea6fb102e887536bcac75a5e5248e3bf65c4c277e18fb2cf53cad09607f1af6") ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005d40), r10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000005e00)={'gre0\x00', &(0x7f0000005d80)={'erspan0\x00', 0x0, 0x7, 0x8720, 0x8, 0x80000001, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x68, 0x0, 0xc, 0x29, 0x0, @private=0xa010102, @multicast2, {[@noop, @noop, @noop, @noop, @lsrr={0x83, 0x2b, 0x56, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @rand_addr=0x64010102, @private=0xa010102]}, @lsrr={0x83, 0xf, 0xa4, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000005f40)={'tunl0\x00', &(0x7f0000005e40)={'tunl0\x00', 0x0, 0x700, 0x20, 0x3ff, 0x8, {{0x36, 0x4, 0x2, 0x1c, 0xd8, 0x68, 0x0, 0x9, 0x29, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x14, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102}, {@remote, 0x6a6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x86}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x40}]}, @ssrr={0x89, 0x1f, 0xf9, [@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2, @multicast1]}, @cipso={0x86, 0x69, 0xffffffffffffffff, [{0x5, 0xf, "233ee31abac7d4e67f178b036a"}, {0x1, 0xc, "58e9c260891b3f1266f5"}, {0x0, 0x7, 'wlp.1'}, {0x1, 0x4, "f095"}, {0x7, 0xb, "2a244d3462636b9d59"}, {0x2, 0xa, "faa1a6ad6947d4d3"}, {0x1, 0x12, "61747dc89df036ef9205e10f403a2875"}, {0x5, 0x7, "3de494e561"}, {0x5, 0xf, "d6e32781a901ff2fe10bf53a03"}]}, @timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x1, [{@remote, 0x81}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000005f80)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000006040)={'ip6tnl0\x00', &(0x7f0000005fc0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x6, 0xc, 0x20, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x10, 0x2, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000006080)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000006a40)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006a00)={&(0x7f0000006740)={0x290, r11, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x1080) 2.871854756s ago: executing program 6 (id=1090): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04226760"], 0x12) io_uring_enter(0xffffffffffffffff, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x49) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.871473296s ago: executing program 6 (id=1091): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7d, 0x9, 0x1, 0x51, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) sysinfo(&(0x7f0000000000)=""/196) 2.787676679s ago: executing program 6 (id=1093): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) mount$fuse(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000340), 0x2040000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r3}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/nullb0\x00'}}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) creat(&(0x7f00000000c0)='./bus\x00', 0x50) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f00000001c0)='trans=rdma,\x1b\xe8\xcb\xf9\x06\x81t]z\x05\x85k\xb1\x95|\xa9eV\x00\xe5\xd3}\'C\xab`\xa6KPY\xdd7\x12Y%\xe3%\x06J\xc1\x1e\x8a\xe0[\xcf\xcf\x81\x06z\xd0T\xcc\xc0c\x7f|\xa2\xdf\xae\xb9v\x8dY\xbad\xb3CW\xc6\xeda|\x06\x8e\xb4\n\xe2l\xbe\x943\x94F\xc9\xe4\x1f\xc9@\xfb[\xc4\xdb\x97X\xe0\xc5/\xa7\xcc\xbe\xc7s*\x9dS\xb8\xf7\t\x9c3\xadi6\xe9xiv\x16\x84#\xa5\xaa\xcc\xf0#\x7f3\xa8\x97\xe4\x05\xdc|\x0f\xcf.\xc4\x13<\xf5e\xd8\xedY\x9e\xa6') sendto$unix(r4, &(0x7f0000000100)="1819c41693edcd4416033bdfa2f558a34b3ca9fc42ac8c1b186be8318a3b0d281e095f2f1fb4f8cc00945e1a6289ec2024760c28e3511883a81d5edd4e7f89343d8aa34f1563672409c4a7ff64ad7048bc70c2945a473f2a37c474c45faa246f1232c6b55358b540d80f34636217edc568", 0x71, 0x20000850, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f00000003c0)) (async) fstat(0xffffffffffffffff, &(0x7f0000000440)) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) (async) mount$fuse(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000340), 0x2040000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r3}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/nullb0\x00'}}]}}) (async) pipe2(&(0x7f0000000040), 0x4080) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x50) (async) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f00000001c0)='trans=rdma,\x1b\xe8\xcb\xf9\x06\x81t]z\x05\x85k\xb1\x95|\xa9eV\x00\xe5\xd3}\'C\xab`\xa6KPY\xdd7\x12Y%\xe3%\x06J\xc1\x1e\x8a\xe0[\xcf\xcf\x81\x06z\xd0T\xcc\xc0c\x7f|\xa2\xdf\xae\xb9v\x8dY\xbad\xb3CW\xc6\xeda|\x06\x8e\xb4\n\xe2l\xbe\x943\x94F\xc9\xe4\x1f\xc9@\xfb[\xc4\xdb\x97X\xe0\xc5/\xa7\xcc\xbe\xc7s*\x9dS\xb8\xf7\t\x9c3\xadi6\xe9xiv\x16\x84#\xa5\xaa\xcc\xf0#\x7f3\xa8\x97\xe4\x05\xdc|\x0f\xcf.\xc4\x13<\xf5e\xd8\xedY\x9e\xa6') (async) sendto$unix(r4, &(0x7f0000000100)="1819c41693edcd4416033bdfa2f558a34b3ca9fc42ac8c1b186be8318a3b0d281e095f2f1fb4f8cc00945e1a6289ec2024760c28e3511883a81d5edd4e7f89343d8aa34f1563672409c4a7ff64ad7048bc70c2945a473f2a37c474c45faa246f1232c6b55358b540d80f34636217edc568", 0x71, 0x20000850, 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}]}) (async) 2.723949793s ago: executing program 6 (id=1095): socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0xcf}, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r7 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r7, 0x40305829, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 2.189619055s ago: executing program 0 (id=1098): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 32) read$msr(r0, &(0x7f0000000180)=""/174, 0xae) (async) r1 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (rerun: 32) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x31, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @string=&(0x7f00000001c0)}}) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="0f20e035000004000f22e066b8a4000f00d08f8860cc423000b993030000b858000000ba000000000f3066ba4100b0cbee0f01cf0f01c966baf80cb81f625386ef66bafc0cb000ee66b8d5008ec0c4c26dacaf9f14ce75", 0x57}], 0x1, 0x70, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r8, 0x1, 0x42, 0x0, &(0x7f00000000c0)) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000480)={{0x1, 0x0, 0xffffffffffffff0e, {0x5000, 0x8000000, 0x2}}, "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", "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"}) (async, rerun: 64) sendto$packet(r3, &(0x7f0000000300)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x814) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x200, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async, rerun: 64) r11 = accept4(r10, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c9d661e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311c", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e1", 0x2}], 0x1}}], 0x2, 0x44008090) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x34, r13, 0x1, 0x70bd24, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) 2.047232311s ago: executing program 0 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)=ANY=[@ANYBLOB="300000003e001901feff"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x8cb00) (async) r3 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) (async) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="21ca90008db297f2825a43d57f697e17aa2e34b59e373e96f983bdc3b41f8321944e8015b2be5adfd8793ba7bc9a72193fa4ac0244241e32383b3c30993754f1103ca819404195ecf7e78b4e478cd8f605dfb1ce67633062339137bb8f111900d2b454d252502da5c9ee565f4ee27c5e2faf36818cbcf6a0e0667174357e32ab4855de4e467c8b2f47064f2327f91eb2096831e15139a971a7f175df20e954b8ed5d76ae411b549c37a47a5e5f54029a7a3594d431476b4b", 0xb8, 0xe6}, &(0x7f0000000240)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) shmctl$SHM_INFO(r1, 0xe, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x48, 0x0, r4, 0x11faf}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20005000) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r6, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) (async) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.045987449s ago: executing program 1 (id=1101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000056c000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0x8, 0xb, 0x0, 0x3, 0x1a, 0x9, 0x2, 0x8, 0x4, 0x9, 0x0, 0x0, 0x4, 0x9, 0x0, 0x3, 0x0, 0x0, '\x00', 0xa, 0x7f}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@arp={0x806, @generic={0x8, 0x6005, 0x6, 0x4, 0x3, @broadcast, "ab7309fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, "785321db"}}}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.975542043s ago: executing program 0 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r2 = dup(r1) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f00000001c0)) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet(0x2, 0x0, 0x3) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x1}, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x8060, {0x0, 0x100}}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x5}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xf, 0x1c, 0x0, 0x0, 0x80, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r8) ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f00000003c0)={0x0, 0x0, {0x81, 0x6, 0x400, 0x1760}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b1a, &(0x7f0000000000)={'veth1_to_bond\x00', @random}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x20, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x21}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x10d040) 1.815615331s ago: executing program 1 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r0, r0], 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x5}, {0xa, "33ccf524e0375356"}}}}, 0xf) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@newtclass={0x34, 0x28, 0x401, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0x5}, {0xffe0, 0xfff1}, {0x1, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xa, 0xf7}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x34}}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) 1.815229761s ago: executing program 1 (id=1104): r0 = socket$kcm(0x21, 0x2, 0x2) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) (async) socket(0x18, 0x80000, 0x2) (async) r3 = syz_io_uring_setup(0x230, &(0x7f0000000580)={0x0, 0xacf1, 0x10100, 0x201}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async, rerun: 32) pread64(r2, &(0x7f0000000040)=""/77, 0x4d, 0x5) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000010) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4810) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r9, 0x8004562e, &(0x7f0000000040)) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, r6, 0x0, 0x46) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0xff00) 1.761727029s ago: executing program 1 (id=1105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000100)='./file1\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000700)="b80500000053530200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209089a0e00000038010f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x5c}], 0x0, 0x15, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.654612715s ago: executing program 1 (id=1106): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f1e6253b70007d94010a4a7cf8f108000300", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) clock_gettime(0xb, &(0x7f0000000040)) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x6400, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000900), 0x242, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000009c0), 0x145501) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r6, {0x7fff}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x80002) ioctl$SNDRV_PCM_IOCTL_DROP(r9, 0x4143, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x6, 0x83, 0xa0000001, 0x7fff, 0x129, 0x4, 0x8}, 0x9c) mmap$snddsp_control(&(0x7f00009db000/0x3000)=nil, 0x1000, 0x0, 0x8010, r7, 0x83000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) r11 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x44c003, 0x44) r12 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') execveat$binfmt(r11, r12, &(0x7f0000000600)={[&(0x7f0000000140)='\x0e\x00', &(0x7f0000000180)='/dev/rtc0\x00', &(0x7f00000003c0)='vcan0\x00', &(0x7f0000000400)='-,\x00', &(0x7f0000000440)='},&\x00', &(0x7f0000000480)='vcan0\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000580)='batadv\x00', &(0x7f00000005c0)='/dev/rtc0\x00']}, &(0x7f0000000940)={[&(0x7f0000000680)='\x00', &(0x7f00000006c0)='/:*\x00', &(0x7f0000000700)='vcan0\x00', &(0x7f0000000740)='batadv\x00', &(0x7f0000000780)=':\x00', &(0x7f00000007c0)='vcan0\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='(\x00', &(0x7f0000000880)='batadv\x00']}, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) 1.311142541s ago: executing program 1 (id=1107): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x511000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004c014) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) 1.283034771s ago: executing program 35 (id=1107): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x511000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004c014) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) 1.111639284s ago: executing program 0 (id=1109): pipe(&(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{0x0}], 0x1, 0x7ff, 0x4f) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.024434337s ago: executing program 0 (id=1110): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x6) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074"}}}}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x2000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e21}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket(0x18, 0x80000, 0x2) r4 = syz_io_uring_setup(0x230, &(0x7f0000000580)={0x0, 0xacf1, 0x10100, 0x201}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000380)=""/251, 0xfffffc27, 0x0, 0x3, 0x2}}, 0x48) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='adfs\x00', 0x400, &(0x7f0000000180)='%\x00') io_uring_enter(r4, 0x207a98, 0x0, 0x0, 0x0, 0x0) write$vhost_msg(r7, &(0x7f00000004c0)={0x1, {&(0x7f0000000a00)=""/4096, 0x1000, &(0x7f0000000480)=""/17, 0x3, 0x1}}, 0x48) 978.822µs ago: executing program 0 (id=1111): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) (async) r3 = semget$private(0x0, 0x6, 0x3b1) semop(r3, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) semtimedop(r3, &(0x7f0000003340)=[{0x4, 0x3d, 0x1000}], 0x1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7f) 530.461µs ago: executing program 5 (id=1112): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x12, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x1, 0x9, 0xa, 0xffffffffffffffec, 0x4}, @cb_func={0x18, 0x9}, @alu={0x4, 0x0, 0x1, 0x4, 0x8, 0xc, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ldst={0x1, 0x1, 0x6, 0x1, 0x5, 0x80, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0x5, 0x57, &(0x7f00000001c0)=""/87, 0x41000, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x10001, 0xa, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000300)=[{0x4, 0x5, 0xb, 0x1}, {0x5, 0x2}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) 0s ago: executing program 5 (id=1113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): pid=7574 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.434506][ T40] audit: type=1400 audit(1758450296.661:460): avc: denied { module_request } for pid=7576 comm="syz.0.401" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 87.514687][ T7584] netlink: 76 bytes leftover after parsing attributes in process `syz.1.403'. [ 87.515442][ T7585] vlan2: entered promiscuous mode [ 87.520498][ T7585] bridge0: entered promiscuous mode [ 87.576018][ T7593] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 87.579241][ T7593] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 87.581675][ T7593] netlink: 'syz.1.406': attribute type 2 has an invalid length. [ 87.690231][ T7595] openvswitch: netlink: Duplicate or invalid key (type 0). [ 87.693291][ T7595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.708148][ T7597] netlink: 'syz.1.408': attribute type 7 has an invalid length. [ 87.714610][ T7597] CIFS: VFS: Malformed UNC in devname [ 87.716520][ T7597] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 87.728046][ T40] audit: type=1400 audit(1758450296.941:461): avc: denied { ioctl } for pid=7598 comm="syz.0.409" path="socket:[19123]" dev="sockfs" ino=19123 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.731908][ T67] libceph: connect (1)[b::]:6789 error -101 [ 87.737923][ T67] libceph: mon0 (1)[b::]:6789 connect error [ 87.793873][ T7605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.888264][ T7605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.983161][ T7607] loop4: detected capacity change from 0 to 2560 [ 87.985889][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.988537][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.991059][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.994972][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.997449][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.000161][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.003062][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.005816][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.008288][ T7607] ldm_validate_partition_table(): Disk read failed. [ 88.009424][ T7605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.010395][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.016208][ T7607] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.018742][ T7607] Dev loop4: unable to read RDB block 0 [ 88.020623][ T7607] loop4: unable to read partition table [ 88.022791][ T7607] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 88.024173][ T67] libceph: connect (1)[b::]:6789 error -101 [ 88.028627][ T67] libceph: mon0 (1)[b::]:6789 connect error [ 88.089716][ T7605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.184436][ T80] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.193867][ T80] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.201719][ T80] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.212511][ T1149] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.579380][ T67] libceph: connect (1)[b::]:6789 error -101 [ 88.581978][ T67] libceph: mon0 (1)[b::]:6789 connect error [ 88.599100][ T7597] ceph: No mds server is up or the cluster is laggy [ 88.753683][ T7644] netlink: 'syz.2.421': attribute type 2 has an invalid length. [ 88.756649][ T7644] __nla_validate_parse: 1 callbacks suppressed [ 88.756662][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 89.126702][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 89.295481][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 89.299687][ T59] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.302326][ T59] usb 6-1: config 0 has no interface number 0 [ 89.304308][ T59] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.307763][ T59] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 89.311540][ T59] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.315030][ T59] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.319864][ T59] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.322952][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.330330][ T59] usb 6-1: config 0 descriptor?? [ 89.340601][ T59] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 89.381863][ T7657] netlink: 64 bytes leftover after parsing attributes in process `syz.2.425'. [ 89.584768][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'. [ 89.612780][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 89.615608][ T7687] 8021q: VLANs not supported on ip6_vti0 [ 89.619040][ T7686] tracefs: Unknown parameter '9\ncfC Z0x0000000000000000' [ 89.620049][ T842] usb 6-1: USB disconnect, device number 4 [ 89.620422][ C2] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 89.620464][ T7654] ldusb 6-1:0.55: Write buffer overflow, 3279 bytes dropped [ 89.620487][ T7654] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 89.630963][ T7689] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 89.635652][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 89.638582][ T842] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 89.716454][ T7700] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 89.857404][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 89.902951][ T7712] dummy0: entered allmulticast mode [ 89.918926][ T7712] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 89.955487][ T7712] qnx6: unable to set blocksize [ 90.138936][ T7717] batman_adv: batadv0: Adding interface: gretap1 [ 90.142090][ T7717] batman_adv: batadv0: Interface activated: gretap1 [ 90.293485][ T7725] netlink: 'syz.4.448': attribute type 39 has an invalid length. [ 90.604173][ T5969] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6 [ 90.638542][ T7734] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 90.644807][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 90.960380][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 90.960392][ T40] audit: type=1400 audit(1758450299.963:483): avc: denied { write } for pid=7740 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.965743][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 90.969444][ T40] audit: type=1400 audit(1758450299.972:484): avc: denied { remove_name } for pid=7740 comm="syz.1.455" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.971826][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 90.979484][ T40] audit: type=1400 audit(1758450299.972:485): avc: denied { unlink } for pid=7740 comm="syz.1.455" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.986778][ T7741] IPVS: Error connecting to the multicast addr [ 91.062360][ T7744] ip6erspan0: entered promiscuous mode [ 91.530341][ T7755] NILFS (nbd4): device size too small [ 91.850851][ T7194] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 92.030465][ T7194] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 92.033912][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.036689][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.039980][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.042848][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.047362][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.050921][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.053787][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.056610][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.060030][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.063061][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.066093][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.069369][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.072285][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.075334][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.078683][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.081585][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.084799][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.088180][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.091042][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.094066][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.097621][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.106090][ T7194] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.108922][ T7194] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.112095][ T7194] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.115701][ T7194] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 92.118482][ T7194] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 92.121014][ T7194] usb 9-1: Product: syz [ 92.122279][ T7194] usb 9-1: Manufacturer: syz [ 92.123706][ T7194] usb 9-1: SerialNumber: syz [ 92.127079][ T7194] usb 9-1: config 0 descriptor?? [ 92.132308][ T7194] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 92.399104][ C0] usb 9-1: yurex_control_callback - control failed: -71 [ 92.401458][ T841] usb 9-1: USB disconnect, device number 2 [ 92.406193][ T841] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 93.202184][ T7773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7773 comm=syz.4.462 [ 93.206763][ T40] audit: type=1400 audit(1758450302.058:486): avc: denied { ioctl } for pid=7772 comm="syz.4.462" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.216364][ T7774] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 93.247433][ T7777] netlink: 248 bytes leftover after parsing attributes in process `syz.0.463'. [ 93.430466][ T40] audit: type=1400 audit(1758450302.273:487): avc: denied { setopt } for pid=7788 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.438695][ T40] audit: type=1400 audit(1758450302.273:488): avc: denied { shutdown } for pid=7788 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.457085][ T7792] netlink: 'syz.4.468': attribute type 2 has an invalid length. [ 93.459586][ T7792] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 93.466773][ T40] audit: type=1400 audit(1758450302.310:489): avc: denied { write } for pid=7793 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.500552][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.503315][ T7797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.506085][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.508390][ T7797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.511012][ T7797] batman_adv: batadv0: Interface deactivated: gretap1 [ 93.512993][ T7797] batman_adv: batadv0: Removing interface: gretap1 [ 93.682872][ T40] audit: type=1400 audit(1758450302.507:490): avc: denied { ioctl } for pid=7808 comm="syz.4.474" path="socket:[21622]" dev="sockfs" ino=21622 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.683658][ T7809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7809 comm=syz.4.474 [ 93.817114][ T40] audit: type=1400 audit(1758450302.628:491): avc: denied { read } for pid=7811 comm="syz.4.475" path="socket:[22575]" dev="sockfs" ino=22575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.872204][ T7814] netlink: 'syz.0.476': attribute type 14 has an invalid length. [ 93.936092][ T7820] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 93.938589][ T7820] NCSI netlink: No device for ifindex 196628 [ 93.940987][ T40] audit: type=1400 audit(1758450302.750:492): avc: denied { append } for pid=7819 comm="syz.0.478" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.234587][ T61] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.285551][ T7830] __nla_validate_parse: 6 callbacks suppressed [ 94.285568][ T7830] netlink: 132 bytes leftover after parsing attributes in process `syz.4.482'. [ 94.416403][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 94.420767][ T61] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 94.423234][ T61] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.426267][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.429361][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.432468][ T61] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.436870][ T61] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.440051][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.494710][ T7840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7840 comm=syz.4.484 [ 94.567372][ T7846] bridge1: entered promiscuous mode [ 94.666273][ T61] usb 5-1: usb_control_msg returned -32 [ 94.668041][ T61] usbtmc 5-1:16.0: can't read capabilities [ 94.898302][ T7194] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.057747][ T7194] usb 6-1: Using ep0 maxpacket: 32 [ 95.060761][ T7194] usb 6-1: config 1 interface 0 altsetting 174 bulk endpoint 0x1 has invalid maxpacket 32 [ 95.064514][ T7194] usb 6-1: config 1 interface 0 altsetting 174 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.073702][ T7194] usb 6-1: config 1 interface 0 has no altsetting 0 [ 95.077577][ T7194] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 95.080451][ T7194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.082869][ T7194] usb 6-1: Product: й [ 95.084141][ T7194] usb 6-1: Manufacturer: ࠔ [ 95.085568][ T7194] usb 6-1: SerialNumber: О [ 95.094814][ T7850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.124403][ T7852] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 95.204341][ T29] usb 5-1: USB disconnect, device number 4 [ 95.299194][ T7856] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 95.314075][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.319879][ T7856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.322532][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.336220][ T7194] usb 6-1: USB disconnect, device number 5 [ 95.341576][ T7856] bond2: (slave geneve2): making interface the new active one [ 95.346879][ T7856] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 95.414528][ T7856] sd 0:0:0:0: PR command failed: 1026 [ 95.416639][ T7856] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 95.419306][ T7856] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 95.719105][ T1244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.778253][ T7862] sp0: Synchronizing with TNC [ 95.810962][ T1244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.867120][ T5982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.871154][ T5982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.874126][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.878261][ T5982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.882208][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.972241][ T7871] program syz.1.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.994015][ T1244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.007580][ T7878] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.012059][ T7878] netlink: 'syz.1.499': attribute type 62 has an invalid length. [ 96.015257][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 96.075458][ T1244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.076353][ T7884] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.082872][ T7884] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 96.102953][ T7880] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.106561][ T7880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.109597][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 96.134692][ T7863] chnl_net:caif_netlink_parms(): no params data found [ 96.254744][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.258543][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.261608][ T7863] bridge_slave_0: entered allmulticast mode [ 96.266227][ T7863] bridge_slave_0: entered promiscuous mode [ 96.269964][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.272161][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.274426][ T7863] bridge_slave_1: entered allmulticast mode [ 96.278125][ T7863] bridge_slave_1: entered promiscuous mode [ 96.392528][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.397688][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.408712][ T1244] bridge_slave_1: left allmulticast mode [ 96.410525][ T1244] bridge_slave_1: left promiscuous mode [ 96.412390][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.416981][ T1244] bridge_slave_0: left allmulticast mode [ 96.418932][ T1244] bridge_slave_0: left promiscuous mode [ 96.421370][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.525760][ T1244] bond2 (unregistering): (slave geneve2): Releasing active interface [ 96.675255][ T1244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.679708][ T1244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.683704][ T1244] bond0 (unregistering): Released all slaves [ 96.690097][ T1244] bond1 (unregistering): Released all slaves [ 96.748156][ T1244] bond2 (unregistering): Released all slaves [ 96.761720][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.788553][ T7902] mkiss: ax0: crc mode is auto. [ 96.833776][ T7863] team0: Port device team_slave_0 added [ 96.837310][ T7863] team0: Port device team_slave_1 added [ 96.908996][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.911657][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.920048][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.926680][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.929163][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.937049][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.941877][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 96.993206][ T7863] hsr_slave_0: entered promiscuous mode [ 96.995910][ T7863] hsr_slave_1: entered promiscuous mode [ 96.998327][ T7863] debugfs: 'hsr0' already exists in 'hsr' [ 97.000474][ T7863] Cannot create hsr debugfs directory [ 97.114206][ T1244] hsr_slave_0: left promiscuous mode [ 97.116806][ T1244] hsr_slave_1: left promiscuous mode [ 97.129911][ T1244] veth1_macvtap: left promiscuous mode [ 97.133332][ T1244] veth0_macvtap: left promiscuous mode [ 97.135157][ T1244] veth1_vlan: left promiscuous mode [ 97.174074][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 97.174089][ T40] audit: type=1400 audit(1758450305.771:498): avc: denied { execmem } for pid=7918 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.420150][ T40] audit: type=1400 audit(1758450305.996:499): avc: denied { create } for pid=7922 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 97.429082][ T40] audit: type=1400 audit(1758450305.996:500): avc: denied { ioctl } for pid=7922 comm="syz.1.511" path="socket:[21029]" dev="sockfs" ino=21029 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.115453][ T5969] Bluetooth: hci2: command tx timeout [ 98.203843][ T40] audit: type=1400 audit(1758450306.726:501): avc: denied { map } for pid=7932 comm="syz.1.513" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.206343][ T7863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.217286][ T7863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.221290][ T7863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.228381][ T7863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.294143][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.305815][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.311107][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.313326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.319303][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.321491][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.435222][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.600017][ T7863] veth0_vlan: entered promiscuous mode [ 98.605052][ T7863] veth1_vlan: entered promiscuous mode [ 98.618002][ T5982] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.621645][ T5969] Bluetooth: hci4: command 0x1003 tx timeout [ 98.623697][ T7863] veth0_macvtap: entered promiscuous mode [ 98.627912][ T7863] veth1_macvtap: entered promiscuous mode [ 98.644254][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.651758][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.657368][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.660132][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.664788][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.667507][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.705869][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.708315][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.721827][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.724396][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.739614][ T40] audit: type=1400 audit(1758450307.240:502): avc: denied { mounton } for pid=7863 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 98.766924][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 98.771543][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 98.821225][ T7982] Invalid ELF header type: 0 != 1 [ 98.822902][ T40] audit: type=1400 audit(1758450307.315:503): avc: denied { module_load } for pid=7981 comm="syz.5.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 98.834329][ T7982] /dev/nullb0: Can't open blockdev [ 98.992296][ T7986] overlayfs: conflicting options: userxattr,redirect_dir=on [ 99.001004][ T7986] veth1_to_batadv: entered promiscuous mode [ 99.291189][ T6052] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 99.439283][ T841] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 99.483863][ T6052] usb 10-1: Using ep0 maxpacket: 8 [ 99.488252][ T6052] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.490610][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.494107][ T6052] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.498246][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.501635][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.506841][ T6052] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.509204][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.512657][ T6052] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.516507][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.519975][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.523998][ T6052] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.526626][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.530189][ T6052] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.533929][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.537603][ T6052] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.543129][ T6052] usb 10-1: string descriptor 0 read error: -22 [ 99.545182][ T6052] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.548224][ T6052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.552189][ T40] audit: type=1400 audit(1758450307.998:504): avc: denied { append } for pid=7999 comm="syz.0.522" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.560071][ T6052] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 99.561731][ T40] audit: type=1400 audit(1758450307.998:505): avc: denied { open } for pid=7999 comm="syz.0.522" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.562769][ T8000] SELinux: policydb magic number 0xa739be3e does not match expected magic number 0xf97cff8c [ 99.573867][ T8000] SELinux: failed to load policy [ 99.602155][ T841] usb 6-1: Using ep0 maxpacket: 32 [ 99.605369][ T841] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.607935][ T841] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.610578][ T841] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.613718][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.616739][ T841] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.619653][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.624001][ T841] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.626763][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.631008][ T841] usb 6-1: config 0 descriptor?? [ 99.756767][ T8003] virtio-fs: tag not found [ 99.780982][ T7988] block nbd5: Attempted send on invalid socket [ 99.783195][ T7988] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.786266][ T7988] befs: (nbd5): unable to read superblock [ 99.795161][ T34] usb 10-1: USB disconnect, device number 2 [ 99.845830][ T8010] ip6tnl1: entered promiscuous mode [ 99.847610][ T8010] ip6tnl1: entered allmulticast mode [ 99.858748][ T841] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 99.966194][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.526'. [ 100.063929][ T7992] netlink: 'syz.1.519': attribute type 15 has an invalid length. [ 100.064292][ T40] audit: type=1400 audit(1758450308.475:506): avc: denied { read write } for pid=7991 comm="syz.1.519" name="lp0" dev="devtmpfs" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 100.066776][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 100.076149][ T40] audit: type=1400 audit(1758450308.475:507): avc: denied { open } for pid=7991 comm="syz.1.519" path="/dev/usb/lp0" dev="devtmpfs" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 100.087065][ T7992] netlink: 'syz.1.519': attribute type 15 has an invalid length. [ 100.089828][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 100.095714][ T6052] usb 6-1: USB disconnect, device number 6 [ 100.099900][ T6052] usblp0: removed [ 100.328405][ T5982] Bluetooth: hci2: command tx timeout [ 100.744694][ T8041] binder: 8040:8041 ioctl c0306201 2000000004c0 returned -14 [ 100.749519][ T8041] binder: 8040:8041 ioctl c0306201 2000000001c0 returned -14 [ 100.917925][ T8045] syzkaller1: entered promiscuous mode [ 100.919615][ T8045] syzkaller1: entered allmulticast mode [ 101.814586][ T8052] vlan2: entered allmulticast mode [ 101.816212][ T8052] bond0: entered allmulticast mode [ 101.817815][ T8052] bond_slave_0: entered allmulticast mode [ 101.819584][ T8052] bond_slave_1: entered allmulticast mode [ 102.563629][ T5982] Bluetooth: hci2: command tx timeout [ 102.889321][ T8065] tipc: Enabling of bearer rejected, failed to enable media [ 102.907383][ T8060] /dev/sr0: Can't open blockdev [ 102.908005][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 102.908020][ T40] audit: type=1400 audit(1758450311.141:514): avc: denied { setattr } for pid=8059 comm="syz.5.542" name="nbd5" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.060079][ T40] audit: type=1400 audit(1758450311.281:515): avc: denied { mounton } for pid=8076 comm="syz.5.547" path="/10/bus" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 103.082007][ T40] audit: type=1400 audit(1758450311.300:516): avc: denied { connect } for pid=8080 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.088091][ T40] audit: type=1400 audit(1758450311.300:517): avc: denied { write } for pid=8080 comm="syz.1.548" path="socket:[23098]" dev="sockfs" ino=23098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.127246][ T8083] gfs2: not a GFS2 filesystem [ 103.156307][ T8087] netlink: 10 bytes leftover after parsing attributes in process `syz.1.550'. [ 103.352877][ T8090] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 103.609070][ T40] audit: type=1400 audit(1758450311.786:518): avc: denied { create } for pid=8101 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.617189][ T40] audit: type=1400 audit(1758450311.795:519): avc: denied { write } for pid=8101 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.626757][ T40] audit: type=1400 audit(1758450311.795:520): avc: denied { ioctl } for pid=8101 comm="syz.5.554" path="socket:[22409]" dev="sockfs" ino=22409 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.638125][ T40] audit: type=1400 audit(1758450311.795:521): avc: denied { append } for pid=8101 comm="syz.5.554" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.667107][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.555'. [ 103.672029][ T8104] IPv6: sit1: Disabled Multicast RS [ 103.675293][ T8104] sit1: entered allmulticast mode [ 104.361549][ T8113] : entered promiscuous mode [ 104.387168][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 104.511373][ T40] audit: type=1400 audit(1758450312.637:522): avc: denied { ioctl } for pid=8121 comm="syz.1.562" path="socket:[23123]" dev="sockfs" ino=23123 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.530026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.660588][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.664542][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.667777][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.775754][ T5982] Bluetooth: hci2: command tx timeout [ 104.872980][ T8145] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.880077][ T8145] dlm: no local IP address has been set [ 104.882877][ T8145] dlm: cannot start dlm midcomms -107 [ 105.028889][ T8151] program syz.1.570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.228690][ T8157] batman_adv: batadv0: Adding interface: gretap1 [ 105.231037][ T8157] batman_adv: batadv0: Interface activated: gretap1 [ 105.668430][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.672358][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.677229][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.681812][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.689966][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.693851][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.698899][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.702765][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.708006][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.711984][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8178 comm=syz.5.579 [ 105.798033][ T5982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.802560][ T5982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.807649][ T5982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.812566][ T5982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.814839][ T5982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.844280][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.581'. [ 105.848278][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.5.581'. [ 105.852454][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.581'. [ 105.925808][ T8186] team0: Port device team_slave_0 removed [ 106.046662][ T8181] chnl_net:caif_netlink_parms(): no params data found [ 106.075561][ T8195] tmpfs: Group quota inode hardlimit too large. [ 106.129142][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.131642][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.134399][ T8181] bridge_slave_0: entered allmulticast mode [ 106.137107][ T8181] bridge_slave_0: entered promiscuous mode [ 106.140826][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.144304][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.146680][ T8181] bridge_slave_1: entered allmulticast mode [ 106.147938][ T40] audit: type=1400 audit(1758450314.171:523): avc: denied { mounton } for pid=8194 comm="syz.5.584" path="/bus" dev="ramfs" ino=23198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 106.148511][ T8195] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 106.148536][ T8195] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.148591][ T8195] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 106.149250][ T8181] bridge_slave_1: entered promiscuous mode [ 106.189308][ T8181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.196755][ T8181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.268881][ T8181] team0: Port device team_slave_0 added [ 106.272699][ T8181] team0: Port device team_slave_1 added [ 106.344841][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.350720][ T8205] binder_alloc: 8204: binder_alloc_buf, no vma [ 106.372542][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.383880][ T8181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.390630][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.393538][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.405653][ T8181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.476961][ T8181] hsr_slave_0: entered promiscuous mode [ 106.479178][ T8181] hsr_slave_1: entered promiscuous mode [ 106.481297][ T8181] debugfs: 'hsr0' already exists in 'hsr' [ 106.483105][ T8181] Cannot create hsr debugfs directory [ 106.490050][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.592'. [ 106.493787][ T8219] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 106.498858][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.536713][ T8221] vivid-000: ================= START STATUS ================= [ 106.539621][ T8221] vivid-000: Test Pattern: 75% Colorbar [ 106.541874][ T8221] vivid-000: Fill Percentage of Frame: 100 [ 106.543888][ T8221] vivid-000: Horizontal Movement: No Movement [ 106.545807][ T8221] vivid-000: Vertical Movement: No Movement [ 106.547686][ T8221] vivid-000: OSD Text Mode: All [ 106.549227][ T8221] vivid-000: Show Border: false [ 106.551470][ T8221] vivid-000: Show Square: false [ 106.553064][ T8221] vivid-000: Sensor Flipped Horizontally: false [ 106.555088][ T8221] vivid-000: Sensor Flipped Vertically: false [ 106.557095][ T8221] vivid-000: Insert SAV Code in Image: true [ 106.559035][ T8221] vivid-000: Insert EAV Code in Image: false [ 106.562026][ T8221] vivid-000: Insert Video Guard Band: false [ 106.564069][ T8221] vivid-000: Reduced Framerate: false [ 106.565825][ T8221] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 106.568146][ T8221] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 106.570648][ T8221] vivid-000: Enable Capture Cropping: true grabbed [ 106.573511][ T8221] vivid-000: Enable Capture Composing: true grabbed [ 106.575658][ T8221] vivid-000: Enable Capture Scaler: true grabbed [ 106.577661][ T8221] vivid-000: Timestamp Source: End of Frame [ 106.579420][ T8221] vivid-000: Colorspace: sRGB [ 106.580887][ T8221] vivid-000: Transfer Function: Default [ 106.583191][ T8221] vivid-000: Y'CbCr Encoding: Default [ 106.584828][ T8221] vivid-000: HSV Encoding: Hue 0-179 [ 106.586518][ T8221] vivid-000: Quantization: Default [ 106.588135][ T8221] vivid-000: Apply Alpha To Red Only: false [ 106.590002][ T8221] vivid-000: Standard Aspect Ratio: 4x3 [ 106.594015][ T8221] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 106.597085][ T8221] vivid-000: DV Timings: 640x480p59 inactive [ 106.599923][ T8221] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 106.602884][ T8221] vivid-000: Maximum EDID Blocks: 2 [ 106.605470][ T8221] vivid-000: Limited RGB Range (16-235): false [ 106.607912][ T8221] vivid-000: Rx RGB Quantization Range: Automatic [ 106.610434][ T8221] vivid-000: Power Present: 0x00000001 [ 106.612582][ T8221] tpg source WxH: 640x360 (Y'CbCr) [ 106.614598][ T8221] tpg field: 1 [ 106.615658][ T8221] tpg crop: (0,0)/640x360 [ 106.617011][ T8221] tpg compose: (0,0)/640x360 [ 106.618438][ T8221] tpg colorspace: 8 [ 106.619610][ T8221] tpg transfer function: 0/2 [ 106.621099][ T8221] tpg Y'CbCr encoding: 0/1 [ 106.622699][ T8221] tpg quantization: 0/2 [ 106.624097][ T8221] tpg RGB range: 0/2 [ 106.626446][ T8221] vivid-000: ================== END STATUS ================== [ 106.639341][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.596'. [ 106.645372][ T8181] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.650455][ T8181] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.654455][ T8181] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.661821][ T8181] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.680420][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.682726][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.685059][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.688055][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.719039][ T8181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.728324][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.732545][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.747101][ T8181] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.752045][ T8242] pim6reg: entered allmulticast mode [ 106.758462][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.760621][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.763766][ T8242] pim6reg: left allmulticast mode [ 106.775430][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.777693][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.813277][ T8245] kvm: pic: non byte read [ 106.815831][ T8245] kvm: pic: level sensitive irq not supported [ 106.816132][ T8245] kvm: pic: non byte read [ 106.821861][ T8245] kvm: pic: single mode not supported [ 106.821871][ T8245] kvm: pic: level sensitive irq not supported [ 106.824008][ T8245] kvm: pic: non byte read [ 106.829903][ T8245] kvm: pic: non byte read [ 106.832547][ T8245] kvm: pic: non byte read [ 106.835199][ T8245] kvm: pic: non byte read [ 106.837719][ T8245] kvm: pic: non byte read [ 106.840378][ T8245] kvm: pic: single mode not supported [ 106.840625][ T8245] kvm: pic: non byte read [ 106.845699][ T8245] kvm: pic: single mode not supported [ 106.846294][ T8245] kvm: pic: non byte read [ 106.887388][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.932108][ T8255] openvswitch: netlink: Duplicate key (type 0). [ 107.023838][ T8181] veth0_vlan: entered promiscuous mode [ 107.029056][ T8181] veth1_vlan: entered promiscuous mode [ 107.044414][ T8181] veth0_macvtap: entered promiscuous mode [ 107.048637][ T8181] veth1_macvtap: entered promiscuous mode [ 107.062889][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.069867][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.075695][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.078943][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.081674][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.085153][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.123374][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.126501][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.140014][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.142458][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.175046][ T8265] binder: BINDER_SET_CONTEXT_MGR already set [ 107.177570][ T8265] binder: 8264:8265 ioctl 4018620d 2000000000c0 returned -16 [ 107.182157][ T8265] binder: BINDER_SET_CONTEXT_MGR already set [ 107.184186][ T8265] binder: 8264:8265 ioctl 4018620d 200000000040 returned -16 [ 107.358821][ T8278] netlink: 'syz.6.605': attribute type 18 has an invalid length. [ 107.361023][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.605'. [ 107.367772][ T1147] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.367781][ T8278] netlink: 'syz.6.605': attribute type 18 has an invalid length. [ 107.367793][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.605'. [ 107.370619][ T1147] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.381363][ T1147] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.384661][ T1147] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.551682][ T8283] binder: 8282:8283 unknown command 0 [ 107.553467][ T8283] binder: 8282:8283 ioctl c0306201 200000000080 returned -22 [ 107.609708][ T8287] openvswitch: netlink: IP tunnel dst address not specified [ 107.620543][ T841] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 107.793426][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 107.796405][ T841] usb 6-1: config 2 has an invalid interface number: 205 but max is 0 [ 107.798741][ T841] usb 6-1: config 2 has no interface number 0 [ 107.800516][ T841] usb 6-1: config 2 interface 205 has no altsetting 0 [ 107.805828][ T841] usb 6-1: New USB device found, idVendor=0471, idProduct=0322, bcdDevice=b1.09 [ 107.808703][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.811184][ T841] usb 6-1: Product: syz [ 107.813120][ T841] usb 6-1: Manufacturer: syz [ 107.814746][ T841] usb 6-1: SerialNumber: syz [ 107.948398][ T8306] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 107.951632][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.616'. [ 108.025621][ T5982] Bluetooth: hci4: command tx timeout [ 108.039231][ T841] gspca_main: sunplus-2.14.0 probing 0471:0322 [ 108.042430][ T841] gspca_sunplus: reg_w_riv err -71 [ 108.043929][ T8308] openvswitch: netlink: IP tunnel dst address not specified [ 108.044069][ T841] sunplus 6-1:2.205: probe with driver sunplus failed with error -71 [ 108.056433][ T841] usb 6-1: USB disconnect, device number 7 [ 108.146465][ T8317] netlink: 'syz.5.620': attribute type 1 has an invalid length. [ 108.619712][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 108.619723][ T40] audit: type=1400 audit(1758450316.482:534): avc: denied { write } for pid=8340 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.715442][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.630'. [ 109.019662][ T6052] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 109.191892][ T6052] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.195445][ T6052] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.198580][ T6052] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.201749][ T6052] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.206245][ T8347] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 109.211134][ T6052] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.427337][ T5965] usb 10-1: USB disconnect, device number 3 [ 109.458032][ T6926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.620290][ T6926] usb 5-1: config 0 has no interfaces? [ 109.623949][ T6926] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 109.626916][ T6926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.630285][ T6926] usb 5-1: Product: syz [ 109.632123][ T6926] usb 5-1: Manufacturer: syz [ 109.634240][ T6926] usb 5-1: SerialNumber: syz [ 109.638668][ T6926] usb 5-1: config 0 descriptor?? [ 109.670620][ T40] audit: type=1400 audit(1758450317.455:535): avc: denied { mount } for pid=8346 comm="syz.5.631" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.898143][ T841] usb 5-1: USB disconnect, device number 5 [ 110.260357][ T5982] Bluetooth: hci4: command tx timeout [ 110.292936][ T40] audit: type=1400 audit(1758450318.053:536): avc: denied { read } for pid=8383 comm="syz.5.635" lport=48973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.301214][ T8384] netlink: 'syz.5.635': attribute type 21 has an invalid length. [ 110.303940][ T8384] netlink: 128 bytes leftover after parsing attributes in process `syz.5.635'. [ 110.306743][ T8384] netlink: 'syz.5.635': attribute type 6 has an invalid length. [ 110.477616][ T8387] macsec0: entered promiscuous mode [ 110.479480][ T8387] macsec0: entered allmulticast mode [ 110.481084][ T8387] veth1_macvtap: entered allmulticast mode [ 110.544214][ T8389] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 110.646384][ T40] audit: type=1326 audit(1758450318.381:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.0.639" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f941e58ec29 code=0x0 [ 111.155973][ T8439] can0: slcan on ttyS3. [ 111.213506][ T8441] FAT-fs (nullb0): bogus number of reserved sectors [ 111.215674][ T8441] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 111.222503][ T8439] can0 (unregistered): slcan off ttyS3. [ 111.228833][ T8441] genirq: Flags mismatch irq 8. 00200000 (comedi_parport) vs. 00200000 (rtc0) [ 111.266147][ T40] audit: type=1800 audit(1758450318.961:538): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.650" name="file0" dev="overlay" ino=946 res=0 errno=0 [ 111.269892][ T8444] __nla_validate_parse: 4 callbacks suppressed [ 111.269901][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 111.332391][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.651'. [ 111.337127][ T40] audit: type=1400 audit(1758450319.017:539): avc: denied { listen } for pid=8445 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.449409][ T40] audit: type=1400 audit(1758450319.129:540): avc: denied { setopt } for pid=8454 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.576186][ T8458] netlink: 256 bytes leftover after parsing attributes in process `syz.0.655'. [ 111.579232][ T8458] netlink: 56 bytes leftover after parsing attributes in process `syz.0.655'. [ 111.582743][ T40] audit: type=1400 audit(1758450319.251:541): avc: denied { map } for pid=8459 comm="syz.1.656" path="socket:[25933]" dev="sockfs" ino=25933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 111.617266][ T6926] libceph: connect (1)[c::]:6789 error -22 [ 111.617469][ T5965] libceph: connect (1)[b::]:6789 error -22 [ 111.618334][ T8463] ceph: No mds server is up or the cluster is laggy [ 111.618813][ T8466] ceph: No mds server is up or the cluster is laggy [ 111.619921][ T6926] libceph: mon0 (1)[c::]:6789 connect error [ 111.621539][ T5965] libceph: mon0 (1)[b::]:6789 connect error [ 112.077230][ T6926] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 112.249462][ T6926] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 112.252043][ T6926] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.255644][ T6926] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.259235][ T6926] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.262669][ T6926] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.266649][ T6926] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.269498][ T6926] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.274197][ T6926] usb 11-1: config 0 descriptor?? [ 112.276342][ T8502] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 112.414178][ T8514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.473293][ T5982] Bluetooth: hci4: command tx timeout [ 112.531784][ T40] audit: type=1400 audit(1758450320.139:542): avc: denied { setopt } for pid=8513 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.700659][ T40] audit: type=1400 audit(1758450320.298:543): avc: denied { create } for pid=8527 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.802329][ T8533] overlayfs: failed to resolve './bus': -2 [ 112.924675][ T8540] bridge_slave_0: entered promiscuous mode [ 112.928044][ T6926] hid_parser_main: 29 callbacks suppressed [ 112.928056][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.932120][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.934669][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.937014][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.939651][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.941999][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.944572][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.946861][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.949147][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.951423][ T6926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.958481][ T6926] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 112.991057][ T8539] bridge_slave_0: left promiscuous mode [ 113.216366][ T8551] overlayfs: failed lookup in lower (newroot/202, name='file1', err=-40): overlapping layers [ 113.250311][ T8553] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 113.484537][ T8556] fuse: Unknown parameter 'fd [ 113.484537][ T8556] ' [ 113.757961][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 113.782823][ T5965] usb 11-1: USB disconnect, device number 2 [ 113.804498][ T8562] program syz.6.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.808066][ T8562] netlink: 'syz.6.685': attribute type 3 has an invalid length. [ 113.834904][ T8563] selinux_netlink_send: 23 callbacks suppressed [ 113.834915][ T8563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8563 comm=syz.1.684 [ 113.883095][ T8567] Invalid ELF header type: 0 != 1 [ 113.941196][ T8571] i2c i2c-1: Invalid block write size 34 [ 113.944295][ T8573] i2c i2c-1: Invalid block write size 34 [ 113.948393][ T8574] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 113.950933][ T8574] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.955387][ T8574] vhci_hcd vhci_hcd.0: Device attached [ 114.162487][ T34] vhci_hcd: vhci_device speed not set [ 114.226013][ T34] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 114.301689][ T5965] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 114.484534][ T5965] usb 11-1: config 0 has no interfaces? [ 114.486354][ T5965] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.489192][ T5965] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.492953][ T5965] usb 11-1: config 0 descriptor?? [ 114.526848][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 114.526860][ T40] audit: type=1400 audit(1758450322.010:550): avc: denied { map } for pid=8585 comm="syz.5.693" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.545339][ T40] audit: type=1400 audit(1758450322.019:551): avc: denied { setopt } for pid=8585 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.696822][ T5982] Bluetooth: hci4: command tx timeout [ 114.708421][ T8596] netlink: 204 bytes leftover after parsing attributes in process `syz.5.695'. [ 114.710091][ T8575] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 114.712253][ T40] audit: type=1400 audit(1758450322.178:552): avc: denied { append } for pid=8572 comm="syz.6.690" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.716233][ T12] vhci_hcd: stop threads [ 114.724921][ T12] vhci_hcd: release socket [ 114.727473][ T12] vhci_hcd: disconnect device [ 114.764232][ T53] IPVS: starting estimator thread 0... [ 114.856816][ T8602] IPVS: using max 27 ests per chain, 64800 per kthread [ 114.857919][ T7194] usb 11-1: USB disconnect, device number 3 [ 115.058877][ T40] audit: type=1400 audit(1758450322.496:553): avc: denied { mount } for pid=8617 comm="syz.5.700" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.088894][ T40] audit: type=1400 audit(1758450322.524:554): avc: denied { write } for pid=8624 comm="syz.0.702" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 115.152703][ T40] audit: type=1400 audit(1758450322.590:555): avc: denied { unmount } for pid=7863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.193147][ T40] audit: type=1326 audit(1758450322.627:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.5.703" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f6b96b8ec29 code=0x0 [ 115.340556][ T8642] gfs2: not a GFS2 filesystem [ 115.342940][ T8643] gfs2: not a GFS2 filesystem [ 115.378710][ T8644] input: syz1 as /devices/virtual/input/input11 [ 115.424512][ T40] audit: type=1400 audit(1758450322.852:557): avc: denied { read } for pid=8645 comm="syz.0.709" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.432806][ T40] audit: type=1400 audit(1758450322.852:558): avc: denied { ioctl } for pid=8645 comm="syz.0.709" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.516729][ T8650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.578114][ T8659] nft_compat: unsupported protocol 0 [ 115.593246][ T8661] nft_compat: unsupported protocol 0 [ 115.889017][ T5982] Bluetooth: hci1: SCO packet too small [ 115.923646][ T8683] syz.6.719 uses old SIOCAX25GETINFO [ 115.940808][ T40] audit: type=1400 audit(1758450323.329:559): avc: denied { getopt } for pid=8685 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.000858][ T7194] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.175700][ T7194] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.180994][ T7194] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.185194][ T7194] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.188070][ T7194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.192589][ T8677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.198054][ T7194] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.268678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.271406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.276580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.279432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.282306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.286971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.395875][ T5965] IPVS: starting estimator thread 0... [ 116.411344][ T841] usb 5-1: USB disconnect, device number 6 [ 116.513919][ T8720] IPVS: using max 44 ests per chain, 105600 per kthread [ 116.629017][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 116.696399][ T53] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 116.857265][ T53] usb 11-1: config 0 has no interfaces? [ 116.860824][ T53] usb 11-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 116.863802][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.866478][ T53] usb 11-1: Product: syz [ 116.868258][ T53] usb 11-1: Manufacturer: syz [ 116.869835][ T53] usb 11-1: SerialNumber: syz [ 116.873691][ T53] usb 11-1: config 0 descriptor?? [ 117.108598][ T53] usb 11-1: USB disconnect, device number 4 [ 117.678761][ T8736] netlink: 'syz.6.735': attribute type 11 has an invalid length. [ 117.719430][ C1] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 117.722827][ C1] sr 2:0:0:0: [sr0] tag#23 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 117.856190][ T8747] kvm: pic: non byte write [ 117.859518][ T8747] nfs4: Bad value for 'source' [ 118.006098][ T8754] could not allocate digest TFM handle sm3-generic [ 118.033578][ T8760] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 118.038208][ T8760] Error validating options; rc = [-22] [ 118.132057][ T8772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8772 comm=syz.0.746 [ 118.137028][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 118.140905][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 118.144515][ T8772] netlink: 'syz.0.746': attribute type 14 has an invalid length. [ 118.154667][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 118.157389][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 118.160215][ T8772] netlink: 'syz.0.746': attribute type 14 has an invalid length. [ 118.164051][ T8777] netlink: 'syz.6.744': attribute type 13 has an invalid length. [ 118.250995][ T8790] overlay: filesystem on ./bus not supported as upperdir [ 118.500811][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.757'. [ 118.515104][ T8824] vxcan1: entered allmulticast mode [ 118.880789][ T8834] batadv0: entered promiscuous mode [ 118.882692][ T8834] macsec1: entered promiscuous mode [ 118.910273][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.6.762'. [ 119.018839][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.763'. [ 119.087300][ T8854] cgroup: Unknown subsys name 'smackfsroot' [ 119.489327][ T8893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'. [ 119.590138][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.6.785'. [ 119.691624][ T8918] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 119.753362][ T34] vhci_hcd: vhci_device speed not set [ 119.835866][ T8926] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 119.895825][ T8928] syz.1.791: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.901651][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.1.791 Not tainted syzkaller #0 PREEMPT(full) [ 119.901666][ T8928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.901673][ T8928] Call Trace: [ 119.901677][ T8928] [ 119.901681][ T8928] dump_stack_lvl+0x16c/0x1f0 [ 119.901714][ T8928] warn_alloc+0x248/0x3a0 [ 119.901733][ T8928] ? __pfx_warn_alloc+0x10/0x10 [ 119.901742][ T8928] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.901766][ T8928] ? kasan_save_stack+0x42/0x60 [ 119.901777][ T8928] ? kasan_save_stack+0x33/0x60 [ 119.901787][ T8928] ? kasan_save_track+0x14/0x30 [ 119.901797][ T8928] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 119.901814][ T8928] ? __vb2_queue_alloc+0x8c9/0x1280 [ 119.901830][ T8928] ? vb2_core_create_bufs+0x559/0xab0 [ 119.901847][ T8928] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 119.901864][ T8928] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 119.901885][ T8928] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 119.901910][ T8928] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.901931][ T8928] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 119.901948][ T8928] vmalloc_user_noprof+0x9e/0xe0 [ 119.901964][ T8928] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 119.901982][ T8928] vb2_vmalloc_alloc+0x135/0x3f0 [ 119.902000][ T8928] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 119.902017][ T8928] __vb2_queue_alloc+0x8c9/0x1280 [ 119.902040][ T8928] vb2_core_create_bufs+0x559/0xab0 [ 119.902058][ T8928] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 119.902079][ T8928] ? __mutex_trylock_common+0xe9/0x250 [ 119.902100][ T8928] vb2_create_bufs+0x5e8/0x840 [ 119.902117][ T8928] ? __pfx_vb2_create_bufs+0x10/0x10 [ 119.902133][ T8928] ? v4l_sanitize_colorspace+0x213/0x400 [ 119.902150][ T8928] vb2_ioctl_create_bufs+0x244/0x3e0 [ 119.902165][ T8928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.902180][ T8928] vidioc_create_bufs+0x7d/0xf0 [ 119.902195][ T8928] v4l_create_bufs+0x156/0x270 [ 119.902207][ T8928] __video_do_ioctl+0xb40/0xfc0 [ 119.902221][ T8928] ? __might_fault+0xe3/0x190 [ 119.902232][ T8928] ? __pfx___video_do_ioctl+0x10/0x10 [ 119.902251][ T8928] video_usercopy+0x4d0/0x1720 [ 119.902265][ T8928] ? __pfx___video_do_ioctl+0x10/0x10 [ 119.902277][ T8928] ? selinux_kernel_read_file+0x90/0x130 [ 119.902295][ T8928] ? __pfx_video_usercopy+0x10/0x10 [ 119.902317][ T8928] v4l2_ioctl+0x1bd/0x250 [ 119.902329][ T8928] ? __pfx_v4l2_ioctl+0x10/0x10 [ 119.902341][ T8928] __x64_sys_ioctl+0x18e/0x210 [ 119.902360][ T8928] do_syscall_64+0xcd/0x4e0 [ 119.902376][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.902387][ T8928] RIP: 0033:0x7f9e9b58ec29 [ 119.902396][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.902407][ T8928] RSP: 002b:00007f9e9c3e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.902418][ T8928] RAX: ffffffffffffffda RBX: 00007f9e9b7d5fa0 RCX: 00007f9e9b58ec29 [ 119.902425][ T8928] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000005 [ 119.902431][ T8928] RBP: 00007f9e9b611e41 R08: 0000000000000000 R09: 0000000000000000 [ 119.902437][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.902444][ T8928] R13: 00007f9e9b7d6038 R14: 00007f9e9b7d5fa0 R15: 00007fff9e0a19b8 [ 119.902457][ T8928] [ 119.902461][ T8928] Mem-Info: [ 120.005214][ T8928] active_anon:21710 inactive_anon:5613 isolated_anon:0 [ 120.005214][ T8928] active_file:1419 inactive_file:52245 isolated_file:0 [ 120.005214][ T8928] unevictable:1768 dirty:63 writeback:0 [ 120.005214][ T8928] slab_reclaimable:10991 slab_unreclaimable:73795 [ 120.005214][ T8928] mapped:24820 shmem:19209 pagetables:1427 [ 120.005214][ T8928] sec_pagetables:310 bounce:0 [ 120.005214][ T8928] kernel_misc_reclaimable:0 [ 120.005214][ T8928] free:423851 free_pcp:22651 free_cma:0 [ 120.021183][ T8928] Node 0 active_anon:80764kB inactive_anon:22452kB active_file:4964kB inactive_file:208720kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99188kB dirty:248kB writeback:0kB shmem:67224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13968kB pagetables:5368kB sec_pagetables:1240kB all_unreclaimable? no Balloon:0kB [ 120.021227][ T8928] Node 1 active_anon:0kB inactive_anon:0kB active_file:712kB inactive_file:260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.021275][ T8928] Node 0 DMA free:12488kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2596kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:100kB free_cma:0kB [ 120.021309][ T8928] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 120.021331][ T8928] Node 0 DMA32 free:90252kB boost:8192kB min:35708kB low:42584kB high:49460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80764kB inactive_anon:22452kB active_file:4964kB inactive_file:206124kB unevictable:3536kB writepending:248kB present:2080628kB managed:1263420kB mlocked:0kB bounce:0kB free_pcp:71688kB local_pcp:26924kB free_cma:0kB [ 120.021363][ T8928] lowmem_reserve[]: 0 0 0 0 0 [ 120.021385][ T8928] Node 1 Normal free:1592664kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:712kB inactive_file:260kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:25244kB local_pcp:264kB free_cma:0kB [ 120.021416][ T8928] lowmem_reserve[]: 0 0 0 0 0 [ 120.021437][ T8928] Node 0 DMA: 2*4kB (M) 2*8kB (M) 3*16kB (UM) 4*32kB (U) 24*64kB (UM) 14*128kB (UM) 3*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (ME) 0*4096kB = 12488kB [ 120.021552][ T8928] Node 0 DMA32: 1273*4kB (UME) 497*8kB (UME) 64*16kB (ME) 229*32kB (UME) 147*64kB (UME) 26*128kB (UME) 33*256kB (UME) 41*512kB (UM) 10*1024kB (UM) 6*2048kB (M) 2*4096kB (UM) = 90316kB [ 120.021648][ T8928] Node 1 Normal: 12*4kB (UME) 30*8kB (UME) 36*16kB (UME) 100*32kB (UME) 28*64kB (UME) 11*128kB (UME) 7*256kB (M) 5*512kB (UM) 2*1024kB (UM) 3*2048kB (UME) 384*4096kB (UM) = 1592672kB [ 120.021744][ T8928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.021753][ T8928] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.021762][ T8928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.021770][ T8928] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.021779][ T8928] 71257 total pagecache pages [ 120.021783][ T8928] 0 pages in swap cache [ 120.021787][ T8928] Free swap = 124996kB [ 120.021792][ T8928] Total swap = 124996kB [ 120.021796][ T8928] 1048443 pages RAM [ 120.021800][ T8928] 0 pages HighMem/MovableOnly [ 120.021804][ T8928] 283275 pages reserved [ 120.021808][ T8928] 0 pages cma reserved [ 120.432129][ T8964] fuse: Unknown parameter 'f' [ 120.666085][ T8973] binder: 8972:8973 unknown command 0 [ 120.667371][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 120.667380][ T40] audit: type=1400 audit(1758450327.744:574): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.667792][ T8973] binder: 8972:8973 ioctl c0306201 200000000080 returned -22 [ 120.885827][ T40] audit: type=1400 audit(1758450327.950:575): avc: denied { ioctl } for pid=8983 comm="syz.1.808" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x4b46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.997865][ T8986] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 121.008390][ T8986] bridge_slave_0: left allmulticast mode [ 121.010206][ T8986] bridge_slave_0: left promiscuous mode [ 121.012022][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.016864][ T8986] bridge_slave_1: left allmulticast mode [ 121.018636][ T8986] bridge_slave_1: left promiscuous mode [ 121.020441][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.026747][ T8986] bond0: (slave bond_slave_0): Releasing backup interface [ 121.038179][ T40] audit: type=1400 audit(1758450328.099:576): avc: denied { setattr } for pid=8990 comm="syz.1.810" path="socket:[29919]" dev="sockfs" ino=29919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.061541][ T8986] bond0: (slave bond_slave_1): Releasing backup interface [ 121.071019][ T8994] hugetlbfs: syz.1.811 (8994): Using mlock ulimits for SHM_HUGETLB is obsolete [ 121.097090][ T8986] team0: Port device team_slave_0 removed [ 121.104427][ T8986] team0: Port device team_slave_1 removed [ 121.107494][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.110864][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.115961][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.118824][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.138872][ T40] audit: type=1400 audit(1758450328.193:577): avc: denied { create } for pid=8999 comm="syz.1.813" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 121.167221][ T40] audit: type=1400 audit(1758450328.221:578): avc: denied { read } for pid=9001 comm="syz.6.814" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.167257][ T9002] deleting an unspecified loop device is not supported. [ 121.174914][ T40] audit: type=1400 audit(1758450328.221:579): avc: denied { open } for pid=9001 comm="syz.6.814" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.174944][ T40] audit: type=1400 audit(1758450328.221:580): avc: denied { ioctl } for pid=9001 comm="syz.6.814" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.286379][ T40] audit: type=1400 audit(1758450328.333:581): avc: denied { checkpoint_restore } for pid=9006 comm="syz.6.815" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.341170][ T9015] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 121.344668][ T9015] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 121.613539][ T6031] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 121.774025][ T6031] usb 11-1: Using ep0 maxpacket: 8 [ 121.780018][ T6031] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 121.783096][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.788214][ T6031] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.792877][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.797344][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.802796][ T6031] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 121.806077][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.810583][ T6031] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.815262][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.821319][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.827154][ T6031] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 121.830207][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.834639][ T6031] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.839630][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.844044][ T6031] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.851211][ T6031] usb 11-1: string descriptor 0 read error: -22 [ 121.853842][ T6031] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.857434][ T6031] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.865344][ T6031] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 122.078204][ T6052] usb 11-1: USB disconnect, device number 5 [ 122.705831][ T9039] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.788075][ T9043] bond0: entered promiscuous mode [ 122.790827][ T9043] batadv0: entered promiscuous mode [ 122.793619][ T9043] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 122.797263][ T9043] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 122.801227][ T9043] bond0: left promiscuous mode [ 122.803327][ T9043] batadv0: left promiscuous mode [ 123.021789][ T9056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.055769][ T9058] program syz.6.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.111983][ T9063] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 123.290168][ T9065] comedi comedi3: comedi_config --init_data is deprecated [ 123.432512][ T9075] IPVS: length: 89 != 24 [ 123.490540][ T40] audit: type=1400 audit(1758450330.391:582): avc: denied { map } for pid=9074 comm="syz.6.836" path="/proc/238/net/vlan/vlan0" dev="proc" ino=4026533947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.736793][ T40] audit: type=1400 audit(1758450330.616:583): avc: denied { watch_sb } for pid=9079 comm="syz.6.838" path="/81" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.884698][ T9082] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 123.886796][ T9082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.890099][ T9082] vhci_hcd vhci_hcd.0: Device attached [ 123.922676][ T9085] vhci_hcd: connection closed [ 123.923773][ T1244] vhci_hcd: stop threads [ 123.927418][ T1244] vhci_hcd: release socket [ 123.928855][ T1244] vhci_hcd: disconnect device [ 127.024478][ T5982] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 127.027256][ T5982] Bluetooth: hci4: Injecting HCI hardware error event [ 127.030361][ T5982] Bluetooth: hci4: hardware error 0x00 [ 129.407004][ T5982] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 136.142006][ T9123] __nla_validate_parse: 4 callbacks suppressed [ 136.142017][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.848'. [ 136.352104][ T40] audit: type=1400 audit(1758450342.420:584): avc: denied { listen } for pid=9130 comm="syz.6.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.381394][ T40] audit: type=1400 audit(1758450342.448:585): avc: denied { read } for pid=9130 comm="syz.6.852" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.389740][ T40] audit: type=1400 audit(1758450342.448:586): avc: denied { open } for pid=9130 comm="syz.6.852" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.547486][ T9131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.550933][ T9131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.557340][ T9131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.563450][ T9131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.566054][ T9131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.571135][ T9131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.574515][ T9131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.576597][ T9131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.581009][ T9131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.879458][ T9145] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.881519][ T9145] No source specified [ 136.914752][ T9145] @0: renamed from bond_slave_1 (while UP) [ 136.949422][ T9147] only policy match revision 0 supported [ 136.949436][ T9147] unable to load match [ 136.969228][ T9152] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 136.971834][ T9152] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.976110][ T9152] vhci_hcd vhci_hcd.0: Device attached [ 137.028351][ T9159] syz_tun: entered promiscuous mode [ 137.067928][ T40] audit: type=1400 audit(1758450343.085:587): avc: denied { connect } for pid=9163 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.105230][ T40] audit: type=1400 audit(1758450343.131:588): avc: denied { ioctl } for pid=9168 comm="syz.0.863" path="socket:[32787]" dev="sockfs" ino=32787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.129299][ T9180] netlink: 'syz.5.864': attribute type 64 has an invalid length. [ 137.133012][ T9180] netlink: 'syz.5.864': attribute type 4 has an invalid length. [ 137.135500][ T9180] netlink: 152 bytes leftover after parsing attributes in process `syz.5.864'. [ 137.296594][ T34] usb 40-1: SetAddress Request (2) to port 0 [ 137.296833][ T40] audit: type=1400 audit(1758450343.309:589): avc: denied { setopt } for pid=9190 comm="syz.5.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.298933][ T34] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 137.383450][ T6031] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.405747][ T40] audit: type=1400 audit(1758450343.412:590): avc: denied { getopt } for pid=9192 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.516590][ T9193] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 137.516590][ T9193] The task syz.5.870 (9193) triggered the difference, watch for misbehavior. [ 137.544118][ T6031] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.547075][ T6031] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.550798][ T6031] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.554753][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.557841][ T6031] usb 5-1: Product: syz [ 137.559243][ T6031] usb 5-1: Manufacturer: syz [ 137.561150][ T6031] usb 5-1: SerialNumber: syz [ 137.566184][ T6031] usb 5-1: config 0 descriptor?? [ 137.571619][ T6031] usb 5-1: selecting invalid altsetting 0 [ 137.630618][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.633189][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.786043][ T9179] program syz.0.865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.794191][ T843] usb 5-1: USB disconnect, device number 7 [ 138.152571][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880479a8800: rx timeout, send abort [ 138.156929][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880479a8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 138.162713][ T40] audit: type=1400 audit(1758450344.123:591): avc: denied { read } for pid=5360 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 138.169656][ T40] audit: type=1400 audit(1758450344.123:592): avc: denied { search } for pid=5360 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.177186][ T40] audit: type=1400 audit(1758450344.123:593): avc: denied { search } for pid=5360 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.267877][ T9208] syz.6.873 (9208) used greatest stack depth: 19752 bytes left [ 138.268716][ T5982] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 138.283805][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.875'. [ 138.575368][ T9234] loop2: detected capacity change from 0 to 7 [ 138.582192][ T9234] Dev loop2: unable to read RDB block 7 [ 138.584680][ T9234] loop2: AHDI p1 p2 p3 [ 138.586482][ T9234] loop2: partition table partially beyond EOD, truncated [ 138.591338][ T9234] loop2: p1 start 1601398130 is beyond EOD, truncated [ 138.594353][ T9234] loop2: p2 start 1702059890 is beyond EOD, truncated [ 138.623443][ T9236] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 138.643775][ T9238] program syz.6.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.648211][ T9238] netlink: 37 bytes leftover after parsing attributes in process `syz.6.884'. [ 138.649945][ T9240] input: syz1 as /devices/virtual/input/input12 [ 138.651505][ T9238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.654463][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.656294][ T9238] IPv6: NLM_F_CREATE should be set when creating new route [ 138.656313][ T9238] IPv6: NLM_F_CREATE should be set when creating new route [ 138.720790][ T9246] netlink: 'syz.0.887': attribute type 1 has an invalid length. [ 138.730290][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.731687][ T9246] bond4: entered promiscuous mode [ 138.733997][ T9246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.752182][ T9246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.754534][ T9246] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 138.757691][ T9246] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 138.763659][ T9246] bond4: (slave ip6gre1): making interface the new active one [ 138.766038][ T9246] ip6gre1: entered promiscuous mode [ 138.768403][ T9246] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 138.775342][ T9252] pim6reg1: entered promiscuous mode [ 138.777046][ T9252] pim6reg1: entered allmulticast mode [ 138.845731][ T9259] netlink: 708 bytes leftover after parsing attributes in process `syz.0.891'. [ 138.980859][ T9287] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 139.029435][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.898'. [ 139.099653][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 139.217456][ T9307] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 139.219497][ T9307] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 139.224065][ T9303] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 139.237872][ T9303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.247111][ T9303] bond5: (slave erspan1): making interface the new active one [ 139.250180][ T9303] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 139.262940][ T9307] binder: 9306:9307 ioctl d000943d 2000000013c0 returned -22 [ 139.265927][ T9307] binder: 9306:9307 ioctl d000943e 2000000023c0 returned -22 [ 139.340918][ T9323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.510047][ T9336] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 139.567540][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 139.570654][ T9348] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 139.578713][ T9350] netlink: 264 bytes leftover after parsing attributes in process `syz.5.916'. [ 139.581424][ T9350] openvswitch: netlink: Flow key attr not present in new flow. [ 139.645987][ T9348] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.713237][ T9353] bridge0: entered promiscuous mode [ 139.715240][ T9353] macsec3: entered promiscuous mode [ 139.717642][ T9353] bridge0: port 3(macsec3) entered blocking state [ 139.719658][ T9353] bridge0: port 3(macsec3) entered disabled state [ 139.722074][ T9353] macsec3: entered allmulticast mode [ 139.724790][ T9353] bridge0: entered allmulticast mode [ 139.728001][ T9353] macsec3: left allmulticast mode [ 139.729611][ T9353] bridge0: left allmulticast mode [ 139.732795][ T9353] bridge0: left promiscuous mode [ 139.845132][ T9367] netlink: 'syz.6.918': attribute type 16 has an invalid length. [ 139.848517][ T9367] netlink: 'syz.6.918': attribute type 17 has an invalid length. [ 139.862577][ T9370] kvm: kvm [9369]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000018) = 0x0 [ 140.034102][ T9367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.038349][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.920'. [ 140.087293][ T1127] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 140.091464][ T1127] sr 2:0:0:0: [sr0] tag#10 Sense Key : Illegal Request [current] [ 140.094258][ T1127] sr 2:0:0:0: [sr0] tag#10 Add. Sense: Invalid command operation code [ 140.098720][ T1127] sr 2:0:0:0: [sr0] tag#10 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 140.101737][ T1127] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 140.105853][ T1127] buffer_io_error: 11 callbacks suppressed [ 140.105864][ T1127] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 140.264382][ T9389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.323779][ T9153] vhci_hcd: connection reset by peer [ 140.328687][ T12] vhci_hcd: stop threads [ 140.330073][ T12] vhci_hcd: release socket [ 140.334818][ T12] vhci_hcd: disconnect device [ 140.347838][ T9399] input: syz1 as /devices/virtual/input/input13 [ 140.444477][ T9399] netlink: 'syz.6.922': attribute type 3 has an invalid length. [ 140.566086][ T9423] SELinux: Context is not valid (left unmapped). [ 140.593996][ T9423] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.682582][ T9423] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.781689][ T6052] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 140.795596][ T9423] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.867102][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.891915][ T9423] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.952619][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.975317][ T6052] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 140.977984][ T6052] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.981098][ T6052] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.992516][ T6052] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.996476][ T6052] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.996557][ T9435] netlink: 'syz.0.932': attribute type 17 has an invalid length. [ 140.999761][ T6052] usb 6-1: Product: syz [ 141.002904][ T9435] macvtap0: entered allmulticast mode [ 141.002922][ T9435] veth0_macvtap: entered allmulticast mode [ 141.003663][ T9435] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 141.004644][ T6052] usb 6-1: Manufacturer: syz [ 141.017638][ T6052] usb 6-1: SerialNumber: syz [ 141.021760][ T6052] usb 6-1: config 0 descriptor?? [ 141.027648][ T6052] hub 6-1:0.0: bad descriptor, ignoring hub [ 141.030363][ T6052] hub 6-1:0.0: probe with driver hub failed with error -5 [ 141.035360][ T9435] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 141.036106][ T6052] usb 6-1: selecting invalid altsetting 0 [ 141.100916][ T9438] netlink: 'syz.0.933': attribute type 21 has an invalid length. [ 141.147483][ T1183] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.150672][ T1183] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.160332][ T1183] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.170009][ T1183] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.498290][ T67] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 141.510843][ T9457] SELinux: unknown common r [ 141.512428][ T9457] SELinux: failed to load policy [ 141.537205][ T9459] syz.6.940 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.587323][ T9461] __nla_validate_parse: 5 callbacks suppressed [ 141.587334][ T9461] netlink: 32 bytes leftover after parsing attributes in process `syz.6.941'. [ 141.663406][ T67] usb 6-1: device firmware changed [ 141.666450][ T67] usb 6-1: USB disconnect, device number 8 [ 141.801243][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.943'. [ 141.801303][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.6.943'. [ 142.010918][ T67] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 142.172718][ T67] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 142.175360][ T67] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 142.178566][ T67] usb 6-1: config 0 interface 0 has no altsetting 0 [ 142.185189][ T67] usb 6-1: string descriptor 0 read error: -22 [ 142.187395][ T67] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.190358][ T67] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.195801][ T67] usb 6-1: config 0 descriptor?? [ 142.199038][ T67] hub 6-1:0.0: bad descriptor, ignoring hub [ 142.201035][ T67] hub 6-1:0.0: probe with driver hub failed with error -5 [ 142.207075][ T67] usb 6-1: selecting invalid altsetting 0 [ 142.292008][ T9485] program syz.6.949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.295111][ T9485] ata1.00: invalid transfer count 0 [ 142.297556][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 142.297566][ T40] audit: type=1400 audit(1758450347.977:620): avc: denied { name_bind } for pid=9484 comm="syz.6.949" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 142.388149][ T9489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.951'. [ 142.528547][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 142.534871][ T67] usb 6-1: USB disconnect, device number 9 [ 142.713349][ T40] audit: type=1400 audit(1758450348.370:621): avc: denied { bind } for pid=9506 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.723025][ T40] audit: type=1400 audit(1758450348.370:622): avc: denied { setopt } for pid=9506 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.748598][ T34] usb 40-1: device descriptor read/8, error -110 [ 143.091885][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.186877][ T34] usb usb40-port1: attempt power cycle [ 143.187797][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.240671][ T841] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 143.342888][ T9535] netlink: 'syz.6.965': attribute type 1 has an invalid length. [ 143.345542][ T9535] NCSI netlink: No device for ifindex 0 [ 143.371245][ T9537] tipc: Started in network mode [ 143.373244][ T9537] tipc: Node identity ac14142f, cluster identity 4711 [ 143.376422][ T9537] tipc: New replicast peer: 0.0.0.0 [ 143.380945][ T9537] tipc: Enabled bearer , priority 10 [ 143.384006][ T9537] tipc: New replicast peer: 255.255.255.255 [ 143.401087][ T841] usb 6-1: Using ep0 maxpacket: 16 [ 143.404342][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.407727][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.412247][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 143.416442][ T841] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 143.419224][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.424070][ T841] usb 6-1: config 0 descriptor?? [ 143.432455][ T9541] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 143.451795][ T9541] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 143.456834][ T9541] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 143.512627][ T9543] gretap1: entered promiscuous mode [ 143.517176][ T9543] bond6: (slave gretap1): making interface the new active one [ 143.520461][ T9543] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 143.531165][ T9541] macvlan2: entered promiscuous mode [ 143.533422][ T9541] macvlan2: entered allmulticast mode [ 143.536242][ T9541] bond6: entered promiscuous mode [ 143.539162][ T9541] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.583346][ T9541] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 143.604912][ T9541] bond6: left promiscuous mode [ 143.625251][ T7194] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 143.808636][ T34] usb usb40-port1: unable to enumerate USB device [ 143.810620][ T7194] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 143.813410][ T7194] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.816577][ T7194] usb 11-1: config 0 interface 0 has no altsetting 0 [ 143.821119][ T7194] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.824012][ T7194] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.826593][ T7194] usb 11-1: Product: syz [ 143.828038][ T7194] usb 11-1: Manufacturer: syz [ 143.829763][ T7194] usb 11-1: SerialNumber: syz [ 143.832899][ T7194] usb 11-1: config 0 descriptor?? [ 143.836135][ T7194] hub 11-1:0.0: bad descriptor, ignoring hub [ 143.838076][ T7194] hub 11-1:0.0: probe with driver hub failed with error -5 [ 143.842901][ T7194] usb 11-1: selecting invalid altsetting 0 [ 143.867029][ T841] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:05AC:8241.0006/input/input14 [ 143.951911][ T841] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 143.967853][ T842] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.130435][ T842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.133474][ T842] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 144.136489][ T842] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 144.141342][ T842] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.144153][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.146635][ T842] usb 5-1: Product: Б [ 144.147920][ T842] usb 5-1: Manufacturer: 륹翌鐾텚❽㤍꯯鐻䝳괲曒ᧃ緡洼猚󟦎鼤㖧汍팞跀᏾㻫臜猻䆑캫씸▅㨞훗犲뷉ﾸ꩖Ỡ跦ṧ㮧䵠䄑ˋ蛗Ბᩘ࿟氾ꏲ潧涌瘷绡籍卣⿳쓇呿ᣃ瓤ṇﻒ᤼줕ཻ잨ⶐ녘怨ॡ珱皀鶘ẅꪑ옻猝穓맼ᾖ쌄玟矝鞺渼ꠖ畟ၠ슑뒘雒픅莎珑 [ 144.157882][ T842] usb 5-1: SerialNumber: Ⰱ [ 144.158215][ T841] usb 6-1: USB disconnect, device number 10 [ 144.380355][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.383255][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.437747][ T843] usb 11-1: reset high-speed USB device number 6 using dummy_hcd [ 144.439014][ T67] tipc: Node number set to 2886997039 [ 144.454941][ T842] cdc_ncm 5-1:1.0: bind() failure [ 144.459819][ T842] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 144.461945][ T842] cdc_ncm 5-1:1.1: bind() failure [ 144.465447][ T842] usb 5-1: USB disconnect, device number 8 [ 144.625467][ T843] usb 11-1: device firmware changed [ 144.627930][ T843] usb 11-1: USB disconnect, device number 6 [ 144.760076][ T40] audit: type=1400 audit(1758450350.287:623): avc: denied { watch_mount } for pid=9553 comm="syz.1.971" path="/240" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.896070][ T40] audit: type=1400 audit(1758450350.409:624): avc: denied { connect } for pid=9556 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.904397][ T40] audit: type=1400 audit(1758450350.418:625): avc: denied { setopt } for pid=9556 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.912090][ T40] audit: type=1400 audit(1758450350.418:626): avc: denied { write } for pid=9556 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.919852][ T40] audit: type=1400 audit(1758450350.418:627): avc: denied { bind } for pid=9556 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.937237][ T9559] tmpfs: Unknown parameter '' [ 144.972356][ T843] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 145.018503][ T40] audit: type=1400 audit(1758450350.530:628): avc: denied { write } for pid=9569 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 145.099634][ T9572] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.113632][ T9578] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 145.134516][ T843] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 145.137116][ T843] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 145.140318][ T843] usb 11-1: config 0 interface 0 has no altsetting 0 [ 145.144855][ T843] usb 11-1: string descriptor 0 read error: -22 [ 145.147043][ T843] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.149851][ T843] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.159619][ T843] usb 11-1: config 0 descriptor?? [ 145.165157][ T843] hub 11-1:0.0: bad descriptor, ignoring hub [ 145.167101][ T843] hub 11-1:0.0: probe with driver hub failed with error -5 [ 145.170762][ T843] usb 11-1: selecting invalid altsetting 0 [ 145.261393][ T40] audit: type=1326 audit(1758450350.755:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.0.977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941e58ec29 code=0x7fc00000 [ 145.361824][ T9582] netlink: 'syz.0.978': attribute type 29 has an invalid length. [ 145.364753][ T9582] netlink: 'syz.0.978': attribute type 29 has an invalid length. [ 145.368210][ T9582] netlink: 500 bytes leftover after parsing attributes in process `syz.0.978'. [ 145.496433][ T841] usb 11-1: USB disconnect, device number 7 [ 145.509753][ T9588] netlink: 'syz.0.981': attribute type 10 has an invalid length. [ 145.512124][ T9588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.981'. [ 145.760764][ T9616] blkio.reset_stats is deprecated [ 145.919058][ T9624] fuse: Bad value for 'fd' [ 145.996058][ T9633] tmpfs: Unknown parameter 'hUge' [ 145.998016][ T9633] overlayfs: failed to resolve './bus': -2 [ 146.052191][ T9639] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 146.061996][ T9639] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 146.147595][ T9644] netlink: 2 bytes leftover after parsing attributes in process `syz.6.998'. [ 146.220280][ T9654] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 146.511019][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1005'. [ 146.514464][ T9672] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 146.516835][ T9672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.520247][ T9672] tmpfs: Unknown parameter 'usrquota{gHt4}ռc31d~XO)z9;c&#LtO;`lAX\)r|kcr [ 146.520247][ T9672] }I@' [ 146.576693][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.748550][ T34] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 146.752205][ T34] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.756389][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.761460][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.765355][ T34] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.769135][ T34] usb 5-1: Product: syz [ 146.770867][ T34] usb 5-1: Manufacturer: syz [ 146.772794][ T34] usb 5-1: SerialNumber: syz [ 146.776934][ T34] usb 5-1: config 0 descriptor?? [ 146.781343][ T34] hub 5-1:0.0: bad descriptor, ignoring hub [ 146.783847][ T34] hub 5-1:0.0: probe with driver hub failed with error -5 [ 146.789178][ T34] usb 5-1: selecting invalid altsetting 0 [ 147.260061][ T841] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 147.434966][ T841] usb 5-1: device firmware changed [ 147.436890][ T841] usb 5-1: USB disconnect, device number 9 [ 147.443835][ T9699] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 147.512282][ T1244] Bluetooth: hci3: Frame reassembly failed (-84) [ 147.513160][ T9703] syzkaller1: entered promiscuous mode [ 147.517140][ T9703] syzkaller1: entered allmulticast mode [ 147.794523][ T5981] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.794588][ T5982] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.794828][ T841] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 147.979047][ T841] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 147.981718][ T841] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 147.984828][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.989726][ T841] usb 5-1: string descriptor 0 read error: -22 [ 147.991704][ T841] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.994629][ T841] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.999788][ T841] usb 5-1: config 0 descriptor?? [ 148.003531][ T841] hub 5-1:0.0: bad descriptor, ignoring hub [ 148.005603][ T841] hub 5-1:0.0: probe with driver hub failed with error -5 [ 148.009267][ T841] usb 5-1: selecting invalid altsetting 0 [ 148.340768][ T841] usb 5-1: USB disconnect, device number 10 [ 148.781503][ T9718] syz_tun: entered allmulticast mode [ 148.787251][ T9718] pimreg: entered allmulticast mode [ 148.791720][ T9718] tipc: Enabled bearer , priority 0 [ 148.797225][ T9717] syz_tun: left allmulticast mode [ 148.802396][ T9717] tipc: Disabling bearer [ 148.931218][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 149.165888][ T9727] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1021'. [ 149.205365][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1022'. [ 149.404586][ T9740] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 149.458330][ T9740] netlink: 'syz.0.1025': attribute type 39 has an invalid length. [ 149.676235][ T5982] Bluetooth: hci3: command 0x1003 tx timeout [ 149.677284][ T5969] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 149.700718][ T9746] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1026'. [ 149.873893][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1029'. [ 150.004301][ T40] kauditd_printk_skb: 724 callbacks suppressed [ 150.004317][ T40] audit: type=1326 audit(1758450355.189:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.012279][ T9768] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1033'. [ 150.016132][ T40] audit: type=1326 audit(1758450355.189:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.028919][ T40] audit: type=1326 audit(1758450355.189:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.038960][ T40] audit: type=1326 audit(1758450355.189:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.047976][ T40] audit: type=1326 audit(1758450355.189:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.058064][ T40] audit: type=1326 audit(1758450355.189:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.067046][ T40] audit: type=1326 audit(1758450355.189:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.074360][ T40] audit: type=1326 audit(1758450355.189:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.082950][ T40] audit: type=1326 audit(1758450355.189:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.091143][ T40] audit: type=1326 audit(1758450355.189:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f941e58ec29 code=0x7ffc0000 [ 150.256666][ T9786] netlink: 'syz.6.1038': attribute type 10 has an invalid length. [ 150.259195][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1038'. [ 150.262206][ T9786] batadv0: entered allmulticast mode [ 150.264550][ T9786] bridge0: port 1(batadv0) entered blocking state [ 150.266663][ T9786] bridge0: port 1(batadv0) entered disabled state [ 150.270103][ T9786] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 150.378400][ T9795] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 150.447231][ T9797] sd 0:0:0:0: PR command failed: 1026 [ 150.449105][ T9797] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 150.451324][ T9797] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 150.494740][ T9803] netlink: 'syz.6.1045': attribute type 1 has an invalid length. [ 150.587704][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1047'. [ 150.782834][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1049'. [ 150.786022][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1049'. [ 150.842086][ T9818] netlink: 'syz.5.1051': attribute type 5 has an invalid length. [ 150.932786][ T9828] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 151.922207][ T9844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9844 comm=syz.6.1058 [ 151.957135][ T9845] tmpfs: Invalid uid '0x00000000ffffffff' [ 152.714617][ T9866] tipc: Enabled bearer , priority 0 [ 152.717193][ T9866] syzkaller0: entered promiscuous mode [ 152.719004][ T9866] syzkaller0: entered allmulticast mode [ 152.722719][ T9866] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 152.734626][ T9866] tipc: Resetting bearer [ 152.814399][ T9871] overlayfs: conflicting lowerdir path [ 153.142008][ T9896] netlink: 'syz.6.1076': attribute type 3 has an invalid length. [ 153.300222][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 153.460545][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 153.539475][ T9862] tipc: Resetting bearer [ 153.549066][ T67] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 153.551982][ T9862] tipc: Disabling bearer [ 153.701521][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.706690][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.720551][ T67] usb 11-1: config 0 has no interfaces? [ 153.724348][ T67] usb 11-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 153.727418][ T67] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.730565][ T67] usb 11-1: Product: syz [ 153.731953][ T67] usb 11-1: Manufacturer: syz [ 153.733493][ T67] usb 11-1: SerialNumber: syz [ 153.738829][ T67] usb 11-1: config 0 descriptor?? [ 153.741250][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 153.744462][ T34] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 153.746844][ T34] usb 10-1: can't read configurations, error -71 [ 154.103021][ T9915] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 154.115680][ T67] usb 11-1: USB disconnect, device number 8 [ 154.275075][ T9919] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 154.371528][ T9925] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 154.807590][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.862035][ T34] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 155.000001][ T34] usb 10-1: device descriptor read/64, error -71 [ 155.106887][ T67] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 155.139136][ T34] usb usb10-port1: attempt power cycle [ 155.267333][ T67] usb 11-1: Using ep0 maxpacket: 8 [ 155.275080][ T67] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 155.292661][ T67] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.295994][ T67] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.299723][ T67] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.302939][ T67] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.306980][ T67] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.309873][ T67] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.518064][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 155.518075][ T40] audit: type=1400 audit(1758450360.352:1416): avc: denied { write } for pid=9976 comm="syz.0.1100" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.518548][ T9979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 155.523944][ T34] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 155.527661][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.528197][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 155.528957][ T9980] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 155.532473][ T9978] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 155.533375][ T67] usb 11-1: usb_control_msg returned -32 [ 155.534801][ T1183] vhci_hcd: stop threads [ 155.534810][ T1183] vhci_hcd: release socket [ 155.534820][ T1183] vhci_hcd: disconnect device [ 155.536917][ T9978] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 155.538354][ T67] usbtmc 11-1:16.0: can't read capabilities [ 155.567041][ T34] usb 10-1: device descriptor read/8, error -71 [ 155.731640][ T5969] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 155.845407][ T34] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 155.878083][ T34] usb 10-1: device descriptor read/8, error -71 [ 155.911304][T10003] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 156.005125][ T34] usb usb10-port1: unable to enumerate USB device [ 156.035141][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.240727][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.334929][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.431404][ T5982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.437167][ T5982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.440264][ T5982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.445933][ T5982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.448999][ T5982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.554116][T10005] chnl_net:caif_netlink_parms(): no params data found [ 156.595367][T10014] __nla_validate_parse: 2 callbacks suppressed [ 156.595377][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1110'. [ 156.663202][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.665463][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.667638][T10005] bridge_slave_0: entered allmulticast mode [ 156.670322][T10005] bridge_slave_0: entered promiscuous mode [ 156.682169][ T1149] bridge_slave_1: left allmulticast mode [ 156.684492][ T1149] bridge_slave_1: left promiscuous mode [ 156.686762][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.691177][ T1149] bridge_slave_0: left allmulticast mode [ 156.693497][ T1149] bridge_slave_0: left promiscuous mode [ 156.695409][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.706730][ T1149] batman_adv: batadv0: Interface deactivated: gretap1 [ 156.865105][ T1149] batman_adv: batadv0: Removing interface: gretap1 [ 157.031220][ T5969] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.279937][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.320258][ T1149] bond_slave_0: left allmulticast mode [ 157.323814][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.341588][ T1149] bond_slave_1: left allmulticast mode [ 157.344173][ T1149] bond0 (unregistering): Released all slaves [ 157.353641][ T1149] bond1 (unregistering): Released all slaves [ 157.361621][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.364819][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.367896][T10005] bridge_slave_1: entered allmulticast mode [ 157.371743][T10005] bridge_slave_1: entered promiscuous mode [ 157.423585][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.428324][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.463765][T10005] team0: Port device team_slave_0 added [ 157.466888][T10005] team0: Port device team_slave_1 added [ 157.500264][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.502717][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.511203][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.528406][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.530677][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.539569][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.633379][T10031] ------------[ cut here ]------------ [ 157.635159][T10031] WARNING: CPU: 3 PID: 10031 at arch/x86/kvm/x86.c:11563 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 SYZFAIL: failed to recv rpc [ 157.638487][T10031] Modules linked in: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.640861][T10031] CPU: 3 UID: 0 PID: 10031 Comm: syz.5.1113 Not tainted syzkaller #0 PREEMPT(full) [ 157.645568][T10031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.648329][T10005] hsr_slave_0: entered promiscuous mode [ 157.649051][T10031] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 157.652939][T10005] hsr_slave_1: entered promiscuous mode [ 157.653262][T10005] debugfs: 'hsr0' already exists in 'hsr' [ 157.654989][T10031] Code: 0a 00 00 00 00 00 00 e8 dc 69 be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 157.655004][T10031] RSP: 0018:ffffc90004257c30 EFLAGS: 00010293 [ 157.655015][T10031] RAX: 0000000000000000 RBX: ffff8880387ba940 RCX: ffffffff814192bf [ 157.655023][T10031] RDX: ffff88805595a440 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 157.655030][T10031] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 157.655037][T10031] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057118000 [ 157.655044][T10031] R13: ffff8880387baa18 R14: 0000000000000000 R15: ffff8880387bac74 [ 157.655051][T10031] FS: 00007f6b94dd56c0(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 157.655075][T10031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.655085][T10031] CR2: 000000005200000c CR3: 000000003ded3000 CR4: 0000000000352ef0 [ 157.655093][T10031] Call Trace: [ 157.655097][T10031] [ 157.655105][T10031] kvm_vcpu_ioctl+0x5eb/0x1690 [ 157.655125][T10031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.655140][T10031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.655155][T10031] ? do_vfs_ioctl+0x128/0x14f0 [ 157.655180][T10031] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.655198][T10031] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 157.655220][T10031] ? hook_file_ioctl_common+0x145/0x410 [ 157.655236][T10031] ? selinux_file_ioctl+0x180/0x270 [ 157.655252][T10031] ? selinux_file_ioctl+0xb4/0x270 [ 157.657040][T10005] Cannot create hsr debugfs directory [ 157.662978][T10031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.706960][T10031] __x64_sys_ioctl+0x18e/0x210 [ 157.707169][T10031] do_syscall_64+0xcd/0x4e0 [ 157.707321][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.707335][T10031] RIP: 0033:0x7f6b96b8ec29 [ 157.707345][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.707357][T10031] RSP: 002b:00007f6b94dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.707369][T10031] RAX: ffffffffffffffda RBX: 00007f6b96dd6090 RCX: 00007f6b96b8ec29 [ 157.707377][T10031] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 157.707384][T10031] RBP: 00007f6b96c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 157.707391][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.707399][T10031] R13: 00007f6b96dd6128 R14: 00007f6b96dd6090 R15: 00007ffe549aaad8 [ 157.707412][T10031] [ 157.707418][T10031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.707427][T10031] CPU: 3 UID: 0 PID: 10031 Comm: syz.5.1113 Not tainted syzkaller #0 PREEMPT(full) [ 157.707440][T10031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.707447][T10031] Call Trace: [ 157.707451][T10031] [ 157.707455][T10031] dump_stack_lvl+0x3d/0x1f0 [ 157.707475][T10031] vpanic+0x6e8/0x7a0 [ 157.707493][T10031] ? __pfx_vpanic+0x10/0x10 [ 157.707513][T10031] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 157.707530][T10031] panic+0xca/0xd0 [ 157.707539][T10031] ? __pfx_panic+0x10/0x10 [ 157.707560][T10031] ? check_panic_on_warn+0x1f/0xb0 [ 157.707571][T10031] check_panic_on_warn+0xab/0xb0 [ 157.707581][T10031] __warn+0xf6/0x3c0 [ 157.707591][T10031] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 157.707608][T10031] report_bug+0x3c3/0x580 [ 157.707625][T10031] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 157.707642][T10031] handle_bug+0x184/0x210 [ 157.707658][T10031] exc_invalid_op+0x17/0x50 [ 157.707674][T10031] asm_exc_invalid_op+0x1a/0x20 [ 157.707684][T10031] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 157.707701][T10031] Code: 0a 00 00 00 00 00 00 e8 dc 69 be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 157.707711][T10031] RSP: 0018:ffffc90004257c30 EFLAGS: 00010293 [ 157.707720][T10031] RAX: 0000000000000000 RBX: ffff8880387ba940 RCX: ffffffff814192bf [ 157.707727][T10031] RDX: ffff88805595a440 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 157.707734][T10031] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 157.707741][T10031] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057118000 [ 157.707748][T10031] R13: ffff8880387baa18 R14: 0000000000000000 R15: ffff8880387bac74 [ 157.707758][T10031] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 157.707774][T10031] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 157.707795][T10031] kvm_vcpu_ioctl+0x5eb/0x1690 [ 157.707812][T10031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.707827][T10031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.707841][T10031] ? do_vfs_ioctl+0x128/0x14f0 [ 157.707858][T10031] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.707876][T10031] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 157.707898][T10031] ? hook_file_ioctl_common+0x145/0x410 [ 157.707913][T10031] ? selinux_file_ioctl+0x180/0x270 [ 157.707929][T10031] ? selinux_file_ioctl+0xb4/0x270 [ 157.707946][T10031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.707961][T10031] __x64_sys_ioctl+0x18e/0x210 [ 157.707979][T10031] do_syscall_64+0xcd/0x4e0 [ 157.707995][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.708006][T10031] RIP: 0033:0x7f6b96b8ec29 [ 157.708014][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.708024][T10031] RSP: 002b:00007f6b94dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.708035][T10031] RAX: ffffffffffffffda RBX: 00007f6b96dd6090 RCX: 00007f6b96b8ec29 [ 157.708042][T10031] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 157.708048][T10031] RBP: 00007f6b96c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 157.708055][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.708062][T10031] R13: 00007f6b96dd6128 R14: 00007f6b96dd6090 R15: 00007ffe549aaad8 [ 157.708075][T10031] [ 157.708764][T10031] Kernel Offset: disabled VM DIAGNOSIS: 10:26:08 Registers: info registers vcpu 0 CPU#0 RAX=ffff888100142178 RBX=dffffc0000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000020 RDI=ffff888100142178 RBP=ffff888100142198 RSP=ffffc90000107c38 R8 =0000000000000000 R9 =fffffbfff361f72e R10=ffffffff9b0fb973 R11=0000000000000000 R12=ffff888100142178 R13=ffff88801b8a804c R14=ffff888100142178 R15=ffff88801de98580 RIP=ffffffff8b90c91e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb41a507d60 CR3=0000000024f49000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000008001 DR2=0000000000000080 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4199a76c3 00007fb4199a76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe982547d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555ef96344 000055555ef96190 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555efa2718 000055555efa20c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010800100174a401 8002000700100005 a0030fffffffffff ff04059003401000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 011f8e0180000007 0010000fffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0401f8100002 10000580040ff480 8004010000040806 010800100174a401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002000700100005 a0030fffffffffff ff04059003401000 0580030980040889 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 85ba840800010000 04080606011fbe00 02000701aa801000 0b90030010000b80 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=ffff888029a20000 RCX=ffffffff86b40712 RDX=00000000ffffffff RSI=ffffffff86b4071f RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900006a0748 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff888029a216b8 R14=ffff888029a212d0 R15=0000000000000000 RIP=ffffffff86b40759 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562b17ecfda8 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcc0c002 Opmask01=0000000000000010 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000662d 0000562b17ec1d70 0000562b17ec1d90 6368642f6374005b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183873a3d0015 16170b3637303f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562b17ec60b8 0000000000000000 000000000000000f 0000562b1700873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562b17ec0918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffffffffffff RBX=00007fb9dc3d5fa0 RCX=ffffffffffffffa8 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=00007fb9dc211e41 RSP=00007fb9dcfa5ff0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000246 R12=0000000000000000 R13=00007fb9dc3d6038 R14=00007fb9dc3d5fa0 R15=00007fff9e6ced78 RIP=00007fb9dc054956 RFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb9dcfa66c0 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f21ca2db286 CR3=0000000031f5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9e6cf286 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9e6cf286 00007fff9e6cf28c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dc212e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dc212e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dc212e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dc212e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dc212f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dc212fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3067732f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1344500c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c0d5 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc900042575a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b1180e0 R15=ffffffff8564c070 RIP=ffffffff8564c0ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f6b94dd56c0 ffffffff 00c01300 GS =0000 ffff8880d69b2000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=000000003ded3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff16439436 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff16439436 00007fff1643943c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941e612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941e612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941e612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941e612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941e612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941e612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000