last executing test programs: 35.61922555s ago: executing program 0 (id=66): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x131, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xe000, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000007c0)="08006d2a81496b27", 0x8}], 0x1}, 0x20008810) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/4080, 0xff0}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000100)=""/8, 0xfffffffffffffefa}, {&(0x7f0000000180)=""/116, 0x74}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/221, 0x92}], 0x6, 0x1000, 0x1) 35.619069368s ago: executing program 0 (id=67): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty=0xe000}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 35.570324972s ago: executing program 0 (id=68): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r3, 0xadab2836b5a4ab95, 0x30bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e39ddd51ccfed9a1c19e6ced018901a0d083814cdc77a958baf382fdce6e827a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "83011cde73bf16dfc1fb0b074a725831"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5d873d77d4074e303ede1ea34a1ef7125b80e1450c5cea48e61b194826656b93"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3c3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x2, "e4815826b1af9d911c9e181942f697619ff1bcb06be129cd593711aab0d1884a", 0x3234564e}) fchdir(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = syz_open_procfs(r5, &(0x7f0000000040)='stat\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030400000000000000ffff10850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x2a, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) pread64(r10, &(0x7f0000000140)=""/15, 0xf, 0x4) 35.521507696s ago: executing program 0 (id=69): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x200004, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x800005], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x1, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0xe, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xfffffb86, 0x1000, 0x2, 0x10, 0x1, 0x8, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x0, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x7, 0x50, 0x4, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x6, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x0, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), &(0x7f0000000280)=0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x18800, 0x140) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000740)={&(0x7f0000019140)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000700000006001100ffff00000800150010000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') setns(r6, 0x8000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 35.350311804s ago: executing program 0 (id=71): r0 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r0, 0x0, 0x8000, 'syz0\x00', 0x0}) 34.040411414s ago: executing program 0 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1, 0xf000}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 33.983099508s ago: executing program 32 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1, 0xf000}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 19.264364351s ago: executing program 2 (id=314): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) syz_usb_connect(0x6, 0x669, &(0x7f0000000ec0)={{0x12, 0x1, 0x250, 0x28, 0x31, 0xe6, 0x8, 0x14b2, 0x3c23, 0xce88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x657, 0x2, 0x6, 0x2, 0x10, 0x4, [{{0x9, 0x4, 0xdc, 0x6, 0xf, 0xda, 0xf2, 0x16, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'E\t'}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x5a34d536, 0x1, 0x8001, 0x7f}}, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7, 0x4, "ce6692"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x32, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0xfc, 'n', "789d"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x5, 0x1}]}], [{{0x9, 0x5, 0x5, 0x8, 0x400, 0x5, 0x6, 0x3, [@generic={0x77, 0x2f, "f88e1aeccad127777775e3343f5357e88bdc764bbafad1480e503d73300f94a29af94ae8dcd79e36ae14e1c36549f104fbc7b6be032594c6c1675cf0e8063609956b700de2599797672bcb40f0482f12e84b2b57bc1c22bb0bbc3bd3b0e11559565f0a9d8291bda046596193b0de56a2bf4c786cf9"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x7, 0x91, 0x2, [@generic={0xdc, 0x10, "227d263b7cf365482a6a2cd219f6fdaf9d687a82d95374e36a2138e6585080970e4d1b6140eef112daedcb15a8b0f0bd1bebbf8e7ad02746f77434badc75db96ef1760390988d9f5affcf5562211ffb760c4f9401a757ae6b61932fc6405e6fdd33c88bc346e28bd953ee859e5c1004f4138c4444e9c4155269abe48b7c1fe7513c4274d46866ecc54ec89e2b3ef625b8d7235b6b524a96bebe601bd8ef7b92b3f1e60c06d662eef75764682857552cebd0764911b647b2759e2c88009a92f13b7bd992f9546568a65938bd25e32da0518d922673c5654d45974"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x6, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x8, 0x7, 0xff, [@generic={0x7d, 0xd, "090a5973b2160b92b59fccad670adaff12b3faf3c0be0035fa68645e494ebb71e8b561b5b626c46df7076f1a9671cc252d4c826836097dd72b75b9e89f88537f87ce0bd6dd63fcc886814c3875213e19c42b9182e0d6e8c533e35e4abaf2ceca53c9d8cbd8fac281616e606b35191e4d9c23e729a127633fa9e0bc"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x6, 0x7, 0x5, [@generic={0xde, 0x21, "961424b3f0f8801e1348f610f0182122ccd5208e5c1b6c82187949e9b709d7509fbc364bc15ff85929643e173d359e68c9771c17142a6523a511c690c4b87d982ce588da3ce2a9537fb1aa8c0ae126d4c3098789a4042d32a249a2d42cbb038685dffc01323cc342ef4aa79c21cc209716dfcbe952e630a628b0a0d648005e2d56fe2568c82110c99596534c304f5d2fcfcd6cc04a235b48d7344dffe9eb6db745009d9e3f244a32059f84ffb07ee99d53c1c039d8d74fa3e52b7e5e0875725e1263ec53c2741c4f9ecb957640030ba4422e2689a6c9a46ebaef5afb"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x4}, @generic={0x8f, 0x21, "dd3fbe9f9d897d33e0ac7558ab2834a5f10ead09e3e512bd0b3c4ada225037b139579559e7d6de324a7c6c09118210d7e0f902254b7685641bbd96d740c2dfd9b0085e2f8d0e2e5284b23e50bf75bc35d4d7a371abf1d58083d970228ab9e710fa3b4fb5e3c08ad23acb4aafab1066ae32b575391b28b30129c369af60fb1d5c6fb26ac943324a01b9f0bd34fe"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xf7, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x3c6f}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x6, 0x4, 0x8, [@generic={0x45, 0x6, "079506fb2629751ff072c958df5b1bdf66b1195f54c37398e011de37e243bc18ad99dd367a953002756532759ebf1ccaba15c29e0263032605024d3af2437303865ae5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x3e, 0x4, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}, @generic={0x63, 0x30, "8d2fb7a776df6aa34bd0608b7c8192343c3b9bbdaf74d973b25ac706345c0379d88e562b201786fd7360eb32df3dd4312160beea329a50568fe27e463d6fb249df648596600c251bf82c06eecb02b05bbcec829eb490a7624ec8e78d4229742ce4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x7, 0xc4, [@generic={0x6e, 0xb, "2935fb8d812d50f95a36fe7546a3b17931eabce55c273ef21c68815a9303ffc62c0e35520b1f7e9c6668f88d595978706d08e8106dbdfcd726117fd9a3ee2b3de2fff7c96794c5661350917c0789cb3b62c701afdbacca98433ea888e6b2f97b8677e59054031efc438660e2"}, @generic={0x27, 0x21, "6a28cbdec65d25f1aa867cf092d7507bff011cf59809d7e38376ecc74dce6c7015a1abbc6d"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x4, 0x6b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x6, 0x6, 0x78, [@generic={0xc6, 0x6, "ef762d10fde943b3db3af967841df5b4b770cec94a2a5847f95a9435387fc3e08350b4110ddb4bb2735e1ba693c04fb160e2f135477ad6c43b9c35881aa1c647e7532dda9c76b24e41ad47089c15b96769f8c88c1952deb7f9cc3e3fe821e7a24f00238fefd20dacf99ccc2a1a8e2a54d847eeab0ce134b6b57f7805ad115c0ec51bfcb12aa867f4b3c38ad9ad35025b5357614ac9363e5e87277972674f3164cfb29ee98967c250fcd9ed8fac14b7fc158029b759203fed58e87c1c9b5aa8e4653ba971"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0xe, 0x4, 0xe4}}]}}, {{0x9, 0x4, 0x67, 0x2, 0x0, 0xd, 0xbb, 0x71, 0x85}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x110, 0xe1, 0x0, 0x3, 0x40, 0x6}, 0xfb, &(0x7f0000001580)={0x5, 0xf, 0xfb, 0x5, [@generic={0xb5, 0x10, 0xa, "cc18b3961ef26e29ae5d2ccb4ee461b6fb8cf2896dc27edd295ba093cf5028b73d31459a16a5b96067d77c032a97e7b86353ff8b8f98826873fe28fcce7e0ee0421c8c11496510acc0c8da606c9a4ad375ad57a3993a8e2f25ec81eebd7e1a0b9d420e31044b551ff0a68ad0769c9720ba6ab2db463ec72ac2894173172add2f67f5dc91114e744a776065743c69ba1a11c4b0173bc8df3bb444bf5936c5d1b0440107973665a08e21d43e2f576b72909ff8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x5, 0xd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xf7, 0x9, 0x2, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0xf9, 0x3, 0x6, 0xf, 0x3, [0xc00f, 0x0, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "39ba7f7c6261c13d1098b6faab513f9e"}]}, 0x2, [{0x29, &(0x7f0000001680)=@string={0x29, 0x3, "80f359ce5c9af8de4e58862c9e29e4d691ddfda936a8bfaf015f955329675cfbd96fc7665c9baf"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) syz_usb_connect(0x9068d03ce5de5685, 0x44f, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x3, 0x4b, 0x92, 0x8, 0xdf6, 0x76, 0xea0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43d, 0x2, 0xb, 0x45, 0x10, 0x5, [{{0x9, 0x4, 0xcc, 0x4, 0xb, 0xff, 0xff, 0xff, 0xf, [@generic={0x36, 0xb, "f85efcf244708e15745abfbce086d64204836c987b2a46d75506588f51c7251d34b57164ae2149148db59e9d203a3079c762219b"}, @generic={0x50, 0x6, "6c26f6a0887925de9290994b666d3f698a6de66f9e5d2d999f8a644ccf5e1960d039772c6bdaa6dfbf3487233f9335c3b30600b62d4085f6c8205ad6e72d15443bc2bb6d375c41e95d20810c76cc"}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x9, 0xfa, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x70, 0xfc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x8, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd8, 0xfff7}, @generic={0xa0, 0x11, "fb7d14e9ff3d09063009196b2be6714e39b8bf837001c2540f1a128935ba77af7a5ca3b3a7017c297bd5b9b04d48b9cf8b7546a5c313c745192af84a3c5bbdf165ac21346f98526415ef2036dd93be3479c74f307a01183009d8790ba2864ace9366ebed9edaa943f69801de3d8a1b18482425fd3a72e8bedf8f810cc37a565e01935772d9c8b3476d30b1b5c21ec91952ba85dd08208bdd71ad803d114d"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x4a, 0x5, 0x4, [@generic={0x5b, 0x30, "dd06bba680dd52024da1ed5ba4a1ff156bfe436cd0e7e99ade30c9785bbf39ba9786d69d627ddf67fc5d6f69d87b9743138012d3a686da16534f429d46d8d95ec2ebb6fce34286870ce1379009b41507557f323e9d26803ef3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0xc, 0x9, 0xff}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x8, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf4, 0x6}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x9, 0x9, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x9}, @generic={0xf9, 0x8, "bf4dcc626775a098e834dcddeec8e8dd402ae1762e64c8ab3b60eb3dfef32cc82fd7c9ec2d57fa9d252742f1b147854c8b33c36ee626cdd68807b621caa741964b64e0d228321846d467c8dbd84a63b542a54fd346d9b9958462099da73f9456993cfe9e826bf42b415f555ec6d9c45928538e71354351e401b87d66ebe78d5ef17701701ca8b900da183fe5eea6d699d9198cf395d36d98dac7fd431201d5ac558f6d99e1f9d8f3f373d39e87543b8abac2acef3a5b6d2e27c6ac425fdefc256392fd12f0e4c828f1405a2c929a598b2348d794652e346ae0c0f69a078779136068def9228578da31587cff9f5771a6aaf02b71e4c36a"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x3, 0x7, 0xa}}, {{0x9, 0x5, 0xc, 0x0, 0xc23b004347359461, 0x1, 0x0, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe}]}}, {{0x9, 0x5, 0x84, 0xc, 0x3ff, 0x4, 0x8, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x4, 0x0, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}]}}, {{0x9, 0x4, 0x22, 0xe, 0x5, 0xd5, 0xe9, 0x20, 0x5c, [], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0xf9, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x50, 0x4}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x1, 0xa}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x4, 0x8, 0x40, [@generic={0xd2, 0xb, "42fca48bdc28a320199c16dabfa625abedf6a50a842a4450ad5bbff5dfd9b0f7d9308779ab2bbfa9fc8a39d90e27838dc0eee306d9ce49fdf070de31856fafef8b3d02f3fd2c99d179001ee8d95e811bee19ba431a4404a052f490689e587acff78c05ca5172d3c101ceda5ff06ab4c2171707415a6e46f7c62423bdee3136aa94871d2241adea4111b0c2033b6f53850fdc451327b5400b50ebd41a7c1b257e9998b3a4618b7ae7981286c2a36844150f3976c72c3d5d3b9766a9d7124fa66571d4270ae361a75add5f6dd8c7624a87"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x40}]}}, {{0x9, 0x5, 0xc, 0x20, 0x8, 0x2, 0x82, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xe7bd}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x4, 0x7, 0x8, 0x8}, 0x20, &(0x7f0000000d00)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2a, 0x9, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e7ec61883649fc9612ace05a75e63ddc"}]}, 0x3, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x426}}, {0x5a, &(0x7f0000000d80)=@string={0x5a, 0x3, "2d6a4d0051df9b977a72b66643a21175f683bd5b066ce2b7b814be8fa9dc1106517ccf008d5c977fd27de59986fe9ee1f30df32f864178763e27b81e1a4d3c34c185a68f07d0f29b18e0b759827c2a3d9c5b247529f4aec0"}}, {0x2, &(0x7f0000000e00)=@string={0x2}}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002840)={'ip6_vti0\x00', &(0x7f00000027c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2e, 0x2c, 0xe84d, 0x40, @loopback, @private1, 0x1, 0x7, 0xfffff727, 0x8}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002880), 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002940)={0x0, 0x80, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x2, &(0x7f0000001740)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000001780)='GPL\x00', 0x1, 0x1000, &(0x7f00000017c0)=""/4096, 0x41100, 0x41, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000028c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002900)={0x5, 0x9, 0x87d, 0xa7a}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002980)=[r7, r1], &(0x7f00000029c0)=[{0x2, 0x5, 0x4, 0x5}, {0x3, 0x5, 0x10, 0xb}, {0x2, 0x4, 0xe, 0x6}], 0x10, 0x7}, 0x94) fallocate(r4, 0x0, 0x400000000000000, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x22, {0x22, 0x1e, "083c0a61c3682826a325287412853c858cae3655e0322f1e466daa8519bc8419"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f00000001c0)={0x0, 0xf, 0x6f, {0x5, 0xf, 0x6f, 0x3, [@generic={0x4b, 0x10, 0x4, "1dd873ffe7dcbb5bbc3a3b98d87f9b095ea2961daf5f953a84adb3fa03c0517ed5da3aba99a8f3f72d7e8d64ec20c2b2cc4aa7be8e4347948e059d9332504e3e708a4e1e57d0a56a"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "b5822a85612f1c73fecd2c04f95dac96"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0xe, 0x8, 0x10, 0x8}]}}, 0xfffffffffffffffd, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x5e, 0x3, 0x0, 0x4, 0x6}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x6, 0xf1, "9b50e35caa25cd426ff811f88c3741ad484a8e0a41ccd583f52cea41f02b853f2e98e585263b92cc5dcb52e96ecbe653e60f68e934b7fcc7db11c03ed6d7453302b54149d907e4207fd7b07ce33b3a2bea9035c34432b01e400d7c5fbf9a7a5a26faa13139500436677a901f1c104ae04edaa577bb59ae75e4e8fb54a7067cc52739ac0320e64fc791da47b8f1ed0e831a4185670e733ada8589f35c93d2bab81f832408063b38a5e0d67acccab19cd159a5954d07d49e5fdb37a91479561d5f371039341a6dc7fa177adc98f315da66eff7ac39d5a86218eed6bf3bbff4e06a9a0cd2577892dae54e78167504021cb2eb"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x120, 0x1}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x86}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, "a0f3"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8564"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x81}}) 18.209808259s ago: executing program 4 (id=340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB]) 18.125063167s ago: executing program 4 (id=342): r0 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x28}}, 0x0) 18.069251474s ago: executing program 4 (id=344): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001780)='1', 0x1}], 0x1, &(0x7f00000036c0)=ANY=[@ANYBLOB="b4"], 0xb8}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001a80)="a7", 0x1}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="4c000000000000000000000007000000071bb7640101007f000001e0000002ac1414bbffffffffffffffff8317067f00000164010102e0000002ac14142b0a0101000007077d64010100000000000000140000000000000000000000070000000100000000000000140000000000000000000000020000000a00000000000000440000000000000000000000070000008631ffffffff0109ef1f8f7ac3ba9b0011948d2f6a85bfc3f88ad41c27b1529c001165e7abfd9f5f40d9a7f10d8636fa84000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac14143864010101000000001c"], 0x108}}], 0x2, 0x1) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 18.068879338s ago: executing program 2 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x70}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)="90b347ac250f55e539", 0x9, 0x140}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x78, r7, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @random="f744783da2a9"}, 0xd00, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6c, 0xa5}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x21, 0x68}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='virtiofs\x00', 0x200000, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r10 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) recvmmsg(r9, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 18.020047493s ago: executing program 4 (id=347): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, 0x5, 0x6}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x0, @local, 0xfffffff8}}, 0xb, 0xfff}, 0x90) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18.019810509s ago: executing program 4 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x78, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @random="f744783da2a9"}, 0xd00, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6c, 0xa5}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x21, 0x68}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='virtiofs\x00', 0x200000, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) recvmmsg(r4, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 17.209078844s ago: executing program 2 (id=351): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000001300)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 17.157595451s ago: executing program 4 (id=353): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r3, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x40840) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) r9 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$FUSE(r9, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x6, 0x3}}, 0x29) read$dsp(r8, &(0x7f0000000000)=""/59, 0x3b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f00005ab000/0x3000)=nil, 0x3000) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1, 0x4) r11 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, 0x0, 0x0) 17.058671024s ago: executing program 2 (id=355): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) fcntl$notify(r0, 0x402, 0x8000003d) (async) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 17.058483408s ago: executing program 2 (id=356): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b080000000000000000000000baec82c400080001"], 0x20}}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7ff, 0x6, 0x0, 0x2}}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x40840) r8 = socket(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r9 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb100000000102"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x0) 15.995604128s ago: executing program 1 (id=366): r0 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x28}}, 0x0) 15.994038346s ago: executing program 1 (id=367): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000370429bd7000fcdbdf250000000009b6bf2f7ea4ace157b3e30fea45a566870cc94489ea61894363c07082c9b4e254e02f971dc4ed", @ANYRES32=r4, @ANYBLOB="890c040000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0xd, 0x4000ffc, 0x4a}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r5], 0x54}}, 0x24000000) 15.909500392s ago: executing program 1 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x7) sched_getscheduler(0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x600000000000000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x6, 0x792, 0x10000, 0x97, 0x40, 0xc, "c9b1187454c7"}}, 0x11e) write$UHID_DESTROY(r9, &(0x7f00000003c0), 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000007c0)={0x5, 0x2, 0x2, 0x1f51, 0x7fffffdf, 0x836fcd7, 0xd, 0x100, r8}, &(0x7f0000000800)=0x20) 15.119966858s ago: executing program 3 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x140, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x0, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x6d, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74a6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x140}}, 0x4000040) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 15.119541888s ago: executing program 3 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 15.059532547s ago: executing program 1 (id=375): r0 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x28}}, 0x0) 15.059029574s ago: executing program 1 (id=376): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0xd, 0x4000ffc, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001f000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 15.009907862s ago: executing program 1 (id=377): socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001400)={'\x00', 0xfff8, 0x58, 0x80000001, 0xffff, 0x6, 0x0}) syz_clone3(&(0x7f0000001880)={0x8010000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000001700), {0x41}, &(0x7f0000001740)=""/100, 0x64, &(0x7f00000017c0)=""/68, &(0x7f0000001840)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], 0xa}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_vif\x00') getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x1, 0x8, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2b, 0x19, 0x9}, {0x5000, 0x2, 0x10, 0x0, 0x40, 0x7, 0x63, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0xdddd0000, 0x8, 0x5, 0x1, 0xa, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x64}, {0x80a0000, 0x1000, 0xd, 0xe6, 0x3, 0x2, 0x11, 0xf8, 0x8, 0x2, 0xe, 0xf1}, {0x0, 0x2000, 0xc, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x81, 0xf7, 0x3}, {0xd000, 0xd000, 0xc, 0xa0, 0xb1, 0x8, 0x21, 0x80, 0x80, 0xf, 0x1, 0x7}, {0x8080000, 0x1000, 0xc, 0x10, 0x0, 0x5, 0x6b, 0x3, 0x6, 0x81, 0x3, 0x4}, {0x100000, 0xeeef0000, 0xe, 0xfb, 0xf, 0x8, 0x1, 0x37, 0x2, 0x8, 0xf0, 0xca}, {0xeeef0000, 0x70}, {0xdddd0000, 0x9}, 0x80000031, 0x0, 0x5000, 0x42024, 0x5, 0x0, 0x8000000, [0x6800000000000000, 0x3000000000000000, 0x5e, 0x20003]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}], 0x20}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r9, &(0x7f0000001480)=[{&(0x7f0000001b00)="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", 0x14d}, {&(0x7f0000000200)="ae44b50bd11442649f42ea2abaae4fd48bb56dacb7d560c4841abb9598adfed31a39b1eac6eab8eb0cc5ae4f22c8b971480624261851cf9e6a95ee37d5a5cbb23470d8bdf1078f8c918c765f1c213af8370349bf13037c582ab85869903e53f00bebe0153c42d992f12ab711a7e1e097823304e83616c71664ad7f59108d4fc032c15489c78694ab3af670bb07aaa21e8dccf5ed620ce9949db3070dbd39e0a2dc8db0236f5a5b848d62608c4412bc1ba55c47c62d15577528b9e582e9dcff73504ab8942ef1f30e709aec6ab460257b61020790b1609a98e45f7114b265494e6ea837b7af4d786d8ed56088a05c211e797499a5167e500bdfc34c962a2fc5acf2aefa57bbceaf6aac2311607bb0cd78a39b213e81cc0ec44c04086024f39f2a5fca085d2aa613eb3fcd8dc7f382498345484db72d28a82f83a233f433c76a0440d583a49edb0ac3bad4549336601c48e959f6c2388cda4364e08e5cd1702aa793363ca61a5cbb89d163cc2205e8377e2a5cc8b0308e1f48959449dd834269f268ec118304ebb9248ddabb3f2f955ae5654c6989d93e54aaf6a92aeb0aa98c32e970a39f6196249c163b9db56171d203138c4593f1213a117ac944a76c224dae43c7383c8d8520f676932d276de2ee1d3b1bdb6568dcc9bf1c71eae3fab9069d5907a18e58bdca01c64b738d8c54131152038459f5b1aa25e5bca460774a279e89a4e527973ad12941b9ed2bc9aa52835e1869625296e2edfcc0a01d7c332e58d9071d643b7da88c9c97fa1e10a48324439ff39ebc40fee1912fb5db56353284f7c6baf38cce547aa59ce3682431a229cb83ffc70212a093449bc7aed8eed3cb8c9e64c7d67bf179854e0b490b2144b65c00e2f47b7a203fa48cf964d004bc51b8db478e9ae9792b0e44e36ca53cb3b2f88c1329d5d38a24ba7b1190e5fb488e563e095a9068cae6366d09460d45a1c436322fb7a3ddee4f556ea42ef4b561ddeef3a182d6cbb42c3c31dbec894dbacfe148b06f53549b84a4f6ed3eb5bda220df8fa4a2ebfc8803b58d2cf18d9cd793694ff4049a425268b4ce5831c66df6f09f0226f3b4503538874548e8733366ccfad06b123cefb0f9e2273cd607c91da3ce17ac975446a45287e92a547da2ae8f5ae197cfc4d5158dec0dacad8359f3f1cd7b56a2eb34ae8cb6f1b755387853acf9916bd172ddd9343ef1330e98e9de95d7c5dbba96b27c4cb756fc435fa6667667aedde594e43f3e7e8eaf2f3caa4ba380655d0c9a8e66600d3254ece71a870199059375b74218fdcd413817340f41f4877b31b105df9644f90e0f48f1014431e84c0042e76bab2fc6c5c9dab738ed35fa73d849145e67c0b32191aa172b348b3ab7a4d211f5134ac0860e5e2ef24022bcf3cbb45a0d79295f5f351dd40fa2076d48187de040a77face078379a1acfc1030def569abede68a35284baa29970097de5951815ef62af02ccedb50bc1e1a994330df9975de6268d104ea9b8f5e658bea97c15741d05c0c472cd250e843f0896fc6ff08c8fd7dbd95f9b3801976b45f451d44b53965993495a522ea06017dd51deb9030c44061aee2b1dfdb9ea6d3dad40282d5178a0790c587378768efe3f7e841318633d70dbd578acbfd4bfcf8f437303194d996ff78fc20eab211a9e7ec754f91f430cbdbe9ab1a95d49d6380d77864334c3a673dbe0c0bde836c5cdd1d04d14d6bdd8e4317dd10ed4fcfbee4a35dc6754c4359e0b4cac8661aed37cec6681463ebc8b20218ea3f2b49be2a438afd01ca088e43133a571f01a181c9ef84577a3a9e5ab26deecb627857d3cde05f333c59333890e34d74881786f03765ffd1f676be3ca1b9fe1ddb97603c691c3f245a2604e33e28a1d7a4f03665a16c5e7624c6811fd20ba4df0635ac1e618a9588b000932dff88caa319161a6f8880b481b45899c88cee1d99243c562062d12aebcf0f6f2bc3de9412a0125c6d68d3b545ad87c74f5cb286337adf11a251d59211653d7ee78ca5ce981263019c7b19c0a9a15ef4efb2626e94718472375c6971032256cfd1c40fbafcec04146276b10d35241dae640f32b31dc031d8e9c3c347fad33a8bbfc1762bf2c014b7f479f6eaf93e902e32a95ab3da0996e7b35d516f2f9f6fe81d489ee63c7bb26c4ddd62cb4e18222801f292a42b4b9e11c5c4e874446b98a1491dbeda3b690debe6a71d879cc7cd9f19a49c15569f298a3a38fb117a2f17961f614dc25ef3ce76943e94eb6bdfafd6dc75c41e9529723130862830e00e02ca8b97ccd9ac628fe7491a71cb647e19bc811489cde2eeb34fb160205f0de335b78ff38d0aec6474f8643b0c245bbb68853d8e3cbf990d3ba1bad2f4be4d16f4d9979b68f9a305cbb755a2eb4569006e067c554a4bc84ba27c8850da5eedfe66985a88e6f803b76b8a73b521776c93632b003372e27cdcb792cb3651951fb80925287b90083a5557aab8ddcbab892c696e62bd8ecdb6cecd50b4ed7e2e1b3ac369b5222256d4c4cbb881ab49c6aeb193a0a3e93239f0c2404fdfdea4db2f81545c9f3fb09ebff9df0a6e92d1ed4591c7663f8c258bfb28b8dd9acb4a7b5e021410e90a6966edccaa16c2090f5335de0ad048118a38017a3d8ca0e7c981ed35e82e29ffa02b2d96db040b201a8fab1aac6d8cf976983c24ca63b52979b4f7cda1525d74520e45fa65b3871760024584a1625949e19ae673c4b161806a307e81c04bb3562004648943a15317217ae3039814bb9340380fe8a1ea28e03863f579a39bf5f52fed54ee66020509056c1346882f2548a6801c401d8bfd54d00d466bf28eeedec785829f29250b9efb9732a77f4871daf1d38309770a0c9e7fdd00c6ab40fb188c16e019d059cbcebe27cf7a2fb31c2780b6c859370304eb2c5cf905716564b3a42f1604e6b2c680dbda0f4d2fc86bc1e2de6ef1d2c8ce21daccc0702d7727a5b8285c0fd0ad4781a643a9fe3046ba43be437074a46d7413682ef295b62828d6f7b6b3b3e67b5a03a3179a0f6dfa20bca3db76bba890c8e3945eeb33bbe57b3bd3a2014a00a10ad2b1067cc55ccb06f989b89d7f74afec7238da216d1ab0d3970c309eb4fa68eff66bd6002e589cb18764b53dd6ca74277b581178f5de23ac886cfc9a9fdffb049aabacd21f2624b08fb302dc182e17722558034f48fe1822a25382e4914881b709793bc8aef1200d2b9e6092ce30d3f7f05d48ae278106d3dad4a4d95ec0dcace7d3d8ed7ecd17a635545462829668aaa62d9c1626028a3c032f947e23e3aab8366288e05c2081a8d796110bdd97a1f91815fb82086258340bda2d23b69c8b9699cd63f929ee8034b6736ef71950859ac5afc17e7d67f568dc9a83083c2d2608bdea16e096466a015b10f88903f3b64a0eeed2a8fe6bfd29d15b53d545c61733aad0d9f0b2a9fb71a0c7cedaba179b6c455e1f1880d645c560506775479646a8ebc56ea83c4d52d26ddf0dbadc319b40a988490bf84c729c61a2924c18eac594320b032c15536b1d1320a91154f385247e4f936a83718399128e090d31cba53ed227ad87f0ab5752044d3a06b942aa022139f7bd88eaa4863d3ff2f9d66f83fb296b405c464c4caa1412d48d8b48e9bcd55bd942811ac31cc622b942d8949b61a00230d2ae5527d2e2834be48bbfd10f9843b8f4d2eb1f50706d28a024f29340e4bf48a30140e43335df5d269ab0a91a1676de2a947ad998c0cd5378d7732c4448ed7f4b9e20741cf99362ec3f3f3211250ae31c61fbab1db58a36fd7fb6ca4725d8ee1fd8b6d7cf1cafba55a80e84390e77915a1e39d19129c923deab676f1d1288f80d48c7908973a3d0dc29a50a5a011ac8046e546639da1482c1a1479baef3c1125879f27d2f303d195df4a9a3b93890f646e80adea6e0c521e311f5fe67e584cc68c74e787d22db1b8881e1b81767ac590aa2b18efe5e44dbff011232906e074a160625ac3bfae27dd9b45a970f433ae4362a69e8c51710bd646d764d7458823de878b5cb42dfd90ec160e006b0c9b35179d0b677da266577ed2d1d66ea88c41c67e602f83afed0ffe6e0f8ea93ae3d6d70341814cf07daa8abf7676d90fdef544ce7bc211efd253fe60f302dc261e4f3955e286c873c9e0196cfe9e77883bdfb4f4ce3a482a3d686049511afd25d216ae68220fad39939d370e233a52e067260cb389e7e881498c04d2f20f224cce40775653e307d1406ac0d095fbdc83427fb5e4ac855c14ac2ad86b567919a8dc66a10c4671c5e8a94026f140bed4e8a0291b8e0d38c7f6ebf9fdbfaad6243b5f49d4d3f0d13e8dd8a50531ec88a93ecd65485480583eccd6c0fa8309c52ec18b713426278c20dee8d3e86b489fed90a4657098995870be5b0221267f2aabbc3fbecb169fc5eedc0e8d6309d162ed8e8774b422528188c27607c212fc71f9814708195429a89256ae1cad65664e4040efe89a3bc70b238d1ec6823e4e12442ecc721e557aad8f731a678087aaaa1cdd492c7a1fa75fb5f1a78729d46a0e98fbc3ca2ce2a5c4414efdc76bb0738629491a5d47c27666420a2e6607e319b5dbb94d49d053602374f55681197b05b754b024c2fa5a5e95b3a0076f2eb4c4b60e2c327346d59e5d61b5b71c01d4d8faec7736be632c79c36390e44e9ba6da844fbb62b5cafe2b274a648928e4b4369ca74dcbe01e614df86878cae667a0819129bbeb4dab2d9be3f5e01402db0ffcc4b46ad3b1f8d34efa8024b07db23306833277a008d4f14583c67c107a34418565a80408054a40fd27971b8ec615822453d96853171ee03a42666d0f35f7d3362678d9f5e9687cafec68407d8cb8f20ed74374ef324b41da545d9498f50d5aa22657cc52abfaa9b22fdb8c03067e8f8815b7b81261c9868725011c48255afaabd8b6243c89488d1129732e5efc367b3f1cc10c1ff2608844c257c0b5b9267e59f2c4b9af92184c167112474855e20c7de1de72005e17dce127087d8020dc2c533b3f490ce668140fe7889e1e186653efd620bf8ee527853b26fcf72d1b5dbee12c65b6e26e6954e613a894f08dfbd7c358e9758d4237724554caa9e38bb7fc9b5d156b3ba03157b3f8f8a20aed6e3189166c91d075bd3f4513e32965d66ff2f1db6cd3a0bb97e1290d7ab2760e3ade17aaa1074dddd93b113bb56fc094f8020ace92a6cd9b6c9e38780e3d2e0ab8019964e8034a29109008d0cb501366f70091fc68e8d95fcbe4994a12b997b91b8c844ee2968b1dc19a6ea00ce91a670f4ff175a43e2cc7831c070fe778230b38566ba45afe2c56de7136a380224b0c619dca7f5cb0f5ba2e28946750758738f874909e21902ccde792f9a5e52caec8dc8cb79abe289e7a7dbf3b9619b005aaf4463aeb36021439c90dd95036866689c9d9da181f3a1cd6a79eec7e312b5d35fe7673bce6b200b3c2c9775a08ff150908008e17080d38879d9507f9f4d21811407bb3aa8a48df8175d0b514adafbf0bc1462c768ea35033a13602a8a4c778007d49774097cf896abac209737103db5bc2707bbff76de76c3f26337ab4805627347a9433897df378c907822e58233f091ab5c54dcfbcb443fc5e8b89f47bcec699fe84c37308f1ae50116860c72333cbfba1f22c52ea9cd55ebfc105bb9ab030e933a3caddf7554ba7bd5e6e7df7ad1bde6f7ce37e4fe795d38d5e9ee4feae03fe70740df34ce240fb087cf1fce96a94929a9ae76a733b26779ac2d532e9332c5864a16e53d189680004e53db262d65fa4a01ff10f738c5c", 0x1000}, {&(0x7f0000000100)="4c7f95829c0508f69b253f2d7d5eec60433ee7e483b358693776964518ffd83b8aa25154f71686e26d8a086b50647ebd107675f2f43e93", 0x37}, {&(0x7f0000001200)="962e479584b73eb2ccc8255fb01c4c351d8877b9dd5dff9fd2e2d6be5e76dcf7793ef2bfa0d6b1086290d63286c8653485b01fde847afe23980c0d24d0d7aa9fc41d25d07cff7ad06311ad3aa4cb32df9f31728241726eb25a523db88bd9f19714c38890791ee2123e326eaa124b9334a0c8751170fa77757c2fa932f4023571ab93c1eae0366dabab02661d78d365e7c979f826dc5e29eff864a604906ddcf5cdabae2594538faa94a3862117e97c7ef691fcc0e53acebf4c50437c49da46ac7f980d850714ccb5d56d0fb50f4479ef3cc96acefc7eb76fcaa1e439cf88534b1af95ba5f254b1b8c61fddf844f68ac7a2642dab", 0xf4}, {&(0x7f0000000140)="b7501a3184cd20a0952982e910a014d6c07c1fe73b797eecf408cff7556ed5ee", 0x20}, {&(0x7f00000019c0)="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", 0x129}, {&(0x7f0000001380)="7e4b99ed90e5ed99f5de26d142011c0d079c45eaaff8cba36423c7288bb264235cc96c0e8e90eab41c1be3c5a2219c0c7556b16553a5bdbefea58954e0e4e77cfcbf8df41bb2de5f9e2713443c671accefbc82ebf6686f7d3a771f14b83d02cb40cae47691c463f14c7e32f3c3c9d7d29df82c9b63b51ece9f54addc7c9f2e", 0x7f}, {&(0x7f00000015c0)="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", 0x133}], 0x8) 15.009773324s ago: executing program 3 (id=378): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0xfff0) 14.939269415s ago: executing program 3 (id=379): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x4c, r5, 0x815, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000002) r6 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r6}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r6}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0x8) 14.939108992s ago: executing program 3 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000"]) 14.702234316s ago: executing program 3 (id=381): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r1, 0x0, 0x4, 0x3, 0x9, 0x0, @private2, @mcast1, 0x0, 0x0, 0x0, 0xc0}}) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=@setneightbl={0x14, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20050}, 0x40080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) getpeername$ax25(r5, 0x0, 0x0) 14.053485147s ago: executing program 2 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.026435061s ago: executing program 33 (id=353): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r3, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x40840) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) r9 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$FUSE(r9, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x6, 0x3}}, 0x29) read$dsp(r8, &(0x7f0000000000)=""/59, 0x3b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f00005ab000/0x3000)=nil, 0x3000) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1, 0x4) r11 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, 0x0, 0x0) 0s ago: executing program 34 (id=377): socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001400)={'\x00', 0xfff8, 0x58, 0x80000001, 0xffff, 0x6, 0x0}) syz_clone3(&(0x7f0000001880)={0x8010000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000001700), {0x41}, &(0x7f0000001740)=""/100, 0x64, &(0x7f00000017c0)=""/68, &(0x7f0000001840)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], 0xa}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_vif\x00') getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x1, 0x8, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2b, 0x19, 0x9}, {0x5000, 0x2, 0x10, 0x0, 0x40, 0x7, 0x63, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0xdddd0000, 0x8, 0x5, 0x1, 0xa, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x64}, {0x80a0000, 0x1000, 0xd, 0xe6, 0x3, 0x2, 0x11, 0xf8, 0x8, 0x2, 0xe, 0xf1}, {0x0, 0x2000, 0xc, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x81, 0xf7, 0x3}, {0xd000, 0xd000, 0xc, 0xa0, 0xb1, 0x8, 0x21, 0x80, 0x80, 0xf, 0x1, 0x7}, {0x8080000, 0x1000, 0xc, 0x10, 0x0, 0x5, 0x6b, 0x3, 0x6, 0x81, 0x3, 0x4}, {0x100000, 0xeeef0000, 0xe, 0xfb, 0xf, 0x8, 0x1, 0x37, 0x2, 0x8, 0xf0, 0xca}, {0xeeef0000, 0x70}, {0xdddd0000, 0x9}, 0x80000031, 0x0, 0x5000, 0x42024, 0x5, 0x0, 0x8000000, [0x6800000000000000, 0x3000000000000000, 0x5e, 0x20003]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}], 0x20}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r9, &(0x7f0000001480)=[{&(0x7f0000001b00)="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", 0x14d}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000100)="4c7f95829c0508f69b253f2d7d5eec60433ee7e483b358693776964518ffd83b8aa25154f71686e26d8a086b50647ebd107675f2f43e93", 0x37}, {&(0x7f0000001200)="962e479584b73eb2ccc8255fb01c4c351d8877b9dd5dff9fd2e2d6be5e76dcf7793ef2bfa0d6b1086290d63286c8653485b01fde847afe23980c0d24d0d7aa9fc41d25d07cff7ad06311ad3aa4cb32df9f31728241726eb25a523db88bd9f19714c38890791ee2123e326eaa124b9334a0c8751170fa77757c2fa932f4023571ab93c1eae0366dabab02661d78d365e7c979f826dc5e29eff864a604906ddcf5cdabae2594538faa94a3862117e97c7ef691fcc0e53acebf4c50437c49da46ac7f980d850714ccb5d56d0fb50f4479ef3cc96acefc7eb76fcaa1e439cf88534b1af95ba5f254b1b8c61fddf844f68ac7a2642dab", 0xf4}, {&(0x7f0000000140)="b7501a3184cd20a0952982e910a014d6c07c1fe73b797eecf408cff7556ed5ee", 0x20}, {&(0x7f00000019c0)="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", 0x129}, {&(0x7f0000001380)="7e4b99ed90e5ed99f5de26d142011c0d079c45eaaff8cba36423c7288bb264235cc96c0e8e90eab41c1be3c5a2219c0c7556b16553a5bdbefea58954e0e4e77cfcbf8df41bb2de5f9e2713443c671accefbc82ebf6686f7d3a771f14b83d02cb40cae47691c463f14c7e32f3c3c9d7d29df82c9b63b51ece9f54addc7c9f2e", 0x7f}, {&(0x7f00000015c0)="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", 0x133}], 0x8) kernel console output (not intermixed with test programs): [ 38.143030][ T40] audit: type=1400 audit(1754407557.960:61): avc: denied { siginh } for pid=5875 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:35537' (ED25519) to the list of known hosts. [ 39.454427][ T40] audit: type=1400 audit(1754407559.280:62): avc: denied { name_bind } for pid=5882 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.472068][ T40] audit: type=1400 audit(1754407559.300:63): avc: denied { write } for pid=5883 comm="sh" path="pipe:[6656]" dev="pipefs" ino=6656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.484307][ T40] audit: type=1400 audit(1754407559.310:64): avc: denied { execute } for pid=5883 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.491516][ T40] audit: type=1400 audit(1754407559.310:65): avc: denied { execute_no_trans } for pid=5883 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.398527][ T40] audit: type=1400 audit(1754407561.230:66): avc: denied { mounton } for pid=5883 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.400383][ T5883] cgroup: Unknown subsys name 'net' [ 41.518281][ T5883] cgroup: Unknown subsys name 'cpuset' [ 41.524446][ T5883] cgroup: Unknown subsys name 'rlimit' [ 41.722211][ T5950] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.405443][ T5883] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.373638][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.373650][ T40] audit: type=1400 audit(1754407565.200:80): avc: denied { execmem } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.600203][ T40] audit: type=1400 audit(1754407565.430:81): avc: denied { create } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.608840][ T40] audit: type=1400 audit(1754407565.430:82): avc: denied { read write } for pid=5967 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.619033][ T40] audit: type=1400 audit(1754407565.430:83): avc: denied { open } for pid=5967 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.627433][ T40] audit: type=1400 audit(1754407565.440:84): avc: denied { ioctl } for pid=5968 comm="syz-executor" path="socket:[6671]" dev="sockfs" ino=6671 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.642873][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.645775][ T5976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.645967][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.649104][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.651422][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.653261][ T5976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.655595][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.658706][ T5986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.660454][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.662547][ T5986] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.664403][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.666240][ T5981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.666767][ T5986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.672720][ T40] audit: type=1400 audit(1754407565.500:85): avc: denied { read } for pid=5979 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.674246][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.680341][ T5985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.685582][ T5985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.685932][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.688445][ T40] audit: type=1400 audit(1754407565.500:86): avc: denied { open } for pid=5979 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.691324][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.700095][ T40] audit: type=1400 audit(1754407565.510:87): avc: denied { mounton } for pid=5979 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.703783][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.714282][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.855578][ T40] audit: type=1400 audit(1754407565.690:88): avc: denied { module_request } for pid=5968 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.894000][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 45.914043][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 46.041503][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.044408][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.046965][ T5968] bridge_slave_0: entered allmulticast mode [ 46.049722][ T5968] bridge_slave_0: entered promiscuous mode [ 46.060023][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.062380][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.065461][ T5968] bridge_slave_1: entered allmulticast mode [ 46.068134][ T5968] bridge_slave_1: entered promiscuous mode [ 46.135103][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.137427][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.139743][ T5979] bridge_slave_0: entered allmulticast mode [ 46.142447][ T5979] bridge_slave_0: entered promiscuous mode [ 46.163260][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.170177][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.173304][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.177138][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.179533][ T5979] bridge_slave_1: entered allmulticast mode [ 46.182293][ T5979] bridge_slave_1: entered promiscuous mode [ 46.186151][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 46.190778][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 46.267920][ T5968] team0: Port device team_slave_0 added [ 46.271623][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.302280][ T5968] team0: Port device team_slave_1 added [ 46.305926][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.378270][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.380562][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.389618][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.409271][ T5979] team0: Port device team_slave_0 added [ 46.433994][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.436761][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.444877][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.449637][ T5979] team0: Port device team_slave_1 added [ 46.512367][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.515074][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.517396][ T5974] bridge_slave_0: entered allmulticast mode [ 46.520267][ T5974] bridge_slave_0: entered promiscuous mode [ 46.523831][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.527756][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.530175][ T5974] bridge_slave_1: entered allmulticast mode [ 46.532846][ T5974] bridge_slave_1: entered promiscuous mode [ 46.549579][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.551926][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.554228][ T5967] bridge_slave_0: entered allmulticast mode [ 46.557641][ T5967] bridge_slave_0: entered promiscuous mode [ 46.574354][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.576700][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.584709][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.604134][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.607302][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.609743][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.612144][ T5967] bridge_slave_1: entered allmulticast mode [ 46.614846][ T5967] bridge_slave_1: entered promiscuous mode [ 46.632905][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.636449][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.644441][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.654572][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.690722][ T5968] hsr_slave_0: entered promiscuous mode [ 46.693179][ T5968] hsr_slave_1: entered promiscuous mode [ 46.772679][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.779827][ T5979] hsr_slave_0: entered promiscuous mode [ 46.782320][ T5979] hsr_slave_1: entered promiscuous mode [ 46.785588][ T5979] debugfs: 'hsr0' already exists in 'hsr' [ 46.787724][ T5979] Cannot create hsr debugfs directory [ 46.791120][ T5974] team0: Port device team_slave_0 added [ 46.808964][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.827323][ T5974] team0: Port device team_slave_1 added [ 46.848653][ T5967] team0: Port device team_slave_0 added [ 46.897132][ T5967] team0: Port device team_slave_1 added [ 46.937808][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.940037][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.948262][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.000928][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.003196][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.011455][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.021938][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.024890][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.033334][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.040615][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.042859][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.051098][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.189657][ T5974] hsr_slave_0: entered promiscuous mode [ 47.192033][ T5974] hsr_slave_1: entered promiscuous mode [ 47.194188][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 47.196126][ T5974] Cannot create hsr debugfs directory [ 47.201284][ T5967] hsr_slave_0: entered promiscuous mode [ 47.203608][ T5967] hsr_slave_1: entered promiscuous mode [ 47.206043][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 47.207883][ T5967] Cannot create hsr debugfs directory [ 47.318916][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.329000][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.346539][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.384083][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.457124][ T5979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.461898][ T5979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.466307][ T5979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.471073][ T5979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.523814][ T5967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.528349][ T5967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.534117][ T5967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.541199][ T5967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.599935][ T5974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.610687][ T5974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.617238][ T5974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.622268][ T5974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.638096][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.663745][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.678020][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.688540][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.706447][ T5970] Bluetooth: hci1: command tx timeout [ 47.706649][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.707553][ T5978] Bluetooth: hci3: command tx timeout [ 47.714221][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.716696][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.722283][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.724725][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.739288][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.741743][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.745650][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.747991][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.777214][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.785258][ T5978] Bluetooth: hci2: command tx timeout [ 47.785274][ T5970] Bluetooth: hci0: command tx timeout [ 47.798541][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.801308][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.817654][ T5979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.825503][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.827946][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.848219][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.863991][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.871330][ T40] audit: type=1400 audit(1754407567.700:89): avc: denied { sys_module } for pid=5979 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.876482][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.881075][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.887873][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.890333][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.957424][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.965295][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.000083][ T5968] veth0_vlan: entered promiscuous mode [ 48.009212][ T5979] veth0_vlan: entered promiscuous mode [ 48.013982][ T5968] veth1_vlan: entered promiscuous mode [ 48.022131][ T5979] veth1_vlan: entered promiscuous mode [ 48.042603][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.047216][ T5968] veth0_macvtap: entered promiscuous mode [ 48.059393][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.062858][ T5968] veth1_macvtap: entered promiscuous mode [ 48.075268][ T5979] veth0_macvtap: entered promiscuous mode [ 48.083641][ T5979] veth1_macvtap: entered promiscuous mode [ 48.094073][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.101340][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.116841][ T5967] veth0_vlan: entered promiscuous mode [ 48.119578][ T1240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.122575][ T1240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.132373][ T1240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.136124][ T1240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.143256][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.149659][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.158182][ T5967] veth1_vlan: entered promiscuous mode [ 48.160741][ T5974] veth0_vlan: entered promiscuous mode [ 48.166050][ T1240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.172947][ T1240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.176857][ T1240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.186082][ T1240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.192321][ T5974] veth1_vlan: entered promiscuous mode [ 48.221354][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.224642][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.232053][ T5967] veth0_macvtap: entered promiscuous mode [ 48.249240][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.251774][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.253571][ T5967] veth1_macvtap: entered promiscuous mode [ 48.269890][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.272533][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.278389][ T5974] veth0_macvtap: entered promiscuous mode [ 48.298688][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.298914][ T5968] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.303187][ T5974] veth1_macvtap: entered promiscuous mode [ 48.305321][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.305350][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.321303][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.334751][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.341356][ T1240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.345899][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.346299][ T1240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.354110][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.360888][ T1240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.364815][ T1240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.378823][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.385576][ T1230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.394321][ T1230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.397598][ T1230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.416509][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.419153][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.452401][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.458163][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.469981][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.472520][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.490660][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.493138][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.562517][ T6037] IPVS: starting estimator thread 0... [ 48.580772][ T6072] netlink: 'syz.0.8': attribute type 9 has an invalid length. [ 48.608580][ T6077] tmpfs: Invalid gid '0x00000000ffffffff' [ 48.610958][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10'. [ 48.640494][ T6086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11'. [ 48.656069][ T6074] IPVS: using max 39 ests per chain, 93600 per kthread [ 48.724143][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 48.878913][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 48.909410][ T6037] IPVS: starting estimator thread 0... [ 48.945066][ T6124] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20'. [ 48.967363][ T6126] syz.1.22: attempt to access beyond end of device [ 48.967363][ T6126] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 48.971980][ T6126] XFS (nbd1): SB validate failed with error -5. [ 48.993471][ T6126] netlink: 'syz.1.22': attribute type 5 has an invalid length. [ 48.996863][ T6118] IPVS: using max 40 ests per chain, 96000 per kthread [ 49.009475][ T6126] ip6erspan0: entered promiscuous mode [ 49.060975][ T6140] bond0: entered promiscuous mode [ 49.062675][ T6140] bond_slave_0: entered promiscuous mode [ 49.064591][ T6140] bond_slave_1: entered promiscuous mode [ 49.191167][ T6037] IPVS: starting estimator thread 0... [ 49.233569][ T6158] Zero length message leads to an empty skb [ 49.268569][ T6167] netlink: 56 bytes leftover after parsing attributes in process `syz.1.37'. [ 49.305103][ T6156] IPVS: using max 40 ests per chain, 96000 per kthread [ 49.309897][ T6169] netlink: 'syz.2.39': attribute type 9 has an invalid length. [ 49.483669][ T6179] program syz.1.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.486964][ T6179] ata1.00: non-matching transfer count (0/2304) [ 49.639446][ T6182] "syz.1.44" (6182) uses obsolete ecb(arc4) skcipher [ 49.785224][ T5978] Bluetooth: hci3: command tx timeout [ 49.797152][ T5978] Bluetooth: hci1: command tx timeout [ 49.829301][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 49.875310][ T5978] Bluetooth: hci2: command tx timeout [ 49.875412][ T5970] Bluetooth: hci0: command tx timeout [ 49.951147][ T6209] cgroup: subsys name conflicts with all [ 49.962330][ T6209] bridge0: entered promiscuous mode [ 49.964292][ T6209] macvlan3: entered promiscuous mode [ 49.971006][ T6209] netlink: 'syz.2.54': attribute type 3 has an invalid length. [ 50.022666][ T6216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.033200][ T6218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 50.033438][ T6218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 50.039258][ T6218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 50.039381][ T6218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 50.039502][ T6218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 50.039615][ T6218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 50.093760][ T6221] netlink: 'syz.1.58': attribute type 9 has an invalid length. [ 50.150214][ T6228] tipc: Started in network mode [ 50.152291][ T6228] tipc: Node identity 7ed4e9505f84, cluster identity 4711 [ 50.154913][ T6228] tipc: Enabled bearer , priority 0 [ 50.158229][ T6228] syzkaller0: entered promiscuous mode [ 50.160194][ T6228] syzkaller0: entered allmulticast mode [ 50.171334][ T6228] tipc: Resetting bearer [ 50.175230][ T6227] tipc: Resetting bearer [ 50.181988][ T6227] tipc: Disabling bearer [ 50.281520][ T6236] process 'syz.0.65' launched '/dev/fd/6' with NULL argv: empty string added [ 50.443665][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 50.443677][ T40] audit: type=1400 audit(1754407570.270:217): avc: denied { create } for pid=6237 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.452504][ T40] audit: type=1400 audit(1754407570.270:218): avc: denied { write } for pid=6237 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.529443][ T40] audit: type=1400 audit(1754407570.360:219): avc: denied { mounton } for pid=6241 comm="syz.0.68" path="/proc/30/task" dev="proc" ino=9204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 50.564726][ T40] audit: type=1400 audit(1754407570.390:220): avc: denied { read write } for pid=6245 comm="syz.0.69" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.575515][ T6246] input: syz0 as /devices/virtual/input/input5 [ 50.578903][ T40] audit: type=1400 audit(1754407570.390:221): avc: denied { open } for pid=6245 comm="syz.0.69" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.597202][ T40] audit: type=1400 audit(1754407570.400:222): avc: denied { ioctl } for pid=6245 comm="syz.0.69" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.607910][ T40] audit: type=1400 audit(1754407570.420:223): avc: denied { read } for pid=5366 comm="acpid" name="event4" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.617404][ T40] audit: type=1400 audit(1754407570.420:224): avc: denied { open } for pid=5366 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.626111][ T40] audit: type=1400 audit(1754407570.420:225): avc: denied { ioctl } for pid=5366 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2839 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.653494][ T40] audit: type=1400 audit(1754407570.470:226): avc: denied { add_name } for pid=6247 comm="syz.0.69" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.672133][ T6245] delete_channel: no stack [ 51.516088][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88803bcd0800: rx timeout, send abort [ 51.519756][ C3] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803bcd0800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 51.916316][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020124c00: rx timeout, send abort [ 51.919048][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020124000: rx timeout, send abort [ 51.921839][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020124c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.926297][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020124000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.946657][ T5970] Bluetooth: hci2: command tx timeout [ 51.947619][ T6267] FAULT_INJECTION: forcing a failure. [ 51.947619][ T6267] name failslab, interval 1, probability 0, space 0, times 1 [ 51.953002][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz.2.77 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 51.953018][ T6267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.953025][ T6267] Call Trace: [ 51.953029][ T6267] [ 51.953037][ T6267] dump_stack_lvl+0x16c/0x1f0 [ 51.953057][ T6267] should_fail_ex+0x512/0x640 [ 51.953067][ T6267] ? __kvmalloc_node_noprof+0x124/0x620 [ 51.953079][ T6267] should_failslab+0xc2/0x120 [ 51.953091][ T6267] __kvmalloc_node_noprof+0x137/0x620 [ 51.953101][ T6267] ? alloc_netdev_mqs+0xd2/0x1500 [ 51.953118][ T6267] ? __pfx_gtp_link_setup+0x10/0x10 [ 51.953132][ T6267] ? alloc_netdev_mqs+0xd2/0x1500 [ 51.953145][ T6267] alloc_netdev_mqs+0xd2/0x1500 [ 51.953162][ T6267] rtnl_create_link+0xc08/0xf90 [ 51.953180][ T6267] rtnl_newlink+0xb69/0x2000 [ 51.953199][ T6267] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.953213][ T6267] ? find_held_lock+0x2b/0x80 [ 51.953226][ T6267] ? avc_has_perm_noaudit+0x117/0x3b0 [ 51.953244][ T6267] ? avc_has_perm_noaudit+0x149/0x3b0 [ 51.953271][ T6267] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.953285][ T6267] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.953299][ T6267] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 51.953314][ T6267] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.953330][ T6267] rtnetlink_rcv_msg+0x95b/0xe90 [ 51.953346][ T6267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.953365][ T6267] ? ref_tracker_free+0x37c/0x830 [ 51.953376][ T6267] netlink_rcv_skb+0x155/0x420 [ 51.953392][ T6267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.953408][ T6267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.953428][ T6267] ? netlink_deliver_tap+0x1ae/0xd30 [ 51.953445][ T6267] netlink_unicast+0x5aa/0x870 [ 51.953462][ T6267] ? __pfx_netlink_unicast+0x10/0x10 [ 51.953477][ T6267] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 51.953496][ T6267] netlink_sendmsg+0x8d1/0xdd0 [ 51.953514][ T6267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.953533][ T6267] ____sys_sendmsg+0xa95/0xc70 [ 51.953545][ T6267] ? copy_msghdr_from_user+0x10a/0x160 [ 51.953559][ T6267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.953576][ T6267] ___sys_sendmsg+0x134/0x1d0 [ 51.953591][ T6267] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.953616][ T6267] ? __mutex_unlock_slowpath+0x100/0x800 [ 51.953636][ T6267] __sys_sendmsg+0x16d/0x220 [ 51.953650][ T6267] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.953673][ T6267] do_syscall_64+0xcd/0x4c0 [ 51.953689][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.953699][ T6267] RIP: 0033:0x7ff66878eb69 [ 51.953709][ T6267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.953718][ T6267] RSP: 002b:00007ff6696ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.953729][ T6267] RAX: ffffffffffffffda RBX: 00007ff6689b5fa0 RCX: 00007ff66878eb69 [ 51.953735][ T6267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 51.953741][ T6267] RBP: 00007ff6696ac090 R08: 0000000000000000 R09: 0000000000000000 [ 51.953746][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.953752][ T6267] R13: 0000000000000000 R14: 00007ff6689b5fa0 R15: 00007ffedfc2c938 [ 51.953764][ T6267] [ 51.955053][ T5970] Bluetooth: hci0: command tx timeout [ 52.080435][ T87] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.115378][ T5970] Bluetooth: hci3: command tx timeout [ 52.156249][ T6281] netlink: 'syz.3.84': attribute type 39 has an invalid length. [ 52.191988][ T87] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.240656][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.244694][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.248670][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.252175][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.255147][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.273134][ T6290] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET) [ 52.368122][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 52.451140][ T6300] binder: 6299:6300 ioctl 4018620d 0 returned -22 [ 52.488376][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 52.499993][ T87] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.519141][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.521491][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.524304][ T6287] bridge_slave_0: entered allmulticast mode [ 52.528121][ T6287] bridge_slave_0: entered promiscuous mode [ 52.531861][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.537187][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.540345][ T6287] bridge_slave_1: entered allmulticast mode [ 52.543974][ T6287] bridge_slave_1: entered promiscuous mode [ 52.598979][ T87] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.606377][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.611353][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.623536][ T6314] input: syz0 as /devices/virtual/input/input6 [ 52.669758][ T6287] team0: Port device team_slave_0 added [ 52.673073][ T6287] team0: Port device team_slave_1 added [ 52.708943][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.711264][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.719484][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.724118][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.728624][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.737982][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.827042][ T6287] hsr_slave_0: entered promiscuous mode [ 52.830870][ T6287] hsr_slave_1: entered promiscuous mode [ 52.833052][ T6287] debugfs: 'hsr0' already exists in 'hsr' [ 52.836187][ T6287] Cannot create hsr debugfs directory [ 52.839269][ T87] bridge_slave_1: left allmulticast mode [ 52.841286][ T87] bridge_slave_1: left promiscuous mode [ 52.843873][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.849810][ T87] bridge_slave_0: left allmulticast mode [ 52.851817][ T87] bridge_slave_0: left promiscuous mode [ 52.853759][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.108333][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.114543][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.120101][ T87] bond0 (unregistering): Released all slaves [ 53.352198][ T6287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.399109][ T6287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.403997][ T6287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.409854][ T6287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.452108][ T6356] binder: 6354:6356 unknown command 1078485781 [ 53.460791][ T6356] binder: 6354:6356 ioctl c0306201 200000000300 returned -22 [ 53.462426][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.491008][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.504704][ T87] hsr_slave_0: left promiscuous mode [ 53.507355][ T87] hsr_slave_1: left promiscuous mode [ 53.509650][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.512015][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.515995][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.518354][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.537785][ T87] veth1_macvtap: left promiscuous mode [ 53.539695][ T87] veth0_macvtap: left promiscuous mode [ 53.541488][ T87] veth1_vlan: left promiscuous mode [ 53.543290][ T87] veth0_vlan: left promiscuous mode [ 53.717110][ T838] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 53.901053][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 53.904404][ T838] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 53.907744][ T838] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 53.914593][ T838] usb 7-1: string descriptor 0 read error: -22 [ 53.916761][ T838] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.919612][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.935744][ T6355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.017614][ T87] team0 (unregistering): Port device team_slave_1 removed [ 54.025103][ T5970] Bluetooth: hci2: command tx timeout [ 54.072222][ T87] team0 (unregistering): Port device team_slave_0 removed [ 54.106585][ T5970] Bluetooth: hci0: command tx timeout [ 54.148102][ T838] cdc_ncm 7-1:1.0: bind() failure [ 54.153828][ T838] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 54.156578][ T838] cdc_ncm 7-1:1.1: bind() failure [ 54.166501][ T838] usb 7-1: USB disconnect, device number 2 [ 54.266534][ T5970] Bluetooth: hci1: command tx timeout [ 54.474696][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.477052][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.495572][ T806] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.497927][ T806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.522272][ T6287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.606860][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 54.611958][ C3] vcan0: j1939_xtp_rx_dat: no tx connection found [ 54.614045][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.616692][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.619214][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.621670][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.624109][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.626702][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.629195][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.631715][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.634161][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.636685][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.639111][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.641568][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.644046][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.646635][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.649088][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.651661][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.654144][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.656700][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 54.659213][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 54.700005][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.771611][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 54.774503][ T6409] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 54.779177][ T6409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.820961][ T6287] veth0_vlan: entered promiscuous mode [ 54.826623][ T6287] veth1_vlan: entered promiscuous mode [ 54.854833][ T6287] veth0_macvtap: entered promiscuous mode [ 54.859347][ T6287] veth1_macvtap: entered promiscuous mode [ 54.876345][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.886952][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.893687][ T1240] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.897854][ T1240] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.902793][ T1240] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.907066][ T1240] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.914412][ T6424] gretap1: entered allmulticast mode [ 54.919153][ T6424] bridge0: port 3(gretap1) entered blocking state [ 54.921345][ T6424] bridge0: port 3(gretap1) entered disabled state [ 54.924274][ T6424] gretap1: entered promiscuous mode [ 54.927953][ T6424] bridge0: port 3(gretap1) entered blocking state [ 54.930368][ T6424] bridge0: port 3(gretap1) entered forwarding state [ 54.963047][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.968006][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.983568][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.987566][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.029231][ T87] IPVS: stop unused estimator thread 0... [ 55.186434][ T838] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 55.354204][ T6424] overlayfs: conflicting lowerdir path [ 55.359254][ T6424] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 55.365695][ T838] usb 7-1: unable to get BOS descriptor or descriptor too short [ 55.369558][ T838] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 55.372062][ T838] usb 7-1: can't read configurations, error -71 [ 55.686477][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 55.686488][ T40] audit: type=1400 audit(1754407575.520:292): avc: denied { connect } for pid=6467 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.689428][ T6472] FAULT_INJECTION: forcing a failure. [ 55.689428][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 55.699702][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.4.122 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 55.699720][ T6472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.699727][ T6472] Call Trace: [ 55.699731][ T6472] [ 55.699736][ T6472] dump_stack_lvl+0x16c/0x1f0 [ 55.699757][ T6472] should_fail_ex+0x512/0x640 [ 55.699770][ T6472] should_failslab+0xc2/0x120 [ 55.699784][ T6472] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 55.699798][ T6472] ? sidtab_sid2str_get+0x17a/0x680 [ 55.699817][ T6472] kmemdup_noprof+0x29/0x60 [ 55.699833][ T6472] sidtab_sid2str_get+0x17a/0x680 [ 55.699849][ T6472] sidtab_entry_to_string+0x33/0x110 [ 55.699864][ T6472] security_sid_to_context_core+0x35c/0x640 [ 55.699880][ T6472] avc_audit_post_callback+0x1aa/0x8f0 [ 55.699896][ T6472] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 55.699913][ T6472] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 55.699929][ T6472] ? skb_put+0x138/0x1b0 [ 55.699941][ T6472] ? audit_log_n_string+0x253/0x540 [ 55.699956][ T6472] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 55.699972][ T6472] common_lsm_audit+0x24e/0x300 [ 55.699991][ T6472] ? __pfx_common_lsm_audit+0x10/0x10 [ 55.700005][ T6472] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.700021][ T6472] ? avc_update_node.isra.0+0x4c0/0xb60 [ 55.700038][ T6472] slow_avc_audit+0x186/0x210 [ 55.700054][ T6472] ? __pfx_slow_avc_audit+0x10/0x10 [ 55.700072][ T6472] ? avc_denied+0x14a/0x190 [ 55.700092][ T6472] ? avc_has_perm_noaudit+0x306/0x3b0 [ 55.700111][ T6472] avc_has_perm+0x1b5/0x1f0 [ 55.700129][ T6472] ? __pfx_avc_has_perm+0x10/0x10 [ 55.700148][ T6472] ? __lock_acquire+0x62e/0x1ce0 [ 55.700167][ T6472] inode_has_perm+0x168/0x1d0 [ 55.700178][ T6472] file_has_perm+0x2e4/0x350 [ 55.700189][ T6472] ? __pfx_file_has_perm+0x10/0x10 [ 55.700201][ T6472] ? get_pid_task+0xfc/0x250 [ 55.700214][ T6472] selinux_file_permission+0x498/0x660 [ 55.700230][ T6472] security_file_permission+0x1e3/0x210 [ 55.700245][ T6472] rw_verify_area+0xb9/0x6c0 [ 55.700264][ T6472] vfs_write+0x146/0x1150 [ 55.700278][ T6472] ? __pfx_vfs_write+0x10/0x10 [ 55.700288][ T6472] ? find_held_lock+0x2b/0x80 [ 55.700302][ T6472] ? __fget_files+0x204/0x3c0 [ 55.700316][ T6472] ? __fget_files+0x20e/0x3c0 [ 55.700332][ T6472] ksys_write+0x1f8/0x250 [ 55.700343][ T6472] ? __pfx_ksys_write+0x10/0x10 [ 55.700358][ T6472] do_syscall_64+0xcd/0x4c0 [ 55.700376][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.700387][ T6472] RIP: 0033:0x7f097ad8eb69 [ 55.700397][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.700407][ T6472] RSP: 002b:00007f097bb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.700418][ T6472] RAX: ffffffffffffffda RBX: 00007f097afb5fa0 RCX: 00007f097ad8eb69 [ 55.700425][ T6472] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 55.700431][ T6472] RBP: 00007f097bb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.700437][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.700443][ T6472] R13: 0000000000000000 R14: 00007f097afb5fa0 R15: 00007ffd6f4d7db8 [ 55.700456][ T6472] [ 55.700572][ T6472] Bluetooth: MGMT ver 1.23 [ 55.707411][ T40] audit: type=1400 audit(1754407575.520:293): avc: denied { bind } for pid=6469 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.817806][ T40] audit: type=1400 audit(1754407575.520:294): avc: denied { write } for pid=6469 comm="syz.4.122" path="socket:[11217]" dev="sockfs" ino=11217 scontext=root:sysadm_r:sysadm_t tsid=149 tclass=bluetooth_socket permissive=1 [ 55.824752][ T40] audit: type=1400 audit(1754407575.630:295): avc: denied { map } for pid=6468 comm="syz.3.124" path="pipe:[4015]" dev="pipefs" ino=4015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 55.888638][ T40] audit: type=1400 audit(1754407575.720:296): avc: denied { rmdir } for pid=5974 comm="syz-executor" name="file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0" [ 55.922331][ T40] audit: type=1400 audit(1754407575.750:297): avc: denied { create } for pid=6492 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.935092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 55.965065][ T40] audit: type=1400 audit(1754407575.790:298): avc: denied { ioctl } for pid=6490 comm="syz.2.129" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.026726][ T40] audit: type=1400 audit(1754407575.860:299): avc: denied { open } for pid=6506 comm="syz.4.134" path="/dev/ttyqc" dev="devtmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 56.027589][ T6509] loop5: detected capacity change from 0 to 7 [ 56.030146][ T6509] Dev loop5: unable to read RDB block 7 [ 56.030218][ T6509] loop5: AHDI p1 p2 [ 56.030233][ T6509] loop5: partition table partially beyond EOD, truncated [ 56.030331][ T6509] loop5: p1 size 4227858431 extends beyond EOD, truncated [ 56.050620][ T6509] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 56.078785][ T40] audit: type=1400 audit(1754407575.910:300): avc: denied { create } for pid=6506 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.091628][ T6341] udevd[6341]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 56.097757][ T40] audit: type=1400 audit(1754407575.930:301): avc: denied { ioctl } for pid=6504 comm="syz.3.135" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.150530][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 56.161590][ T6532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.189699][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 56.274660][ T6543] could not allocate digest TFM handle sha224-ni [ 56.283403][ T6546] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 56.290467][ T6546] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 56.346038][ T5970] Bluetooth: hci1: command tx timeout [ 56.357860][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.160'. [ 56.378652][ T6565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.381112][ T6565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.388827][ T6565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.394195][ T6565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.396713][ T6565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.401193][ T6565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.405996][ T6565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.408059][ T6565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.411480][ T6565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.417030][ T6565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.419025][ T6565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.423732][ T6565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.600548][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.605611][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.685081][ T6036] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 56.835109][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.839674][ T6036] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 56.842649][ T6036] usb 6-1: config 0 has no interface number 0 [ 56.844676][ T6036] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 56.848234][ T6036] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.851239][ T6036] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 56.853977][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.857994][ T6036] usb 6-1: config 0 descriptor?? [ 56.864301][ T6036] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 57.015610][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 57.018549][ T9] usb 8-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 57.021759][ T9] usb 8-1: config 160 has no interfaces? [ 57.023590][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 57.026666][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.063555][ T6580] iowarrior 6-1:0.1: Error -90 while submitting URB [ 57.070562][ T2304] usb 6-1: USB disconnect, device number 2 [ 57.183665][ T6610] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.191854][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'. [ 57.237369][ T9] usb 8-1: string descriptor 0 read error: -71 [ 57.240333][ T9] usb 8-1: USB disconnect, device number 2 [ 57.341647][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'. [ 57.490558][ T6654] input: syz0 as /devices/virtual/input/input7 [ 57.551285][ T6662] netlink: 64 bytes leftover after parsing attributes in process `syz.2.185'. [ 57.565451][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 57.771782][ T6693] sp0: Synchronizing with TNC [ 57.832741][ T5970] Bluetooth: hci0: Malformed LE Event: 0x0d [ 57.895514][ T6244] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 58.065061][ T6244] usb 9-1: Using ep0 maxpacket: 32 [ 58.068041][ T6244] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 58.073546][ T6244] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 58.076744][ T6244] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 58.079791][ T6244] usb 9-1: Product: syz [ 58.081070][ T6244] usb 9-1: Manufacturer: syz [ 58.082531][ T6244] usb 9-1: SerialNumber: syz [ 58.086109][ T6244] usb 9-1: config 0 descriptor?? [ 58.089542][ T6676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 58.092747][ T6244] hub 9-1:0.0: bad descriptor, ignoring hub [ 58.094654][ T6244] hub 9-1:0.0: probe with driver hub failed with error -5 [ 58.248649][ T6750] warning: `syz.2.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.357872][ T6758] netlink: 'syz.4.190': attribute type 3 has an invalid length. [ 58.361554][ T6758] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 58.365653][ T6758] netlink: 220 bytes leftover after parsing attributes in process `syz.4.190'. [ 58.425104][ T5970] Bluetooth: hci1: command 0x0419 tx timeout [ 58.426162][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.435109][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.435651][ T5970] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.440384][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 58.442432][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 58.791197][ T6775] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 58.799627][ T6775] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 58.802880][ T6775] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 58.807664][ T6775] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 58.810422][ T6775] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 58.812912][ T6775] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 58.816191][ T6775] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 58.818784][ T6775] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 58.821324][ T6775] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 58.823881][ T6775] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 58.960294][ T6784] tipc: Started in network mode [ 58.962132][ T6784] tipc: Node identity aace17df7c85, cluster identity 4711 [ 58.964573][ T6784] tipc: Enabled bearer , priority 0 [ 58.968045][ T6784] syzkaller0: entered promiscuous mode [ 58.969916][ T6784] syzkaller0: entered allmulticast mode [ 58.981162][ T6784] tipc: Resetting bearer [ 58.983250][ T6784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.986078][ T6784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.990581][ T6783] tipc: Resetting bearer [ 59.003165][ T6783] tipc: Disabling bearer [ 59.009360][ T6244] usb 9-1: USB disconnect, device number 2 [ 59.145225][ T6244] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 59.312811][ T6244] usb 9-1: unable to get BOS descriptor or descriptor too short [ 59.317554][ T6244] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 59.320350][ T6244] usb 9-1: can't read configurations, error -71 [ 59.424204][ T6795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6795 comm=syz.1.225 [ 59.879228][ T6821] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 59.973213][ T6825] capability: warning: `syz.2.236' uses deprecated v2 capabilities in a way that may be insecure [ 60.152131][ T6836] overlayfs: failed to resolve './file0': -2 [ 60.215333][ T6836] __nla_validate_parse: 1 callbacks suppressed [ 60.215345][ T6836] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.238'. [ 60.241154][ T6839] overlayfs: failed to resolve './file1': -2 [ 60.515032][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 60.515588][ T5970] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.516166][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.516193][ T5978] Bluetooth: hci1: command 0x0419 tx timeout [ 60.517484][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 60.559685][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 60.685089][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.746927][ T6857] tipc: Enabled bearer , priority 0 [ 60.755491][ T6857] syzkaller0: entered promiscuous mode [ 60.757393][ T6857] syzkaller0: entered allmulticast mode [ 60.787324][ T6857] tipc: Resetting bearer [ 60.789313][ T6857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.792154][ T6857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.816731][ T6856] tipc: Resetting bearer [ 60.824738][ T6856] tipc: Disabling bearer [ 60.835020][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 60.839287][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 60.849578][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 60.854991][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 60.857569][ T10] usb 7-1: Product: syz [ 60.858906][ T10] usb 7-1: Manufacturer: syz [ 60.860429][ T10] usb 7-1: SerialNumber: syz [ 60.863634][ T10] usb 7-1: config 0 descriptor?? [ 60.867671][ T6851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.876660][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 60.878551][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 60.944153][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 60.944165][ T40] audit: type=1400 audit(1754407580.770:358): avc: denied { read } for pid=6860 comm="syz.4.247" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.999545][ T40] audit: type=1400 audit(1754407580.770:359): avc: denied { open } for pid=6860 comm="syz.4.247" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.128072][ T6878] netlink: 'syz.2.243': attribute type 3 has an invalid length. [ 61.130543][ T6878] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 61.132935][ T6878] netlink: 220 bytes leftover after parsing attributes in process `syz.2.243'. [ 61.299166][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 61.313457][ T6885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.319256][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 61.433155][ T6885] bond1 (unregistering): Released all slaves [ 61.495018][ T60] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 61.528052][ T6891] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 61.532483][ T6891] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 61.532644][ T40] audit: type=1400 audit(1754407581.360:360): avc: denied { firmware_load } for pid=6890 comm="syz.1.257" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.627737][ T40] audit: type=1400 audit(1754407581.460:361): avc: denied { setattr } for pid=6890 comm="syz.1.257" name="NETLINK" dev="sockfs" ino=15791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.646620][ T60] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 61.649709][ T60] usb 8-1: can't read configurations, error -61 [ 61.775089][ T60] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 61.796614][ T5977] usb 7-1: USB disconnect, device number 5 [ 61.927121][ T60] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 61.929595][ T60] usb 8-1: can't read configurations, error -61 [ 61.932289][ T60] usb usb8-port1: attempt power cycle [ 61.935211][ T5977] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 62.111542][ T5977] usb 7-1: unable to get BOS descriptor or descriptor too short [ 62.116516][ T5977] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 62.118984][ T5977] usb 7-1: can't read configurations, error -71 [ 62.266748][ T60] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 62.287083][ T60] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 62.289564][ T60] usb 8-1: can't read configurations, error -61 [ 62.425008][ T60] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 62.457821][ T60] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 62.460623][ T60] usb 8-1: can't read configurations, error -61 [ 62.462972][ T60] usb usb8-port1: unable to enumerate USB device [ 62.482606][ T40] audit: type=1400 audit(1754407582.310:362): avc: denied { create } for pid=6905 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.557186][ T40] audit: type=1400 audit(1754407582.390:363): avc: denied { execmod } for pid=6908 comm="syz.4.262" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 62.567757][ T40] audit: type=1400 audit(1754407582.390:364): avc: denied { execute } for pid=6908 comm="syz.4.262" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 62.585656][ T5970] Bluetooth: hci1: command 0x0419 tx timeout [ 62.585960][ T5985] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.591061][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 62.593041][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 62.670245][ T40] audit: type=1400 audit(1754407582.500:365): avc: denied { setopt } for pid=6908 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.697995][ T40] audit: type=1400 audit(1754407582.530:366): avc: denied { create } for pid=6920 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.776933][ T6921] block nbd4: shutting down sockets [ 62.954463][ T6930] 9pnet_fd: Insufficient options for proto=fd [ 63.131845][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.271'. [ 63.150268][ T40] audit: type=1400 audit(1754407582.980:367): avc: denied { create } for pid=6935 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.157595][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 63.487017][ T6943] openvswitch: netlink: IP tunnel TTL not specified. [ 63.721380][ T6939] syz.4.272 (6939): drop_caches: 2 [ 63.753361][ T6948] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.275'. [ 63.833844][ T6954] FAULT_INJECTION: forcing a failure. [ 63.833844][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 63.838035][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.4.277 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 63.838051][ T6954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.838057][ T6954] Call Trace: [ 63.838061][ T6954] [ 63.838064][ T6954] dump_stack_lvl+0x16c/0x1f0 [ 63.838106][ T6954] should_fail_ex+0x512/0x640 [ 63.838121][ T6954] ? fs_reclaim_acquire+0xae/0x150 [ 63.838136][ T6954] ? tomoyo_encode2+0x100/0x3e0 [ 63.838149][ T6954] should_failslab+0xc2/0x120 [ 63.838160][ T6954] __kmalloc_noprof+0xd2/0x510 [ 63.838171][ T6954] ? d_absolute_path+0x136/0x1a0 [ 63.838191][ T6954] tomoyo_encode2+0x100/0x3e0 [ 63.838205][ T6954] tomoyo_encode+0x29/0x50 [ 63.838217][ T6954] tomoyo_realpath_from_path+0x18f/0x6e0 [ 63.838234][ T6954] tomoyo_path_number_perm+0x245/0x580 [ 63.838245][ T6954] ? tomoyo_path_number_perm+0x237/0x580 [ 63.838257][ T6954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.838269][ T6954] ? find_held_lock+0x2b/0x80 [ 63.838292][ T6954] ? find_held_lock+0x2b/0x80 [ 63.838304][ T6954] ? hook_file_ioctl_common+0x145/0x410 [ 63.838322][ T6954] ? __fget_files+0x20e/0x3c0 [ 63.838335][ T6954] security_file_ioctl+0x9b/0x240 [ 63.838349][ T6954] __x64_sys_ioctl+0xb7/0x210 [ 63.838366][ T6954] do_syscall_64+0xcd/0x4c0 [ 63.838382][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.838393][ T6954] RIP: 0033:0x7f097ad8eb69 [ 63.838401][ T6954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.838411][ T6954] RSP: 002b:00007f097bb4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.838421][ T6954] RAX: ffffffffffffffda RBX: 00007f097afb6080 RCX: 00007f097ad8eb69 [ 63.838427][ T6954] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 63.838433][ T6954] RBP: 00007f097bb4e090 R08: 0000000000000000 R09: 0000000000000000 [ 63.838439][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.838444][ T6954] R13: 0000000000000001 R14: 00007f097afb6080 R15: 00007ffd6f4d7db8 [ 63.838456][ T6954] [ 63.838467][ T6954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 64.273660][ T6958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.278'. [ 64.275124][ T6956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.278'. [ 64.665267][ T5985] Bluetooth: hci1: command 0x0419 tx timeout [ 64.667342][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 64.669346][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 64.705537][ T6981] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 64.753027][ T6989] tipc: Enabled bearer , priority 0 [ 64.761001][ T6995] tipc: Disabling bearer [ 64.904498][ T7014] mmap: syz.3.293 (7014) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.980594][ T7013] block nbd3: shutting down sockets [ 65.347506][ T7031] sd 0:0:0:0: PR command failed: 1026 [ 65.349303][ T7031] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 65.351408][ T7031] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 65.435047][ T5982] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.596201][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.599621][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.602658][ T5982] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.606800][ T5982] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.609675][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.613851][ T5982] usb 6-1: config 0 descriptor?? [ 65.849919][ T7042] netlink: 'syz.4.302': attribute type 1 has an invalid length. [ 65.880502][ T5985] block nbd4: Receive control failed (result -11) [ 65.930300][ T7042] block nbd4: shutting down sockets [ 65.969458][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 65.969470][ T40] audit: type=1400 audit(1754407585.800:381): avc: denied { read } for pid=7039 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.009456][ T40] audit: type=1400 audit(1754407585.840:382): avc: denied { create } for pid=7048 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.017839][ T40] audit: type=1400 audit(1754407585.850:383): avc: denied { write } for pid=7048 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.019184][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 66.028781][ T5982] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 66.037705][ T5982] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 66.058230][ T7052] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 66.061703][ T7052] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 66.088534][ T40] audit: type=1400 audit(1754407585.890:384): avc: denied { ioctl } for pid=7051 comm="syz.4.306" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.218096][ T7060] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 66.288876][ T5977] usb 6-1: USB disconnect, device number 3 [ 66.813584][ T7072] binder: 7071:7072 ioctl c0306201 200000000180 returned -22 [ 66.817749][ T7072] netlink: 348 bytes leftover after parsing attributes in process `syz.1.313'. [ 66.821584][ T7072] netlink: 'syz.1.313': attribute type 9 has an invalid length. [ 66.826926][ T40] audit: type=1400 audit(1754407586.660:385): avc: denied { watch watch_reads } for pid=7071 comm="syz.1.313" path="/94" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.863714][ T40] audit: type=1400 audit(1754407586.690:386): avc: denied { ioctl } for pid=7075 comm="syz.1.315" path="/dev/ttyq7" dev="devtmpfs" ino=390 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 66.916915][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 67.057059][ T40] audit: type=1804 audit(1754407586.890:387): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.318" name="/newroot/45/file0" dev="tmpfs" ino=260 res=1 errno=0 [ 67.065170][ T6036] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 67.117865][ T7085] IPv6: Can't replace route, no match found [ 67.122708][ T40] audit: type=1400 audit(1754407586.950:388): avc: denied { mount } for pid=7084 comm="syz.3.319" name="/" dev="hugetlbfs" ino=16585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.130024][ T40] audit: type=1400 audit(1754407586.950:389): avc: denied { read } for pid=7084 comm="syz.3.319" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.139510][ T40] audit: type=1400 audit(1754407586.950:390): avc: denied { open } for pid=7084 comm="syz.3.319" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.175003][ T7088] ======================================================= [ 67.175003][ T7088] WARNING: The mand mount option has been deprecated and [ 67.175003][ T7088] and is ignored by this kernel. Remove the mand [ 67.175003][ T7088] option from the mount to silence this warning. [ 67.175003][ T7088] ======================================================= [ 67.191378][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 67.227922][ T6036] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.230759][ T6036] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 67.233914][ T6036] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.236892][ T6036] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 67.240300][ T6036] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 67.244893][ T6036] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.248151][ T6036] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.250716][ T6036] usb 7-1: Product: syz [ 67.252076][ T6036] usb 7-1: Manufacturer: syz [ 67.268502][ T6036] cdc_wdm 7-1:1.0: skipping garbage [ 67.270234][ T6036] cdc_wdm 7-1:1.0: skipping garbage [ 67.273679][ T6036] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 67.275897][ T6036] cdc_wdm 7-1:1.0: Unknown control protocol [ 67.399640][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 67.417530][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 67.432011][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'. [ 67.470662][ T7106] /dev/nullb0: Can't open blockdev [ 67.484226][ T2304] usb 7-1: USB disconnect, device number 8 [ 67.521264][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 67.536772][ T7111] /dev/nullb0: Can't open blockdev [ 67.819082][ T87] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.821951][ T87] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.826663][ T87] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.829651][ T87] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.835322][ T7140] fuse: Bad value for 'user_id' [ 67.837174][ T7140] fuse: Bad value for 'user_id' [ 67.860479][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 67.892033][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'. [ 68.028245][ T7159] virtio-fs: tag not found [ 68.073117][ T7164] virtio-fs: tag not found [ 68.572866][ T7169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7169 comm=syz.1.349 [ 69.011878][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.031779][ T7187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=7187 comm=syz.2.356 [ 69.245099][ T6037] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 69.275143][ T5982] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 69.375108][ T6037] usb 9-1: device descriptor read/64, error -71 [ 69.426507][ T5982] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.429858][ T5982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 69.433577][ T5982] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 69.439763][ T5982] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 69.442945][ T5982] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 69.445921][ T5982] usb 7-1: Manufacturer: syz [ 69.448974][ T5982] usb 7-1: config 0 descriptor?? [ 69.635090][ T6037] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 69.765031][ T6037] usb 9-1: device descriptor read/64, error -71 [ 69.875810][ T6037] usb usb9-port1: attempt power cycle [ 70.119985][ T61] IPVS: starting estimator thread 0... [ 70.225013][ T7223] IPVS: using max 40 ests per chain, 96000 per kthread [ 70.225061][ T6037] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 70.246100][ T6037] usb 9-1: device descriptor read/8, error -71 [ 70.311202][ T5982] hid-generic 0792:10000:0097.0003: item fetching failed at offset 5/6 [ 70.314325][ T5982] hid-generic 0792:10000:0097.0003: probe with driver hid-generic failed with error -22 [ 70.485558][ T6037] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 70.514110][ T7229] random: crng reseeded on system resumption [ 70.517284][ T6037] usb 9-1: device descriptor read/8, error -71 [ 70.522330][ T7229] Unrecognized hibernate image header format! [ 70.524882][ T7229] PM: hibernation: Image mismatch: architecture specific data [ 70.626421][ T6037] usb usb9-port1: unable to enumerate USB device [ 70.939041][ T7240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.116645][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 71.116657][ T40] audit: type=1400 audit(1754407590.950:447): avc: denied { write } for pid=7247 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.166618][ T40] audit: type=1400 audit(1754407591.000:448): avc: denied { write } for pid=7247 comm="syz.1.377" path="socket:[17527]" dev="sockfs" ino=17527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.231228][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.234134][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.032434][ T5977] usb 7-1: USB disconnect, device number 9 [ 72.055865][ T7264] __nla_validate_parse: 5 callbacks suppressed [ 72.055877][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 72.107726][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 81.494022][ T1333] cfg80211: failed to load regulatory.db [ 84.071264][ T40] audit: type=1400 audit(1754407603.900:449): avc: denied { execute } for pid=7267 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.098742][ T40] audit: type=1400 audit(1754407603.900:450): avc: denied { execute_no_trans } for pid=7267 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.209070][ T5970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.212806][ T5970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.218098][ T5970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.221847][ T5970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.224568][ T5970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.243327][ T5985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.248226][ T5985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.251512][ T5985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.254863][ T5985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.258525][ T5985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.114142][ T1425] ================================================================== [ 86.116807][ T1425] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 86.119159][ T1425] Read of size 8 at addr ffff888053995020 by task aoe_tx0/1425 [ 86.123474][ T1425] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 86.124352][ T1425] CPU: 3 UID: 0 PID: 1425 Comm: aoe_tx0 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 86.124367][ T1425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.124374][ T1425] Call Trace: [ 86.124378][ T1425] [ 86.124382][ T1425] dump_stack_lvl+0x116/0x1f0 [ 86.124412][ T1425] print_report+0xcd/0x630 [ 86.124425][ T1425] ? __virt_addr_valid+0x81/0x610 [ 86.124439][ T1425] ? __phys_addr+0xe8/0x180 [ 86.124452][ T1425] ? handle_tx+0x5a5/0x630 [ 86.124464][ T1425] kasan_report+0xe0/0x110 [ 86.124475][ T1425] ? handle_tx+0x5a5/0x630 [ 86.124487][ T1425] handle_tx+0x5a5/0x630 [ 86.124499][ T1425] dev_hard_start_xmit+0x94/0x740 [ 86.124514][ T1425] __dev_queue_xmit+0xa46/0x4490 [ 86.124526][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.124541][ T1425] ? finish_task_switch.isra.0+0x221/0xc10 [ 86.124555][ T1425] ? rcu_is_watching+0x12/0xc0 [ 86.124569][ T1425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 86.124580][ T1425] ? __schedule+0x11a3/0x5de0 [ 86.124599][ T1425] ? __lock_acquire+0xb97/0x1ce0 [ 86.124617][ T1425] ? do_raw_spin_lock+0x12c/0x2b0 [ 86.124629][ T1425] ? rcu_is_watching+0x12/0xc0 [ 86.124642][ T1425] tx+0xcc/0x190 [ 86.124656][ T1425] ? __pfx_tx+0x10/0x10 [ 86.124670][ T1425] kthread+0x1e4/0x3e0 [ 86.124682][ T1425] ? find_held_lock+0x2b/0x80 [ 86.124694][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.124706][ T1425] ? __pfx_default_wake_function+0x10/0x10 [ 86.124723][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.124739][ T1425] ? __kthread_parkme+0x19e/0x250 [ 86.124759][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.124773][ T1425] kthread+0x3c2/0x780 [ 86.124783][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.124793][ T1425] ? rcu_is_watching+0x12/0xc0 [ 86.124805][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.124815][ T1425] ret_from_fork+0x5d7/0x6f0 [ 86.124825][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.124834][ T1425] ret_from_fork_asm+0x1a/0x30 [ 86.124851][ T1425] [ 86.124855][ T1425] [ 86.190644][ T1425] Allocated by task 6693: [ 86.192067][ T1425] kasan_save_stack+0x33/0x60 [ 86.193589][ T1425] kasan_save_track+0x14/0x30 [ 86.195114][ T1425] __kasan_kmalloc+0xaa/0xb0 [ 86.196586][ T1425] alloc_tty_struct+0x96/0x8c0 [ 86.198168][ T1425] tty_init_dev.part.0+0x1e/0x500 [ 86.199900][ T1425] tty_open+0xa50/0xf90 [ 86.201409][ T1425] chrdev_open+0x231/0x6a0 [ 86.203036][ T1425] do_dentry_open+0x982/0x1530 [ 86.204703][ T1425] vfs_open+0x82/0x3f0 [ 86.206074][ T1425] path_openat+0x1de4/0x2cb0 [ 86.207571][ T1425] do_filp_open+0x20b/0x470 [ 86.209060][ T1425] do_sys_openat2+0x11b/0x1d0 [ 86.210576][ T1425] __x64_sys_openat+0x174/0x210 [ 86.212143][ T1425] do_syscall_64+0xcd/0x4c0 [ 86.213654][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.215648][ T1425] [ 86.216584][ T1425] Freed by task 6429: [ 86.217961][ T1425] kasan_save_stack+0x33/0x60 [ 86.219495][ T1425] kasan_save_track+0x14/0x30 [ 86.221028][ T1425] kasan_save_free_info+0x3b/0x60 [ 86.222735][ T1425] __kasan_slab_free+0x51/0x70 [ 86.224401][ T1425] kfree+0x2b4/0x4d0 [ 86.225823][ T1425] process_one_work+0x9cf/0x1b70 [ 86.226171][ T5970] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.227515][ T1425] worker_thread+0x6c8/0xf10 [ 86.231555][ T1425] kthread+0x3c2/0x780 [ 86.232082][ T5970] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.232919][ T1425] ret_from_fork+0x5d7/0x6f0 [ 86.236587][ T5970] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.237036][ T1425] ret_from_fork_asm+0x1a/0x30 [ 86.239877][ T5970] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.240927][ T1425] [ 86.240934][ T1425] Last potentially related work creation: [ 86.244211][ T5970] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.245811][ T1425] kasan_save_stack+0x33/0x60 [ 86.245829][ T1425] kasan_record_aux_stack+0xa7/0xc0 [ 86.245842][ T1425] insert_work+0x36/0x230 [ 86.245851][ T1425] __queue_work+0x97e/0x1160 [ 86.245861][ T1425] queue_work_on+0x1a4/0x1f0 [ 86.245870][ T1425] release_tty+0x4de/0x5d0 [ 86.245884][ T1425] tty_release_struct+0xb7/0xe0 [ 86.259159][ T1425] tty_release+0xe2d/0x1430 [ 86.260638][ T1425] __fput+0x3ff/0xb70 [ 86.261988][ T1425] task_work_run+0x14d/0x240 [ 86.263490][ T1425] do_exit+0x86f/0x2bf0 [ 86.264924][ T1425] do_group_exit+0xd3/0x2a0 [ 86.265186][ T5970] Bluetooth: hci4: command tx timeout [ 86.266628][ T1425] get_signal+0x2673/0x26d0 [ 86.270483][ T1425] arch_do_signal_or_restart+0x8f/0x7d0 [ 86.272327][ T1425] exit_to_user_mode_loop+0x84/0x110 [ 86.274026][ T1425] do_syscall_64+0x3f6/0x4c0 [ 86.275560][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.277453][ T1425] [ 86.278272][ T1425] The buggy address belongs to the object at ffff888053995000 [ 86.278272][ T1425] which belongs to the cache kmalloc-cg-2k of size 2048 [ 86.282753][ T1425] The buggy address is located 32 bytes inside of [ 86.282753][ T1425] freed 2048-byte region [ffff888053995000, ffff888053995800) [ 86.287075][ T1425] [ 86.287881][ T1425] The buggy address belongs to the physical page: [ 86.289968][ T1425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888053997000 pfn:0x53990 [ 86.293181][ T1425] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.295904][ T1425] memcg:ffff888053f6b301 [ 86.297323][ T1425] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 86.300231][ T1425] page_type: f5(slab) [ 86.301664][ T1425] raw: 00fff00000000240 ffff88801b84c140 ffffea0000805410 ffffea000095fe10 [ 86.304522][ T1425] raw: ffff888053997000 0000000000080005 00000000f5000000 ffff888053f6b301 [ 86.307235][ T1425] head: 00fff00000000240 ffff88801b84c140 ffffea0000805410 ffffea000095fe10 [ 86.309999][ T1425] head: ffff888053997000 0000000000080005 00000000f5000000 ffff888053f6b301 [ 86.312710][ T1425] head: 00fff00000000003 ffffea00014e6401 00000000ffffffff 00000000ffffffff [ 86.315443][ T1425] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 86.318230][ T1425] page dumped because: kasan: bad access detected [ 86.320285][ T1425] page_owner tracks the page as allocated [ 86.322103][ T1425] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5967, tgid 5967 (syz-executor), ts 47641005560, free_ts 0 [ 86.328445][ T1425] post_alloc_hook+0x1c0/0x230 [ 86.330291][ T1425] get_page_from_freelist+0x132b/0x38e0 [ 86.332067][ T1425] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 86.333951][ T1425] alloc_pages_mpol+0x1fb/0x550 [ 86.335521][ T1425] new_slab+0x247/0x330 [ 86.336860][ T1425] ___slab_alloc+0xcf2/0x1740 [ 86.338428][ T1425] __slab_alloc.constprop.0+0x56/0xb0 [ 86.340158][ T1425] __kmalloc_cache_noprof+0xfb/0x3e0 [ 86.341873][ T1425] ipv6_add_dev+0x1c9/0x15f0 [ 86.343368][ T1425] ipv6_find_idev+0x192/0x220 [ 86.344923][ T1425] inet6_rtm_newaddr+0x59f/0x1c70 [ 86.346559][ T1425] rtnetlink_rcv_msg+0x95b/0xe90 [ 86.348189][ T1425] netlink_rcv_skb+0x155/0x420 [ 86.349763][ T1425] netlink_unicast+0x5aa/0x870 [ 86.351295][ T1425] netlink_sendmsg+0x8d1/0xdd0 [ 86.352844][ T1425] __sys_sendto+0x4a3/0x520 [ 86.354337][ T1425] page_owner free stack trace missing [ 86.356047][ T1425] [ 86.356828][ T1425] Memory state around the buggy address: [ 86.358622][ T1425] ffff888053994f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.361164][ T1425] ffff888053994f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.363718][ T1425] >ffff888053995000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.366237][ T1425] ^ [ 86.367885][ T1425] ffff888053995080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.370400][ T1425] ffff888053995100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.372913][ T1425] ================================================================== [ 86.375581][ C3] vkms_vblank_simulate: vblank timer overrun [ 86.377555][ T1425] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.379839][ T1425] CPU: 3 UID: 0 PID: 1425 Comm: aoe_tx0 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 86.383617][ T1425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.387089][ T1425] Call Trace: [ 86.388192][ T1425] [ 86.389147][ T1425] dump_stack_lvl+0x3d/0x1f0 [ 86.390843][ T1425] vpanic+0x6e8/0x7a0 [ 86.392173][ T1425] ? __pfx_vpanic+0x10/0x10 [ 86.393660][ T1425] ? handle_tx+0x5a5/0x630 [ 86.395126][ T1425] panic+0xca/0xd0 [ 86.396345][ T1425] ? __pfx_panic+0x10/0x10 [ 86.397806][ T1425] ? check_panic_on_warn+0x1f/0xb0 [ 86.399420][ T1425] check_panic_on_warn+0xab/0xb0 [ 86.401000][ T1425] end_report+0x107/0x170 [ 86.402389][ T1425] kasan_report+0xee/0x110 [ 86.403812][ T1425] ? handle_tx+0x5a5/0x630 [ 86.405254][ T1425] handle_tx+0x5a5/0x630 [ 86.406612][ T1425] dev_hard_start_xmit+0x94/0x740 [ 86.408232][ T1425] __dev_queue_xmit+0xa46/0x4490 [ 86.409825][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.411462][ T1425] ? finish_task_switch.isra.0+0x221/0xc10 [ 86.413300][ T1425] ? rcu_is_watching+0x12/0xc0 [ 86.414839][ T1425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 86.416523][ T1425] ? __schedule+0x11a3/0x5de0 [ 86.418048][ T1425] ? __lock_acquire+0xb97/0x1ce0 [ 86.419650][ T1425] ? do_raw_spin_lock+0x12c/0x2b0 [ 86.421260][ T1425] ? rcu_is_watching+0x12/0xc0 [ 86.422803][ T1425] tx+0xcc/0x190 [ 86.423960][ T1425] ? __pfx_tx+0x10/0x10 [ 86.425320][ T1425] kthread+0x1e4/0x3e0 [ 86.426633][ T1425] ? find_held_lock+0x2b/0x80 [ 86.428141][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.429654][ T1425] ? __pfx_default_wake_function+0x10/0x10 [ 86.431528][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.433190][ T1425] ? __kthread_parkme+0x19e/0x250 [ 86.434822][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.436369][ T1425] kthread+0x3c2/0x780 [ 86.437729][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.439231][ T1425] ? rcu_is_watching+0x12/0xc0 [ 86.440762][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.442221][ T1425] ret_from_fork+0x5d7/0x6f0 [ 86.443696][ T1425] ? __pfx_kthread+0x10/0x10 [ 86.445194][ T1425] ret_from_fork_asm+0x1a/0x30 [ 86.446746][ T1425] [ 86.448339][ T1425] Kernel Offset: disabled [ 86.449717][ T1425] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:26:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000202 RBX=0000000000000201 RCX=1ffffffff21563cc RDX=0000000000000000 RSI=0000000000000201 RDI=ffffffff817c3d2d RBP=ffffffff89ffd245 RSP=ffffc9000367fa20 R8 =0000000000000000 R9 =ffffed1004a971d0 R10=ffff8880254b8e83 R11=0000000000000000 R12=1ffff920006cff4b R13=0000000000000040 R14=ffffc9000367fa88 R15=0000000000000000 RIP=ffffffff81c37808 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557adaf500 ffffffff 00c00000 GS =0000 ffff8880d66c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb47dc4bff8 CR3=0000000032a83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb47cf87d20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557adcd5c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 000000040000000d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557adcbec3 000055557adcbb20 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557adc9010 000055557adc3e40 000000000000000b 0000000500000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557adc4210 000055557adc41a0 000000010000001e 0000555500000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c00300080003b8 0300080003b00300 4c50470100000012 ffffffff00000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffdf 0803e00300080003 d803000800000013 0fffffff00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9003000800048803 0008000480030000 0000000000000014 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080000000000 08000590030fffff ffffffff04058003 0fffffff00000017 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04f0030000000000 0300080004e00300 080004d80301b008 0004d00300000016 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0400000000 080004b803000800 04b0030fffffffff ffff040400000015 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004980300000000 9003000800048803 0008000480030000 0000000000000014 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000098fad RBX=0000000000000001 RCX=ffffffff8b927c29 RDX=0000000000000000 RSI=ffffffff8de4d20b RDI=ffffffff8c160d00 RBP=ffffed1003bdd488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deea440 R14=ffffffff90aaec90 R15=0000000000000000 RIP=ffffffff8b92678f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005645bb328c18 CR3=0000000024cc9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000186 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffed08 0180030c00000118 0000000500000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90030fffffffffff ff040980030fffff ffffffff0408f003 00100008e0030fff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff0408d0 0366080008c0030f ffffffffffff0408 b0030fffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0408a0030fffff ffffffff04089003 4080c08010000880 0300100005b88208 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000080606 021e9a0004000008 0001800401c71000 080049f4006d766b ZMM24=68fe40c568fe40c5 68fe40c568fe40c5 68fe40c568fe40c5 68fe40c568fe40c5 68fe40c568fe40c5 68fe40c568fe40c5 68fe40c568fe40c5 68fe40c568fe40c5 ZMM25=012d5b05012d5b05 012d5b05012d5b05 012d5b05012d5b05 012d5b05012d5b05 012d5b05012d5b05 012d5b05012d5b05 012d5b05012d5b05 012d5b05012d5b05 ZMM26=6cf91f796cf91f79 6cf91f796cf91f79 6cf91f796cf91f79 6cf91f796cf91f79 6cf91f796cf91f79 6cf91f796cf91f79 6cf91f796cf91f79 6cf91f796cf91f79 ZMM27=b0f1b94eb0f1b94e b0f1b94eb0f1b94e b0f1b94eb0f1b94e b0f1b94eb0f1b94e b0f1b94eb0f1b94e b0f1b94eb0f1b94e b0f1b94eb0f1b94e b0f1b94eb0f1b94e ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2505000025050000 2505000025050000 2505000025050000 2505000025050000 2505000025050000 2505000025050000 2505000025050000 2505000025050000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffc900040ef4fc RDX=0000000000000000 RSI=ffffffff8de27e50 RDI=ffff88802c752884 RBP=ffff88802c752440 RSP=ffffc900040ef508 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff81a6dd50 R13=ffffc900040ef650 R14=0000000000000000 R15=ffff88802c752440 RIP=ffffffff81a1e8fb RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b3ef500 ffffffff 00c00000 GS =0000 ffff8880d68c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7d753b6038 CR3=00000000290f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d75eed100 00007f7d75387460 00007f7d75387478 00007f7d753874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85635355 RDI=ffffffff9b104160 RBP=ffffffff9b104120 RSP=ffffc90006e7f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b104120 R15=ffffffff856352f0 RIP=ffffffff8563537f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d69c6000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1812b87be0 CR3=0000000028e6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a40d29a600 000055a40d29a600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc77f4c870 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6870203435313230 3865656569205d35 32343154205b5d34 33313433322e3137 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d64617379733a72 5f6d64617379733a 746f6f723d747865 746e6f637420745f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d64617379733a72 5f6d64617379733a 746f6f723d747865 746e6f6373203732 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3537313d6f6e6920 2273666b636f7322 3d76656420225d37 323537315b3a7465 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b636f73223d6874 617020223737332e 312e7a7973223d6d 6d6f632037343237 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000