last executing test programs: 40.355978926s ago: executing program 3 (id=782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1}, 0x120) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x955a, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x34, 0xc, 0x17, 0x3, 0x1, 0xf2, 0x9, 0xc3}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$P9_RGETLOCK(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf250d00000008000300", @ANYRES32=r11, @ANYBLOB="6bd517ad1734a173faca4db775659be75739b2d0d989ea2cee5438839064e7a8164a20bde564b5500170d1704e8a469b3b2cdf6e1abacd92fbabc023013811c8767818faac6c494a3d90568b2ea3a4a5444255d345426aa0ea91397eb4475e1c4e58f728e59cccc998260aa305b8c6323707955985aa5533524440758c198e35079a56ddbbe6135b36105c053444edf34fe2b27e3c2ee6c1f86eeecc5da01f9871e465dc0244ee2ed3536a3faed4e6e93f71f3c33b37f1e2e41b65a2a0316c34bb9e7126b05b5f694c996c1d520d643f85240dae078fbad88ee9e9f05f5a07a76f51785b09554ccb583d0447edef0b3ab707"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000014) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x100, 0x0, {0x1006, 0x1, 0x9, 0x7}}) socket(0x10, 0x2, 0x0) 40.355646046s ago: executing program 3 (id=783): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}}, 0x44000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 40.114979176s ago: executing program 3 (id=787): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000060008100", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 40.053373975s ago: executing program 3 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) statfs(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000240)=""/240) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 39.995509896s ago: executing program 3 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000062102000100000008000500", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_accept_list_size={{0x2}, {0xe5, 0x7}}}}, 0x8) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc804}, 0x8010) (async) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000080)=0x7) 39.54149844s ago: executing program 3 (id=804): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000006c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000f40)={{0x80000000, 0x0, 0x0, [0x5, 0xfffffffc]}, {r4, 0x0, 0x4, [0xffffffff, 0x3ff]}, 0x2, [0x1, 0x9]}) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x9}, &(0x7f00000003c0)=0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000004c0)={r9, 0x90, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0xc, @local, 0x1}, @in6={0xa, 0x4e21, 0x101, @mcast2, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x7}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0xb2c}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}]}, &(0x7f0000000580)=0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x3, &(0x7f0000000080)=0x6}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x381780, 0x0) 39.471213185s ago: executing program 32 (id=804): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000006c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000f40)={{0x80000000, 0x0, 0x0, [0x5, 0xfffffffc]}, {r4, 0x0, 0x4, [0xffffffff, 0x3ff]}, 0x2, [0x1, 0x9]}) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x9}, &(0x7f00000003c0)=0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000004c0)={r9, 0x90, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0xc, @local, 0x1}, @in6={0xa, 0x4e21, 0x101, @mcast2, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x7}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0xb2c}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}]}, &(0x7f0000000580)=0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x3, &(0x7f0000000080)=0x6}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x381780, 0x0) 24.705347752s ago: executing program 1 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x5, 0x40000, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffffffffffff, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x6, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x2, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x20, 0x0, 0x0, 0x2, 0xb4c, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) 24.616663614s ago: executing program 1 (id=1045): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x14) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x9, 0x2, 0x3, 0x8, 0x0, "b36b30a2a4d03f61e3db958ca573757493163e", 0xe3a, 0xffffffff}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23.395952592s ago: executing program 1 (id=1071): fcntl$lock(0xffffffffffffffff, 0x40f, 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0x0, '\x00', @p_u8=0x0}}) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r3, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x2000, 0x32, 0x10}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000000200)) (async) close(r0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x8, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x6, 0x0, 0xee01}, {0x0, 0x6, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x5}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4048050) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000003000000000000000000a30a000000000000f8ffffffffffffff04000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000fc00"/112], 0xb8}}, 0x0) 23.393931524s ago: executing program 1 (id=1072): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="72646fd0117e7347acbdf126", 0xc, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000e4ff00000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000004080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8065}, 0x24000840) close(r5) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000012c0)=ANY=[], 0xa00}, 0x1, 0x0, 0x0, 0x4048041}, 0x20010041) r6 = socket(0x840000000002, 0x3, 0xff) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r7 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000900)=[r6], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x18, &(0x7f0000000000), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000001280)=""/226, 0x4a, 0xe2, 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000200)={r2, 0xc, &(0x7f00000001c0)=""/12}) socket$nl_route(0x10, 0x3, 0x0) 17.28563339s ago: executing program 1 (id=1080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000005c0)=0x8000000000000001, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x400000000ec82, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x0, 0x3, 0x34f}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r6, 0x18, 0x0, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x14, 0x0, &(0x7f0000000440)="f6f4e9a100000000002a8ba478bbb7dbfc007024", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2b, 0x801, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 17.185536966s ago: executing program 4 (id=1082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) close(r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) io_uring_enter(r0, 0x7abd, 0xf051, 0x44, &(0x7f0000000000)={[0x8000000000000000]}, 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x69) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) write$eventfd(r0, 0x0, 0x0) 17.125873335s ago: executing program 1 (id=1083): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000530a00000000000080000000c06bc0ff0000000018170000", @ANYRES32=0x1, @ANYBLOB="00000000000000001868000e010000000000af8e1bd00000052d1000000000009500005f0c000000"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xaa, &(0x7f0000000280)=""/170, 0x41000, 0x60, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x3, 0x4}, {0x3, 0x1, 0x1, 0x5}, {0x2, 0x9, 0x3, 0xb}, {0x1, 0x5, 0xc, 0x1}, {0x0, 0x1, 0x3, 0x6}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r4 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000080)="2c80fce256052b06f8148e045f9b2dec", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000b80)="d7d42f9134461c21d42a97f0ebd55245", 0x10) io_uring_enter(r4, 0x207a98, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a29f7acda0b77e", 0x0, 0x0, 0x14, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a3000e600002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000"], 0x80}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) syz_usb_disconnect(r0) 17.124704765s ago: executing program 4 (id=1084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00ff05000000000000080000000000007b8af8ff00000000bfa2000000007f5833620000f8ffffffb703000008000000b70400000000000085000200"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x80, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) userfaultfd(0x80000) (async) r2 = userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000799000/0x4000)=nil, &(0x7f00003ef000/0x1000)=nil, 0x4000, 0x3}) (async) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000799000/0x4000)=nil, &(0x7f00003ef000/0x1000)=nil, 0x4000, 0x3}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x18c) close(r3) (async) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000002480)=0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d8aef858f343fe49576dbf166642c7266646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3a86787ab1defa88}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ca579e3}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1dac5e81}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a787f3d}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000002) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3a86787ab1defa88}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ca579e3}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1dac5e81}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a787f3d}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000002) write(r1, &(0x7f00000002c0)="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", 0xfc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000040)=0x5, 0x0, 0x4) 16.825760829s ago: executing program 4 (id=1085): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xb8ba3816911c514, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) close(r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = accept4$netrom(r2, 0x0, &(0x7f00000002c0), 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f015, 0x1}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f015, 0x1}) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000300)=0x1, &(0x7f0000000380)=0x4) (async) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000300)=0x1, &(0x7f0000000380)=0x4) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e20, 0x1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x4e22, 0x101, @private1, 0xa}, 0x1, {[0x7fff, 0x9, 0x6, 0x800200, 0x515b, 0x8, 0x100, 0x10]}}, 0x5c) (async) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e20, 0x1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x4e22, 0x101, @private1, 0xa}, 0x1, {[0x7fff, 0x9, 0x6, 0x800200, 0x515b, 0x8, 0x100, 0x10]}}, 0x5c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r5], 0x0, 0x32}, 0x28) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x60000, 0x8001, 0x0, 0x3, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x1, 0x1, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x6}, {0x8, 0xe, 0x7, '\x00', 0xf1}, {0x2c, 0xc, 0x9, '\x00', 0x43}, {0x5, 0x78, 0xc5, '\x00', 0x66}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xd, 0x7f, 0x6, '\x00', 0xfc}, {0x1, 0x3, 0xf, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x6}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x4, '\x00', 0x48}, {0x3, 0x0, 0x8, '\x00', 0x3}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x1, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xf}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0x2b, 0x81, '\x00', 0x12}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_ro(r10, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 16.456314196s ago: executing program 0 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x19, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x1b) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r2, 0x25, 0x18, @val=@iter={&(0x7f0000000000)=@map_fd=r5, 0x10}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x58}}, 0x8000002) 16.373225083s ago: executing program 0 (id=1090): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x4000009a}}], 0x20}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0x9e0000, 0x2, 0xfffffec2, r2, 0x0, &(0x7f00000001c0)={0x9909cf, 0x6, '\x00', @p_u16=&(0x7f0000000180)}}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) dup3(r0, r0, 0x80000) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000140)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x4000009a}}], 0x20}) (async) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0x9e0000, 0x2, 0xfffffec2, r2, 0x0, &(0x7f00000001c0)={0x9909cf, 0x6, '\x00', @p_u16=&(0x7f0000000180)}}) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) (async) 16.314281636s ago: executing program 4 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x14000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x255}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x983}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0xc815) fcntl$getflags(r0, 0xb) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x2, 0x2, 0x4, 0x2}}, 0x2e) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000440)=0x7) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80020242}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7f, 0x9, 0x9, 0x401]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8854}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x48088}, 0x800) r6 = socket(0x10, 0x5, 0x6) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000700)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@cgroup=r2, 0x16, 0x0, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x7a41cfed89177b38}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x2, 0x70bd2c, 0x8, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x240048c0) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40820010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x20004010) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x10}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000cc0)={0x9, 0x72}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x140b, 0x4, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x1) bind$l2tp6(r2, &(0x7f0000000e00)={0xa, 0x0, 0x0, @empty, 0x71, 0x2}, 0x20) ioctl$KDENABIO(r2, 0x4b36) bind$bt_hci(r6, &(0x7f0000000e40)={0x1f, 0x2, 0x1}, 0x6) flistxattr(r7, &(0x7f0000000e80)=""/4096, 0x1000) 16.254652991s ago: executing program 4 (id=1093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x1) listen(0xffffffffffffffff, 0x3) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) close_range(r0, r2, 0x200000000000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r11], 0x50}}, 0x2) 16.075328612s ago: executing program 0 (id=1095): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000060008100", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 15.925525589s ago: executing program 0 (id=1096): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x8ed3, @dev={0xfe, 0x80, '\x00', 0x36}, 0xa}, @in6={0xa, 0x4e24, 0xa4, @local}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0xa4) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e64, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)=')', 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 15.925285391s ago: executing program 0 (id=1097): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000040001) 15.866091433s ago: executing program 2 (id=1099): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x1, 0xffffffffffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f00000000c0)) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x18bb6000) 15.865876797s ago: executing program 2 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d93", 0x55}], 0x1}}], 0x1, 0x4000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x6d5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000001b40)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x0, 0x0, 0x148, 0x148, 0x148, 0x340, 0x240, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0xe, [0x4e21, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e22, 0x4e22, 0x4e22, 0x4e23, 0x4e20, 0x4e22, 0x4e24, 0x4e22, 0xb07, 0x4e20], [0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfe]}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x202b, 0x25, 0x3f, 0x2e, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz0\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x38, r1, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d8dfd91b"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) 15.785507968s ago: executing program 2 (id=1101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYBLOB="f8a0e7d6dee9f8f4e2096e5b1c2b73d0", @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="3c0000001000010400"/20, @ANYRES8=r0], 0x3c}}, 0x20008001) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x6}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x7, 0x9, 0x1, 0x4, 0x3ff, 0x100, 0x9}}}}]}, 0xb8}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x8, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv4_getnetconf={0x24, 0x52, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x8001}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040805) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') lseek(r7, 0x3, 0x0) fsync(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) 15.664297576s ago: executing program 2 (id=1102): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 15.662058928s ago: executing program 2 (id=1103): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x6, "210e16b2836a9e19b53a36f457fa55ed3fb94bece5b0438a76414008c64df1d9", 0x1}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x3ff, 0x0, r0, 0x4, '\x00', 0x0, r0, 0x3, 0x0, 0x1}, 0x50) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xe9, 0x3, 0x0, 0x5e9880000000000, 0x7, 0x4}, {0xfffffffe, 0x6, 0xfffffffffffffff7, 0x1, 0x6, 0x8}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000400)=0x2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0), 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={@remote, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfff, 0x8, 0xa, 0x500, 0x7, 0x8}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={@remote, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfff, 0x8, 0xa, 0x500, 0x7, 0x8}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000580)={'syzkaller1\x00', {0x2, 0x0, @local}}) (async) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000580)={'syzkaller1\x00', {0x2, 0x0, @local}}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000005c0)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000005c0)={0x0, @reserved}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x49}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x801) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)=0x4) sendmmsg$inet6(r0, &(0x7f0000002f80)=[{{&(0x7f0000000800)={0xa, 0x4e24, 0x8, @local, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000840)="258ec6577800682c735614e8c6f4f0930ad0897b94701c47e585de52f9e5132ce85345e57427dc8aab8e2ddf6d71bfd380abc12875dd536b08849941fd656a595f8ae30ba9622c7c86cf57c74bad11936d53d37f798f89b689be30474d09cc8331f2bf5ba7052975e7dd8f2c2d9370c244c5178f10469fa0f956c156066d036c48a6b59679db4a170b3743a2fc74d93f39621a516eba3a9ca8b803ff3fd361e1deef35c009eec2af0d4624318e467ba2bf9218937cc250e471e0e36babe1415a73000ebca54fe59ef2b6c9e5d83561db", 0xd0}, {&(0x7f0000000940)="af84299775c2c21962e317a6c4e0904c5e5a0c8c16b800bccc39d2762e22875e16bfa5e2d707c4b14b603795ff044e6310d325124065907a4d4dde15", 0x3c}, {&(0x7f0000000980)="a18a61ecd15c6676f830d29f6a70d7762ed423b4aa76457cbf0e7fa0baba3db7aa15fc9a9931e33bc3c85cbadd8b97c1ef6b991690af241a119b0d419f2faa83c547708144568fd8130aa1a87b3f31a573ff5228a38bfb207fb64bb5959f92c25403d14d1e8c526555e677edac163f04c97993589c452ccafd7d0fca0c8d1056db8ef4992e5d0b6403c0b6e28404099819673dc16e90bafe0b4f4cf02b92f8cec72e3b3f31229f7e83fe079449970e5fb8138d077c7c56e9b707e798efa061f074264289719c29fa1643b7ff86dbc54a8d8a4aa962e548fb08", 0xd9}, {&(0x7f0000000a80)="1b6f838f02117653df89b80eddec6b293ece316bbdf1b073dff45d44735fa197ea47214287850edc33fe598f6b3729ca68ef1b8a796c7c0eedadd9a75bb88b654a7b69e23051fb570930d07372ccf28af2714dc1d9fb2fbdc9fd4f40c74117c22208d8a1dc71f0edcda1d1053b5a8fa412c5bd70da3e48d8adb7aca4c1d9ff923b8510ba2008706e6f8810d972799b5fe27ef2d7a8c92badd8c91b7f44c35737c12cc1012d3e56e6c4a5cac60bfbe27a236c18f36185f02115b52c62", 0xbc}, {&(0x7f0000000b40)="c775f257dc1893f6c677f74eea45585818735d84b7296e3464b418002faab19177568e5d26eec9592ca775d3183fbe75eb0437471786ee028ca17cd36d9c12b7913ebf3de09cfb4585450a9e4cfb47e2169ef95fb9500c003802edcfdc406b32e7ccfe614afe39b3005750d540", 0x6d}, {&(0x7f0000000bc0)="e3f15d482ffe2dd4f37b25b42375436d8ba515f1573afe961483af6ff2093ed031292a0cb6408a5d886ec1308c3fac9e69b815f8acd899a11194d0c1018c2879ac", 0x41}, {&(0x7f0000000c40)="3cb1af97022d33324b538839a58d7f9e5efb3c2a1935142ea5d493796a0213fc3f8f44bc1ae4b505cfe7f21a561a20359ceda463c5dfbb05df47a17d34c259edb06cc654e796e9bfdb61183c82a9ceefde3ad1063577a5", 0x57}, {&(0x7f0000000cc0)="cdf7e807a697cbdc6abb9a517218cda0910eeeb8061fd9bbfbbc53f1067e5615229f3d8e9592269f8222f672d340d0954e888279148d23a57b8730eaace1d62d52f43c9548585748d9bcb315ff09a99b47380ea996c826e88b4c315ba26b53da47ff7c7edb5d1a5d8b412f7d", 0x6c}, {&(0x7f0000000d40)="4898b63183534ebc5641b6468fa41fcb662d42f3666b607ee185a7f8faccab7701befbeba1adba0fc8b6dd3d1126d00d78aad6dd38ea80b59d890d8006f11534612ebf64f4e36adec2bf8bca0087c29d837c53a194a80918cb784a18c60fbb895d60f8c3e56cf52c908a9bc64ab528789bda7c0cc767e10f981c612dc22efccd205f64a03c9bfac9225cb321", 0x8c}], 0x9, &(0x7f0000000f40)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x1, 0x0, [@local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xb}}, @dstopts={{0x98, 0x29, 0x37, {0x62, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x913}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}}, @pad1, @jumbo={0xc2, 0x4, 0x3c}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x50, {0x2, 0x12, 0x7, 0x3, [0x6fb6, 0x6290000000, 0xfffffffffffffffb, 0x4fec, 0x2, 0xfffffffffffffffc, 0x8, 0x3, 0x5]}}, @ra={0x5, 0x2, 0xe}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffff97b}}], 0x130}}, {{&(0x7f0000001080)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001340)=[{&(0x7f00000010c0)="db32c553a311b0c13c12690b96b207f0b5ab38e0f008f9b786ff4416618ccdc83501c5c82e9222edf22336b7ed130a877b4267243a443521c014b9a8392ef6fd843089f59a0c26c894d8ac79ba5fe154bbb342836f964acee6c53a05479ce0c81bc91ee293d562466b56effc9068bddf2832347d61920a10a247cb6d07ab885021ecce6497a11cba57000386b9ddffd05b18fb6408fa727add6f42c1afcb144273577bda1c842110c6b901daa6d9f2a6c3318ae010e218b28b070aed5070e207c7b2e738a4aa4dec9d02a1cf06ae2bbc", 0xd0}, {&(0x7f00000011c0)="c7d33ffdd0f7ee0f4f3289b804a43a3f0fd25a54c90bfb94d636da20ec0c41b4eef7f27e30ad274f9667fa4a839734dd587827107e3ab3920b3080071209687b5e09d4950310f969aac2dd42ab1080116523e46e641804e1c9be5a", 0x5b}, {&(0x7f0000001240)="ad0384c31934cfa801ecec942b24305788bb12fb187c1fa275b142b5b934e812b891b8b4fe000932729a6b05846068175936bfd6112bf2d8fe91b2505f63ef84a4277fda56bbcf3c98e77a9857b27307a0ce0ffa6e5972f2b1dfe8ce346eb64dee0d2dc838deb7b42122603adb6667be564fec", 0x73}, {&(0x7f00000012c0)="dab9a78cc56b63b9398cc271e63a50f239717f8d4eb3d0fc55f34e79c6d1004fc39154aaf196e58cef8e8acb549104149c835d679838ed4a685631eed3907f2e8fd8", 0x42}], 0x4, &(0x7f0000001380)=[@tclass={{0x14, 0x29, 0x43, 0x80000000}}, @dontfrag={{0x14, 0x29, 0x3e, 0xbcd}}, @flowinfo={{0x14, 0x29, 0xb, 0x9d77}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x12}}}}], 0x70}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0x3, @loopback, 0x63e}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001440)="a0a5bdcc5e3023a49713b0157e08d3ab5d1eb2196ce7595dff35", 0x1a}, {&(0x7f0000001480)="b5db75560632680166a39ef41554226502cc1a8a101ad80c34ca65c03d", 0x1d}, {&(0x7f00000014c0)="311e0c7515134f3a27c7cfc9b1f21c14f23e1e2799f04a6d5512fd44aef2724fd48da3de2db56fc509532f8f1986ac5a1817c531f2e7d6e3a739ee00728f609adcbf1b2f221a01d9be836b26289ff3add3614b2cd402aba504bc9c975e8f617c1eb671b0248727ccdb58db11f20a5cc1b19c1e35aedc5cee63f5adbe6c9d", 0x7e}], 0x3, &(0x7f0000001580)=[@dstopts={{0x130, 0x29, 0x37, {0x2, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0xc9}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x78a5, [0xfffffffffffffff1, 0x8000000000000001]}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xf, 0xef, "22559ef9efd60c7a33498679e095354f7d34d64b311f44dffddb318a776da30f45ebb4e3f497695f660763dad88ead5c864984af25f8ee3a10c17a8db41c2fc9e72d9682d42c9478963715095f69d0378546400e61b8869625b45d0b3634e1b5d4e5d34cc4b89a46f4ce316f46cdecafdf5fe400b2d336b67081c022cf4e328f38ef0fd24cad44ab798e98a63af733e52acca0611f83477b51c0b0cfae5efe2631a5fd32c53ab1792a2a805b786bd4f776db157569e4b8c55637c649b14e04a4ea4590e50bd5829ce98ab69bd365738dc0e61efcdd9e7cfcd03eb64f11ddb3b38be013a92a3a9ea69875c6cc5184be"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x1, 0x1, 0x0, [@mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr={{0x38, 0x29, 0x39, {0xc, 0x4, 0x0, 0x5, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x2b}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3c, 0x14, 0x1, 0x5, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x39}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @rand_addr=' \x01\x00']}}}], 0x2b0}}, {{&(0x7f0000001840)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3b}, 0x1c, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=[@dstopts_2292={{0x190, 0x29, 0x4, {0x1d, 0x2e, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0xbf, 0xe4, "1b5a5e2bfbe6803c7da0265e46474b69b8549799278a5f8af5d9cbd4b0fe035d5516fdbc598091c3a49c46f5d4289ca63a2b00b97ed68ec121753a7da6605f425fd5ff3c494b9d316264b0141f4ba7f47c0ece462c630a7eea66ce3443ff0f17432717355a85878825a1749fc5117931c549e9d87ed360d6deffb36f89c42c9421b79e28c182bb3750bc63b54a7682c5cb2fb12ecc02f79bbc5b223896dc24cf3a5dfe248b81514c3e058e91bf0bff2ae186b5a83960b248fa707d1154e9b192f07af2e6732e26e0506f46592ae2e8c1ad151342d2bc15b6011c1cd78ae95143605245f3"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x7e, [0xfffffffffffffffe, 0xfffffffffffffff9, 0x90000000000]}}, @ra={0x5, 0x2, 0xa64f}, @calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x8, [0x5, 0x5, 0x4f9, 0x2, 0xfffffffffffffff4, 0x9, 0x800, 0x1]}}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @pad1]}}}], 0x190}}, {{&(0x7f0000001a80)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb9}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000001ac0)="1ee43c235c8a14015fac2f750f64c6e6a8bd89afe7bbb366fb6ad8d6bf5b5645c036488889d57a323e8881e06f8a34495df2114b76e742609611001638945b95481df834544044bae87b9a8b6e39b2f211403ab8f06bde9af7770a574df0ade8254c3495f30acb654f4245062a2682d9e6e1121cee862a6af07dba3f362ca0e0676f3a7d237b18fc10bc733b66be5c07002d6da8ff7a3eec8ae0d5001752dab0c113241426089a714a03b98d1a8b3ea958fbf2a6", 0xb4}, {&(0x7f0000001b80)="2da2d1e085a3d5912a06e0cea8983fe76050475c383205ca7760e440179e76af9f8f7a8a75d6fc55093183c608f6d0d18f9cd2307aec66c58260e7b04999d02c7fefd7651970f5faee1efced1f2dfb", 0x4f}, {&(0x7f0000001c00)="22e6e40b20d50335afa8e1bfa280e92afc5369a10f1d45bd377eab24213959c75bac37acbe98a0905e68aaec39e99a7ee57cfdee3dd060ad6871fbb2441c8660a528433e50c9b61ad0a51dd5c8e009cc61ad5fd5581231c6711718b8a3db685f240c2c0feb196e6ae183855157bf15dcd2", 0x71}, {&(0x7f0000001c80)="dc544edcdd7ccf7811bec146144df59c35502c62b9bc7983b10cd8080fe755c11b679567b27668197d8b93d63c72c57a0a384edfe8f3", 0x36}, {&(0x7f0000001cc0)="62c45332c467a22ece11666db2f3c37bd6da16f41441d8e9c8a88b3a44a823deee71e2dc04ed8f23d928cb2d9bf97fd62648b534e4d6da33c81355440785bd71e6f68fab42d94de10be54c78d7339427a569251a2382a4fb430497697d48643a571abb7ff88fe766c90beb4e", 0x6c}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="0a3cd391c3b4a46c53dc081e96037127dfcbf7262dfcde9d0ea305b50de0", 0x1e}, {&(0x7f0000002dc0)="f36336f16521b1dd754be1a02873971a42ed6802469254719941de796eb5e344350fe53f9f12175a5ed7a208e293d081ad926521122552bceff43c29824016b45cebc7f2", 0x44}, {&(0x7f0000002e40)="c4b382cfbef267af6baf806eb388dde3619ec6fbf66392b8860f822c9312e8db22cf0794f9b151b3994cf2724cc68a6374c1e1970783fed28a4eaec3fe1339", 0x3f}], 0xa, &(0x7f0000002f40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x18}}], 0x5, 0x20004091) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000030c0), &(0x7f0000003100)=0x4) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000030c0), &(0x7f0000003100)=0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000032c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003280)={&(0x7f00000031c0)={0xb0, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbb}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x33}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004854) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000003300)=0x3, 0x4) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000003300)=0x3, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003500)={r1, &(0x7f0000003340)="5740b0c937cf20dbf484d17dab3e5e4623a9f5c342a0d186a3319b4386eca40af6d16483d4d59ff78d220f1f5a8a8458707f188bfebeab0362499ed5f14da109c3b6ba6a56ab3b039fd750571a11f305b38d5d543cac8635bb05cbbe07d5bb0b60c9b5cc33a4dc72bff6da7b5f1617c543fa8f017c3b2c697acb8ff31778fdbfb44b4508f3c381f206f22e0af607d540fccf3cd5406d0f4399e04b4f9a82178de12c60d1b195897b914d5315c8cccc575e0a89d959627e42", &(0x7f0000003400)=""/231}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003500)={r1, &(0x7f0000003340)="5740b0c937cf20dbf484d17dab3e5e4623a9f5c342a0d186a3319b4386eca40af6d16483d4d59ff78d220f1f5a8a8458707f188bfebeab0362499ed5f14da109c3b6ba6a56ab3b039fd750571a11f305b38d5d543cac8635bb05cbbe07d5bb0b60c9b5cc33a4dc72bff6da7b5f1617c543fa8f017c3b2c697acb8ff31778fdbfb44b4508f3c381f206f22e0af607d540fccf3cd5406d0f4399e04b4f9a82178de12c60d1b195897b914d5315c8cccc575e0a89d959627e42", &(0x7f0000003400)=""/231}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000003540), &(0x7f0000003580)=0x30) connect$packet(r0, &(0x7f00000035c0)={0x11, 0xd, r5, 0x1, 0x8, 0x6, @random="d4bb1ef8bfef"}, 0x14) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000003600)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000003640)=0xd5, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000003640)=0xd5, 0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000003680)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000003680)) accept4$rose(r0, &(0x7f00000036c0)=@full={0xb, @remote, @remote, 0x0, [@bcast, @netrom, @default, @bcast, @rose, @rose]}, &(0x7f0000003700)=0x40, 0x80000) (async) accept4$rose(r0, &(0x7f00000036c0)=@full={0xb, @remote, @remote, 0x0, [@bcast, @netrom, @default, @bcast, @rose, @rose]}, &(0x7f0000003700)=0x40, 0x80000) 15.606013422s ago: executing program 2 (id=1104): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000060008100", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 15.495836283s ago: executing program 4 (id=1105): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xce, 0x0, 0x6}]}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) 15.045865137s ago: executing program 0 (id=1106): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x40, 0x0, {0x0}, {0xffffffffffffffff}, 0x0, 0x8}) kcmp(r2, r1, 0x4, r0, r0) io_setup(0x8, &(0x7f00000002c0)) 2.017326372s ago: executing program 33 (id=1083): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000530a00000000000080000000c06bc0ff0000000018170000", @ANYRES32=0x1, @ANYBLOB="00000000000000001868000e010000000000af8e1bd00000052d1000000000009500005f0c000000"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xaa, &(0x7f0000000280)=""/170, 0x41000, 0x60, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x3, 0x4}, {0x3, 0x1, 0x1, 0x5}, {0x2, 0x9, 0x3, 0xb}, {0x1, 0x5, 0xc, 0x1}, {0x0, 0x1, 0x3, 0x6}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r4 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000080)="2c80fce256052b06f8148e045f9b2dec", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000b80)="d7d42f9134461c21d42a97f0ebd55245", 0x10) io_uring_enter(r4, 0x207a98, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a29f7acda0b77e", 0x0, 0x0, 0x14, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a3000e600002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000"], 0x80}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 34 (id=1106): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x40, 0x0, {0x0}, {0xffffffffffffffff}, 0x0, 0x8}) kcmp(r2, r1, 0x4, r0, r0) io_setup(0x8, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): adding ib device syz1 with port count 1 [ 59.463438][ T6242] smc: ib device syz1 port 1 has no pnetid [ 59.466645][ T6247] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 59.470364][ T1024] xfrm0 speed is unknown, defaulting to 1000 [ 59.473101][ T6242] xfrm0 speed is unknown, defaulting to 1000 [ 59.532188][ T6254] process 'syz.0.58' launched './file2' with NULL argv: empty string added [ 59.564570][ T6259] netlink: 'syz.1.63': attribute type 21 has an invalid length. [ 59.570780][ T6259] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.579362][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 59.609807][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 59.620756][ T6268] syzkaller0: entered promiscuous mode [ 59.623859][ T6268] syzkaller0: entered allmulticast mode [ 59.659166][ T6242] xfrm0 speed is unknown, defaulting to 1000 [ 59.750425][ T6242] xfrm0 speed is unknown, defaulting to 1000 [ 59.844314][ T6242] xfrm0 speed is unknown, defaulting to 1000 [ 59.846870][ T6273] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.927761][ T6247] siw: device registration error -23 [ 60.128793][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 60.128806][ T40] audit: type=1400 audit(1765180522.486:268): avc: denied { mount } for pid=6279 comm="syz.0.69" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.137876][ T40] audit: type=1400 audit(1765180522.486:269): avc: denied { remount } for pid=6279 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.152663][ T40] audit: type=1400 audit(1765180522.506:270): avc: denied { write } for pid=6281 comm="syz.3.70" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.154285][ T6280] netlink: 'syz.0.69': attribute type 11 has an invalid length. [ 60.170853][ T40] audit: type=1400 audit(1765180522.506:271): avc: denied { write } for pid=6281 comm="syz.3.70" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 60.205071][ T40] audit: type=1400 audit(1765180522.566:272): avc: denied { write } for pid=6283 comm="syz.3.71" path="socket:[12410]" dev="sockfs" ino=12410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.272134][ T40] audit: type=1400 audit(1765180522.626:273): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.369719][ T40] audit: type=1400 audit(1765180522.726:274): avc: denied { read } for pid=6294 comm="syz.2.75" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.378669][ T40] audit: type=1400 audit(1765180522.726:275): avc: denied { open } for pid=6294 comm="syz.2.75" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.382409][ T6295] 9pnet_virtio: no channels available for device syz [ 60.388188][ T40] audit: type=1400 audit(1765180522.736:276): avc: denied { ioctl } for pid=6294 comm="syz.2.75" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.444403][ T6302] syzkaller0: entered promiscuous mode [ 60.446711][ T6302] syzkaller0: entered allmulticast mode [ 60.748053][ T6310] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 60.750207][ T6310] syzkaller0: group set to 0 [ 60.753406][ T6310] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 60.755871][ T6312] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 60.758396][ T6312] syzkaller0: group set to 0 [ 60.880196][ T6316] xfrm0 speed is unknown, defaulting to 1000 [ 61.177570][ T40] audit: type=1400 audit(1765180523.536:277): avc: denied { map } for pid=6320 comm="syz.2.81" path="socket:[12478]" dev="sockfs" ino=12478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.191093][ T6321] netlink: 'syz.2.81': attribute type 32 has an invalid length. [ 61.483412][ T65] Bluetooth: hci3: command tx timeout [ 61.485700][ T5294] Bluetooth: hci0: command tx timeout [ 61.492642][ T65] Bluetooth: hci1: command tx timeout [ 61.494939][ T5294] Bluetooth: hci2: command tx timeout [ 61.552253][ T6361] __nla_validate_parse: 4 callbacks suppressed [ 61.552270][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 61.568410][ T6361] syzkaller0: entered promiscuous mode [ 61.570891][ T6361] syzkaller0: entered allmulticast mode [ 61.573282][ T1024] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.618934][ T6364] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 61.631448][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.638361][ T6364] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 61.694225][ T6370] nbd: must specify a device to reconfigure [ 61.725446][ T1024] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 61.730953][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.735640][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.740184][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.754769][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.758568][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.762901][ T6384] capability: warning: `syz.2.99' uses 32-bit capabilities (legacy support in use) [ 61.766061][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.769147][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.771917][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.775324][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.778671][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.781476][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.785244][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.788674][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.791602][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.795391][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.798903][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.802658][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.806016][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.809518][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.813341][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.817913][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.821642][ T1024] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.825450][ T1024] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.829501][ T1024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.834031][ T1024] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 61.837399][ T1024] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 61.840190][ T1024] usb 6-1: Product: syz [ 61.841682][ T1024] usb 6-1: Manufacturer: syz [ 61.843404][ T1024] usb 6-1: SerialNumber: syz [ 61.854204][ T1024] usb 6-1: config 0 descriptor?? [ 61.868359][ T1024] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 61.919479][ T6399] bond1: (slave lo): Device is not bonding slave [ 61.922130][ T6399] bond1: option active_slave: invalid value (lo) [ 61.928395][ T6406] netlink: 52 bytes leftover after parsing attributes in process `syz.3.104'. [ 61.928579][ T6399] bond1 (unregistering): Released all slaves [ 61.972398][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 61.982256][ T6410] syzkaller0: entered promiscuous mode [ 61.984652][ T6410] syzkaller0: entered allmulticast mode [ 62.063353][ T849] usb 6-1: USB disconnect, device number 2 [ 62.068302][ T849] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 62.184388][ T6424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.187057][ T6424] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.198576][ T6424] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.203980][ T6424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.206000][ T6424] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.209225][ T6424] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.216168][ T6424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.218180][ T6424] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.221856][ T6424] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.225094][ T6424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.227147][ T6424] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.230136][ T6424] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.338572][ T6439] cgroup: subsys name conflicts with all [ 62.397932][ T6441] program syz.3.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.432434][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 62.449116][ T6450] syzkaller0: entered promiscuous mode [ 62.451182][ T6450] syzkaller0: entered allmulticast mode [ 62.621834][ T6468] siw: device registration error -23 [ 62.783550][ T6492] erofs (device nbd2): cannot find valid erofs superblock [ 62.797674][ T6495] dlm: no locking on control device [ 62.820657][ T6499] Cache volume key already in use (9p,syz,) [ 62.842277][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 62.855781][ T6502] syzkaller0: entered promiscuous mode [ 62.858367][ T6502] syzkaller0: entered allmulticast mode [ 62.911022][ T6505] netlink: 'syz.0.133': attribute type 5 has an invalid length. [ 62.920622][ T6505] ip6erspan0: entered promiscuous mode [ 63.088293][ T6520] mkiss: ax0: crc mode is auto. [ 63.105687][ T5294] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 63.157521][ T6534] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 63.217945][ T6540] binder: 6539:6540 unknown command 0 [ 63.219734][ T6540] binder: 6539:6540 ioctl c0306201 200000000080 returned -22 [ 63.223656][ T6540] binder: 6539:6540 ioctl c0306201 2000000003c0 returned -14 [ 63.226400][ T6540] binder: 6539:6540 ioctl c4c85513 200000000040 returned -22 [ 63.259427][ T6542] netlink: 52 bytes leftover after parsing attributes in process `syz.1.146'. [ 63.352049][ T6549] tmpfs: Cannot enable quota on remount [ 63.405416][ T6556] netlink: 'syz.1.151': attribute type 15 has an invalid length. [ 63.537969][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 63.732892][ T6571] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 63.735097][ T6571] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.747433][ T6571] vhci_hcd vhci_hcd.0: Device attached [ 63.750861][ T6572] vhci_hcd: unknown pdu 2 [ 63.754344][ T1145] vhci_hcd vhci_hcd.2: stop threads [ 63.756081][ T1145] vhci_hcd vhci_hcd.2: release socket [ 63.757979][ T1145] vhci_hcd vhci_hcd.2: disconnect device [ 63.762256][ T6575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 63.798243][ T6579] fuse: Unknown parameter 'psUY@QO_hd' [ 64.002962][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 64.015242][ T6595] syzkaller0: entered promiscuous mode [ 64.017319][ T6595] syzkaller0: entered allmulticast mode [ 64.035889][ T6589] ata1.00: invalid multi_count 1 ignored [ 64.202601][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.282627][ T5294] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.282648][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.306262][ T6602] kexec: Could not allocate control_code_buffer [ 64.410213][ T6624] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.173'. [ 64.415073][ T6624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 64.758858][ T6645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.829338][ T6650] syzkaller0: entered promiscuous mode [ 64.832422][ T6653] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 64.834362][ T6650] syzkaller0: entered allmulticast mode [ 64.894460][ T6653] bond1: (slave gretap1): making interface the new active one [ 64.897289][ T6653] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 64.903430][ T6653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.988334][ T6674] netlink: 'syz.0.190': attribute type 21 has an invalid length. [ 64.991070][ T6676] netlink: 'syz.0.190': attribute type 21 has an invalid length. [ 65.247856][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 65.247873][ T40] audit: type=1400 audit(1765180527.606:342): avc: denied { setattr } for pid=6681 comm="syz.2.192" name="secretmem" dev="secretmem" ino=13510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.260877][ T40] audit: type=1326 audit(1765180527.606:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.263777][ T6684] 9p: Bad value for 'rq' [ 65.268670][ T40] audit: type=1326 audit(1765180527.606:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.278355][ T40] audit: type=1326 audit(1765180527.606:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.287732][ T40] audit: type=1326 audit(1765180527.606:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.295011][ T40] audit: type=1326 audit(1765180527.606:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.302642][ T40] audit: type=1326 audit(1765180527.606:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.309662][ T40] audit: type=1326 audit(1765180527.606:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.318828][ T40] audit: type=1326 audit(1765180527.606:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.326049][ T40] audit: type=1326 audit(1765180527.606:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.191" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff8e018f7c9 code=0x7ffc0000 [ 65.363243][ T6698] syzkaller0: entered promiscuous mode [ 65.365067][ T6698] syzkaller0: entered allmulticast mode [ 65.445866][ T6700] cgroup: Unknown subsys name 'smackfstransmute' [ 65.523362][ T6715] netlink: 'syz.2.202': attribute type 2 has an invalid length. [ 65.612584][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.785025][ T60] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.787977][ T60] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 65.791395][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.795360][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 65.806379][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 65.811943][ T60] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.816806][ T60] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.819404][ T60] usb 6-1: Product: syz [ 65.819699][ T6734] syzkaller0: entered promiscuous mode [ 65.820797][ T60] usb 6-1: Manufacturer: syz [ 65.824912][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 65.828493][ T6734] syzkaller0: entered allmulticast mode [ 65.832597][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 65.837802][ T60] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 65.839841][ T60] cdc_wdm 6-1:1.0: Unknown control protocol [ 65.988410][ T6758] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 66.031508][ T60] usb 6-1: USB disconnect, device number 3 [ 66.126101][ T6773] Bluetooth: MGMT ver 1.23 [ 66.282720][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.332809][ T6786] ./bus: Can't lookup blockdev [ 66.362707][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.372659][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.373877][ T6788] No control pipe specified [ 66.380463][ T6788] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.492681][ T60] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.542624][ T65] Bluetooth: hci1: unexpected event for opcode 0x080f [ 66.566126][ T6811] xt_ecn: cannot match TCP bits for non-tcp packets [ 66.642600][ T60] usb 5-1: device descriptor read/64, error -71 [ 66.656668][ T6819] netlink: 'syz.1.234': attribute type 16 has an invalid length. [ 66.659153][ T6819] __nla_validate_parse: 14 callbacks suppressed [ 66.659161][ T6819] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.234'. [ 66.666352][ T6819] all: renamed from lo (while UP) [ 66.749129][ T6824] bond3 (unregistering): Released all slaves [ 66.841987][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'. [ 66.879411][ T6830] input: syz0 as /devices/virtual/input/input5 [ 66.883427][ T60] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 66.973053][ T6837] netlink: 'syz.1.241': attribute type 7 has an invalid length. [ 67.022786][ T60] usb 5-1: device descriptor read/64, error -71 [ 67.052077][ T6843] bond0: entered promiscuous mode [ 67.053929][ T6843] bond_slave_0: entered promiscuous mode [ 67.055880][ T6843] bond_slave_1: entered promiscuous mode [ 67.132889][ T60] usb usb5-port1: attempt power cycle [ 67.236045][ T6847] block nbd3: NBD_DISCONNECT [ 67.250158][ T6849] netlink: 'syz.1.243': attribute type 9 has an invalid length. [ 67.284126][ T6853] wg1: entered promiscuous mode [ 67.469876][ T6858] tipc: MTU too low for tipc bearer [ 67.483612][ T60] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 67.513019][ T60] usb 5-1: device descriptor read/8, error -71 [ 67.746026][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 67.761967][ T6871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.764096][ T60] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 67.783246][ T60] usb 5-1: device descriptor read/8, error -71 [ 67.892781][ T60] usb usb5-port1: unable to enumerate USB device [ 67.956064][ T6880] loop2: detected capacity change from 0 to 7 [ 67.962084][ T6880] Dev loop2: unable to read RDB block 7 [ 67.964247][ T6880] loop2: AHDI p1 p2 p3 [ 67.965757][ T6880] loop2: partition table partially beyond EOD, truncated [ 67.969479][ T6880] loop2: p1 start 1601398130 is beyond EOD, truncated [ 67.971727][ T6880] loop2: p2 start 1702059890 is beyond EOD, truncated [ 68.160674][ T6889] cgroup: Name too long [ 68.195151][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 68.336528][ T6894] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 68.340735][ T6896] wg1: entered promiscuous mode [ 68.351016][ T6893] evm: overlay not supported [ 68.363816][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.452940][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.898188][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 69.238027][ T6941] netlink: 168 bytes leftover after parsing attributes in process `syz.0.272'. [ 69.241267][ T6941] netlink: 168 bytes leftover after parsing attributes in process `syz.0.272'. [ 69.362387][ T6953] trusted_key: encrypted_key: insufficient parameters specified [ 69.557405][ T6969] nfs: Unknown parameter 'fsc]3x觃ފ&yF@6+>80:6V%M;?_okBGp [' [ 69.561791][ T6970] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.283'. [ 69.566827][ T6970] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.283'. [ 69.571347][ T6970] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.283'. [ 69.906466][ T6996] nfs: Unknown parameter 'le1' [ 69.908431][ T6996] overlayfs: missing 'workdir' [ 70.177154][ T7022] 9p: Could not find request transport: virtache [ 70.430885][ T40] kauditd_printk_skb: 161 callbacks suppressed [ 70.430896][ T40] audit: type=1400 audit(1765180532.786:513): avc: denied { ioctl } for pid=7027 comm="syz.3.301" path="socket:[15620]" dev="sockfs" ino=15620 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.522838][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.542232][ T40] audit: type=1400 audit(1765180532.896:514): avc: denied { mount } for pid=7044 comm="syz.3.307" name="/" dev="ramfs" ino=14169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.545142][ T7045] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.549466][ T40] audit: type=1400 audit(1765180532.896:515): avc: denied { mounton } for pid=7044 comm="syz.3.307" path="/file0" dev="ramfs" ino=14170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 70.552246][ T7045] overlayfs: failed to set xattr on upper [ 70.561270][ T7045] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.564783][ T7045] overlayfs: ...falling back to index=off. [ 70.566641][ T7045] overlayfs: ...falling back to uuid=null. [ 70.569061][ T7045] overlayfs: conflicting lowerdir path [ 70.728411][ T7058] xfrm0 speed is unknown, defaulting to 1000 [ 70.731030][ T7060] CUSE: info not properly terminated [ 70.769596][ T7063] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.310' resets device [ 70.773436][ T40] audit: type=1400 audit(1765180533.136:516): avc: denied { ioctl } for pid=7055 comm="syz.3.310" path="socket:[15073]" dev="sockfs" ino=15073 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.806606][ T7065] binder: 7064:7065 ioctl c0306201 200000000640 returned -22 [ 70.956189][ T7074] [U] V3Fپ"S/4:XTZWTLW= [ 71.145434][ T7072] kvm: MONITOR instruction emulated as NOP! [ 71.288565][ T40] audit: type=1400 audit(1765180533.646:517): avc: denied { mount } for pid=7078 comm="syz.3.316" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.340227][ T7081] netlink: 'syz.3.317': attribute type 3 has an invalid length. [ 71.343122][ T7081] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 71.345618][ T7081] NCSI netlink: No device for ifindex 0 [ 71.496699][ T7088] i2c i2c-1: Invalid block write size 34 [ 71.525547][ T7090] QAT: Stopping all acceleration devices. [ 71.530256][ T40] audit: type=1400 audit(1765180533.886:518): avc: denied { map } for pid=7089 comm="syz.3.320" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.533916][ T7090] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.543381][ T7090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.548945][ T40] audit: type=1400 audit(1765180533.906:519): avc: denied { setattr } for pid=7089 comm="syz.3.320" name="NETLINK" dev="sockfs" ino=15712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.723371][ T40] audit: type=1400 audit(1765180534.086:520): avc: denied { read } for pid=7101 comm="syz.2.325" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.730743][ T40] audit: type=1400 audit(1765180534.086:521): avc: denied { open } for pid=7101 comm="syz.2.325" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.774124][ T40] audit: type=1400 audit(1765180534.136:522): avc: denied { read } for pid=7101 comm="syz.2.325" path="socket:[15728]" dev="sockfs" ino=15728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.784256][ T7073] [U] J"E:" [ 71.834787][ T7112] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 71.837363][ T7112] __nla_validate_parse: 41 callbacks suppressed [ 71.837373][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.328'. [ 72.092637][ T5987] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.160720][ T7127] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 72.200665][ T7130] mkiss: ax0: crc mode is auto. [ 72.255576][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.259002][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.262435][ T5987] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.266890][ T5987] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.269827][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.273947][ T5987] usb 7-1: config 0 descriptor?? [ 72.315416][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 72.400700][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 72.403790][ T7137] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 72.411330][ T7137] tipc: Can't bind to reserved service type 2 [ 72.695317][ T5987] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 73.321049][ T7183] cgroup: Unknown subsys name 'cpuset' [ 73.328490][ T7183] netlink: 'syz.1.343': attribute type 11 has an invalid length. [ 73.331043][ T7183] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.343'. [ 73.391802][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 73.404171][ T7186] overlay: Unknown parameter 'smackfsroot' [ 73.534524][ T7213] capability: warning: `syz.0.351' uses deprecated v2 capabilities in a way that may be insecure [ 73.539748][ T7213] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 73.544306][ T7213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.548003][ T7213] overlayfs: conflicting lowerdir path [ 73.575418][ T7217] SET target dimension over the limit! [ 73.615540][ T7215] netlink: 'syz.3.352': attribute type 23 has an invalid length. [ 73.696282][ T7223] IPv6: sit1: Disabled Multicast RS [ 73.698536][ T7223] sit1: entered allmulticast mode [ 73.822698][ T60] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.976049][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.980611][ T60] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.984907][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.998420][ T60] usb 6-1: config 0 descriptor?? [ 74.120770][ T7234] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 74.156285][ T7234] bond1: (slave geneve2): making interface the new active one [ 74.159015][ T7234] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 74.161894][ T63] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 74.165679][ T63] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 74.168512][ T63] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 74.171244][ T63] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 74.215448][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 74.220256][ T60] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.225229][ T60] usb 6-1: USB disconnect, device number 4 [ 74.446791][ T7238] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 74.535831][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 74.662656][ T5987] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.672307][ T7263] misc userio: No port type given on /dev/userio [ 74.678023][ T6027] usb 7-1: USB disconnect, device number 2 [ 74.789248][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 74.793557][ T7276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=7276 comm=syz.2.369 [ 74.812593][ T5987] usb 6-1: Using ep0 maxpacket: 32 [ 74.819155][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.822982][ T5987] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 74.825944][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.830423][ T5987] usb 6-1: config 0 descriptor?? [ 74.834328][ T5987] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.837190][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.370'. [ 74.840399][ T5987] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.860162][ T7279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7279 comm=syz.2.370 [ 75.024517][ T7287] Dead loop on virtual device ip6_vti0, fix it urgently! [ 75.127587][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 75.175228][ T7296] binder: 7295:7296 ioctl c0306201 0 returned -14 [ 75.253841][ T5974] usb 6-1: USB disconnect, device number 5 [ 75.259168][ T5974] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 75.274234][ T7305] kvm: pic: non byte read [ 75.276879][ T7305] kvm: pic: level sensitive irq not supported [ 75.277139][ T7305] kvm: pic: non byte read [ 75.281764][ T7305] kvm: pic: level sensitive irq not supported [ 75.282049][ T7305] kvm: pic: non byte read [ 75.285207][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 75.287482][ T7305] kvm: pic: level sensitive irq not supported [ 75.288708][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.288806][ T7305] kvm: pic: non byte read [ 75.296061][ T7305] kvm: pic: level sensitive irq not supported [ 75.296300][ T7305] kvm: pic: non byte read [ 75.300691][ T7305] kvm: pic: level sensitive irq not supported [ 75.300936][ T7305] kvm: pic: non byte read [ 75.305649][ T7305] kvm: pic: level sensitive irq not supported [ 75.305888][ T7305] kvm: pic: non byte read [ 75.314545][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.458657][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 75.458667][ T40] audit: type=1400 audit(1765180537.816:552): avc: denied { bind } for pid=7325 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.520900][ T40] audit: type=1400 audit(1765180537.876:553): avc: denied { read } for pid=7329 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.712573][ T1469] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.794085][ T40] audit: type=1400 audit(1765180538.156:554): avc: denied { create } for pid=7353 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.800278][ T40] audit: type=1400 audit(1765180538.156:555): avc: denied { create } for pid=7353 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.808781][ T40] audit: type=1400 audit(1765180538.156:556): avc: denied { setopt } for pid=7353 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.850210][ T7359] tmpfs: Bad value for 'mpol' [ 75.852255][ T7359] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 75.860835][ T7359] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 75.864299][ T7359] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 75.868274][ T7359] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 75.882827][ T1469] usb 5-1: Using ep0 maxpacket: 8 [ 75.913482][ T1469] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 75.916096][ T1469] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.919140][ T1469] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.922289][ T1469] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 75.925926][ T1469] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 75.929097][ T1469] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.932362][ T40] audit: type=1400 audit(1765180538.286:557): avc: denied { read } for pid=7365 comm="syz.3.394" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.940707][ T1469] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.940854][ T40] audit: type=1400 audit(1765180538.286:558): avc: denied { open } for pid=7365 comm="syz.3.394" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.943812][ T1469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.954538][ T40] audit: type=1400 audit(1765180538.316:559): avc: denied { bind } for pid=7365 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.001620][ T7370] trusted_key: encrypted_key: insufficient parameters specified [ 76.050239][ T7373] fuse: Unknown parameter '184467440737095516150x0000000000000005' [ 76.165438][ T1469] usb 5-1: usb_control_msg returned -32 [ 76.167343][ T1469] usbtmc 5-1:16.0: can't read capabilities [ 76.205900][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.207974][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.411325][ T40] audit: type=1400 audit(1765180538.766:560): avc: denied { ioctl } for pid=7391 comm="syz.2.403" path="socket:[16346]" dev="sockfs" ino=16346 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.422656][ T40] audit: type=1400 audit(1765180538.776:561): avc: denied { read } for pid=7391 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.478814][ T7405] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 76.618512][ T7418] syzkaller0: entered promiscuous mode [ 76.620429][ T7418] syzkaller0: entered allmulticast mode [ 76.871999][ T7428] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 77.075458][ T60] usb 5-1: USB disconnect, device number 6 [ 86.453602][ T10] cfg80211: failed to load regulatory.db [ 90.757049][ T7462] bond2: (slave lo): Device is not bonding slave [ 90.759091][ T7462] bond2: option active_slave: invalid value (lo) [ 90.763655][ T7462] bond2 (unregistering): Released all slaves [ 90.784392][ T7469] __nla_validate_parse: 9 callbacks suppressed [ 90.784407][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 90.828321][ T7473] /dev/nullb0: Can't open blockdev [ 90.871973][ T7481] afs: Unknown parameter '00000000000000000003' [ 90.881066][ T40] kauditd_printk_skb: 33002 callbacks suppressed [ 90.881083][ T40] audit: type=1400 audit(1765180553.236:33564): avc: denied { ioctl } for pid=7480 comm="syz.2.429" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.910354][ T40] audit: type=1400 audit(1765180553.246:33565): avc: denied { execute_no_trans } for pid=7479 comm="syz.0.430" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=18503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 90.956084][ T40] audit: type=1400 audit(1765180553.316:33566): avc: denied { getopt } for pid=7493 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.044166][ T7509] netlink: 'syz.3.440': attribute type 7 has an invalid length. [ 91.050865][ T7510] xfrm0 speed is unknown, defaulting to 1000 [ 91.075588][ T7512] sctp: [Deprecated]: syz.0.441 (pid 7512) Use of int in maxseg socket option. [ 91.075588][ T7512] Use struct sctp_assoc_value instead [ 91.081434][ T40] audit: type=1400 audit(1765180553.436:33567): avc: denied { bind } for pid=7511 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.102682][ T40] audit: type=1400 audit(1765180553.436:33568): avc: denied { connect } for pid=7511 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.116500][ T7516] netlink: 52 bytes leftover after parsing attributes in process `syz.3.442'. [ 91.166411][ T40] audit: type=1400 audit(1765180553.526:33569): avc: denied { read } for pid=7508 comm="syz.2.439" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 91.177544][ T40] audit: type=1400 audit(1765180553.536:33570): avc: denied { open } for pid=7508 comm="syz.2.439" path="/136/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 91.225205][ T7521] xfrm0 speed is unknown, defaulting to 1000 [ 91.289446][ T40] audit: type=1400 audit(1765180553.646:33571): avc: denied { write } for pid=7527 comm="syz.2.446" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 91.322471][ T7528] macvtap1: entered promiscuous mode [ 91.326516][ T7528] macvtap1: entered allmulticast mode [ 91.429062][ T7528] macvtap1: entered promiscuous mode [ 91.431448][ T7528] macvtap1: entered allmulticast mode [ 91.472619][ T849] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.530357][ T7528] macvtap1: entered promiscuous mode [ 91.532097][ T7528] macvtap1: entered allmulticast mode [ 91.597738][ T7528] macvtap1: entered promiscuous mode [ 91.599500][ T7528] macvtap1: entered allmulticast mode [ 91.632868][ T849] usb 5-1: Using ep0 maxpacket: 8 [ 91.637217][ T849] usb 5-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 91.640963][ T849] usb 5-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.645522][ T849] usb 5-1: config 1 interface 0 has no altsetting 0 [ 91.649350][ T849] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.40 [ 91.652229][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.655803][ T849] usb 5-1: Product: 鬲쿄䓘퉎펷暡犫댛辦해擣ᨌ鷿竲舄̖榉䬻㚍뛶쒂䈖䂁⩢쐨큧菊䍺쳰ﭹ㚍ᘃ콝땖뽼ꨴ嫫侃鿤䎱㻓ꛬر췧ପ矶䎉䂨祙Ↄ봐탶凌Ɖᄭϼ뢶䄇喐캣㥷輮詌ᅬ톐逍畽괇Ꝯ顩ꑈ萼ᚴ쮄啟쑙ᙟ審ノ뒤飫턋ሙ香ॏ䨍郭믰㮳 [ 91.665209][ T849] usb 5-1: Manufacturer: П [ 91.666733][ T849] usb 5-1: SerialNumber: 脳ꮥㆂ䲩젆ᩧ带砡躓뵂ᪿ 얩鱯ݼ揅☱ꭵ [ 91.732255][ T7528] macvtap1: entered promiscuous mode [ 91.734131][ T7528] macvtap1: entered allmulticast mode [ 91.818658][ T7542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.833049][ T7545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7545 comm=syz.1.451 [ 91.844980][ T7528] macvtap1: entered promiscuous mode [ 91.847584][ T7528] macvtap1: entered allmulticast mode [ 91.882766][ T849] usbhid 5-1:1.0: can't add hid device: -71 [ 91.884803][ T849] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 91.897587][ T849] usb 5-1: USB disconnect, device number 7 [ 91.903867][ T7528] macvtap1: entered promiscuous mode [ 91.906177][ T7528] macvtap1: entered allmulticast mode [ 91.935856][ T7549] binder: 7546:7549 ioctl 4008ae90 200000000280 returned -22 [ 91.939394][ T7549] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.952348][ T7549] CIFS mount error: No usable UNC path provided in device string! [ 91.952348][ T7549] [ 91.956331][ T7549] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 92.036933][ T7528] macvtap1: entered promiscuous mode [ 92.038780][ T7528] macvtap1: entered allmulticast mode [ 92.082630][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 92.107594][ T7528] macvtap1: entered promiscuous mode [ 92.109367][ T7528] macvtap1: entered allmulticast mode [ 92.262612][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 92.273061][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 92.275165][ T29] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.278390][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.293985][ T29] usb 8-1: config 0 descriptor?? [ 92.299210][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 92.302252][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 92.330805][ T7558] tmpfs: Bad value for 'mpol' [ 92.387532][ T7560] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.391560][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 92.412070][ T7562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7562 comm=syz.1.454 [ 92.638259][ T40] audit: type=1400 audit(1765180811.004:33572): avc: denied { setopt } for pid=7582 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.701786][ T29] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 92.723009][ T40] audit: type=1400 audit(1765180811.094:33573): avc: denied { map } for pid=7587 comm="syz.1.464" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 92.962020][ T849] usb 8-1: USB disconnect, device number 2 [ 93.105152][ T7609] binder: BINDER_SET_CONTEXT_MGR already set [ 93.108132][ T7609] binder: 7608:7609 ioctl 4018620d 2000000000c0 returned -16 [ 93.257898][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 93.260907][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 93.264049][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 93.446327][ T7654] xfrm0 speed is unknown, defaulting to 1000 [ 93.507703][ T7663] xt_CONNSECMARK: invalid mode: 0 [ 93.581959][ T60] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 93.585901][ T60] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 93.588292][ T60] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 93.597151][ T60] hid-generic 0006:0004:0009.0004: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 93.627224][ T7678] fido_id[7678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.748862][ T65] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 93.863657][ T7689] netlink: 156 bytes leftover after parsing attributes in process `syz.3.495'. [ 93.875109][ T7681] sp0: Synchronizing with TNC [ 94.015194][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.026275][ T7697] CUSE: unknown device info "" [ 94.027917][ T7697] CUSE: zero length info key specified [ 94.029960][ T7697] tmpfs: Unknown parameter 'euid<00000000000000000000' [ 94.246493][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.501'. [ 94.258284][ T7707] Invalid source name [ 94.259896][ T7707] UBIFS error (pid: 7707): cannot open "./file0", error -22 [ 94.299011][ T7715] random: crng reseeded on system resumption [ 94.311282][ T7715] Unrecognized hibernate image header format! [ 94.316990][ T7715] PM: hibernation: Image mismatch: architecture specific data [ 94.403879][ T7730] comedi comedi0: Minor 254 is invalid! [ 94.407131][ T7730] netlink: 'syz.2.508': attribute type 5 has an invalid length. [ 94.409791][ T7731] netlink: 'syz.2.508': attribute type 5 has an invalid length. [ 94.420875][ T1145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.426127][ T1145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.429927][ T1145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.442739][ T1145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.581903][ T7744] binder: 7743:7744 ioctl c0306201 200000000b00 returned -14 [ 94.585748][ T7744] binder: 7743:7744 ioctl c0306201 200000000240 returned -14 [ 94.589654][ T7744] binder: 7743:7744 ioctl c0306201 2000000002c0 returned -14 [ 94.787343][ T7767] binder: BINDER_SET_CONTEXT_MGR already set [ 94.789980][ T7767] binder: 7762:7767 ioctl 4018620d 2000000002c0 returned -16 [ 94.834777][ T7770] xfrm0 speed is unknown, defaulting to 1000 [ 95.008093][ T7770] CIFS mount error: No usable UNC path provided in device string! [ 95.008093][ T7770] [ 95.011452][ T7770] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 95.015887][ T7770] fuse: Unknown parameter 'euid<00000000004294967295' [ 95.326994][ T7786] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 96.475176][ T7800] __nla_validate_parse: 6 callbacks suppressed [ 96.475189][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.530'. [ 96.483214][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 96.483224][ T40] audit: type=1400 audit(1765180814.854:33595): avc: denied { shutdown } for pid=7801 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.507712][ T7786] Set syz1 is full, maxelem 65536 reached [ 96.541837][ T40] audit: type=1400 audit(1765180814.904:33596): avc: denied { setopt } for pid=7808 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.552298][ T40] audit: type=1400 audit(1765180814.914:33597): avc: denied { ioctl } for pid=7808 comm="syz.2.533" path="socket:[20635]" dev="sockfs" ino=20635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.566913][ T7811] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.534'. [ 96.581443][ T7811] loop6: detected capacity change from 0 to 2640 [ 96.585124][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.587720][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.590233][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.593061][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.595699][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.598219][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.600711][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.604144][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.612650][ T7811] ldm_validate_partition_table(): Disk read failed. [ 96.614971][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.618940][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.622241][ T7811] Dev loop6: unable to read RDB block 0 [ 96.625292][ T7811] loop6: unable to read partition table [ 96.628582][ T7811] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 96.646338][ T40] audit: type=1400 audit(1765180815.014:33598): avc: denied { map } for pid=7810 comm="syz.3.534" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.682634][ T5344] ldm_validate_partition_table(): Disk read failed. [ 96.685170][ T5344] Dev loop6: unable to read RDB block 0 [ 96.687124][ T5344] loop6: unable to read partition table [ 96.753058][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 96.755999][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 96.758858][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 96.761775][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 96.814726][ T7834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'. [ 96.819846][ T7834] overlayfs: failed to resolve './file0': -2 [ 96.844170][ T40] audit: type=1400 audit(1765180815.214:33599): avc: denied { read write } for pid=7835 comm="syz.3.543" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.856999][ T40] audit: type=1400 audit(1765180815.214:33600): avc: denied { open } for pid=7835 comm="syz.3.543" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.875451][ T40] audit: type=1400 audit(1765180815.234:33601): avc: denied { lock } for pid=7837 comm="syz.2.544" path="socket:[20056]" dev="sockfs" ino=20056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.955528][ T7856] batman_adv: batadv0: Adding interface: dummy0 [ 96.957698][ T7856] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.965781][ T7856] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 96.970815][ T40] audit: type=1400 audit(1765180815.334:33602): avc: denied { ioctl } for pid=7857 comm="syz.1.551" path="net:[4026532967]" dev="nsfs" ino=4026532967 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.980831][ T7856] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 97.087830][ T7868] netlink: 76 bytes leftover after parsing attributes in process `syz.1.555'. [ 97.212634][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 97.347961][ T7876] tipc: Started in network mode [ 97.350194][ T7876] tipc: Node identity 84e, cluster identity 4711 [ 97.352662][ T29] usb 8-1: device descriptor read/64, error -71 [ 97.353053][ T7876] tipc: Node number set to 2126 [ 97.360076][ T7876] xt_l2tp: missing protocol rule (udp|l2tpip) [ 97.477792][ T40] audit: type=1400 audit(1765180815.844:33603): avc: denied { getopt } for pid=7884 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.602665][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 97.742942][ T29] usb 8-1: device descriptor read/64, error -71 [ 97.797711][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 97.846415][ T40] audit: type=1400 audit(1765180816.214:33604): avc: denied { ioctl } for pid=7900 comm="syz.1.566" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 97.848304][ T7901] netlink: 'syz.1.566': attribute type 14 has an invalid length. [ 97.859381][ T29] usb usb8-port1: attempt power cycle [ 98.205354][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 98.223792][ T29] usb 8-1: device descriptor read/8, error -71 [ 98.344281][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'. [ 98.392602][ T7916] sp0: Synchronizing with TNC [ 98.492645][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 98.525934][ T29] usb 8-1: device descriptor read/8, error -71 [ 98.633628][ T29] usb usb8-port1: unable to enumerate USB device [ 99.371658][ T7960] /dev/nullb0: Can't open blockdev [ 99.456226][ T7967] netlink: 'syz.2.585': attribute type 10 has an invalid length. [ 99.465227][ T7967] batman_adv: batadv0: Adding interface: team0 [ 99.467254][ T7967] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.475853][ T7967] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 99.482980][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.485578][ T65] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 99.755920][ T7994] vlan0: entered allmulticast mode [ 99.758267][ T7994] veth0_to_bond: entered allmulticast mode [ 99.770795][ T7994] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 100.050778][ T8005] fuse: Bad value for 'fd' [ 100.435889][ T7974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.438706][ T7974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.441566][ T7974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.444645][ T7974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.538848][ T8027] SELinux: syz.1.603 (8027) set checkreqprot to 1. This is no longer supported. [ 100.599263][ T8037] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 100.599291][ T8037] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 100.679305][ T8047] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 100.697290][ T8047] bond2: entered promiscuous mode [ 100.699731][ T8047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.794474][ T8056] bond2: (slave bridge3): making interface the new active one [ 100.797416][ T8056] bridge3: entered promiscuous mode [ 100.800366][ T8056] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 100.928689][ T8074] xt_hashlimit: invalid interval [ 101.061570][ T8088] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 101.072591][ T8092] openvswitch: netlink: IP tunnel dst address not specified [ 101.110672][ T8095] program syz.1.624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.151511][ T5944] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 101.502628][ T5987] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.662679][ T5987] usb 6-1: Using ep0 maxpacket: 16 [ 101.667963][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.671910][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.675122][ T5987] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 101.679225][ T5987] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 101.682071][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.686488][ T5987] usb 6-1: config 0 descriptor?? [ 101.722886][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.724972][ T8126] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 101.897476][ T8140] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.899701][ T8140] overlayfs: failed to set xattr on upper [ 101.901592][ T8140] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.905079][ T8140] overlayfs: ...falling back to index=off. [ 101.906949][ T8140] overlayfs: ...falling back to uuid=null. [ 101.919932][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 101.919942][ T40] audit: type=1400 audit(1765180820.284:33629): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 101.984135][ T40] audit: type=1400 audit(1765180820.354:33630): avc: denied { name_connect } for pid=8141 comm="syz.0.640" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 102.100974][ T5987] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 102.105855][ T40] audit: type=1400 audit(1765180820.474:33631): avc: denied { read } for pid=5329 comm="acpid" name="event4" dev="devtmpfs" ino=2932 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.113524][ T40] audit: type=1400 audit(1765180820.474:33632): avc: denied { open } for pid=5329 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2932 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.122303][ T40] audit: type=1400 audit(1765180820.474:33633): avc: denied { ioctl } for pid=5329 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2932 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.123238][ T5987] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 102.135197][ T5987] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 102.224084][ T8145] __nla_validate_parse: 11 callbacks suppressed [ 102.224101][ T8145] netlink: 156 bytes leftover after parsing attributes in process `syz.3.641'. [ 102.229613][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 102.296787][ T8116] random: crng reseeded on system resumption [ 102.306287][ T6020] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 102.306833][ T29] usb 6-1: USB disconnect, device number 6 [ 102.310075][ T6020] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 102.316732][ T6020] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 102.320546][ T6020] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 102.352333][ T8152] netlink: 'syz.2.643': attribute type 11 has an invalid length. [ 102.355053][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.643'. [ 102.396552][ T8154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.644'. [ 102.429845][ T40] audit: type=1400 audit(1765180820.794:33634): avc: denied { create } for pid=8155 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 102.437185][ T40] audit: type=1400 audit(1765180820.794:33635): avc: denied { bind } for pid=8155 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 102.443548][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.501503][ T8159] netlink: 'syz.2.646': attribute type 2 has an invalid length. [ 102.505065][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 102.508533][ T8159] netlink: 'syz.2.646': attribute type 2 has an invalid length. [ 102.511092][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 102.522770][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.588993][ T8161] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 102.651321][ T8163] fuse: Bad value for 'fd' [ 102.853473][ T40] audit: type=1326 audit(1765180821.224:33636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8170 comm="syz.0.652" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8e018f7c9 code=0x0 [ 102.905574][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 102.908385][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 102.911177][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 102.919878][ T63] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.919926][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 102.924833][ T63] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.929402][ T63] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.933197][ T63] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.034687][ T8175] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 103.038457][ T8175] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 103.041937][ T8175] unsupported nla_type 58 [ 103.077738][ T8177] binder: BINDER_SET_CONTEXT_MGR already set [ 103.079664][ T8177] binder: 8176:8177 ioctl 4018620d 2000000000c0 returned -16 [ 103.724784][ T8183] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 103.727300][ T40] audit: type=1400 audit(1765180822.094:33637): avc: denied { name_bind } for pid=8184 comm="syz.0.657" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 103.783049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.802680][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.832954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.847674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.863180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.924781][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=431 sclass=netlink_route_socket pid=8201 comm=syz.0.661 [ 103.994987][ T8207] binder: BINDER_SET_CONTEXT_MGR already set [ 103.997029][ T8207] binder: 8206:8207 ioctl 4018620d 2000000000c0 returned -16 [ 104.045841][ T8210] syzkaller0: entered promiscuous mode [ 104.047617][ T8210] syzkaller0: entered allmulticast mode [ 104.285381][ T7874] hid-generic 0004:0006:0002.0006: item fetching failed at offset 1/2 [ 104.288696][ T8220] misc userio: No port type given on /dev/userio [ 104.290636][ T7874] hid-generic 0004:0006:0002.0006: probe with driver hid-generic failed with error -22 [ 104.291016][ T8220] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 104.431048][ T8227] cgroup: Unknown subsys name 'cpuset' [ 104.501682][ T40] audit: type=1400 audit(1765180822.864:33638): avc: denied { write } for pid=8228 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.525510][ T8234] kernel profiling enabled (shift: 63) [ 104.527459][ T8234] profiling shift: 63 too large [ 104.558774][ T8237] PM: Enabling pm_trace changes system date and time during resume. [ 104.558774][ T8237] PM: Correct system time has to be restored manually after resume. [ 104.713609][ T8247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.723058][ T8247] macsec1: entered allmulticast mode [ 104.724937][ T8247] bond3: entered allmulticast mode [ 104.733167][ T8247] bond3: left allmulticast mode [ 104.936616][ T8256] Driver unsupported XDP return value 0 on prog (id 123) dev N/A, expect packet loss! [ 104.941625][ T8256] afs: Unknown parameter '' [ 105.070645][ T8275] Scaler: ================= START STATUS ================= [ 105.075407][ T8275] Scaler: ================== END STATUS ================== [ 105.254896][ T8288] hsr_slave_0: left promiscuous mode [ 105.258156][ T8288] hsr_slave_1: left promiscuous mode [ 105.382757][ T6027] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 105.545833][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.549385][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.562081][ T6027] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.565990][ T8300] program syz.3.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.566393][ T6027] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.572798][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.576941][ T6027] usb 6-1: config 0 descriptor?? [ 105.989491][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.991932][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.994893][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.997388][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.000569][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.003295][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.005976][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.008485][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.011170][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.016659][ T6027] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.024135][ T6027] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 106.258747][ T29] usb 6-1: USB disconnect, device number 7 [ 106.465354][ T8340] /dev/nullb0: Can't open blockdev [ 106.514747][ T8344] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 106.674090][ T8346] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 106.735362][ T8350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.855316][ T8360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8360 comm=syz.3.708 [ 107.319642][ T8378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8378 comm=syz.3.712 [ 107.327624][ T8378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8378 comm=syz.3.712 [ 107.478898][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 107.478909][ T40] audit: type=1400 audit(1765180825.844:33643): avc: denied { read write } for pid=8379 comm="syz.3.713" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.486779][ T8382] block device autoloading is deprecated and will be removed. [ 107.489108][ T40] audit: type=1400 audit(1765180825.844:33644): avc: denied { open } for pid=8379 comm="syz.3.713" path="/208/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.671710][ T8387] __nla_validate_parse: 78 callbacks suppressed [ 107.671721][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 107.677155][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 107.680041][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.715'. [ 107.758663][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 107.846847][ T40] audit: type=1400 audit(1765180826.214:33645): avc: denied { ioctl } for pid=8412 comm="syz.2.720" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.858815][ T40] audit: type=1400 audit(1765180826.224:33646): avc: denied { audit_write } for pid=8412 comm="syz.2.720" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.870382][ T40] audit: type=1400 audit(1765180826.224:33647): avc: denied { watch watch_reads } for pid=8412 comm="syz.2.720" path="pipe:[3797]" dev="pipefs" ino=3797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 108.071642][ T8423] afs: Unknown parameter 'dV-d?ŝHp;|C' [ 108.579842][ T8445] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 108.587249][ T8445] program syz.1.730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.598768][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 108.678996][ T8449] syzkaller0: entered promiscuous mode [ 108.681598][ T8449] syzkaller0: entered allmulticast mode [ 108.694796][ T8449] overlayfs: cannot append lower layer [ 108.902729][ T849] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 109.054963][ T849] usb 8-1: Using ep0 maxpacket: 32 [ 109.066728][ T849] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 109.070275][ T849] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 109.074828][ T849] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 109.079431][ T849] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 109.084943][ T849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 109.089388][ T849] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 109.094015][ T849] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 109.098196][ T849] usb 8-1: Product: syz [ 109.099824][ T849] usb 8-1: Manufacturer: syz [ 109.101742][ T849] usb 8-1: SerialNumber: syz [ 109.106374][ T849] usb 8-1: config 0 descriptor?? [ 109.114379][ T849] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.123074][ T849] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 109.314341][ T5987] usb 8-1: USB disconnect, device number 7 [ 109.318361][ T5987] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 109.673555][ T8459] macvlan0: entered promiscuous mode [ 109.678210][ T8459] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 109.681520][ T8459] netlink: 'syz.2.736': attribute type 2 has an invalid length. [ 109.758938][ T40] audit: type=1400 audit(1765180828.124:33648): avc: denied { write } for pid=8466 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.789501][ T8471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42004 sclass=netlink_route_socket pid=8471 comm=syz.2.740 [ 109.829987][ T40] audit: type=1400 audit(1765180828.194:33649): avc: denied { remove_name } for pid=8474 comm="syz.2.741" name="file0" dev="9p" ino=74186813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.838243][ T40] audit: type=1400 audit(1765180828.194:33650): avc: denied { rename } for pid=8474 comm="syz.2.741" name="file0" dev="9p" ino=74186813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.845581][ T40] audit: type=1400 audit(1765180828.194:33651): avc: denied { add_name } for pid=8474 comm="syz.2.741" name="file1" dev="9p" ino=74186843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.853973][ T40] audit: type=1400 audit(1765180828.194:33652): avc: denied { unlink } for pid=8474 comm="syz.2.741" name="file1" dev="9p" ino=74186843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.322390][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 110.334276][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 110.338367][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 110.342257][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 110.346120][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 111.073650][ T8533] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 111.086360][ T8533] bond3: entered promiscuous mode [ 111.088134][ T8533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.090564][ T8534] bond3: entered allmulticast mode [ 111.391082][ T8550] syz.3.763 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.430793][ T8555] /dev/nullb0: Can't open blockdev [ 111.439653][ T8552] XFS (nbd3): SB validate failed with error -5. [ 111.493300][ T7874] IPVS: starting estimator thread 0... [ 111.612776][ T8566] IPVS: using max 42 ests per chain, 100800 per kthread [ 111.617132][ T8577] /dev/nullb0: Can't open blockdev [ 111.727409][ T8586] loop6: detected capacity change from 0 to 2640 [ 111.729909][ T8586] buffer_io_error: 27 callbacks suppressed [ 111.729917][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.734839][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.737339][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.739893][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.742463][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.745087][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.747557][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.750123][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.752812][ T8586] ldm_validate_partition_table(): Disk read failed. [ 111.754999][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.757681][ T8586] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.760319][ T8586] Dev loop6: unable to read RDB block 0 [ 111.762465][ T8586] loop6: unable to read partition table [ 111.765136][ T8586] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 112.125342][ T8590] overlay: filesystem on ./bus is read-only [ 112.154443][ T8594] netlink: 'syz.2.775': attribute type 10 has an invalid length. [ 112.345070][ T8606] batadv_slave_1: entered promiscuous mode [ 112.495944][ T8603] batadv_slave_1: left promiscuous mode [ 112.666965][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 112.666977][ T40] audit: type=1400 audit(1765180831.034:33659): avc: denied { create } for pid=8607 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.673090][ T8610] netlink: 'syz.3.780': attribute type 4 has an invalid length. [ 112.678415][ T8610] __nla_validate_parse: 2 callbacks suppressed [ 112.678426][ T8610] netlink: 152 bytes leftover after parsing attributes in process `syz.3.780'. [ 112.692210][ T8610] .`: renamed from bond0 (while UP) [ 112.981606][ T8621] bond0: ARP target 4.0.0.0 is already present [ 112.986149][ T8621] bond0: option arp_ip_target: invalid value (4) [ 112.990108][ T8621] bond0 (unregistering): Released all slaves [ 113.027036][ T8626] bond0: ARP target 4.0.0.0 is already present [ 113.029650][ T8626] bond0: option arp_ip_target: invalid value (4) [ 113.033944][ T8629] loop6: detected capacity change from 0 to 2640 [ 113.035144][ T8626] bond0 (unregistering): Released all slaves [ 113.038311][ T7544] ldm_validate_partition_table(): Disk read failed. [ 113.041674][ T7544] Dev loop6: unable to read RDB block 0 [ 113.045807][ T7544] loop6: unable to read partition table [ 113.054282][ T8629] ldm_validate_partition_table(): Disk read failed. [ 113.056627][ T8629] Dev loop6: unable to read RDB block 0 [ 113.058617][ T8629] loop6: unable to read partition table [ 113.060577][ T8629] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 113.249798][ T40] audit: type=1400 audit(1765180831.614:33660): avc: denied { mount } for pid=8645 comm="syz.3.791" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 113.262625][ T40] audit: type=1400 audit(1765180831.614:33661): avc: denied { unmount } for pid=8645 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 113.276215][ T40] audit: type=1400 audit(1765180831.644:33662): avc: denied { write } for pid=8647 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.283793][ T40] audit: type=1400 audit(1765180831.654:33663): avc: denied { read } for pid=8647 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.307498][ T40] audit: type=1400 audit(1765180831.674:33664): avc: denied { map } for pid=8649 comm="syz.2.793" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.315326][ T40] audit: type=1400 audit(1765180831.674:33665): avc: denied { execute } for pid=8649 comm="syz.2.793" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.347002][ T8655] tun0: tun_chr_ioctl cmd 1074025672 [ 113.348736][ T8655] tun0: ignored: set checksum disabled [ 113.548518][ T1262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.552037][ T1262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 113.650950][ T8677] sp0: Synchronizing with TNC [ 113.704595][ T1262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.707890][ T1262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 113.773378][ T8676] [U] [ 113.828795][ T40] audit: type=1400 audit(1765180832.194:33666): avc: denied { execute } for pid=8691 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 113.837300][ T40] audit: type=1400 audit(1765180832.194:33667): avc: denied { execute_no_trans } for pid=8691 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 113.838130][ T1262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.849846][ T1262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 113.912219][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.913427][ T40] audit: type=1326 audit(1765180832.284:33668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8704 comm="syz.2.809" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57bdf8f7c9 code=0x0 [ 113.916122][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.925525][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.928929][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.937316][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.937832][ T1262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.938698][ T5294] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 113.946682][ T1262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 113.964363][ T8705] xfrm0 speed is unknown, defaulting to 1000 [ 114.026681][ T8716] dlm: Unknown command passed to DLM device : 33 [ 114.026681][ T8716] [ 114.117474][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.813'. [ 114.129461][ T1262] bridge_slave_1: left allmulticast mode [ 114.132153][ T1262] bridge_slave_1: left promiscuous mode [ 114.137015][ T1262] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.146395][ T1262] bridge_slave_0: left allmulticast mode [ 114.152663][ T1262] bridge_slave_0: left promiscuous mode [ 114.155693][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.376679][ T1262] bond1 (unregistering): (slave geneve2): Releasing active interface [ 114.578387][ T8744] netlink: 56 bytes leftover after parsing attributes in process `syz.0.819'. [ 114.630522][ T1262] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 114.633361][ T1262] bridge3 (unregistering): left promiscuous mode [ 114.796371][ T1262] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.801886][ T1262] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.808214][ T1262] .` (unregistering): (slave batadv0): Releasing backup interface [ 114.811981][ T1262] .` (unregistering): Released all slaves [ 114.817081][ T1262] bond1 (unregistering): Released all slaves [ 114.874106][ T1262] bond2 (unregistering): Released all slaves [ 114.936748][ T1262] bond3 (unregistering): Released all slaves [ 115.040031][ T8705] chnl_net:caif_netlink_parms(): no params data found [ 115.046068][ T8754] netlink: 'syz.0.821': attribute type 12 has an invalid length. [ 115.048546][ T8754] netlink: 'syz.0.821': attribute type 29 has an invalid length. [ 115.051106][ T8754] netlink: 148 bytes leftover after parsing attributes in process `syz.0.821'. [ 115.054215][ T8754] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 115.132130][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.135503][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.138472][ T8705] bridge_slave_0: entered allmulticast mode [ 115.141626][ T8705] bridge_slave_0: entered promiscuous mode [ 115.145892][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.148823][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.151763][ T8705] bridge_slave_1: entered allmulticast mode [ 115.155115][ T8705] bridge_slave_1: entered promiscuous mode [ 115.185424][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.189636][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.262233][ T8705] team0: Port device team_slave_0 added [ 115.267758][ T8705] team0: Port device team_slave_1 added [ 115.284275][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.286958][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.300898][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.307242][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.309539][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.318047][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.372167][ T8705] hsr_slave_0: entered promiscuous mode [ 115.376690][ T8705] hsr_slave_1: entered promiscuous mode [ 115.378832][ T8705] debugfs: 'hsr0' already exists in 'hsr' [ 115.380744][ T8705] Cannot create hsr debugfs directory [ 115.384825][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 115.434230][ T8791] netlink: 156 bytes leftover after parsing attributes in process `syz.2.827'. [ 115.550124][ T1262] hsr_slave_0: left promiscuous mode [ 115.554114][ T1262] hsr_slave_1: left promiscuous mode [ 115.560170][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.563042][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.566151][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.568638][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.585082][ T1262] veth1_macvtap: left promiscuous mode [ 115.587266][ T1262] veth0_macvtap: left promiscuous mode [ 115.589224][ T1262] veth1_vlan: left promiscuous mode [ 115.591699][ T1262] veth0_vlan: left promiscuous mode [ 115.944725][ T1262] team0 (unregistering): Port device team_slave_1 removed [ 115.972735][ T5944] Bluetooth: hci2: command tx timeout [ 115.977349][ T1262] team0 (unregistering): Port device team_slave_0 removed [ 116.268835][ T8806] vxlan0: entered promiscuous mode [ 116.269740][ T8819] binder_alloc: 8818: pid 8818 spamming oneway? 1 buffers allocated for a total size of 4096 [ 116.270525][ T8806] vxlan0: entered allmulticast mode [ 116.280379][ T8819] /dev/nullb0: Can't open blockdev [ 116.294764][ T8813] syzkaller0: entered promiscuous mode [ 116.296628][ T8813] syzkaller0: entered allmulticast mode [ 116.302434][ T63] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.310972][ T63] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.337480][ T63] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.340694][ T3077] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.385318][ T8705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.394824][ T8705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.403660][ T8705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.415587][ T8705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.481691][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.491492][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.504530][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.507420][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.516360][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.519325][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.617339][ T1262] IPVS: stop unused estimator thread 0... [ 116.678185][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.825120][ T8880] syzkaller0: entered promiscuous mode [ 116.827206][ T8880] syzkaller0: entered allmulticast mode [ 116.894720][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.899294][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.906068][ T8884] bond0: left promiscuous mode [ 116.907744][ T8884] bond_slave_0: left promiscuous mode [ 116.909712][ T8884] bond_slave_1: left promiscuous mode [ 116.939590][ T8884] wg1: left promiscuous mode [ 116.994180][ T8884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.002384][ T8884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.085476][ T8884] vlan0: left allmulticast mode [ 117.087124][ T8884] veth0_to_bond: left allmulticast mode [ 117.093169][ T8884] vxlan0: left promiscuous mode [ 117.094816][ T8884] vxlan0: left allmulticast mode [ 117.105788][ T1145] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.109142][ T1145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.116647][ T1145] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.120543][ T1145] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.123895][ T1145] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.126867][ T1145] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.129828][ T1145] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.133529][ T1145] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.153532][ T8705] veth0_vlan: entered promiscuous mode [ 117.158731][ T8705] veth1_vlan: entered promiscuous mode [ 117.184470][ T8705] veth0_macvtap: entered promiscuous mode [ 117.188899][ T8705] veth1_macvtap: entered promiscuous mode [ 117.198382][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.205241][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.211900][ T1262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.214833][ T1262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.217970][ T1262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.220737][ T1262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.258372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.261000][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.274332][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.277228][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.289055][ T8910] syzkaller0: entered promiscuous mode [ 117.290891][ T8910] syzkaller0: entered allmulticast mode [ 117.357606][ T8915] program syz.2.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.381024][ T8918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'. [ 117.381257][ T8919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=8919 comm=syz.4.805 [ 117.385332][ T8917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'. [ 117.390249][ T8919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=8919 comm=syz.4.805 [ 117.393895][ T849] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 117.399010][ T8920] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 117.444738][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 117.451204][ T8926] erspan1: entered promiscuous mode [ 117.451644][ T8927] netlink: 100 bytes leftover after parsing attributes in process `syz.0.855'. [ 117.468193][ T8927] bridge0: entered promiscuous mode [ 117.493358][ T8930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=8930 comm=syz.4.857 [ 117.562935][ T849] usb 6-1: Using ep0 maxpacket: 16 [ 117.569522][ T849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 117.576680][ T849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 117.586138][ T849] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 117.589879][ T849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.593672][ T849] usb 6-1: Product: syz [ 117.595472][ T849] usb 6-1: Manufacturer: syz [ 117.597593][ T849] usb 6-1: SerialNumber: syz [ 117.608224][ T849] usb 6-1: config 0 descriptor?? [ 117.622816][ T849] hub 6-1:0.0: bad descriptor, ignoring hub [ 117.625470][ T849] hub 6-1:0.0: probe with driver hub failed with error -5 [ 117.640477][ T849] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 117.660470][ T8951] syzkaller0: entered promiscuous mode [ 117.662298][ T8951] syzkaller0: entered allmulticast mode [ 117.741682][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 117.741698][ T40] audit: type=1400 audit(1765180836.104:33734): avc: denied { map } for pid=8952 comm="syz.0.864" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 117.754566][ T40] audit: type=1400 audit(1765180836.114:33735): avc: denied { execute } for pid=8952 comm="syz.0.864" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 117.790441][ T8955] __nla_validate_parse: 1 callbacks suppressed [ 117.790458][ T8955] netlink: 64 bytes leftover after parsing attributes in process `syz.0.865'. [ 117.798587][ T8955] block nbd0: not configured, cannot reconfigure [ 117.814110][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 118.042584][ T5944] Bluetooth: hci2: command tx timeout [ 118.064180][ T40] audit: type=1400 audit(1765180836.434:33736): avc: denied { ioctl } for pid=8980 comm="syz.0.869" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 118.095767][ T40] audit: type=1400 audit(1765180836.464:33737): avc: denied { map } for pid=8985 comm="syz.0.870" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.309579][ T40] audit: type=1400 audit(1765180836.674:33738): avc: denied { getopt } for pid=8991 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.436512][ T8994] syzkaller0: entered promiscuous mode [ 118.439119][ T8994] syzkaller0: entered allmulticast mode [ 118.447522][ T40] audit: type=1400 audit(1765180836.814:33739): avc: denied { mount } for pid=8993 comm="syz.2.873" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 118.447834][ T8994] devtmpfs: Cannot change global quota limit on remount [ 118.457308][ T40] audit: type=1400 audit(1765180836.814:33740): avc: denied { remount } for pid=8993 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 118.466924][ T40] audit: type=1400 audit(1765180836.824:33741): avc: denied { module_request } for pid=8993 comm="syz.2.873" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.503376][ T8994] batadv_slave_1: entered promiscuous mode [ 118.506473][ T8994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.873'. [ 118.506512][ T8995] netlink: 64 bytes leftover after parsing attributes in process `syz.2.873'. [ 118.517337][ T8993] batadv_slave_1: left promiscuous mode [ 118.638910][ T9000] ./file0: Can't lookup blockdev [ 118.833403][ T9008] netlink: 8856 bytes leftover after parsing attributes in process `syz.0.877'. [ 119.663722][ T40] audit: type=1400 audit(1765180838.034:33742): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.689592][ T9012] sctp: [Deprecated]: syz.0.879 (pid 9012) Use of int in max_burst socket option. [ 119.689592][ T9012] Use struct sctp_assoc_value instead [ 119.694146][ T9013] netlink: 'syz.2.878': attribute type 11 has an invalid length. [ 119.746758][ T40] audit: type=1400 audit(1765180838.114:33743): avc: denied { map } for pid=9017 comm="syz.2.881" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.004028][ T9039] tmpfs: Unknown parameter 'np_i' [ 120.016803][ T9037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.122754][ T5944] Bluetooth: hci2: command tx timeout [ 120.179782][ T9051] tmpfs: Unknown parameter 'obj_role' [ 120.239427][ T9056] mkiss: ax0: crc mode is auto. [ 120.244622][ T9056] netlink: 'syz.0.894': attribute type 11 has an invalid length. [ 120.247108][ T9056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.894'. [ 120.358061][ T9058] syzkaller0: entered promiscuous mode [ 120.360444][ T9058] syzkaller0: entered allmulticast mode [ 120.364969][ T60] usb 6-1: USB disconnect, device number 8 [ 120.374719][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 120.379815][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 120.748037][ T9083] netlink: 'syz.2.903': attribute type 10 has an invalid length. [ 120.751671][ T9083] batman_adv: batadv0: Removing interface: dummy0 [ 120.760051][ T9083] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 120.800379][ T9085] random: crng reseeded on system resumption [ 120.846577][ T9088] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 120.870324][ T9088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.899946][ T9088] bond2: (slave veth7): Enslaving as an active interface with a down link [ 120.912007][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.914503][ T9088] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 120.931836][ T9094] loop3: detected capacity change from 0 to 7 [ 120.940030][ T7544] Dev loop3: unable to read RDB block 7 [ 120.942448][ T7544] loop3: AHDI p1 [ 120.944348][ T7544] loop3: partition table partially beyond EOD, truncated [ 120.955486][ T9094] Dev loop3: unable to read RDB block 7 [ 120.957909][ T9094] loop3: AHDI p1 [ 120.959607][ T9094] loop3: partition table partially beyond EOD, truncated [ 121.004144][ T9097] syzkaller0: entered promiscuous mode [ 121.005977][ T9097] syzkaller0: entered allmulticast mode [ 121.298428][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 121.301327][ T9108] bridge_slave_1: left allmulticast mode [ 121.303451][ T9108] bridge_slave_1: left promiscuous mode [ 121.306668][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.315762][ T9108] bridge_slave_0: left allmulticast mode [ 121.317902][ T9108] bridge_slave_0: left promiscuous mode [ 121.320132][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.571654][ T9128] syzkaller0: entered promiscuous mode [ 121.577745][ T9128] syzkaller0: entered allmulticast mode [ 121.593400][ T9133] bond1: option downdelay: invalid value (18446744073709551615) [ 121.595923][ T9133] bond1: option downdelay: allowed values 0 - 2147483647 [ 121.599420][ T9133] bond1 (unregistering): Released all slaves [ 122.204226][ T5944] Bluetooth: hci2: command tx timeout [ 122.763153][ T9157] xfrm0 speed is unknown, defaulting to 1000 [ 122.834424][ T9188] syzkaller0: entered promiscuous mode [ 122.836312][ T9188] syzkaller0: entered allmulticast mode [ 122.845913][ T9162] xfrm0 speed is unknown, defaulting to 1000 [ 122.927119][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 122.927135][ T40] audit: type=1400 audit(1765180841.294:33752): avc: denied { create } for pid=9195 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 122.936403][ T40] audit: type=1400 audit(1765180841.294:33753): avc: denied { getopt } for pid=9195 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 123.137854][ T9212] FAT-fs (sr0): bogus number of reserved sectors [ 123.139960][ T9212] FAT-fs (sr0): Can't find a valid FAT filesystem [ 123.217869][ T40] audit: type=1400 audit(1765180841.584:33754): avc: denied { lock } for pid=9222 comm="syz.0.949" path="socket:[27956]" dev="sockfs" ino=27956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.278211][ T9226] syzkaller0: entered promiscuous mode [ 123.280020][ T9226] syzkaller0: entered allmulticast mode [ 123.419896][ T40] audit: type=1400 audit(1765180841.784:33755): avc: denied { read } for pid=9227 comm="syz.0.952" path="socket:[27970]" dev="sockfs" ino=27970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.427984][ T40] audit: type=1400 audit(1765180841.794:33756): avc: denied { connect } for pid=9227 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.511647][ T40] audit: type=1400 audit(1765180841.874:33757): avc: denied { listen } for pid=9238 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.566877][ T9243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.570828][ T9243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.678200][ T9243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.681528][ T9243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.688111][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 123.736845][ T9261] x_tables: duplicate underflow at hook 1 [ 123.740698][ T9262] syzkaller0: entered promiscuous mode [ 123.742422][ T9262] syzkaller0: entered allmulticast mode [ 123.765194][ T9267] netlink: 'syz.4.964': attribute type 13 has an invalid length. [ 123.785466][ T9243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.789711][ T9243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.800172][ T40] audit: type=1400 audit(1765180842.164:33758): avc: denied { write } for pid=9264 comm="syz.0.963" path="socket:[29210]" dev="sockfs" ino=29210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.888635][ T9243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.891977][ T9243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.026284][ T1145] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.029206][ T1145] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.039556][ T1145] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.042818][ T1145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.050497][ T1145] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.054023][ T1145] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.061475][ T1145] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.065562][ T1145] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.079586][ T9289] vlan2: entered allmulticast mode [ 124.081446][ T9289] bond0: entered allmulticast mode [ 124.084005][ T9289] bond_slave_0: entered allmulticast mode [ 124.085911][ T9289] bond_slave_1: entered allmulticast mode [ 124.095866][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'. [ 124.112749][ T5944] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 124.153730][ T9298] syzkaller0: entered promiscuous mode [ 124.158069][ T9298] syzkaller0: entered allmulticast mode [ 124.254502][ T40] audit: type=1400 audit(1765180842.624:33759): avc: denied { write } for pid=9301 comm="syz.4.976" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 124.261486][ T40] audit: type=1400 audit(1765180842.624:33760): avc: denied { ioctl } for pid=9301 comm="syz.4.976" path="/24/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 124.411697][ T9310] netlink: 'syz.1.979': attribute type 178 has an invalid length. [ 124.522647][ T1024] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 124.626412][ T9310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9310 comm=syz.1.979 [ 124.695074][ T1024] usb 9-1: Using ep0 maxpacket: 8 [ 124.698527][ T1024] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 124.702002][ T1024] usb 9-1: config 0 has no interface number 0 [ 124.705890][ T1024] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.709482][ T1024] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 124.713639][ T1024] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 58059, setting to 1024 [ 124.717316][ T1024] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.721722][ T1024] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 124.725346][ T1024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.729203][ T1024] usb 9-1: config 0 descriptor?? [ 124.738344][ T1024] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 124.770467][ T9316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9316 comm=syz.0.982 [ 124.774601][ T9316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9316 comm=syz.0.982 [ 124.860546][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 124.941879][ T1024] usb 9-1: USB disconnect, device number 2 [ 124.947455][ T1024] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 124.971246][ T9326] xt_ecn: cannot match TCP bits for non-tcp packets [ 124.987149][ T40] audit: type=1326 audit(1765180843.354:33761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9325 comm="syz.2.984" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57bdf8f7c9 code=0x0 [ 125.164412][ T9330] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 125.166859][ T9330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.985'. [ 125.234077][ T9334] syzkaller0: entered promiscuous mode [ 125.236347][ T9334] syzkaller0: entered allmulticast mode [ 125.568682][ T9346] 9p: Could not find request transport: V9mvirtio [ 125.660112][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.665864][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.669497][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.669564][ T9351] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 125.672915][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.743348][ T9367] syzkaller0: entered promiscuous mode [ 125.745098][ T9367] syzkaller0: entered allmulticast mode [ 125.830487][ T9373] trusted_key: encrypted_key: keylen parameter is missing [ 125.833440][ T9373] f2fs: Unknown parameter 'grpquotad' [ 125.887993][ T9378] hfs: can't find a HFS filesystem on dev sr0 [ 125.915971][ T9383] binder: 9382:9383 unknown command 0 [ 125.917876][ T9383] binder: 9382:9383 ioctl c0306201 200000000080 returned -22 [ 125.921097][ T9383] binder: 9382:9383 ioctl c0306201 2000000003c0 returned -14 [ 125.968519][ T9380] sd 0:0:0:0: PR command failed: 1026 [ 125.970314][ T9380] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 125.976060][ T9380] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 126.222846][ T7874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.332641][ T6020] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 126.346506][ T9415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.350469][ T9415] blkdev_get_no_open: 1 callbacks suppressed [ 126.350480][ T9415] block device autoloading is deprecated and will be removed. [ 126.374319][ T9416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9416 comm=syz.2.1006 [ 126.384409][ T7874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.387900][ T7874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.391060][ T7874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.394064][ T7874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.404527][ T9380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.412333][ T7874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.459376][ T9409] md: could not open device unknown-block(0,0). [ 126.461798][ T9409] md: md_import_device returned -6 [ 126.482014][ T6020] usb 9-1: device descriptor read/64, error -71 [ 126.496936][ T9422] overlayfs: failed to resolve './file1': -2 [ 126.528721][ T9426] syzkaller0: entered promiscuous mode [ 126.530491][ T9426] syzkaller0: entered allmulticast mode [ 126.690834][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 126.718461][ T9380] team0: Port device team_slave_1 removed [ 126.735833][ T6020] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 126.800245][ T7874] usb 5-1: USB disconnect, device number 8 [ 126.872927][ T6020] usb 9-1: device descriptor read/64, error -71 [ 126.873054][ T9446] kAFS: unable to lookup cell '(,' [ 126.983632][ T6020] usb usb9-port1: attempt power cycle [ 127.342609][ T6020] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 127.363170][ T6020] usb 9-1: device descriptor read/8, error -71 [ 127.404173][ T9471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.453304][ T9476] netlink: 4112 bytes leftover after parsing attributes in process `syz.0.1023'. [ 127.582801][ T9479] input: syz0 as /devices/virtual/input/input11 [ 127.605897][ T6020] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 127.623051][ T6020] usb 9-1: device descriptor read/8, error -71 [ 127.647128][ T9485] batman_adv: batadv0: Adding interface: gretap2 [ 127.650102][ T9485] batman_adv: batadv0: Interface activated: gretap2 [ 127.718764][ T9489] overlayfs: upper fs does not support tmpfile. [ 127.733160][ T6020] usb usb9-port1: unable to enumerate USB device [ 127.798267][ T9501] dlm: no locking on control device [ 127.848667][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 127.851566][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 127.857008][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 127.859874][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 127.902767][ T1024] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 127.928366][ T9522] macsec1: entered promiscuous mode [ 127.930463][ T9522] macsec1: entered allmulticast mode [ 127.980742][ T5944] Bluetooth: hci3: unexpected event for opcode 0x100c [ 127.987799][ T9533] netlink: 'syz.1.1036': attribute type 7 has an invalid length. [ 127.990428][ T9534] netlink: 'syz.1.1036': attribute type 7 has an invalid length. [ 128.042705][ T1024] usb 9-1: device descriptor read/64, error -71 [ 128.282599][ T1024] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 128.422656][ T1024] usb 9-1: device descriptor read/64, error -71 [ 128.540639][ T1024] usb usb9-port1: attempt power cycle [ 128.857541][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 128.857553][ T40] audit: type=1400 audit(1765180847.224:33888): avc: denied { accept } for pid=9599 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 128.892680][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 128.902569][ T1024] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 128.923024][ T1024] usb 9-1: device descriptor read/8, error -71 [ 129.040119][ T40] audit: type=1400 audit(1765180847.404:33889): avc: denied { append } for pid=9609 comm="syz.2.1051" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 129.040915][ T9610] xt_SECMARK: invalid mode: 2 [ 129.045540][ T53] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 129.045557][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.045568][ T53] usb 6-1: Product: syz [ 129.045575][ T53] usb 6-1: Manufacturer: syz [ 129.045583][ T53] usb 6-1: SerialNumber: syz [ 129.061719][ T40] audit: type=1400 audit(1765180847.424:33890): avc: denied { ioctl } for pid=9609 comm="syz.2.1051" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 129.066058][ T9612] tmpfs: Bad value for 'mpol' [ 129.067556][ T53] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 129.096069][ T40] audit: type=1400 audit(1765180847.464:33891): avc: denied { firmware_load } for pid=53 comm="kworker/2:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 129.104238][ T9614] syzkaller0: entered promiscuous mode [ 129.104321][ T9614] syzkaller0: entered allmulticast mode [ 129.115601][ T53] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 129.218303][ T40] audit: type=1400 audit(1765180847.584:33892): avc: denied { create } for pid=9628 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 129.272049][ T40] audit: type=1400 audit(1765180847.634:33893): avc: denied { ioctl } for pid=9632 comm="syz.4.1061" path="socket:[32781]" dev="sockfs" ino=32781 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.331055][ T849] usb 6-1: USB disconnect, device number 9 [ 129.346338][ T40] audit: type=1400 audit(1765180847.714:33894): avc: denied { read } for pid=9636 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.413715][ T9647] binder: 9640:9647 unknown command 0 [ 129.415453][ T9647] binder: 9640:9647 ioctl c0306201 200000004a40 returned -22 [ 129.440422][ T9647] loop6: detected capacity change from 0 to 2640 [ 129.443378][ T7544] buffer_io_error: 10639 callbacks suppressed [ 129.443387][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.450142][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.453065][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.455553][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.458031][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.462107][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.466149][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.468824][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.471380][ T7544] ldm_validate_partition_table(): Disk read failed. [ 129.473869][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.476380][ T7544] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.478985][ T7544] Dev loop6: unable to read RDB block 0 [ 129.480944][ T7544] loop6: unable to read partition table [ 129.485157][ T9647] ldm_validate_partition_table(): Disk read failed. [ 129.487552][ T9647] Dev loop6: unable to read RDB block 0 [ 129.489637][ T9647] loop6: unable to read partition table [ 129.492048][ T9647] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 129.519402][ T9659] __nla_validate_parse: 4 callbacks suppressed [ 129.519414][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 129.551686][ T9647] tipc: Trying to set illegal importance in message [ 129.564609][ T9664] syzkaller0: entered promiscuous mode [ 129.567105][ T9664] syzkaller0: entered allmulticast mode [ 129.642795][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.645272][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 129.679431][ T9668] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 129.693142][ T9668] bond1: entered promiscuous mode [ 129.694860][ T9668] bond1: entered allmulticast mode [ 129.696833][ T9668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.705774][ T9668] erspan2: entered allmulticast mode [ 129.709689][ T9668] bond1: (slave erspan2): making interface the new active one [ 129.712370][ T9668] erspan2: entered promiscuous mode [ 129.714991][ T9668] bond1: (slave erspan2): Enslaving as an active interface with an up link [ 129.863985][ T9676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=737 sclass=netlink_route_socket pid=9676 comm=syz.1.1071 [ 129.887198][ T9674] dlm: no local IP address has been set [ 129.889274][ T9674] dlm: cannot start dlm midcomms -107 [ 129.893089][ T40] audit: type=1800 audit(1765180848.254:33895): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1070" name="file0" dev="tmpfs" ino=268 res=0 errno=0 [ 129.901638][ T40] audit: type=1804 audit(1765180848.264:33896): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1070" name="/newroot/46/file0" dev="tmpfs" ino=268 res=1 errno=0 [ 130.202613][ T53] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 130.205136][ T53] ath9k_htc: Failed to initialize the device [ 130.208715][ T849] usb 6-1: ath9k_htc: USB layer deinitialized [ 131.722756][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.725631][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 131.728246][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 133.802988][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.805206][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 133.807062][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 135.882822][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.884873][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 135.886937][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 135.999100][ T9703] input: syz1 as /devices/virtual/input/input13 [ 136.023217][ T9703] netlink: 'syz.4.1077': attribute type 10 has an invalid length. [ 136.025832][ T9703] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 136.029082][ T9703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.034035][ T9706] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 136.035504][ T40] audit: type=1400 audit(1765180854.404:33897): avc: denied { append } for pid=9708 comm="syz.1.1080" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.051325][ T9707] xfrm0 speed is unknown, defaulting to 1000 [ 136.082948][ T9711] fuse: Bad value for 'rootmode' [ 136.086384][ T40] audit: type=1400 audit(1765180854.454:33898): avc: denied { cmd } for pid=9708 comm="syz.1.1080" path="socket:[32884]" dev="sockfs" ino=32884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 136.139416][ T40] audit: type=1400 audit(1765180854.504:33899): avc: denied { create } for pid=9705 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.341943][ T9722] 9p: Could not find request transport: 4?vfd [ 136.382581][ T6027] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 136.563988][ T6027] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.566846][ T6027] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.582599][ T6027] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.585732][ T6027] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 136.589358][ T6027] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 136.603863][ T6027] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.606709][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.609193][ T6027] usb 6-1: Product: syz [ 136.610525][ T6027] usb 6-1: Manufacturer: syz [ 136.624720][ T6027] cdc_wdm 6-1:1.0: skipping garbage [ 136.626380][ T6027] cdc_wdm 6-1:1.0: skipping garbage [ 136.629275][ T6027] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 136.631502][ T6027] cdc_wdm 6-1:1.0: Unknown control protocol [ 136.688135][ T9736] syzkaller0: entered promiscuous mode [ 136.689918][ T9736] syzkaller0: entered allmulticast mode [ 136.817106][ T40] audit: type=1400 audit(1765180855.184:33900): avc: denied { read write } for pid=9717 comm="syz.1.1083" name="cdc-wdm0" dev="devtmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 136.826961][ T40] audit: type=1400 audit(1765180855.194:33901): avc: denied { open } for pid=9717 comm="syz.1.1083" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 136.856458][ T40] audit: type=1400 audit(1765180855.224:33902): avc: granted { setsecparam } for pid=9739 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 136.871736][ T9740] vlan2: entered allmulticast mode [ 136.873593][ T9740] bond0: entered allmulticast mode [ 136.875180][ T9740] bond_slave_0: entered allmulticast mode [ 136.878677][ T9740] bond_slave_1: entered allmulticast mode [ 136.880585][ T9740] team0: entered allmulticast mode [ 136.882172][ T9740] team_slave_0: entered allmulticast mode [ 136.884419][ T9740] syz_tun: entered allmulticast mode [ 136.893087][ T6027] usb 6-1: USB disconnect, device number 10 [ 136.893154][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 136.897696][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 136.900168][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 136.943584][ T9746] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1090'. [ 137.013296][ T9754] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1092'. [ 137.036117][ T9756] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1090'. [ 137.157056][ T9759] vlan3: entered promiscuous mode [ 137.157243][ T9759] vlan3: entered allmulticast mode [ 137.157256][ T9759] hsr_slave_1: entered allmulticast mode [ 137.200252][ T9769] syzkaller0: entered promiscuous mode [ 137.200268][ T9769] syzkaller0: entered allmulticast mode [ 137.489016][ T9785] i2c i2c-1: Invalid block write size 34 [ 137.492107][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'. [ 137.495703][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'. [ 137.502109][ T9785] syz_tun: entered promiscuous mode [ 137.505783][ T9785] syz_tun: left promiscuous mode [ 137.626378][ T40] audit: type=1400 audit(1765180855.994:33903): avc: denied { ioctl } for pid=9788 comm="syz.2.1103" path="socket:[31460]" dev="sockfs" ino=31460 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.645996][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.648686][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.664285][ T9793] syzkaller0: entered promiscuous mode [ 137.666278][ T9793] syzkaller0: entered allmulticast mode [ 138.236369][ T9800] overlayfs: invalid origin (0000) [ 153.324380][ T1422] ================================================================== [ 153.326918][ T1422] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 153.329282][ T1422] Read of size 8 at addr ffff8880567a4020 by task aoe_tx0/1422 [ 153.333118][ T1422] [ 153.334670][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.334688][ T1422] Tainted: [L]=SOFTLOCKUP [ 153.334692][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.334700][ T1422] Call Trace: [ 153.334704][ T1422] [ 153.334709][ T1422] dump_stack_lvl+0x116/0x1f0 [ 153.334738][ T1422] print_report+0xcd/0x630 [ 153.334753][ T1422] ? __virt_addr_valid+0x81/0x610 [ 153.334763][ T1422] ? __phys_addr+0xe8/0x180 [ 153.334773][ T1422] ? tty_write_room+0x7d/0x90 [ 153.334784][ T1422] kasan_report+0xe0/0x110 [ 153.334797][ T1422] ? tty_write_room+0x7d/0x90 [ 153.334810][ T1422] tty_write_room+0x7d/0x90 [ 153.334820][ T1422] handle_tx+0x14f/0x630 [ 153.334833][ T1422] dev_hard_start_xmit+0x97/0x6e0 [ 153.334847][ T1422] __dev_queue_xmit+0x6d7/0x4650 [ 153.334860][ T1422] ? rcu_is_watching+0x12/0xc0 [ 153.334870][ T1422] ? finish_task_switch.isra.0+0x207/0xbd0 [ 153.334891][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.334903][ T1422] ? __lock_acquire+0x436/0x2890 [ 153.334917][ T1422] ? ref_tracker_free+0x37c/0x830 [ 153.334930][ T1422] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.334947][ T1422] ? rcu_is_watching+0x12/0xc0 [ 153.334958][ T1422] tx+0xcc/0x190 [ 153.334974][ T1422] ? __pfx_tx+0x10/0x10 [ 153.334989][ T1422] kthread+0x1e4/0x3e0 [ 153.335004][ T1422] ? find_held_lock+0x2b/0x80 [ 153.335020][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.335034][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 153.335052][ T1422] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.335068][ T1422] ? __kthread_parkme+0x19e/0x250 [ 153.335079][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.335093][ T1422] kthread+0x3c5/0x780 [ 153.335106][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.335119][ T1422] ? rcu_is_watching+0x12/0xc0 [ 153.335128][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.335145][ T1422] ret_from_fork+0x983/0xb10 [ 153.335158][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 153.335170][ T1422] ? __switch_to+0x7af/0x10d0 [ 153.335184][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.335197][ T1422] ret_from_fork_asm+0x1a/0x30 [ 153.335217][ T1422] [ 153.335220][ T1422] [ 153.401971][ T1422] Allocated by task 7956: [ 153.403357][ T1422] kasan_save_stack+0x33/0x60 [ 153.404891][ T1422] kasan_save_track+0x14/0x30 [ 153.406393][ T1422] __kasan_kmalloc+0xaa/0xb0 [ 153.407870][ T1422] alloc_tty_struct+0x96/0x8c0 [ 153.409419][ T1422] tty_init_dev.part.0+0x1e/0x500 [ 153.411054][ T1422] tty_open+0xa4f/0xf90 [ 153.412416][ T1422] chrdev_open+0x234/0x6a0 [ 153.413860][ T1422] do_dentry_open+0x748/0x1590 [ 153.415403][ T1422] vfs_open+0x82/0x3f0 [ 153.416732][ T1422] path_openat+0x2078/0x3140 [ 153.418218][ T1422] do_filp_open+0x20b/0x470 [ 153.419687][ T1422] do_sys_openat2+0x11f/0x280 [ 153.421234][ T1422] __x64_sys_openat+0x174/0x210 [ 153.422792][ T1422] do_syscall_64+0xcd/0xf80 [ 153.424283][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.426160][ T1422] [ 153.426944][ T1422] Freed by task 6027: [ 153.428242][ T1422] kasan_save_stack+0x33/0x60 [ 153.429764][ T1422] kasan_save_track+0x14/0x30 [ 153.431315][ T1422] kasan_save_free_info+0x3b/0x60 [ 153.432951][ T1422] __kasan_slab_free+0x5f/0x80 [ 153.434490][ T1422] kfree+0x2f8/0x6e0 [ 153.435751][ T1422] process_one_work+0x9ba/0x1b20 [ 153.437344][ T1422] worker_thread+0x6c8/0xf10 [ 153.438824][ T1422] kthread+0x3c5/0x780 [ 153.440140][ T1422] ret_from_fork+0x983/0xb10 [ 153.441647][ T1422] ret_from_fork_asm+0x1a/0x30 [ 153.443193][ T1422] [ 153.443995][ T1422] Last potentially related work creation: [ 153.445799][ T1422] kasan_save_stack+0x33/0x60 [ 153.447317][ T1422] kasan_record_aux_stack+0xa7/0xc0 [ 153.448998][ T1422] insert_work+0x36/0x230 [ 153.450392][ T1422] __queue_work+0x94f/0x10e0 [ 153.451879][ T1422] queue_work_on+0x1a4/0x1f0 [ 153.453373][ T1422] release_tty+0x4de/0x5d0 [ 153.454836][ T1422] tty_release_struct+0xb7/0xe0 [ 153.456418][ T1422] tty_release+0xe2d/0x1470 [ 153.457893][ T1422] __fput+0x402/0xb70 [ 153.459200][ T1422] task_work_run+0x150/0x240 [ 153.460721][ T1422] do_exit+0x87f/0x2bd0 [ 153.462070][ T1422] do_group_exit+0xd3/0x2a0 [ 153.463543][ T1422] get_signal+0x2671/0x26d0 [ 153.465032][ T1422] arch_do_signal_or_restart+0x8f/0x7e0 [ 153.466807][ T1422] irqentry_exit+0x38a/0x8c0 [ 153.468312][ T1422] asm_exc_page_fault+0x26/0x30 [ 153.469876][ T1422] [ 153.470681][ T1422] The buggy address belongs to the object at ffff8880567a4000 [ 153.470681][ T1422] which belongs to the cache kmalloc-cg-2k of size 2048 [ 153.475144][ T1422] The buggy address is located 32 bytes inside of [ 153.475144][ T1422] freed 2048-byte region [ffff8880567a4000, ffff8880567a4800) [ 153.479410][ T1422] [ 153.480200][ T1422] The buggy address belongs to the physical page: [ 153.482254][ T1422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x567a0 [ 153.485008][ T1422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.487667][ T1422] memcg:ffff888055213a01 [ 153.489034][ T1422] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 153.491550][ T1422] page_type: f5(slab) [ 153.492832][ T1422] raw: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 153.495534][ T1422] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888055213a01 [ 153.498239][ T1422] head: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 153.500974][ T1422] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888055213a01 [ 153.503674][ T1422] head: 00fff00000000003 ffffea000159e801 00000000ffffffff 00000000ffffffff [ 153.506423][ T1422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 153.509150][ T1422] page dumped because: kasan: bad access detected [ 153.511208][ T1422] page_owner tracks the page as allocated [ 153.513017][ T1422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5932, tgid 5932 (syz-executor), ts 55892255551, free_ts 0 [ 153.519287][ T1422] post_alloc_hook+0x1af/0x220 [ 153.520825][ T1422] get_page_from_freelist+0xd0b/0x31a0 [ 153.522549][ T1422] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 153.524438][ T1422] alloc_pages_mpol+0x1fb/0x550 [ 153.525994][ T1422] new_slab+0x2c3/0x430 [ 153.527337][ T1422] ___slab_alloc+0xe18/0x1c90 [ 153.528858][ T1422] __slab_alloc.constprop.0+0x63/0x110 [ 153.530627][ T1422] __kvmalloc_node_noprof+0x592/0xa40 [ 153.532340][ T1422] xt_alloc_table_info+0x43/0xa0 [ 153.533925][ T1422] do_ip6t_set_ctl+0x59b/0xc50 [ 153.535454][ T1422] nf_setsockopt+0x8d/0xf0 [ 153.536877][ T1422] ipv6_setsockopt+0x135/0x170 [ 153.538398][ T1422] tcp_setsockopt+0xa7/0x100 [ 153.539883][ T1422] do_sock_setsockopt+0xf3/0x1d0 [ 153.541456][ T1422] __sys_setsockopt+0x1a0/0x230 [ 153.542996][ T1422] __x64_sys_setsockopt+0xbd/0x160 [ 153.544635][ T1422] page_owner free stack trace missing [ 153.546328][ T1422] [ 153.547102][ T1422] Memory state around the buggy address: [ 153.548878][ T1422] ffff8880567a3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.551389][ T1422] ffff8880567a3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.553933][ T1422] >ffff8880567a4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.556444][ T1422] ^ [ 153.558075][ T1422] ffff8880567a4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.560607][ T1422] ffff8880567a4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.563105][ T1422] ================================================================== [ 153.565714][ T1422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.567984][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.571308][ T1422] Tainted: [L]=SOFTLOCKUP [ 153.572704][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.576035][ T1422] Call Trace: [ 153.577033][ T1422] [ 153.577895][ T1422] dump_stack_lvl+0x3d/0x1f0 [ 153.579208][ T1422] vpanic+0x640/0x6f0 [ 153.580542][ T1422] panic+0xca/0xd0 [ 153.581766][ T1422] ? __pfx_panic+0x10/0x10 [ 153.583177][ T1422] ? check_panic_on_warn+0x1f/0xb0 [ 153.584795][ T1422] check_panic_on_warn+0xab/0xb0 [ 153.586365][ T1422] end_report+0x107/0x160 [ 153.587748][ T1422] kasan_report+0xee/0x110 [ 153.589279][ T1422] ? tty_write_room+0x7d/0x90 [ 153.590882][ T1422] tty_write_room+0x7d/0x90 [ 153.592357][ T1422] handle_tx+0x14f/0x630 [ 153.593708][ T1422] dev_hard_start_xmit+0x97/0x6e0 [ 153.595310][ T1422] __dev_queue_xmit+0x6d7/0x4650 [ 153.596934][ T1422] ? rcu_is_watching+0x12/0xc0 [ 153.598483][ T1422] ? finish_task_switch.isra.0+0x207/0xbd0 [ 153.600317][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.602061][ T1422] ? __lock_acquire+0x436/0x2890 [ 153.603655][ T1422] ? ref_tracker_free+0x37c/0x830 [ 153.605690][ T1422] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.607565][ T1422] ? rcu_is_watching+0x12/0xc0 [ 153.609489][ T1422] tx+0xcc/0x190 [ 153.610740][ T1422] ? __pfx_tx+0x10/0x10 [ 153.612097][ T1422] kthread+0x1e4/0x3e0 [ 153.613403][ T1422] ? find_held_lock+0x2b/0x80 [ 153.614920][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.616434][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 153.618289][ T1422] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.619978][ T1422] ? __kthread_parkme+0x19e/0x250 [ 153.621614][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.623095][ T1422] kthread+0x3c5/0x780 [ 153.624484][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.626158][ T1422] ? rcu_is_watching+0x12/0xc0 [ 153.627681][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.629165][ T1422] ret_from_fork+0x983/0xb10 [ 153.630664][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 153.632320][ T1422] ? __switch_to+0x7af/0x10d0 [ 153.633841][ T1422] ? __pfx_kthread+0x10/0x10 [ 153.635336][ T1422] ret_from_fork_asm+0x1a/0x30 [ 153.636904][ T1422] [ 153.638630][ T1422] Kernel Offset: disabled [ 153.640031][ T1422] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:56:55 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff888032cc8000 RCX=ffffc9000390f334 RDX=1ffff11006599090 RSI=ffffffff815e799f RDI=ffff888032cc8484 RBP=ffffc9000390f428 RSP=ffffc9000390f358 R8 =0000000000000001 R9 =0000000060a803a5 R10=0000000000000002 R11=0000000000008109 R12=ffffffff81a95e80 R13=ffffc9000390f3e0 R14=0000000000000000 R15=ffff888032cc8000 RIP=ffffffff81a2fb56 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6909000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555a3b85c8 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09515bad20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000030000000a 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 000000040000000d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557adc9f15 000055557adc9ee0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04001000080049f4 006d766b2f766564 0000000000000019 0000000500000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800020404f80210 0005b88208000100 000000010000001d 0004000000000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000600000032 0006107000000000 0e05028004048004 0100000c08060601 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2808128000000033 0003000400000000 08000590030fffff ffffffff04058003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f68081200000034 0012a80300000000 0000000000000000 0401001000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc00080006100020 1000061271a00010 0005800401000010 0806060100000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005e00300000000 d00300100005c003 02100005b00301a0 1000100300000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806139800000000 080000001e000000 1f0002000c000002 3400010000000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1800000000000000 7600010009801200 28000000000000ff 7f68081200000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000125c57 RBX=0000000000000001 RCX=ffffffff8b7706d9 RDX=0000000000000000 RSI=ffffffff8dac200a RDI=ffffffff8bf24280 RBP=ffffed1003b5d498 RSP=ffffc90000177de8 R8 =0000000000000001 R9 =ffffed100d4a673d R10=ffff88806a5339eb R11=ffff88801daeaff0 R12=0000000000000001 R13=ffff88801daea4c0 R14=ffffffff9087f7d0 R15=0000000000000000 RIP=ffffffff8b76edcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a09000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f094bffeba0 CR3=000000002834f000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000045a 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a88030c08000a 8003000800061000 2010000600719418 0000049d00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88030008000b8003 0000000000000000 0000000000000000 01ffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffdf080ae0031208 000ad8030008000a d0030fffffffffff ff040ac003000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ab8030008000ab0 03004c504701ffff fffffffffffff708 0580030580040aa0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 036195f100000000 0000002929e00100 0000182408018003 0180040a90030608 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffae00000000 0300000000000009 0000000c0000000a ZMM25=5d2140605d214060 5d2140605d214060 5d2140605d214060 5d2140605d214060 5d2140605d214060 5d2140605d214060 5d2140605d214060 5d2140605d214060 ZMM26=fc677ef4fc677ef4 fc677ef4fc677ef4 fc677ef4fc677ef4 fc677ef4fc677ef4 fc677ef4fc677ef4 fc677ef4fc677ef4 fc677ef4fc677ef4 fc677ef4fc677ef4 ZMM27=990667ce990667ce 990667ce990667ce 990667ce990667ce 990667ce990667ce 990667ce990667ce 990667ce990667ce 990667ce990667ce 990667ce990667ce ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3208000032080000 3208000032080000 3208000032080000 3208000032080000 3208000032080000 3208000032080000 3208000032080000 3208000032080000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85317575 RDI=ffffffff9aed9aa0 RBP=ffffffff9aed9a60 RSP=ffffc9000776f3b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9aed9a60 R15=ffffffff85317510 RIP=ffffffff8531759f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b09000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f57bed17d60 CR3=000000000e184000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb46a6e00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70ec015050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70ec01505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70ec015057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70ec01506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70ec0150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70ec0151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000012da83 RBX=0000000000000003 RCX=ffffffff8b7706d9 RDX=0000000000000000 RSI=ffffffff8dac200a RDI=ffffffff8bf24280 RBP=ffffed1003bd9000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=ffff88801dec8b30 R12=0000000000000003 R13=ffff88801dec8000 R14=ffffffff9087f7d0 R15=0000000000000000 RIP=ffffffff8b76edcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c09000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f200aa9e000 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000486d8 00007f200a8003c0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000486d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000