last executing test programs: 1m5.209881288s ago: executing program 0 (id=172): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(r0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c00f6d9b66f00000000000000055ed476f9803880117a514bf89776d7775026dc9b34134370b892c07bc8e8f93a26917de0b1ee75e83a74ba9cb18242aa500a932c0c5c00176e362a17ae647fe1da15465e0e41bf7daf496b4c9f914dd23bbc5438e3fd2db94347d9627a603470049232b2072a5178dd7488b03bee1b726af6b186aabc1bfddcc8ec87e8576820ca606388cde5d52c05d5706e565d12b566abe855b257860dcbb23c4b2cc009466695c0400aece9471fd6833f2be363f0a2580f473a4807743e1cd8dbb65f95"]) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) syz_usb_disconnect(r1) (async, rerun: 64) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120173ca0102e880d3080d1031"], 0x0) syz_usb_ep_write(r1, 0x0, 0xa3, &(0x7f0000000200)="e734f56b3c97151475b536ad4990d079e85ba6a72a064753c5fcda0338c5b488fc59cc09ea7ee46bd195deeb407cc9636f6db7cc76c13f7cb9190ae9db47502d933b5cd317db5e95f5dd0b206784ef1e357ae6fdf1285e792874bc42bb9d6241ee2cf5da055fd303a8cf10f1a7f9bab555a623e9018ac8f701157aa29717cca4040d912974ac99c5edb0dc22ac0fd1749e72b324509c046ce78b79cac7b08439944f87") 1m2.119059026s ago: executing program 0 (id=217): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0xcd27, 0x1000}, {0x2, 0x9, 0x1000}], 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) (async) r1 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1c, 0xc000, 0x3, 0x38}) r2 = syz_io_uring_setup(0x2b08, &(0x7f0000000040)={0x0, 0x0, 0x400, 0x0, 0x100000, 0x0, r1}, &(0x7f0000ffd000), &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x14, &(0x7f00000003c0), 0x2) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x1, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x11, 0x7, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) fanotify_mark(r4, 0x1, 0x10001011, r3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\b'], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) (async) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) read$FUSE(r7, &(0x7f0000004500)={0x2020}, 0x2020) 1m1.850551774s ago: executing program 0 (id=224): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x50, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "736cd07259"}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20004815) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xdb, @none, 0x4}, 0xe) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)=ANY=[@ANYBLOB="14c3843aeefd72c1a4000000000000000a000000"], 0x14}}, 0x4004010) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newtaction={0xe0, 0x30, 0x83d79f1e8021ba05, 0x70bd28, 0x0, {}, [{0xcc, 0x1, [@m_nat={0xc8, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr=0xffffffff, @rand_addr=0x64010100, 0xff}}]}, {0x76, 0x6, "12838a9196ac1728ad16145889fbebaa7e85bc412de49a1117fb32eec1daa6c1ad242860160c55e2c4fddbba8c60e7fbee818d5c9895456452178264c78f8938b3b173cda02f167d60875a243ae8c5469f93a7def21f77b80d3bbe33f379d146c26204b6782d576347d28a3080350033f8ed"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m1.751239444s ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x195) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x1, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f00000002c0)=ANY=[]) 1m1.653736744s ago: executing program 0 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000380)={0x2e, 0x0, [{0xc0000000, 0x8, 0x5, 0x80, 0x5, 0x8, 0x6c7}, {0x40000000, 0x9, 0x4, 0x6, 0x8, 0x2, 0xffff}, {0x4, 0x7, 0x6, 0x6, 0x6, 0xa19, 0x401}, {0xc0000000, 0x5, 0x6, 0x2, 0x0, 0x100, 0xd}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040840) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[]) 1m1.418936407s ago: executing program 0 (id=232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/138, 0x8a) 1m1.352924859s ago: executing program 32 (id=232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/138, 0x8a) 20.940286361s ago: executing program 1 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="eeff13ca7de3d8fedf1872354f6f7bb1e6495688df06cbf0a88a11c6680a15dc57f4e441f00718b9", @ANYBLOB="858a1710bfd3decc57f401"], 0x7c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x23}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private1, 0x4}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f81b6b", 0x3}, {&(0x7f0000000140)="7d69bc", 0x3}], 0x2}}], 0x1, 0x4000000) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 20.938922065s ago: executing program 1 (id=603): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041c05"], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1a, 0x3c, &(0x7f0000000440)}) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffb, @empty, 0x2}, 0x1c) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000380)=""/134) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040001, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b1a, &(0x7f0000000040)) r3 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000000c0)=""/114, 0x72) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r14 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)={0xa8, r14, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa4, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) 19.698418603s ago: executing program 1 (id=616): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r0, &(0x7f0000001d00)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13baa493645fa9f98701918a1f87f1d439ec93772d6ecaaf8891f7678f2037cccbd78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db6700bb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5af97ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef0779cafd02bcf075a212e79e07c3ff38810368745fb77fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f91cc", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xa, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45e], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 19.584236081s ago: executing program 1 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) setrlimit(0x9, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4f0602, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x14, r7, 0x9c2f0f67201acf05, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000080) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 19.374725181s ago: executing program 1 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b020000000000000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18.990650405s ago: executing program 1 (id=633): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x100, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x9, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x2, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x54e, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x9, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x800080000000005, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc}, {0xe000, 0x100000, 0xc, 0x8, 0x9, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x10}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xff, 0x0, 0x0, 0x7, 0x5}, {0xeeef0000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x0, 0xa, 0x8000, 0x2000, [0xdd41, 0x0, 0xa, 0xffffffffffffffff]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xeeee0000, 0x2, 0x1c, 0x54}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x480, 0x0, 0xa82}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000580)={{0x4, 0x6000, 0x3, 0x0, 0x7, 0x8e, 0xcc, 0xf9, 0xc, 0x8, 0x9}, {0x2000, 0x4, 0xfeedfbe7cb1ac988, 0xfd, 0x1, 0xff, 0x7, 0x9, 0x9, 0x1, 0x8, 0x4}, {0x5000, 0x4, 0xd, 0xf, 0xf8, 0xe, 0x2, 0x8, 0x1, 0x8, 0x8, 0x3}, {0x4000, 0x8000000, 0x10, 0x7e, 0xb, 0x81, 0x8, 0x3, 0x2, 0x3, 0x13, 0x5}, {0xf000, 0x10000, 0x4, 0x6, 0xfd, 0x10, 0xb, 0xb, 0x40, 0x1, 0x7f, 0x1}, {0x2000, 0x2, 0x0, 0x6, 0xe, 0x0, 0x7, 0x13, 0xf, 0xe, 0xf9, 0xa}, {0x2, 0x2000, 0xd, 0xa, 0x4, 0x7, 0x6d, 0x9, 0x8, 0xff, 0x6, 0xfc}, {0xf000, 0xe6ee2000, 0xd, 0x0, 0x4e, 0x3, 0x8, 0x4, 0x4, 0x3, 0x7, 0xf}, {0x5000, 0x5}, {0x0, 0x1ff}, 0x4001e, 0x0, 0x10000, 0x2002a8, 0x8, 0x7800, 0x4000, [0x7, 0x0, 0x45, 0x4]}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 18.952980449s ago: executing program 33 (id=633): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x100, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x9, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x2, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x54e, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x9, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x800080000000005, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc}, {0xe000, 0x100000, 0xc, 0x8, 0x9, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x10}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xff, 0x0, 0x0, 0x7, 0x5}, {0xeeef0000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x0, 0xa, 0x8000, 0x2000, [0xdd41, 0x0, 0xa, 0xffffffffffffffff]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xeeee0000, 0x2, 0x1c, 0x54}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x480, 0x0, 0xa82}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000580)={{0x4, 0x6000, 0x3, 0x0, 0x7, 0x8e, 0xcc, 0xf9, 0xc, 0x8, 0x9}, {0x2000, 0x4, 0xfeedfbe7cb1ac988, 0xfd, 0x1, 0xff, 0x7, 0x9, 0x9, 0x1, 0x8, 0x4}, {0x5000, 0x4, 0xd, 0xf, 0xf8, 0xe, 0x2, 0x8, 0x1, 0x8, 0x8, 0x3}, {0x4000, 0x8000000, 0x10, 0x7e, 0xb, 0x81, 0x8, 0x3, 0x2, 0x3, 0x13, 0x5}, {0xf000, 0x10000, 0x4, 0x6, 0xfd, 0x10, 0xb, 0xb, 0x40, 0x1, 0x7f, 0x1}, {0x2000, 0x2, 0x0, 0x6, 0xe, 0x0, 0x7, 0x13, 0xf, 0xe, 0xf9, 0xa}, {0x2, 0x2000, 0xd, 0xa, 0x4, 0x7, 0x6d, 0x9, 0x8, 0xff, 0x6, 0xfc}, {0xf000, 0xe6ee2000, 0xd, 0x0, 0x4e, 0x3, 0x8, 0x4, 0x4, 0x3, 0x7, 0xf}, {0x5000, 0x5}, {0x0, 0x1ff}, 0x4001e, 0x0, 0x10000, 0x2002a8, 0x8, 0x7800, 0x4000, [0x7, 0x0, 0x45, 0x4]}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.589732431s ago: executing program 4 (id=788): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81}) 5.220545552s ago: executing program 4 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="b990000040b800700000ba000000000f3066ba610066ed66b80f018ec864f08204b008f2e100c7442400ed000000c74424021ff90000c7442406000000000f011424c744240070dc0000c7442402bc000000c7442406000000000f011424660f38dd52000fc7767aea00000000fe00", 0x6f}], 0x1, 0x56, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000004c0)={0x1, @raw_data="1f54b0697ff134b085cfd449e62ae55e29165308df02edd27e2ef32a04c0353f7f5ef39fef07a12f334215842de3672899a68e522b6494915a41bf16aa1c12a6ef611369bfae98613976c2b8cfe701bfacf4226db2848871bb15b2dd984f145e3775569423594f2efda77a59a059ed219ca71fc84b011793b61130cddc39cef586080987824d2307984b009482a60fed162e012be12b6194cfefff8c5333afcc285955d8ecb19c85218f8dec63f53b2c4236c41501dcebe679f5029aabc6cd94e5e9c37f3e9866a3"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.090288895s ago: executing program 4 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = getuid() sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x20, 0x5c, 0x0, r6}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x7, 0x400}, {0x0, 0x7, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500001c0067000000019078ac1e0001ffffffff39295a8cc8674712"], 0x0) 5.090087965s ago: executing program 4 (id=796): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) chroot(&(0x7f0000000100)='./file0\x00') (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x80180, 0x0) mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) (async) io_uring_enter(r4, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r4, 0x408) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc5) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='./file1\x00') syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) 4.919094767s ago: executing program 4 (id=797): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000240)={'\x00', 0x4, 0x0, 0xfe}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0x8001, 0x4) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) 3.910596422s ago: executing program 4 (id=809): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30, 0x60}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003, 0x0, 0x40}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.827787443s ago: executing program 34 (id=809): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30, 0x60}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003, 0x0, 0x40}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.350648387s ago: executing program 2 (id=833): r0 = inotify_init1(0x80800) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) inotify_add_watch(r0, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000220) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') 1.350370597s ago: executing program 3 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x8}}, {@generic={0x88a2, 'f\n'}}}, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x78, 0x3}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@local, 0x80000000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) connect$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0xa}}, 0x10) (async) shutdown(r1, 0x2) (async, rerun: 32) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001d40)={0x2, 0x6, 0xa, 0x8, 0x248, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@rand_addr=0x64010102, 0x0, 0x14, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2d, 0x3506}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_sec_ctx={0xf, 0x18, 0x1, 0x2, 0x69, "1942e0915ae2ac782e03263ee65986ef81d68e20193b207d8f398aa758edb637edc04f622174ffdcb33d519ddbd6f4aa5559446f95960890254a74ebfbf03e5f0c9c5edfaeb3848e1c67a9deb833bd17c7faf6d46f4e643d619a4e9e10ff8c604d6413e58b84e87dd6"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bba, 0x9, {0x6, 0x32, 0x4, 0x9, 0x0, 0x9, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x25, 0x10, 0x14}, @sadb_key={0x1a, 0x9, 0x628, 0x0, "1732f6b067df67fcf585782b8dd5037a64a73d60a576b5435524bb47e6b72e46d3b2104ea5accd98bac89a096bad358a37ecfe59a5393637f7ad4e800cfc86fc7ceca68db06a5bdd6c7ea98533fa091636479acbd9b6d948f1392c30cd9318f704fa0c25a2d8ef1e2a3e0f281c0938e615e1ef58ea9ba217e33dd777644ab8d00a791d44a85eb99a22f24f2eec835af5d3e6fcaa43df8167d8e070b966db4ec762a7b7711b6809fb4e1ecbdffe0e3cd9b8f1028fe2894af8504317c6d4cc5034f525fb87e3"}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@multicast1, 0x1e, 0x10, 0x4}, @sadb_sa={0x2, 0x1, 0x4d2, 0x6, 0xf, 0xdd, 0x0, 0xe0000000}]}, 0x1240}}, 0x80) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r6, 0xfff, 0x10}, 0xc) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x4}}, 0x7, 0x7ff, 0x10001, 0x4, 0x44, 0x8, 0x9}, 0x9c) (async, rerun: 64) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f00000001c0)="b9e403c639495aa05dc7cf1c0000", 0x0, 0xffff, 0x0, 0x0, 0x35, 0x0, 0x0}, 0xffffffffffffff44) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x100003, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno?', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',aname=\',privport,euid>', @ANYRESDEC=r7, @ANYBLOB="446b0d5b7458bbf84c0fae96e04326104f30e96f1d25bca558ec9e362225577c0a491453a3065143b42b007b368e033693d7a6f6bb28660c3421e78d61dff9cc81a50226dc9c77902e5de21c31db9f8527c8e7a7a06fab22be88a8c37f1919222ddf38b4e3429713bd1bcaf0fc3ba23291cc5b7537046466612aaedd12e3"]) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 1.350171629s ago: executing program 2 (id=836): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0x5, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x12}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40281) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="81000400e0000400080008001def1cfa8c3c3de72b822a507a31e7228ff123b652796b30e752aa6d3c385a78e938d11e85d99993b39aaaea3b06"], 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000000)=0x82) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000003c0)=0xd660882) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="f321a47ccb26c208b472422205c7006d6ece242cd54c0b9a38f7284c2248178543811c4c0f443301182734982b7a17127d1cf3c990341279fbf98756c29bf7ef79", @ANYRES64, @ANYRESDEC=r0, @ANYRES16=r2], 0xfce1) 1.348949536s ago: executing program 3 (id=837): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4880) fcntl$getflags(r2, 0x408) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8000, 0x9, 0x10000000, 0xfffffff7, 0xfffffff3}, 0x0, 0x6}, [{0x8, 0x101, 0x2, 0x9, 0xffff, 0x10001}, {0xf58, 0x6, 0x1, 0x2, 0x1, 0x9}, {0x9, 0x4, 0x3, 0x715, 0x7, 0x1fc}, {0x7, 0x5, 0x1000, 0x38f11730, 0xffffff74, 0x4}, {0xf, 0x1, 0x8000, 0x66, 0x3, 0x1}, {0x6, 0xffff1d47, 0x1, 0x8, 0x6, 0x120000}, {0x4e008000, 0x1, 0x0, 0x1000, 0x7ff0, 0x8}, {0x2e5, 0x10000, 0x6, 0xffffffff, 0x7, 0xab}, {0x9, 0x27, 0x6d, 0x5e, 0x8000, 0x3}, {0x10000, 0x3, 0x9, 0x4, 0x8, 0x1}, {0x2, 0x2, 0x101, 0x6, 0xfffe0000, 0x200}, {0xfffffffc, 0x1, 0xb, 0x7fffffff, 0x4, 0xffffffff}, {0x8, 0xd, 0x9, 0x8, 0x2, 0x8}, {0x5, 0x6, 0x0, 0x2, 0x10000, 0x634}, {0x2, 0x7ff, 0x0, 0x80000001, 0x541, 0x4}, {0x9, 0x6c13, 0x8, 0x8, 0xf, 0x5}, {0x928, 0xfffffff9, 0x7, 0x101, 0x6, 0x9}, {0x3, 0x54, 0x6, 0x23, 0x5, 0x8}, {0x0, 0x0, 0x1, 0x0, 0x9d, 0x2}, {0x8, 0x7, 0x81, 0x100, 0x10, 0x6}, {0x3, 0x8, 0x1, 0x5, 0x7}, {0x401, 0x6, 0x80000000, 0x7, 0x7, 0xf}, {0x86, 0x4, 0xffffffff, 0x9, 0x4, 0x2}, {0x80000001, 0x2, 0x4, 0x9, 0x8, 0x1}, {0xfffffff0, 0x0, 0x1, 0x1, 0xfffffffb, 0x9}, {0x7c, 0xdc, 0x4, 0x9, 0x3ff, 0x9}, {0x1, 0x6, 0x8, 0x3, 0x2, 0x4}, {0xb, 0x1, 0x9, 0x5, 0x7, 0x816}, {0x1, 0x4, 0x81, 0x5, 0xffff}, {0x8, 0x5, 0x9, 0xc64c, 0x100000, 0x7}, {0x5, 0x7, 0x2, 0x8000, 0x6, 0x2}, {0xf3f, 0x5, 0x40, 0x6, 0x800, 0x7}, {0x345d, 0xfffffffa, 0x7, 0xff, 0x7, 0x5}, {0x3, 0x0, 0x7, 0x4, 0x0, 0x200}, {0x3, 0x7, 0x5, 0x7fffffff, 0xd, 0x5}, {0x4, 0xfffffff9, 0xf, 0xee, 0x3a, 0xffff}, {0xc, 0x1, 0x3, 0x7f6, 0xe, 0x1000}, {0xb, 0x3, 0x1603114f, 0x4, 0x525, 0x6}, {0x0, 0x2b, 0x80000000, 0x1, 0x4, 0xffffffff}, {0x4, 0x3, 0xfffffeff, 0x8, 0x200, 0x9}, {0xb232, 0x4c, 0x80, 0xfffffff0, 0x7, 0x7}, {0x50000000, 0x0, 0xfffffffd, 0xba, 0x54e09800, 0xc}, {0xffff, 0x800, 0x1, 0x9, 0x2, 0x5}, {0x5, 0x1, 0x1, 0x5, 0x2, 0x7}, {0xd, 0x4, 0x0, 0x7969, 0xc2, 0x100}, {0xeb, 0x3, 0x80000000, 0x3, 0x81, 0x8da}, {0x8, 0x9b63, 0xc, 0x0, 0x706, 0xff}, {0x8fc, 0x80000, 0x0, 0x3fce, 0x0, 0xc}, {0x0, 0x5b, 0x8, 0x0, 0x80, 0x2}, {0xfffffffe, 0x0, 0x9, 0x80, 0xffff, 0x4}, {0x10, 0x4, 0x0, 0xfff, 0x9, 0x8001}, {0x3, 0xfffffffe, 0x6, 0x9, 0x9, 0xfffffffd}, {0x4ef9, 0x0, 0x6ed, 0x8, 0x1000, 0x6}, {0x6, 0x9, 0x6, 0x0, 0x80000001, 0xc19}, {0x9, 0xffffffff, 0xeb6b, 0x456, 0x2, 0x5}, {0xbd, 0x17bba000, 0x400, 0x6, 0xffffffff, 0x2}, {0x7, 0x3, 0x3, 0x87e, 0x32d, 0x7}, {0x4fda, 0x2, 0x10001, 0x4ee, 0x85, 0x5}, {0x0, 0x5, 0x7fff, 0x1, 0x43, 0xbc2}, {0x9, 0x5, 0x4, 0x1405a865, 0x1}, {0x100, 0xfffffbff, 0x0, 0x5808, 0x10000, 0x5}, {0xc78, 0xc, 0x3, 0x6, 0x1ff, 0x9}, {0x6, 0x8, 0xa63b, 0x9, 0x9, 0x1}, {0x8, 0x16b8, 0x10001, 0x1c71, 0xff, 0x1}, {0xffff, 0x3, 0x9, 0xfffffffb, 0x6, 0x6}, {0x9, 0x7, 0x8, 0x5, 0x3, 0x4}, {0x3, 0x1000, 0xbf, 0xe, 0x4, 0x3}, {0x3, 0x100, 0xd3a, 0xef9, 0x80000000, 0x4}, {0x1, 0xfffffffb, 0x4, 0x10, 0x0, 0x454}, {0x6, 0xbcd2, 0x4, 0x4, 0x8, 0x800}, {0xc, 0x2000000, 0x2, 0x2, 0x6, 0x100}, {0xe00000, 0x732d, 0xae3, 0x3ff, 0x1000, 0x4}, {0xffffffff, 0x2, 0x8, 0x0, 0x3e, 0x400}, {0x7, 0xc10, 0x80, 0x1, 0x2, 0x6}, {0x0, 0x9, 0x8, 0x4, 0xd3}, {0x8, 0x5, 0x5, 0x8, 0x80, 0x400}, {0x6, 0xffff, 0x8, 0xfffffe14, 0xec45}, {0x2, 0x5, 0x5, 0x9, 0x5, 0xc74}, {0x2, 0x3, 0xb3e3, 0x800000, 0x9, 0xf010000}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x5}, {0x80000000, 0x8, 0x1, 0x4, 0x9, 0x3ff}, {0x2, 0x2, 0x1, 0x7fffffff, 0x2, 0x7ff}, {0x6, 0x5, 0x5, 0xbff, 0x2, 0x100}, {0x6, 0x10, 0x6, 0x2, 0xfffffffa, 0xb5}, {0x7f7, 0x7, 0x8, 0x6, 0x552, 0x2}, {0x7, 0x1, 0x800, 0x8, 0x1ff, 0x2}, {0x3, 0x4, 0x2, 0xa, 0x691, 0x81}, {0x1, 0x200, 0x69, 0x1200000, 0x383, 0x100}, {0x7, 0xffffff3e, 0x26b, 0xffff, 0x0, 0x9}, {0xffff3563, 0xd, 0x400, 0x400, 0x100, 0x9}, {0x7, 0x5, 0x3b45, 0x0, 0x37, 0x52}, {0x3, 0x0, 0xaff, 0x7ff, 0x10, 0x5}, {0x4, 0xc7, 0x0, 0x1000, 0x2, 0x89f0}, {0xf, 0xfffffc00, 0x1, 0x6, 0x10000, 0xee54}, {0x140000, 0xfffff83b, 0x4, 0x7ff, 0xfffffffb, 0xe}, {0x3, 0xffff, 0x9, 0x8001, 0x1, 0x2}, {0x5, 0x80000000, 0x0, 0x2, 0x6}, {0x8e, 0x200, 0x10, 0x3, 0x10000, 0xfffff12c}, {0x4, 0xb, 0xfffff258, 0x4, 0x4, 0x2}, {0xe2, 0x8001, 0x5, 0x9, 0x9, 0x7ff}, {0x3, 0x8f, 0x3, 0x36, 0x1, 0xb8}, {0x1, 0xb3c, 0x1, 0x7fff, 0xff, 0x3}, {0x1, 0x4, 0x10001, 0x3, 0x1, 0x1000}, {0x4, 0x10, 0x8, 0x987, 0x9, 0xa}, {0x1, 0x6, 0x4, 0x27d, 0x5, 0x5a9}, {0xfffffff9, 0x6, 0x1, 0x6, 0x2, 0x1}, {0x196a, 0x4, 0x9, 0x8, 0xed63, 0xb}, {0xb714, 0x5, 0x80000000, 0x9, 0xfff, 0xe9}, {0xffffffff, 0x1ff, 0x9, 0x7, 0xf0eb, 0x8}, {0x7, 0xff, 0x5c, 0x0, 0x9, 0x9}, {0x6, 0x0, 0x3, 0x3, 0x9, 0xfffffff9}, {0xffffffff, 0xd, 0x8000, 0xa5, 0xb63, 0x76c}, {0x6, 0x0, 0x3, 0x7, 0x6, 0x81}, {0x9, 0xcd, 0xd6f, 0x5, 0x401, 0x200}, {0x0, 0x7, 0x6, 0x3, 0x7, 0x4}, {0x3, 0x3c, 0x5, 0xc5, 0x8001, 0x8}, {0x3, 0x9, 0xffff8ece, 0x5, 0x3, 0x9}, {0x8, 0x7, 0x2, 0x7, 0xb, 0xded}, {0x3e5800, 0x4d27, 0x0, 0x2, 0x78}, {0xffffffff, 0x81, 0x3, 0x9, 0xffffffcd, 0xc}, {0x5, 0x0, 0x5d, 0x0, 0x1, 0x2}, {0x40000000, 0xa, 0x1, 0x7, 0x1, 0x7ff}, {0x10000, 0x0, 0x8, 0x6, 0x4a8c, 0x400}, {0x3, 0x5, 0x401, 0x3}, {0x3, 0x3, 0x3, 0xfffffffc, 0x80, 0x1}, {0x8, 0x7, 0x1, 0x7, 0x1ff, 0x80}, {0xfffffffa, 0x6, 0x9, 0xfffff77c, 0x4, 0x9}, {0x0, 0x0, 0xa0c3, 0x20000, 0x73, 0x8}], [{0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x5}, {0x2, 0x1}, {0x1}, {}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x1}, {}, {0x5, 0x1}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2}, {0xf07aae83690c080}, {0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x2b4840123acf61fb}, {}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0xb7ec410e13e15795}, {0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1cdef8594c5b92fe}, {0x5}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x6c4b89a70788f613, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000540)={0x2, 0x0, [{0xaa1, 0x0, 0x4}, {0x2c1, 0x0, 0x8001}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1bb30000000000000000010000000c00060002000000000000003ff98ca3909421ffef739886508e78d0bfba2acffdda8ed377cdccaa96a3c84fc5b7aae83fadcf6f03c1660a21527bd893cf1fc9de43f262900c3b71a3d34f6639f3b9f1af3d74d1a17c48a6c2fbed66c490f363f204e05e03e9722a346497c99c8b1122204647f6546d"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000d849f42a05000000000000000000000068a2feff100000001845000003000000000000000000000018140000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x7, 0xda, &(0x7f0000000080)=""/218, 0x41000, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7f, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xf, 0x0, 0xf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000200)=[0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x5, 0x2, 0x1, 0x9}, {0x2, 0x1, 0xc, 0x9}, {0x5, 0x4, 0x1, 0x9}, {0x1, 0x2, 0x3, 0x8}, {0x0, 0x1, 0x8, 0x2}, {0x0, 0x1, 0xc, 0xb}, {0x3, 0x5, 0x2}, {0x0, 0x2, 0xf, 0x5}], 0x10, 0x70b6}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000006d0063"], 0x1c}], 0x1, 0x0, 0x0, 0x48000}, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c01506cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r10, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000080)={0x17e}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback, 0xd, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r14) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r14, r7, 0x14, 0xe3bc86ed11de44f9, r8, @void, @void, @void, @value=r15, r13}, 0x20) 625.607433ms ago: executing program 6 (id=810): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, 0xffffffffffffffff) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001500), 0xc03, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0x2710, @host}, @qipcrtr={0x2a, 0x1, 0x2}, @nl=@kern={0x10, 0x0, 0x0, 0x8a241590}, 0x1000, 0x0, 0x0, 0x0, 0xf000, &(0x7f0000000080)='wg1\x00', 0x7, 0xfffffffffffffffc, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a0000000c00078008001240fffffffa1100030068617308006e65742c6e6574000000000500040000000000"], 0x58}}, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x50) (async) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x50) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a0012000a002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4064080) fsopen(&(0x7f0000000000)='udf\x00', 0x1) (async) r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) write$char_usb(r8, &(0x7f0000000040)="e2", 0xff0f) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, 0x0) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000540)={0x0, 0x0, 0xe, 0x12, 0x1c8, &(0x7f0000000a00)="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"}) (async) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000540)={0x0, 0x0, 0xe, 0x12, 0x1c8, &(0x7f0000000a00)="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"}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan1\x00', {0x1000}, 0x7}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan1\x00', {0x1000}, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 570.060469ms ago: executing program 5 (id=849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) fsync(r1) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000780)='%-010d \x00'}, 0x20) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x40080, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6=@remote}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xfffffffffffffecc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {r4}}, './file0\x00'}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000000c0)=0xf) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$TCFLSH(r15, 0x400455c8, 0x2) r16 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xf, &(0x7f00000004c0)=@raw=[@map_idx={0x18, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x1, 0x4, 0x2, 0x3, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xd7, &(0x7f0000000680)=""/215, 0x41000, 0x42, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000005c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r8, r9, r10, r11, r12, r13, r15, r16, r17], &(0x7f0000000b00), 0x10, 0xbff2}, 0x94) r18 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r18, 0x3ba0, &(0x7f00000002c0)={0x48, 0xb, r4, 0x0, r3}) r19 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES32=r19, @ANYBLOB="03bcf62adbd098e3757467f77baf992c2693f3be1c47c2929c3cf98e91d7821fff576ae757423fb3640a6050b0bded33e8aaee46d32e24f0162f83cf655d78bfffab24c1671fd7204d8c225745c2d622ec5634679f0dbb9b9ef0d9d297af570de90d36c03d45fc031bc004de5a98b707bf1ddca5190788041cb953c9adedf55b6d9eafafcf891113c3575c979ca5b14f9acf58d86b063951ea4a2da2f120e8d2b087e75bcfe350067b0c7d99a82391a2beb3e93211091fd9ffc9422d23bc5e614854bfca023b01d799e9d90717b03132ecd716a75879e3a66df136da00"/232, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0) 569.882823ms ago: executing program 6 (id=850): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000740)=[@textreal={0x8, &(0x7f0000000500)="0f01d16526f3af640fc75800baf80c66b86ce1478066efbafc0c66eddfe90f01c3dc35f30f0964f4440f20c0663502000000440f22c0", 0x36}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000200)) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) getsockopt(r6, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 480.822966ms ago: executing program 5 (id=851): syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f80bcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x3c, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) 479.95926ms ago: executing program 5 (id=852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000200)={0x0, 0x0, 0x0, r4}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007f00)={0x24, 0x3f, 0x107, 0x70bd2d, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x4, 'syz0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x3c}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x2, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) 479.439685ms ago: executing program 2 (id=853): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)='|w') ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000000000)=0x43, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@newneigh={0x84, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x40, 0x80}, [@NDA_MASTER={0x8, 0x9, 0x8001}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x7, 0x9, 0x10000}}, @NDA_DST_MAC={0xa}, @NDA_IFINDEX={0x8, 0x8, r2}, @NDA_CACHEINFO={0x14, 0x3, {0x494, 0x80000000, 0x2, 0x3ff}}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000040) 420.355962ms ago: executing program 5 (id=854): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="ff"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000080)) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x448d4}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$FUSE(r10, &(0x7f0000000e40)={0x2020}, 0x2020) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 419.815602ms ago: executing program 3 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64], &(0x7f0000000340)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x49) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) (rerun: 32) syz_open_procfs$pagemap(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x20008000) (async, rerun: 32) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f0000000100)) (async, rerun: 32) r6 = syz_pidfd_open(r4, 0x0) (rerun: 32) ioctl$EXT4_IOC_MIGRATE(r6, 0xff08) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) (async, rerun: 32) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008092) (async, rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x4000, 0x0, 0x0, 0x0, 0x900}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000008180)=@newtfilter={0x3288, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0x5, 0xc}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_fw={{0x7}, {0x2fb0, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x7}}, @TCA_FW_ACT={0xd0, 0x4, [@m_ct={0xcc, 0x18, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}]}, {0x8f, 0x6, "225c46864a4236284e3b8f98f0a99f68715d928ac1ce3c618d7581e1249352b7c1c028eb2f0044c5990f1c853e0a1e64729ca8872d10edff6deb74df6722e96c4d97f87ead5147d5a8fd8cfe678bb81a569c60cb63c6b78825a32286c0e89d00059350c8457f3947ec93049e4c0da8bc56ce3e3e8d08e7e9be1a9ba502f6e323246b939194ed6be7f6d972"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x3, 0x5, 0x9, 0x1, 0x5, 0x2, 0x0, 0x9, 0x0, 0x6, 0xffffffff, 0x5, 0x8, 0xffff, 0x2, 0x5, 0x60000000, 0x541e, 0x5, 0x196, 0x5, 0xb95, 0x8, 0x2, 0x7, 0x1e, 0x7, 0xff, 0x63, 0x9, 0x6c3c, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0xb8d0, 0x8000, 0x7f, 0x80000000, 0xfffffffe, 0x28000, 0x1, 0xffffffff, 0x2, 0x5215, 0x7, 0xefcb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x8, 0xfffffff8, 0x4d, 0x8, 0x10, 0x2, 0x3, 0x0, 0xffffffff, 0xfffffffd, 0x3, 0x5, 0x2, 0x18, 0x6, 0xd56a, 0xb, 0x980, 0x1000000, 0xfffffff7, 0x3, 0x6, 0xfffffff8, 0x7, 0x4, 0x0, 0x4, 0xffffff00, 0x1204, 0x5, 0x4, 0xffffff81, 0x1, 0x2, 0x6, 0x10000, 0x8, 0x80000000, 0xfffffff5, 0x7, 0x8, 0xfffff001, 0x56df, 0x7, 0x8, 0x0, 0x7, 0x0, 0x0, 0x3ff, 0xb, 0x6, 0x8, 0x3, 0xd, 0x8000, 0x3, 0x2, 0x5, 0xb74, 0xa2f, 0x32, 0x229, 0x1, 0x0, 0xd03c, 0x2, 0x65, 0x969f, 0x0, 0xba, 0xa, 0xd36, 0x5, 0x2, 0xffffffff, 0x7, 0xc, 0x2, 0x40, 0x5, 0x8001, 0xffffffff, 0x8, 0x6, 0x8000, 0x7fffffff, 0xdf46, 0x8, 0x0, 0x1, 0x2b7, 0x57, 0xfffffffd, 0x6, 0x80000000, 0xcd6, 0x8b4, 0x9, 0xff, 0x2, 0x8000, 0x12e00000, 0x4, 0x35, 0x9, 0x6, 0x8, 0x34, 0x80, 0x5, 0x6a0b, 0x9, 0x6, 0xfffffffd, 0xffffdd21, 0x0, 0x2, 0xffffff46, 0x5, 0xa, 0x7fff, 0x20000000, 0x6, 0x400, 0x4, 0x5, 0x7fffffff, 0x4, 0x6, 0x4, 0x3, 0x2, 0x2, 0x7, 0xfffffeff, 0x21, 0x7, 0x8, 0x6, 0x1, 0x9, 0xc6287a40, 0x3, 0x3, 0xfffffffc, 0x4, 0x158, 0xdc, 0x446, 0x41c, 0x1, 0x16c4b34d, 0x1, 0x8, 0x4, 0x0, 0x8, 0x640, 0x0, 0x0, 0xc, 0x40, 0x7, 0x8, 0x9, 0x18, 0x8, 0x7f, 0x6, 0x7, 0x6, 0x2cbe, 0x0, 0xf, 0x5, 0x2, 0x0, 0x4, 0x2, 0x4ec4, 0x800, 0x5, 0x10001, 0x4, 0x800, 0x401, 0xed, 0x3, 0xfffffff8, 0x35, 0x2, 0x6, 0xff, 0x1, 0x200, 0x4, 0x3ff, 0x2, 0x9, 0x4]}]}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x430, 0x4, [@m_bpf={0x60, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x2e, 0x6, "9486a95b1aeaf27c00b5edb8a48f35a0cd68436404d5bb3e4deeab199bfd3bac87a7c1555eba3261f6df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xa4, 0x1c, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x176}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffd, 0x6, 0x0, 0x8, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x3a, 0x6, "095cace8525627275d972b5954ce6311ab0afcae584fe2c577810a001e5efab56e2a13d962fd1a50fb8b6759db74c80130b91389fee3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x290, 0x2, 0x0, 0x0, {{0x7}, {0x268, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x65, 0x6, {0x4, 'nat\x00', 0x89, 0xfffd, "b0e19650d9edb96f6aa512e2b9b9a0292126763dcf1fd1027365cfef2d6f8e626bd465a3e7350a793a6c49ef09db3cb66a83a3a56850f3fa9d824b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x11f, 0x6, {0x6, 'nat\x00', 0x8, 0xfff7, "ca2525f9deda4807a2a8a492a1109616ef1e5d18ad008a44b13818c481a9b0c99d1bab02f3b900a1af9cb00e2edcfcde180c38afdcba17c3d1b880ea1a3d2b8799a1af7dd00c24c5fa38e686e8aca2e917a4faa3bfcfdbe484c7cfb0e6664cf722b620ff66c1a34d7a5d7098c0f2c0d1440b0d02d3738c069f9a7a86cbfae47e193ec1dae13d197aae4a2d0a157ae8d1ee1667a7090716328b209304021ec867e73a3dc6b2855fe4979e0448614ef59c27164c7576f8db73464cbb6fbcf174937f3deedbce4bcf885189a109721b9e9aec87171768127d8d005b0ffe011ffdf63a2136a7ae6a715638ebe60a6d26ae38eb70f7b5e8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xa6, 0x6, {0x4, 'raw\x00', 0x3d, 0x2, "b2bf3246adbc35373d9ea265d3f9f02301fbe3926a9c78bfb012ff7067f15a68ee152c528a1b967848289301fec5244c3c4c233d5f1e19ba60c38e6336c7501984ab46816217f82848f4a0b4544e989b2c855e8bd32f9cab08031df35f61d10e8b2e827a619c8240909aff760c5e887a8f39dccf39eef2f1a1ae2892"}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x98, 0x20, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff39f8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x42, 0x6, "128abd1abd6ad82f40178172833a2478775cd49d8b16561ed0192c9d4c8b298360aed918c17a7964627c5bbbeb41229e1a135f1c6c4717ddd11ce8faff3d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x2610, 0x4, [@m_tunnel_key={0x15c, 0x16, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x81}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x98, 0x800, 0x3, 0x8, 0x2e}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x4, 0x80, 0x8000}, 0x2}}]}, {0xac, 0x6, "0204c147328a7994b8ed8b2e8db1c0eae1b627c1d556bd5417d6b18e057c0c5f75575664f7e97b1597bec318445a7d8aea9d0e08076b985bb2d5e950e28add191450ea937323fdbfb09f75225e1d8b450d17f35390a86aaf078601f44b4d3552458763aa4290f9def5ae34068006256ad62fe9a084a8645fb95b17f544caaa5769efbbd89f092aa5a10a5942f9296cbe5db19496adac2cbf7a3fb5cbf9722c231cd7ebe3fce92e96"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x13c, 0x14, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x0, 0x80000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x101, 0x8, 0xf6f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb72, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xfd6, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1ab1, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10, 0x3, 0x0, 0x8, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x20000000, 0x6, 0x6}}]}, {0x8a, 0x6, "ec0fd1e8c0683530b6bf440ebae64b76c4e12cc8c0b46a75ae404149907a9a8e95eb5d7ad5888196db9d7fc816cf659316451957062262dfe9d588e873a23d5c66f8063b55045b0f65295c1d706c64c5c26a8a72d77d25c641b00bdb1539725c7d264634fa18d4b2ca965608997d6572f5b01fbc6ccb19cb81dc6020986c69fba454369d3878"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xd8, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x0, 0x5, 0xfffffff3}}]}, {0x93, 0x6, "8677a14d388f794bbef7863c0df57e85624db579b5d6866c79105a54fbed49d9f27f73214899be169bbce9c101c0a8934c301969c72c0f2147e148f863f2856b84bdaab817ba93d8585fa479be9ac2a0dc6836d7c8933a864f6183ce2a36ff9b6501d77dcde411f0c4507a79a7240f230e063a28e3e60e3f5f185c42c104ca58c0976df99fd91081c60d2b4504cfed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x2170, 0x9, 0x0, 0x0, {{0x7}, {0x1148, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x116, 0x6, {0xd, 'security\x00', 0x9, 0xf, "7b2dd9db09a2c0280b699bf7fb99d2e8b24f831cd0f986fed4f2ee2b85cfd537eeaad565b8cd2867004b6793c1128ee2aff585c36f636581e4b2b3f1a436f7fa4503c2bf7ac6e89208bce69cf7294425295f569887f0861a89311b982645a078eba751d5b8c13e7ebe8d77baa9253c0107816dcda2cf363c101979a22e35436d3fdce0b976879d4d3a107faf4421ca27905b9c4a2b94b8e1871a5aaf11a85df745f32f830a7683205a51a725d881795f890cbb7a44527a4f74e32fd1d6b31928cc9db05f1d1e3bac58a20ae5fbb6d0e0e7a66e5f31f7ffe32638640c6624bb49f546bf6ca4bfd041451977a7"}}, @TCA_IPT_TARG={0x102a, 0x6, {0xfff, 'security\x00', 0x2, 0x8000, "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"}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x12c, 0x17, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xfffffff7, 0x4, 0x9, 0x2}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0x40, 0x20000000, 0x4, 0x101}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0xd0c}, @TCA_IFE_TYPE={0x6, 0x5, 0x84}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}]}, {0x7f, 0x6, "897e23c914be9c05ac282c4abd790c87cb24f52db9752ec8a41034c7138bd10a9b464b9e7820496353d26f91e7fe9b8a32ceffccf6be2f39560c65b82ad2c9351c7c0235a0e1c9c63153212fc5728d33fbb02d41d582209f2df41e275f41d8ba203a3a466af35e2f1525b6336b45cdbd6fecac43d42b7a5acefc9a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x8, 0x5, 0x10001, {0x0, 0x1, 0xffff, 0x6, 0x4, 0x2}, {0xa5, 0x0, 0x9, 0xf, 0x8, 0xfff}, 0x8, 0x365, 0x8000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'wlan0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @filter_kind_options=@f_fw={{0x7}, {0x25c, 0x2, [@TCA_FW_POLICE={0xa0, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xfffffffc, 0x10, 0x4, {0x6, 0x2, 0xefe1, 0x9, 0x6, 0xa}, {0x6, 0x0, 0x6, 0x0, 0x21ee, 0x4}, 0x5, 0x3ff, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x49d, 0x6, 0x1, {0x1, 0x0, 0x3e, 0xd, 0x2, 0x5}, {0x2, 0x0, 0x0, 0x8, 0x1, 0xd817}, 0x0, 0xfffffff8, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_FW_ACT={0x1ac, 0x4, [@m_police={0x1a8, 0x20, 0x0, 0x0, {{0xb}, {0xd4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2fa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3aadfd1a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xd40a2c20d1d353d5, 0xffff8000, 0x6, 0xe870, {0x7, 0x1, 0x6, 0xfff, 0x4, 0x3}, {0x9, 0x0, 0x40, 0x200, 0x1, 0x2}, 0xffffffff, 0x1, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0xaa, 0x6, "42d8ac12891e00770afcb789398dc50426900223c22bdcfaeef3e39e46525463884f98f17bd7f45518d9ef12d11676be2aade4b1fdffd01b88141474569bdd06d00957f4ac8742faee5c3a09e26e2cd74efa00a1d379664c420ac07a5a1e37077c095212a0fe8dfbb6457e9e3364e56861c4c62b3ecd1cc3c81acda4223465d7bbcc0134c5d5cec8204bdf87fed7923a418faaa70d0fa5fe78108dc856d54ab449d3fd1e390e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x10}}, @TCA_FW_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xd}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xf8}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x3288}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040055) ioctl$TIOCGPTPEER(r8, 0x80140912, 0x7) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="001000008a000008000100736974002000028014000b00fc02000000000000000000000000000108000200ffffffff0000000000"], 0x4c}, 0x1, 0x2000000000000000}, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 350.115596ms ago: executing program 2 (id=856): r0 = socket$inet(0xa, 0x5, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000340), &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) read(r4, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2000) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r6, 0xb}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f046}) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000080)={@multicast1, @remote, 0x1, "d2b5465762b49b92ce6dcf10b14be396da509922260651b99c869f6b0ce8c159", 0x2, 0xbfffffff, 0x3ff, 0x1}, 0x3c) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) listen(r0, 0x8) r7 = fcntl$getown(r0, 0x9) getpgid(r7) sendmmsg$sock(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 349.116671ms ago: executing program 3 (id=857): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x80040001, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b1a, &(0x7f0000000040)) 348.891781ms ago: executing program 5 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000a80)={0xc0}) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 32) close(0x3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x2000009, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) 348.425833ms ago: executing program 3 (id=859): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00005be000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 348.171227ms ago: executing program 5 (id=860): socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x3, {0x1, 0xd, 0x4, 0x3}}, 0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x108, 0x128, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@rateest={{0x68}, {'macvlan1\x00', 'geneve1\x00', 0x32, 0x3, 0x1, 0x5, 0x4000000, 0x7, {0x3}, {0x1}}}, @common=@addrtype={{0x30}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r4, r6, 0x2) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000002840)={0xfffff4ce, 0x6, 0x10001, 0x9, 0x9, "2ea468089ad0c9043d6e07b9f3c1bebdb0c261", 0x1ff, 0x4697}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xff0a, 0x0) 290.640997ms ago: executing program 2 (id=861): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @empty, @void, {@generic={0x88f7}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 289.411824ms ago: executing program 3 (id=862): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0x5, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x12}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40281) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="81000400e0000400080008001def1cfa8c3c3de72b822a507a31e7228ff123b652796b30e752aa6d3c385a78e938d11e85d99993b39aaaea3b06"], 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000003c0)=0xd660882) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="f321a47ccb26c208b472422205c7006d6ece242cd54c0b9a38f7284c2248178543811c4c0f443301182734982b7a17127d1cf3c990341279fbf98756c29bf7ef79", @ANYRES64, @ANYRESDEC=r0, @ANYRES16=r2], 0xfce1) 0s ago: executing program 2 (id=863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c110081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x6000003) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r2 = msgget$private(0x0, 0xafb0e20fef6483ff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r5, @ANYBLOB="0100fefffffffbdbdf2567000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) msgsnd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0xe2, 0x0) msgctl$IPC_RMID(r2, 0x0) brk(0x2) kernel console output (not intermixed with test programs): 69][ T6806] bridge_slave_1: entered promiscuous mode [ 70.451098][ T6847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.246'. [ 70.471629][ T841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.525050][ T6806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.535029][ T6806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.561088][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'. [ 70.614800][ T6806] team0: Port device team_slave_0 added [ 70.625445][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 70.627957][ T6853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6853 comm=syz.2.248 [ 70.628747][ T841] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 70.636702][ T841] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.639716][ T841] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.644318][ T841] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.645570][ T12] hsr_slave_0: left promiscuous mode [ 70.648328][ T841] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.656855][ T841] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.656874][ T12] hsr_slave_1: left promiscuous mode [ 70.660335][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.664934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.668997][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.675019][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.678212][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.721509][ T12] veth1_macvtap: left promiscuous mode [ 70.724183][ T12] veth0_macvtap: left promiscuous mode [ 70.726696][ T12] veth1_vlan: left promiscuous mode [ 70.729168][ T12] veth0_vlan: left promiscuous mode [ 70.874237][ T841] usb 6-1: GET_CAPABILITIES returned 0 [ 70.881673][ T841] usbtmc 6-1:16.0: can't read capabilities [ 71.077097][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.080515][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.083955][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.087682][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.091444][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.095175][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.098941][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.102709][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.107441][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.111082][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.114280][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.117266][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.120135][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.125489][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.128251][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.131218][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.375331][ T12] team0 (unregistering): Port device team_slave_1 removed [ 71.424350][ T12] team0 (unregistering): Port device team_slave_0 removed [ 71.714797][ T5936] Bluetooth: hci1: command tx timeout [ 71.818263][ T6806] team0: Port device team_slave_1 added [ 71.920775][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.924423][ T841] usb 6-1: USB disconnect, device number 3 [ 71.925008][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.939063][ T6806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.946381][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.949283][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.965597][ T5929] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.975488][ T6806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.089212][ T6806] hsr_slave_0: entered promiscuous mode [ 72.092603][ T6806] hsr_slave_1: entered promiscuous mode [ 72.095475][ T6806] debugfs: 'hsr0' already exists in 'hsr' [ 72.097864][ T6806] Cannot create hsr debugfs directory [ 72.127312][ T6889] XFS (nullb0): Invalid superblock magic number [ 72.253472][ T6806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.258275][ T6806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.263137][ T6806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.269366][ T6806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.272570][ T5929] Bluetooth: hci0: command tx timeout [ 72.341185][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.357654][ T6806] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.373091][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.375856][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.384147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.387167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.486144][ T6920] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.581623][ T6806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.742608][ T840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.810917][ T6806] veth0_vlan: entered promiscuous mode [ 72.820047][ T6806] veth1_vlan: entered promiscuous mode [ 72.846524][ T6806] veth0_macvtap: entered promiscuous mode [ 72.853292][ T6806] veth1_macvtap: entered promiscuous mode [ 72.869755][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.879083][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.889312][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.896776][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.897899][ T840] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.900669][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.905335][ T840] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.905373][ T840] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.905391][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.909469][ T6914] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.913255][ T54] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 72.915987][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.922290][ T840] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.026328][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.035699][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.076649][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.076751][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 73.080039][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.087921][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.090998][ T54] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 73.096476][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.103102][ T54] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.108300][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.113433][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.118076][ T54] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 73.124865][ T54] usb 6-1: config 168 interface 0 has no altsetting 0 [ 73.126875][ T840] usb 8-1: USB disconnect, device number 2 [ 73.129827][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.133561][ T54] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 73.137695][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.142206][ T54] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.145852][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.149533][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.153428][ T54] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 73.158031][ T54] usb 6-1: config 168 interface 0 has no altsetting 0 [ 73.164717][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.168966][ T54] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 73.175058][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.181037][ T54] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.185263][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.188956][ T54] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.204714][ T54] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 73.210067][ T54] usb 6-1: config 168 interface 0 has no altsetting 0 [ 73.215964][ T54] usb 6-1: string descriptor 0 read error: -22 [ 73.218216][ T54] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 73.225912][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.234843][ T54] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 73.273300][ T6952] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 73.294394][ T6952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.337953][ T6952] bond2: (slave veth5): Enslaving as an active interface with a down link [ 73.354088][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 73.357194][ T6952] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 73.441213][ T6935] erofs (device nbd1): cannot find valid erofs superblock [ 73.585429][ T6967] fuse: Unknown parameter '' [ 73.630364][ T6969] FAULT_INJECTION: forcing a failure. [ 73.630364][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.636305][ T6969] CPU: 3 UID: 0 PID: 6969 Comm: syz.2.265 Not tainted syzkaller #0 PREEMPT(full) [ 73.636328][ T6969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.636338][ T6969] Call Trace: [ 73.636344][ T6969] [ 73.636351][ T6969] dump_stack_lvl+0x16c/0x1f0 [ 73.636401][ T6969] should_fail_ex+0x512/0x640 [ 73.636436][ T6969] _copy_from_user+0x2e/0xd0 [ 73.636464][ T6969] copy_msghdr_from_user+0x98/0x160 [ 73.636496][ T6969] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 73.636535][ T6969] ___sys_sendmsg+0xfe/0x1d0 [ 73.636561][ T6969] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.636618][ T6969] __sys_sendmsg+0x16d/0x220 [ 73.636643][ T6969] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.636685][ T6969] do_syscall_64+0xcd/0xfa0 [ 73.636712][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.636729][ T6969] RIP: 0033:0x7f6710f8eec9 [ 73.636743][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.636758][ T6969] RSP: 002b:00007f6711e39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.636775][ T6969] RAX: ffffffffffffffda RBX: 00007f67111e5fa0 RCX: 00007f6710f8eec9 [ 73.636786][ T6969] RDX: 0000000004040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 73.636796][ T6969] RBP: 00007f6711e39090 R08: 0000000000000000 R09: 0000000000000000 [ 73.636806][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.636815][ T6969] R13: 00007f67111e6038 R14: 00007f67111e5fa0 R15: 00007ffea9119ee8 [ 73.636840][ T6969] [ 73.702581][ C3] vkms_vblank_simulate: vblank timer overrun [ 73.791751][ T5929] Bluetooth: hci1: command tx timeout [ 73.966714][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 73.966730][ T40] audit: type=1400 audit(1760011974.018:413): avc: denied { write } for pid=6980 comm="syz.3.269" path="socket:[18558]" dev="sockfs" ino=18558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.979815][ T40] audit: type=1400 audit(1760011974.028:414): avc: denied { ioctl } for pid=6980 comm="syz.3.269" path="socket:[17549]" dev="sockfs" ino=17549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.064518][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 74.187426][ T6996] FAULT_INJECTION: forcing a failure. [ 74.187426][ T6996] name failslab, interval 1, probability 0, space 0, times 1 [ 74.192984][ T6996] CPU: 1 UID: 0 PID: 6996 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 74.192999][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.193005][ T6996] Call Trace: [ 74.193009][ T6996] [ 74.193013][ T6996] dump_stack_lvl+0x16c/0x1f0 [ 74.193033][ T6996] should_fail_ex+0x512/0x640 [ 74.193050][ T6996] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 74.193068][ T6996] should_failslab+0xc2/0x120 [ 74.193080][ T6996] kmem_cache_alloc_node_noprof+0x78/0x770 [ 74.193096][ T6996] ? __alloc_skb+0x2b2/0x380 [ 74.193113][ T6996] ? __alloc_skb+0x2b2/0x380 [ 74.193126][ T6996] ? __pfx_netlink_insert+0x10/0x10 [ 74.193141][ T6996] __alloc_skb+0x2b2/0x380 [ 74.193155][ T6996] ? __pfx___alloc_skb+0x10/0x10 [ 74.193169][ T6996] ? netlink_autobind.isra.0+0x158/0x370 [ 74.193189][ T6996] netlink_alloc_large_skb+0x69/0x140 [ 74.193207][ T6996] netlink_sendmsg+0x698/0xdd0 [ 74.193218][ T6996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.193233][ T6996] ____sys_sendmsg+0xa95/0xc70 [ 74.193245][ T6996] ? copy_msghdr_from_user+0x10a/0x160 [ 74.193260][ T6996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.193278][ T6996] ___sys_sendmsg+0x134/0x1d0 [ 74.193294][ T6996] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.193325][ T6996] __sys_sendmsg+0x16d/0x220 [ 74.193340][ T6996] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.193364][ T6996] do_syscall_64+0xcd/0xfa0 [ 74.193381][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.193391][ T6996] RIP: 0033:0x7f3a04b8eec9 [ 74.193400][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.193410][ T6996] RSP: 002b:00007f3a05943038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.193420][ T6996] RAX: ffffffffffffffda RBX: 00007f3a04de5fa0 RCX: 00007f3a04b8eec9 [ 74.193427][ T6996] RDX: 0000000004040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 74.193433][ T6996] RBP: 00007f3a05943090 R08: 0000000000000000 R09: 0000000000000000 [ 74.193439][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.193444][ T6996] R13: 00007f3a04de6038 R14: 00007f3a04de5fa0 R15: 00007ffc4ce8a628 [ 74.193458][ T6996] [ 74.402767][ T7007] comedi comedi0: Minor 126 is invalid! [ 74.543732][ T40] audit: type=1326 audit(1760011974.598:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.3.279" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a04b8eec9 code=0x0 [ 74.646732][ T40] audit: type=1400 audit(1760011974.698:416): avc: denied { watch } for pid=7008 comm="syz.3.279" path="pipe:[1817]" dev="pipefs" ino=1817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 74.721211][ T7015] warning: `syz.2.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.730309][ T40] audit: type=1400 audit(1760011974.778:417): avc: denied { getopt } for pid=7014 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.843874][ T40] audit: type=1400 audit(1760011974.898:418): avc: denied { ioctl } for pid=7014 comm="syz.2.280" path="socket:[17588]" dev="sockfs" ino=17588 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.205425][ T7023] netlink: 'syz.4.282': attribute type 30 has an invalid length. [ 75.407943][ T40] audit: type=1400 audit(1760011975.458:419): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 75.446296][ T40] audit: type=1400 audit(1760011975.498:420): avc: denied { read } for pid=7044 comm="syz.4.287" path="socket:[18627]" dev="sockfs" ino=18627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.474910][ T7047] TCP: TCP_TX_DELAY enabled [ 75.552781][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 75.584895][ T7060] FAULT_INJECTION: forcing a failure. [ 75.584895][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.590644][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(full) [ 75.590660][ T7060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.590667][ T7060] Call Trace: [ 75.590671][ T7060] [ 75.590675][ T7060] dump_stack_lvl+0x16c/0x1f0 [ 75.590697][ T7060] should_fail_ex+0x512/0x640 [ 75.590717][ T7060] _copy_from_iter+0x29f/0x1720 [ 75.590736][ T7060] ? __alloc_skb+0x200/0x380 [ 75.590753][ T7060] ? __pfx__copy_from_iter+0x10/0x10 [ 75.590770][ T7060] ? netlink_autobind.isra.0+0x158/0x370 [ 75.590794][ T7060] netlink_sendmsg+0x820/0xdd0 [ 75.590807][ T7060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.590823][ T7060] ____sys_sendmsg+0xa95/0xc70 [ 75.590836][ T7060] ? copy_msghdr_from_user+0x10a/0x160 [ 75.590852][ T7060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.590876][ T7060] ___sys_sendmsg+0x134/0x1d0 [ 75.590893][ T7060] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.590926][ T7060] __sys_sendmsg+0x16d/0x220 [ 75.590943][ T7060] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.590968][ T7060] do_syscall_64+0xcd/0xfa0 [ 75.590986][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.590998][ T7060] RIP: 0033:0x7f4f3c78eec9 [ 75.591007][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.591018][ T7060] RSP: 002b:00007f4f3d6ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.591028][ T7060] RAX: ffffffffffffffda RBX: 00007f4f3c9e5fa0 RCX: 00007f4f3c78eec9 [ 75.591035][ T7060] RDX: 0000000004040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 75.591042][ T7060] RBP: 00007f4f3d6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 75.591048][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.591054][ T7060] R13: 00007f4f3c9e6038 R14: 00007f4f3c9e5fa0 R15: 00007ffd3831f3c8 [ 75.591068][ T7060] [ 75.730081][ T7065] 9pnet_fd: Insufficient options for proto=fd [ 75.772089][ T40] audit: type=1400 audit(1760011975.828:421): avc: denied { write } for pid=7070 comm="syz.2.296" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.782068][ T40] audit: type=1400 audit(1760011975.828:422): avc: denied { open } for pid=7070 comm="syz.2.296" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.842046][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 75.845042][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 75.848150][ T7075] netlink: 'syz.3.298': attribute type 12 has an invalid length. [ 75.874327][ T5929] Bluetooth: hci1: command tx timeout [ 75.889753][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.301'. [ 75.901921][ T7087] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 75.906566][ T7087] cramfs: wrong magic [ 76.049093][ T7093] sp0: Synchronizing with TNC [ 76.068027][ T7094] loop6: detected capacity change from 0 to 2640 [ 76.074061][ T6830] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.078089][ T6830] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.078903][ T7094] [U] è [ 76.082528][ T6830] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.085417][ T6830] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.089878][ T6830] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.207323][ T7101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.306'. [ 76.211980][ T7101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.306'. [ 76.345800][ T7116] netlink: 96 bytes leftover after parsing attributes in process `syz.3.310'. [ 76.357655][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.359770][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.410675][ T7112] kvm: kvm [7111]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 76.417817][ T7112] kvm: kvm [7111]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 76.791513][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.953516][ T34] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.959033][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.962786][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.965399][ T34] usb 9-1: SerialNumber: syz [ 77.592441][ T34] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 77.598414][ T34] usb 9-1: USB disconnect, device number 2 [ 77.731626][ T9] usb 6-1: USB disconnect, device number 4 [ 77.952073][ T5929] Bluetooth: hci1: command tx timeout [ 78.684898][ T7260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.783800][ T5929] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 78.854976][ T7288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.920953][ T7294] netlink: 'syz.1.348': attribute type 6 has an invalid length. [ 78.933064][ T7294] netlink: 72 bytes leftover after parsing attributes in process `syz.1.348'. [ 79.112224][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 79.112236][ T40] audit: type=1400 audit(1760011979.168:437): avc: denied { read } for pid=7301 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.214456][ T7303] block nbd4: shutting down sockets [ 79.355220][ T40] audit: type=1400 audit(1760011979.408:438): avc: denied { associate } for pid=7324 comm="syz.2.360" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.362521][ T40] audit: type=1400 audit(1760011979.408:439): avc: denied { mounton } for pid=7324 comm="syz.2.360" path="mnt:[4026532881]" dev="nsfs" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.560811][ T40] audit: type=1400 audit(1760011979.608:440): avc: denied { module_load } for pid=7332 comm="syz.1.362" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 79.561649][ T7333] kernel read not supported for file /policy (pid: 7333 comm: syz.1.362) [ 79.610829][ T10] cfg80211: failed to load regulatory.db [ 79.633077][ T7339] netlink: 'syz.1.364': attribute type 1 has an invalid length. [ 79.646107][ T7339] gretap1: entered allmulticast mode [ 79.661050][ T7342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7342 comm=syz.3.365 [ 79.707088][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.712609][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.809771][ T7362] netlink: 80 bytes leftover after parsing attributes in process `syz.2.369'. [ 79.967111][ T40] audit: type=1400 audit(1760011980.018:441): avc: denied { ioctl } for pid=7371 comm="syz.2.375" path="socket:[19251]" dev="sockfs" ino=19251 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.043891][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.067397][ T40] audit: type=1400 audit(1760011980.118:442): avc: denied { setattr } for pid=7376 comm="syz.1.377" name="" dev="pipefs" ino=15982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 80.083819][ T7381] FAULT_INJECTION: forcing a failure. [ 80.083819][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 80.087874][ T7381] CPU: 3 UID: 0 PID: 7381 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(full) [ 80.087887][ T7381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.087894][ T7381] Call Trace: [ 80.087898][ T7381] [ 80.087902][ T7381] dump_stack_lvl+0x16c/0x1f0 [ 80.087939][ T7381] should_fail_ex+0x512/0x640 [ 80.087958][ T7381] ? __lock_acquire+0x62e/0x1ce0 [ 80.087976][ T7381] should_failslab+0xc2/0x120 [ 80.087989][ T7381] __kmalloc_cache_noprof+0x72/0x780 [ 80.088005][ T7381] ? nsim_fib_event_nb+0x1c4/0x10d0 [ 80.088024][ T7381] ? nsim_fib_event_nb+0x1c4/0x10d0 [ 80.088035][ T7381] nsim_fib_event_nb+0x1c4/0x10d0 [ 80.088049][ T7381] ? lock_acquire+0x179/0x350 [ 80.088059][ T7381] notifier_call_chain+0xbc/0x410 [ 80.088075][ T7381] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 80.088089][ T7381] atomic_notifier_call_chain+0x71/0x1c0 [ 80.088107][ T7381] call_fib_notifiers+0x33/0x70 [ 80.088147][ T7381] fib6_del+0xebe/0x1770 [ 80.088162][ T7381] ? netlink_broadcast_filtered+0x477/0xf90 [ 80.088183][ T7381] ? __pfx_fib6_del+0x10/0x10 [ 80.088194][ T7381] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.088209][ T7381] ip6_del_rt+0xf5/0x230 [ 80.088222][ T7381] ? __pfx_ip6_del_rt+0x10/0x10 [ 80.088234][ T7381] ? __timer_delete+0xf5/0x1c0 [ 80.088252][ T7381] ? nlmsg_notify+0xac/0x220 [ 80.088260][ T7381] ? nlmsg_notify+0x11e/0x220 [ 80.088270][ T7381] __ipv6_ifa_notify+0x48f/0xd60 [ 80.088288][ T7381] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 80.088304][ T7381] ? __pfx___cancel_work+0x10/0x10 [ 80.088316][ T7381] ? do_raw_write_lock+0x11c/0x3a0 [ 80.088332][ T7381] ? ipv6_del_addr+0x4dd/0xb70 [ 80.088341][ T7381] ipv6_del_addr+0x4dd/0xb70 [ 80.088352][ T7381] ? __pfx_ipv6_del_addr+0x10/0x10 [ 80.088363][ T7381] ? __local_bh_enable_ip+0xa4/0x120 [ 80.088378][ T7381] inet6_addr_del.constprop.0+0x282/0x6b0 [ 80.088393][ T7381] inet6_rtm_deladdr+0x222/0x320 [ 80.088404][ T7381] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 80.088419][ T7381] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 80.088429][ T7381] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 80.088438][ T7381] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 80.088456][ T7381] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 80.088467][ T7381] rtnetlink_rcv_msg+0x95e/0xe90 [ 80.088484][ T7381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.088504][ T7381] ? ref_tracker_free+0x37c/0x830 [ 80.088516][ T7381] netlink_rcv_skb+0x155/0x420 [ 80.088525][ T7381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.088543][ T7381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.088557][ T7381] ? netlink_deliver_tap+0x1ae/0xd30 [ 80.088575][ T7381] netlink_unicast+0x5aa/0x870 [ 80.088587][ T7381] ? __pfx_netlink_unicast+0x10/0x10 [ 80.088601][ T7381] netlink_sendmsg+0x8c8/0xdd0 [ 80.088613][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.088628][ T7381] ____sys_sendmsg+0xa95/0xc70 [ 80.088640][ T7381] ? copy_msghdr_from_user+0x10a/0x160 [ 80.088655][ T7381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.088673][ T7381] ___sys_sendmsg+0x134/0x1d0 [ 80.088689][ T7381] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.088720][ T7381] __sys_sendmsg+0x16d/0x220 [ 80.088736][ T7381] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.088759][ T7381] do_syscall_64+0xcd/0xfa0 [ 80.088780][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.088791][ T7381] RIP: 0033:0x7f6710f8eec9 [ 80.088800][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.088810][ T7381] RSP: 002b:00007f6711e39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.088820][ T7381] RAX: ffffffffffffffda RBX: 00007f67111e5fa0 RCX: 00007f6710f8eec9 [ 80.088826][ T7381] RDX: 0000000004040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 80.088832][ T7381] RBP: 00007f6711e39090 R08: 0000000000000000 R09: 0000000000000000 [ 80.088838][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.088844][ T7381] R13: 00007f67111e6038 R14: 00007f67111e5fa0 R15: 00007ffea9119ee8 [ 80.088857][ T7381] [ 80.217214][ C3] vkms_vblank_simulate: vblank timer overrun [ 80.252000][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 80.256542][ T54] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 80.259153][ T54] usb 8-1: config 0 has no interface number 0 [ 80.261162][ T54] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.265452][ T54] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 80.269052][ T54] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.277821][ T54] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.283271][ T54] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 80.287481][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.294483][ T54] usb 8-1: config 0 descriptor?? [ 80.304781][ T54] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 80.334923][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'. [ 80.360079][ T40] audit: type=1400 audit(1760011980.408:443): avc: denied { create } for pid=7387 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 80.434209][ T40] audit: type=1400 audit(1760011980.488:444): avc: denied { create } for pid=7392 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 80.499175][ T57] usb 8-1: USB disconnect, device number 3 [ 80.504769][ T57] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 80.571002][ T40] audit: type=1400 audit(1760011980.618:445): avc: denied { watch watch_reads } for pid=7390 comm="syz.2.382" path="/" dev="ramfs" ino=18152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 80.677919][ T40] audit: type=1400 audit(1760011980.728:446): avc: denied { write } for pid=7407 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.074517][ T7436] sock: sock_timestamping_bind_phc: sock not bind to device [ 81.112853][ T7432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41235 sclass=netlink_route_socket pid=7432 comm=syz.4.391 [ 81.159061][ T7444] FAULT_INJECTION: forcing a failure. [ 81.159061][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 81.164378][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.3.395 Not tainted syzkaller #0 PREEMPT(full) [ 81.164393][ T7444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.164399][ T7444] Call Trace: [ 81.164403][ T7444] [ 81.164408][ T7444] dump_stack_lvl+0x16c/0x1f0 [ 81.164428][ T7444] should_fail_ex+0x512/0x640 [ 81.164447][ T7444] should_failslab+0xc2/0x120 [ 81.164459][ T7444] kmem_cache_alloc_noprof+0x75/0x6e0 [ 81.164475][ T7444] ? lock_acquire+0x179/0x350 [ 81.164485][ T7444] ? skb_clone+0x190/0x3f0 [ 81.164504][ T7444] ? skb_clone+0x190/0x3f0 [ 81.164517][ T7444] skb_clone+0x190/0x3f0 [ 81.164538][ T7444] dev_queue_xmit_nit+0x3e7/0xca0 [ 81.164558][ T7444] dev_hard_start_xmit+0x5c3/0x740 [ 81.164571][ T7444] ? netlink_unicast+0x71f/0x870 [ 81.164583][ T7444] __dev_queue_xmit+0xa46/0x4490 [ 81.164602][ T7444] ? __pfx___dev_queue_xmit+0x10/0x10 [ 81.164628][ T7444] ? __skb_clone+0x570/0x760 [ 81.164645][ T7444] netlink_deliver_tap+0xa87/0xd30 [ 81.164664][ T7444] netlink_unicast+0x71f/0x870 [ 81.164676][ T7444] ? __pfx_netlink_unicast+0x10/0x10 [ 81.164684][ T7444] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 81.164701][ T7444] netlink_ack+0x696/0xb80 [ 81.164714][ T7444] netlink_rcv_skb+0x332/0x420 [ 81.164724][ T7444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.164742][ T7444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.164760][ T7444] ? netlink_deliver_tap+0x1ae/0xd30 [ 81.164782][ T7444] netlink_unicast+0x5aa/0x870 [ 81.164795][ T7444] ? __pfx_netlink_unicast+0x10/0x10 [ 81.164810][ T7444] netlink_sendmsg+0x8c8/0xdd0 [ 81.164822][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.164837][ T7444] ____sys_sendmsg+0xa95/0xc70 [ 81.164849][ T7444] ? copy_msghdr_from_user+0x10a/0x160 [ 81.164864][ T7444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.164882][ T7444] ___sys_sendmsg+0x134/0x1d0 [ 81.164899][ T7444] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.164931][ T7444] __sys_sendmsg+0x16d/0x220 [ 81.164949][ T7444] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.164973][ T7444] do_syscall_64+0xcd/0xfa0 [ 81.164990][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.165001][ T7444] RIP: 0033:0x7f3a04b8eec9 [ 81.165009][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.165019][ T7444] RSP: 002b:00007f3a05943038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.165030][ T7444] RAX: ffffffffffffffda RBX: 00007f3a04de5fa0 RCX: 00007f3a04b8eec9 [ 81.165036][ T7444] RDX: 0000000004040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 81.165042][ T7444] RBP: 00007f3a05943090 R08: 0000000000000000 R09: 0000000000000000 [ 81.165048][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.165054][ T7444] R13: 00007f3a04de6038 R14: 00007f3a04de5fa0 R15: 00007ffc4ce8a628 [ 81.165067][ T7444] [ 81.868030][ T7458] Cannot find set identified by id 2 to match [ 81.870213][ T7458] Cannot find set identified by id 2 to match [ 81.872796][ T7458] Cannot find set identified by id 2 to match [ 81.875394][ T7458] Cannot find set identified by id 2 to match [ 81.878083][ T7458] Cannot find set identified by id 2 to match [ 81.880374][ T7458] Cannot find set identified by id 2 to match [ 81.883426][ T7458] Cannot find set identified by id 2 to match [ 81.886106][ T7458] Cannot find set identified by id 2 to match [ 81.888689][ T7458] Cannot find set identified by id 2 to match [ 81.891285][ T7458] Cannot find set identified by id 2 to match [ 82.241060][ T7466] bridge_slave_0: left allmulticast mode [ 82.243036][ T7466] bridge_slave_0: left promiscuous mode [ 82.244969][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.252304][ T7466] bridge_slave_1: left allmulticast mode [ 82.254062][ T7466] bridge_slave_1: left promiscuous mode [ 82.255989][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.261365][ T7466] bond0: (slave bond_slave_0): Releasing backup interface [ 82.270174][ T7466] bond0: (slave bond_slave_1): Releasing backup interface [ 82.278570][ T7466] team0: Port device team_slave_0 removed [ 82.285119][ T7466] team0: Port device team_slave_1 removed [ 82.288298][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.293473][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.295843][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.299088][ T7466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.312057][ T7467] vlan0: entered promiscuous mode [ 82.318805][ T7467] team0: Port device vlan0 added [ 83.231600][ T5929] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.233329][ T7432] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 83.865057][ T7483] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.918761][ T7486] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 84.012763][ T7432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.049187][ T7432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.055086][ T7432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.057720][ T7432] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.061347][ T7432] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.067366][ T7432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.069853][ T7432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.075682][ T7432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.139091][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 84.161219][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 84.161229][ T40] audit: type=1400 audit(1760011984.208:456): avc: denied { map } for pid=7492 comm="syz.3.404" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.217399][ T7496] ip6erspan0: entered promiscuous mode [ 84.269418][ T40] audit: type=1400 audit(1760011984.318:457): avc: denied { read } for pid=7506 comm="syz.1.410" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 84.279135][ T40] audit: type=1400 audit(1760011984.318:458): avc: denied { open } for pid=7506 comm="syz.1.410" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 84.401901][ T40] audit: type=1400 audit(1760011984.458:459): avc: denied { append } for pid=7517 comm="syz.3.413" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.143624][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 85.146979][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 85.312236][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.111551][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.111614][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.365143][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 86.402689][ T7552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'. [ 86.405543][ T7552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'. [ 86.413225][ T40] audit: type=1400 audit(1760011986.468:460): avc: denied { module_request } for pid=7550 comm="syz.2.421" kmod=6E66742D657870722D312D667082A2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.434127][ T7552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'. [ 86.437927][ T7552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'. [ 86.444678][ T7549] team0 (unregistering): Port device vlan0 removed [ 86.484319][ T7552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'. [ 86.487264][ T7552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'. [ 86.997307][ T7586] No such timeout policy "syz1" [ 87.140016][ T7595] trusted_key: syz.4.431 sent an empty control message without MSG_MORE. [ 87.363784][ T7614] netlink: 'syz.3.436': attribute type 4 has an invalid length. [ 87.391569][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.592887][ T40] audit: type=1400 audit(1760011987.648:461): avc: denied { wake_alarm } for pid=7635 comm="syz.2.440" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.748841][ T7645] bridge_slave_0: left allmulticast mode [ 87.750859][ T7645] bridge_slave_0: left promiscuous mode [ 87.753172][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.757328][ T7645] bridge_slave_1: left allmulticast mode [ 87.759190][ T7645] bridge_slave_1: left promiscuous mode [ 87.761362][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.766731][ T7645] bond0: (slave bond_slave_0): Releasing backup interface [ 87.775137][ T7645] bond0: (slave bond_slave_1): Releasing backup interface [ 87.783681][ T7645] team0: Port device team_slave_0 removed [ 87.788461][ T7645] team0: Port device team_slave_1 removed [ 87.790744][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.793393][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.796549][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.799019][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.803334][ T7645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.814724][ T7652] vlan0: entered promiscuous mode [ 87.820726][ T7652] team0: Port device vlan0 added [ 87.982117][ T7668] 9pnet_fd: Insufficient options for proto=fd [ 87.988268][ T7666] tty tty2: ldisc open failed (-12), clearing slot 1 [ 88.059597][ T40] audit: type=1400 audit(1760011988.108:462): avc: denied { execute } for pid=7684 comm="syz.1.450" name="file1" dev="ramfs" ino=16243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 88.072447][ T40] audit: type=1400 audit(1760011988.108:463): avc: denied { execute_no_trans } for pid=7684 comm="syz.1.450" path="/file1" dev="ramfs" ino=16243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 88.092943][ T40] audit: type=1400 audit(1760011988.108:464): avc: denied { remount } for pid=7684 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.104928][ T7691] FAULT_INJECTION: forcing a failure. [ 88.104928][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 88.108953][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.1.452 Not tainted syzkaller #0 PREEMPT(full) [ 88.108967][ T7691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.108974][ T7691] Call Trace: [ 88.108978][ T7691] [ 88.108982][ T7691] dump_stack_lvl+0x16c/0x1f0 [ 88.109016][ T7691] should_fail_ex+0x512/0x640 [ 88.109035][ T7691] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 88.109047][ T7691] should_failslab+0xc2/0x120 [ 88.109059][ T7691] kmem_cache_alloc_noprof+0x75/0x6e0 [ 88.109076][ T7691] ? skb_clone+0x190/0x3f0 [ 88.109098][ T7691] ? skb_clone+0x190/0x3f0 [ 88.109112][ T7691] skb_clone+0x190/0x3f0 [ 88.109128][ T7691] netlink_deliver_tap+0xabd/0xd30 [ 88.109148][ T7691] netlink_unicast+0x71f/0x870 [ 88.109160][ T7691] ? __pfx_netlink_unicast+0x10/0x10 [ 88.109168][ T7691] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 88.109185][ T7691] netlink_ack+0x696/0xb80 [ 88.109199][ T7691] netlink_rcv_skb+0x332/0x420 [ 88.109208][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.109226][ T7691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.109240][ T7691] ? netlink_deliver_tap+0x1ae/0xd30 [ 88.109259][ T7691] netlink_unicast+0x5aa/0x870 [ 88.109270][ T7691] ? __pfx_netlink_unicast+0x10/0x10 [ 88.109285][ T7691] netlink_sendmsg+0x8c8/0xdd0 [ 88.109297][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.109312][ T7691] ____sys_sendmsg+0xa95/0xc70 [ 88.109324][ T7691] ? copy_msghdr_from_user+0x10a/0x160 [ 88.109340][ T7691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.109358][ T7691] ___sys_sendmsg+0x134/0x1d0 [ 88.109374][ T7691] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.109406][ T7691] __sys_sendmsg+0x16d/0x220 [ 88.109422][ T7691] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.109450][ T7691] do_syscall_64+0xcd/0xfa0 [ 88.109467][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.109478][ T7691] RIP: 0033:0x7f8409f8eec9 [ 88.109487][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.109497][ T7691] RSP: 002b:00007f840ad53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.109508][ T7691] RAX: ffffffffffffffda RBX: 00007f840a1e5fa0 RCX: 00007f8409f8eec9 [ 88.109515][ T7691] RDX: 0000000004040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 88.109521][ T7691] RBP: 00007f840ad53090 R08: 0000000000000000 R09: 0000000000000000 [ 88.109527][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.109533][ T7691] R13: 00007f840a1e6038 R14: 00007f840a1e5fa0 R15: 00007fff5eac5638 [ 88.109547][ T7691] [ 88.191711][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.201498][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.210348][ T40] audit: type=1400 audit(1760011988.258:465): avc: denied { write } for pid=7692 comm="syz.4.453" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.249527][ T7694] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 88.255332][ T7693] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 88.314525][ T7703] xt_SECMARK: invalid mode: 2 [ 88.451386][ T7714] ata1.00: invalid multi_count 128 ignored [ 88.524411][ T7714] syzkaller0: entered promiscuous mode [ 88.526682][ T7714] syzkaller0: entered allmulticast mode [ 88.535498][ T7718] tmpfs: Cannot enable quota on remount [ 88.681925][ T5994] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.833937][ T5994] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 88.837049][ T5994] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.840893][ T5994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.845377][ T5994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.849782][ T5994] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.855406][ T5994] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.858788][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.864125][ T5994] usb 9-1: config 0 descriptor?? [ 88.866660][ T7712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.293602][ T5994] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 89.344656][ T5994] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 89.553994][ T5994] usb 9-1: USB disconnect, device number 3 [ 89.615022][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 89.615036][ T40] audit: type=1400 audit(1760011989.668:467): avc: denied { execmem } for pid=7738 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 89.624790][ T40] audit: type=1400 audit(1760011989.668:468): avc: denied { map } for pid=7738 comm="syz.3.465" path="socket:[16322]" dev="sockfs" ino=16322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.636621][ T40] audit: type=1400 audit(1760011989.668:469): avc: denied { read } for pid=7738 comm="syz.3.465" path="socket:[16322]" dev="sockfs" ino=16322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.648596][ T40] audit: type=1400 audit(1760011989.698:470): avc: denied { setattr } for pid=7743 comm="syz.2.466" name="/" dev="9p" ino=71827619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.653796][ T7744] GUP no longer grows the stack in syz.2.466 (7744): 200000007000-20000000a000 (200000004000) [ 89.659990][ T7744] CPU: 3 UID: 0 PID: 7744 Comm: syz.2.466 Not tainted syzkaller #0 PREEMPT(full) [ 89.660005][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.660013][ T7744] Call Trace: [ 89.660017][ T7744] [ 89.660022][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.660069][ T7744] gup_vma_lookup+0x1d2/0x220 [ 89.660085][ T7744] __get_user_pages+0x241/0x3530 [ 89.660103][ T7744] ? do_sock_setsockopt+0xf3/0x1d0 [ 89.660115][ T7744] ? __sys_setsockopt+0x1a0/0x230 [ 89.660130][ T7744] ? __x64_sys_setsockopt+0xbd/0x160 [ 89.660145][ T7744] ? do_syscall_64+0xcd/0xfa0 [ 89.660161][ T7744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.660174][ T7744] ? __pfx___get_user_pages+0x10/0x10 [ 89.660191][ T7744] __gup_longterm_locked+0x2dd/0x17e0 [ 89.660204][ T7744] ? __lock_acquire+0xac0/0x1ce0 [ 89.660224][ T7744] ? __pfx___gup_longterm_locked+0x10/0x10 [ 89.660245][ T7744] pin_user_pages+0x13c/0x160 [ 89.660259][ T7744] ? __pfx_pin_user_pages+0x10/0x10 [ 89.660270][ T7744] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 89.660282][ T7744] ? xdp_umem_create+0x657/0x1270 [ 89.660299][ T7744] xdp_umem_create+0x741/0x1270 [ 89.660317][ T7744] xsk_setsockopt+0x6db/0x9a0 [ 89.660330][ T7744] ? __pfx_xsk_setsockopt+0x10/0x10 [ 89.660342][ T7744] ? find_held_lock+0x2b/0x80 [ 89.660358][ T7744] ? selinux_socket_setsockopt+0x6a/0x80 [ 89.660375][ T7744] ? __pfx_xsk_setsockopt+0x10/0x10 [ 89.660388][ T7744] do_sock_setsockopt+0xf3/0x1d0 [ 89.660401][ T7744] __sys_setsockopt+0x1a0/0x230 [ 89.660419][ T7744] __x64_sys_setsockopt+0xbd/0x160 [ 89.660435][ T7744] ? do_syscall_64+0x91/0xfa0 [ 89.660450][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.660465][ T7744] do_syscall_64+0xcd/0xfa0 [ 89.660482][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.660492][ T7744] RIP: 0033:0x7f6710f8eec9 [ 89.660502][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.660513][ T7744] RSP: 002b:00007f6711e39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.660524][ T7744] RAX: ffffffffffffffda RBX: 00007f67111e5fa0 RCX: 00007f6710f8eec9 [ 89.660531][ T7744] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 89.660537][ T7744] RBP: 00007f6711011f91 R08: 0000000000000020 R09: 0000000000000000 [ 89.660544][ T7744] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 89.660550][ T7744] R13: 00007f67111e6038 R14: 00007f67111e5fa0 R15: 00007ffea9119ee8 [ 89.660567][ T7744] [ 89.756478][ T7744] io-wq is not configured for unbound workers [ 89.784699][ T7746] __nla_validate_parse: 5 callbacks suppressed [ 89.784713][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.467'. [ 90.095343][ T40] audit: type=1400 audit(1760011990.148:471): avc: denied { create } for pid=7752 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.141502][ T40] audit: type=1400 audit(1760011990.188:472): avc: denied { mount } for pid=7754 comm="syz.4.470" name="/" dev="autofs" ino=19794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 90.150702][ T40] audit: type=1400 audit(1760011990.188:473): avc: denied { mounton } for pid=7754 comm="syz.4.470" path="/50/file0" dev="autofs" ino=19794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 90.195256][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 90.195666][ T40] audit: type=1400 audit(1760011990.248:474): avc: denied { read write } for pid=7754 comm="syz.4.470" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.208596][ T40] audit: type=1400 audit(1760011990.248:475): avc: denied { open } for pid=7754 comm="syz.4.470" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.217410][ T40] audit: type=1400 audit(1760011990.248:476): avc: denied { map } for pid=7754 comm="syz.4.470" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.271838][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.271880][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.355503][ T7768] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.405068][ T7775] QAT: Invalid ioctl -2144835806 [ 90.596803][ T7793] /dev/sg0: Can't lookup blockdev [ 90.874580][ T7821] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 92.351556][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.271045][ T7857] zonefs (nbd4) ERROR: Not a zoned block device [ 103.314338][ T7866] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.314371][ T7867] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.627758][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 103.652733][ T7898] bridge1: port 1(ip6gretap0) entered blocking state [ 103.655622][ T7898] bridge1: port 1(ip6gretap0) entered disabled state [ 103.658499][ T7898] ip6gretap0: entered allmulticast mode [ 103.665112][ T7898] ip6gretap0: entered promiscuous mode [ 103.716940][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 103.716957][ T40] audit: type=1400 audit(1760012003.768:478): avc: denied { open } for pid=7904 comm="syz.3.510" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 103.729359][ T40] audit: type=1400 audit(1760012003.778:479): avc: denied { ioctl } for pid=7904 comm="syz.3.510" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 103.734591][ T7905] 9p: Unknown Cache mode or invalid value fs [ 103.739084][ T40] audit: type=1400 audit(1760012003.778:480): avc: denied { accept } for pid=7904 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 103.771586][ T40] audit: type=1400 audit(1760012003.818:481): avc: denied { map } for pid=7908 comm="syz.1.511" path="/proc/414/task/415/numa_maps" dev="proc" ino=21841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 103.773041][ T7909] mmap: syz.1.511 (7909): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 103.844333][ T40] audit: type=1400 audit(1760012003.898:482): avc: denied { name_bind } for pid=7915 comm="syz.1.514" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 103.852689][ T40] audit: type=1400 audit(1760012003.898:483): avc: denied { read } for pid=7911 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.899627][ T7922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.516'. [ 103.994627][ T7940] IPVS: set_ctl: invalid protocol: 3 0.0.0.0:512 [ 104.101546][ T40] audit: type=1400 audit(1760012004.148:484): avc: denied { mounton } for pid=7948 comm="syz.2.524" path="/139/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.149475][ T40] audit: type=1400 audit(1760012004.198:485): avc: denied { write } for pid=7952 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.160143][ T40] audit: type=1400 audit(1760012004.198:486): avc: denied { nlmsg_write } for pid=7952 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.166616][ T7946] kvm: MWAIT instruction emulated as NOP! [ 104.385228][ T7961] kvm: faulting far call emulation tainted memory [ 104.388866][ T7961] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.425600][ T7964] netlink: 'syz.4.528': attribute type 23 has an invalid length. [ 104.456361][ T40] audit: type=1400 audit(1760012004.508:487): avc: denied { map } for pid=7965 comm="syz.4.529" path="socket:[20129]" dev="sockfs" ino=20129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.503556][ T7971] netlink: 76 bytes leftover after parsing attributes in process `syz.4.531'. [ 104.509046][ T7975] netlink: 76 bytes leftover after parsing attributes in process `syz.4.531'. [ 104.785962][ T7992] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.537'. [ 104.896166][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 105.005534][ T8007] gfs2: not a GFS2 filesystem [ 105.009566][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.542'. [ 105.080264][ T8013] __vm_enough_memory: pid: 8013, comm: syz.4.544, bytes: 4503599627366400 not enough memory for the allocation [ 105.091259][ T8013] __vm_enough_memory: pid: 8013, comm: syz.4.544, bytes: 4503599627366400 not enough memory for the allocation [ 105.154403][ T8024] loop6: detected capacity change from 0 to 524287999 [ 105.159037][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.163140][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.166559][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.169968][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.173348][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.175875][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.178339][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.180880][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.185796][ T8024] ldm_validate_partition_table(): Disk read failed. [ 105.188784][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.192614][ T8024] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.196194][ T8024] Dev loop6: unable to read RDB block 0 [ 105.199184][ T8024] loop6: unable to read partition table [ 105.202115][ T8024] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 105.208054][ T8024] unsupported nla_type 4111 [ 105.254534][ T8024] ldm_validate_partition_table(): Disk read failed. [ 105.257760][ T8024] Dev loop6: unable to read RDB block 0 [ 105.260397][ T8024] loop6: unable to read partition table [ 105.263088][ T8024] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 105.321882][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 105.532589][ T8041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.552'. [ 105.771752][ T841] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 105.943127][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.947360][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.951382][ T841] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.957221][ T841] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.960964][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.966910][ T841] usb 9-1: config 0 descriptor?? [ 106.141813][ T8052] 9pnet_fd: p9_fd_create_tcp (8052): problem binding to privport [ 106.271521][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.321231][ T8057] 9pnet_fd: p9_fd_create_tcp (8057): problem connecting socket to 127.0.0.1 [ 106.379655][ T841] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xe [ 106.383711][ T841] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 106.395485][ T841] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 106.409903][ T841] usb 9-1: USB disconnect, device number 4 [ 106.410180][ T8060] fuse: Bad value for 'group_id' [ 106.413278][ T5340] udevd[5340]: worker [8030] terminated by signal 33 (Unknown signal 33) [ 106.414694][ T8060] fuse: Bad value for 'group_id' [ 106.418016][ T5340] udevd[5340]: worker [8030] failed while handling '/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/usbmisc/hiddev0' [ 106.423304][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.558'. [ 106.596309][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c6c800: rx timeout, send abort [ 106.602247][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054c6c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.802383][ T8083] netlink: 'syz.4.566': attribute type 5 has an invalid length. [ 107.064501][ T8092] sp0: Synchronizing with TNC [ 107.131562][ T841] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 107.287057][ T841] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.290457][ T841] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.294556][ T841] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.297485][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.506071][ T841] usb 8-1: usb_control_msg returned -32 [ 107.508476][ T841] usbtmc 8-1:16.0: can't read capabilities [ 107.617132][ T8108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.627956][ T8108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.632966][ T8108] devtmpfs: Unknown parameter 'discard' [ 108.079853][ T8123] netlink: 'syz.4.578': attribute type 10 has an invalid length. [ 108.381506][ T6012] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 108.533462][ T6012] usb 9-1: config 0 has no interfaces? [ 108.539759][ T6012] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 108.544515][ T6012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.547755][ T6012] usb 9-1: Product: syz [ 108.549457][ T6012] usb 9-1: Manufacturer: syz [ 108.552106][ T6012] usb 9-1: SerialNumber: syz [ 108.556387][ T6012] usb 9-1: config 0 descriptor?? [ 108.591892][ T8142] sock: sock_set_timeout: `syz.2.584' (pid 8142) tries to set negative timeout [ 108.650142][ T8147] __nla_validate_parse: 5 callbacks suppressed [ 108.650153][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 108.700806][ T8142] could not allocate digest TFM handle cryptd(blake2b-160) [ 108.764089][ T6012] usb 9-1: USB disconnect, device number 5 [ 108.778022][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 108.778037][ T40] audit: type=1400 audit(1760012008.828:514): avc: denied { create } for pid=8152 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.787286][ T8153] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 108.794765][ T40] audit: type=1400 audit(1760012008.848:515): avc: denied { read } for pid=8152 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.266392][ T40] audit: type=1400 audit(1760012009.318:516): avc: denied { create } for pid=8158 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.274333][ T40] audit: type=1400 audit(1760012009.318:517): avc: denied { write } for pid=8158 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.436466][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 109.440210][ T8166] netlink: 96 bytes leftover after parsing attributes in process `syz.1.590'. [ 109.613348][ T40] audit: type=1400 audit(1760012009.668:518): avc: denied { connect } for pid=8174 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.619822][ T40] audit: type=1400 audit(1760012009.668:519): avc: denied { bind } for pid=8174 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.840170][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.600'. [ 109.885162][ T40] audit: type=1400 audit(1760012009.938:520): avc: denied { setopt } for pid=8203 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.908784][ T9] usb 8-1: USB disconnect, device number 4 [ 109.933542][ T8212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 109.940400][ T8213] hfsplus: unable to find HFS+ superblock [ 109.984480][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.606'. [ 110.256176][ T40] audit: type=1326 audit(1760012010.308:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.4.589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3c78eec9 code=0x7fc00000 [ 110.264271][ T40] audit: type=1326 audit(1760012010.308:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.4.589" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f4f3c78eec9 code=0x7fc00000 [ 110.271108][ T40] audit: type=1326 audit(1760012010.308:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.4.589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3c78eec9 code=0x7fc00000 [ 110.359281][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 110.363095][ T8234] 8021q: VLANs not supported on ip6tnl0 [ 110.932880][ T8247] MPI: mpi too large (16392 bits) [ 110.935802][ T8247] block nbd2: NBD_DISCONNECT [ 111.097079][ T8256] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 111.115499][ T8256] usb usb8: usbfs: process 8256 (syz.2.615) did not claim interface 0 before use [ 111.120494][ T8256] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 111.157393][ T8258] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 111.211667][ T8258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.214875][ T8258] bond2: (slave bond3): making interface the new active one [ 111.217460][ T8258] bond2: (slave bond3): Enslaving as an active interface with an up link [ 111.224629][ T8258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.616'. [ 111.228124][ T8258] bond2: entered promiscuous mode [ 111.229815][ T8258] bond3: entered promiscuous mode [ 111.233775][ T8258] bond2: entered allmulticast mode [ 111.235546][ T8265] binder: 8264:8265 ioctl c0306201 2000000003c0 returned -14 [ 111.237042][ T8258] bond3: entered allmulticast mode [ 111.240439][ T8258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.392858][ T8268] 9pnet_fd: p9_fd_create_tcp (8268): problem connecting socket to 127.0.0.1 [ 111.474423][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 111.483611][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 111.596538][ T8298] fuse: Bad value for 'user_id' [ 111.598101][ T8298] fuse: Bad value for 'user_id' [ 111.657307][ T8303] --map-set only usable from mangle table [ 111.846263][ T47] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.904691][ T8311] bridge0: entered promiscuous mode [ 111.960556][ T8313] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 111.963360][ T8313] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 111.966924][ T8313] overlayfs: missing 'lowerdir' [ 112.020998][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.025917][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.026885][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.033492][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.036902][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.039401][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.103169][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.209818][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 112.288200][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.393234][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.395581][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.397933][ T8316] bridge_slave_0: entered allmulticast mode [ 112.400544][ T8316] bridge_slave_0: entered promiscuous mode [ 112.403648][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.406173][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.408572][ T8316] bridge_slave_1: entered allmulticast mode [ 112.411228][ T8316] bridge_slave_1: entered promiscuous mode [ 112.455431][ T8253] kexec: Could not allocate control_code_buffer [ 112.485230][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.497695][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.518543][ T47] ip6gretap0: left allmulticast mode [ 112.520306][ T47] ip6gretap0: left promiscuous mode [ 112.523757][ T47] bridge1: port 1(ip6gretap0) entered disabled state [ 112.620085][ T8352] netlink: 'syz.2.646': attribute type 21 has an invalid length. [ 112.769821][ T8360] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 112.885914][ T47] bond0 (unregistering): Released all slaves [ 112.943956][ T47] bond1 (unregistering): Released all slaves [ 113.001316][ T47] bond2 (unregistering): (slave bond3): Releasing backup interface [ 113.004546][ T47] bond3 (unregistering): left promiscuous mode [ 113.006951][ T47] bond3 (unregistering): left allmulticast mode [ 113.010105][ T47] bond2 (unregistering): Released all slaves [ 113.070545][ T47] bond3 (unregistering): Released all slaves [ 113.090484][ T8354] netem: invalid attributes len -22 [ 113.092552][ T8354] netem: change failed [ 113.100988][ T8316] team0: Port device team_slave_0 added [ 113.105339][ T8316] team0: Port device team_slave_1 added [ 113.136640][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.138832][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.148018][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.153699][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.156225][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.166243][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.191219][ T8366] netlink: 'syz.2.651': attribute type 10 has an invalid length. [ 113.209874][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.214789][ T8366] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.254235][ T8316] hsr_slave_0: entered promiscuous mode [ 113.256538][ T8316] hsr_slave_1: entered promiscuous mode [ 113.258624][ T8316] debugfs: 'hsr0' already exists in 'hsr' [ 113.260410][ T8316] Cannot create hsr debugfs directory [ 113.441665][ T47] hsr_slave_0: left promiscuous mode [ 113.444781][ T47] hsr_slave_1: left promiscuous mode [ 113.476880][ T47] veth1_macvtap: left promiscuous mode [ 113.479208][ T47] veth0_macvtap: left promiscuous mode [ 113.482420][ T47] veth1_vlan: left promiscuous mode [ 113.885291][ T8390] netlink: 'syz.4.657': attribute type 39 has an invalid length. [ 114.127554][ T5940] Bluetooth: hci0: command tx timeout [ 114.148873][ T8396] tmpfs: Bad value for 'mpol' [ 114.598885][ T8316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.605705][ T8316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.612724][ T8316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.623985][ T8316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.708590][ T8409] __nla_validate_parse: 4 callbacks suppressed [ 114.708606][ T8409] netlink: 60 bytes leftover after parsing attributes in process `syz.2.661'. [ 114.732640][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.756681][ T8316] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.763477][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.765886][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.771776][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.773990][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.800767][ T8316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.817865][ T8316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.845887][ T8422] FAULT_INJECTION: forcing a failure. [ 114.845887][ T8422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.850338][ T8422] CPU: 1 UID: 0 PID: 8422 Comm: syz.4.663 Not tainted syzkaller #0 PREEMPT(full) [ 114.850353][ T8422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.850360][ T8422] Call Trace: [ 114.850364][ T8422] [ 114.850368][ T8422] dump_stack_lvl+0x16c/0x1f0 [ 114.850388][ T8422] should_fail_ex+0x512/0x640 [ 114.850408][ T8422] _copy_to_user+0x32/0xd0 [ 114.850426][ T8422] simple_read_from_buffer+0xcb/0x170 [ 114.850444][ T8422] proc_fail_nth_read+0x197/0x240 [ 114.850457][ T8422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.850470][ T8422] ? rw_verify_area+0xcf/0x6c0 [ 114.850485][ T8422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.850496][ T8422] vfs_read+0x1e4/0xcf0 [ 114.850514][ T8422] ? __pfx___mutex_lock+0x10/0x10 [ 114.850532][ T8422] ? __pfx_vfs_read+0x10/0x10 [ 114.850557][ T8422] ? __fget_files+0x20e/0x3c0 [ 114.850573][ T8422] ksys_read+0x12a/0x250 [ 114.850582][ T8422] ? __pfx_ksys_read+0x10/0x10 [ 114.850596][ T8422] do_syscall_64+0xcd/0xfa0 [ 114.850612][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.850623][ T8422] RIP: 0033:0x7f4f3c78d8dc [ 114.850632][ T8422] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 114.850643][ T8422] RSP: 002b:00007f4f3d6ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.850653][ T8422] RAX: ffffffffffffffda RBX: 00007f4f3c9e5fa0 RCX: 00007f4f3c78d8dc [ 114.850660][ T8422] RDX: 000000000000000f RSI: 00007f4f3d6ac0a0 RDI: 0000000000000004 [ 114.850666][ T8422] RBP: 00007f4f3d6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 114.850673][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.850679][ T8422] R13: 00007f4f3c9e6038 R14: 00007f4f3c9e5fa0 R15: 00007ffd3831f3c8 [ 114.850693][ T8422] [ 114.897256][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 114.923999][ T8428] cgroup: fork rejected by pids controller in /syz4 [ 114.946402][ T8316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.947629][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 114.947643][ T40] audit: type=1400 audit(1760012014.998:604): avc: denied { watch_reads } for pid=8419 comm="syz.2.662" path="pipe:[24280]" dev="pipefs" ino=24280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.032482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 115.081933][ T8316] veth0_vlan: entered promiscuous mode [ 115.087227][ T8316] veth1_vlan: entered promiscuous mode [ 115.106360][ T8316] veth0_macvtap: entered promiscuous mode [ 115.110095][ T8316] veth1_macvtap: entered promiscuous mode [ 115.122060][ T8431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.127230][ T8431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.127647][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.129148][ T8431] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.136950][ T8431] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.139051][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.146942][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.149790][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.157692][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.160579][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.174489][ T40] audit: type=1400 audit(1760012015.228:605): avc: denied { ioctl } for pid=8446 comm="syz.2.669" path="socket:[24303]" dev="sockfs" ino=24303 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.227371][ T8447] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.229185][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.235026][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.253133][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.255592][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.273955][ T40] audit: type=1400 audit(1760012015.328:606): avc: denied { mounton } for pid=8316 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 115.295895][ T8457] CUSE: unknown device info "" [ 115.298005][ T8457] CUSE: zero length info key specified [ 115.315602][ T8461] erofs (device loop5): cannot find valid erofs superblock [ 115.513360][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.523972][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.636361][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.762085][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.765545][ T5929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.769455][ T5929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.773460][ T5929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.776424][ T5929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.806132][ T8486] netlink: 96 bytes leftover after parsing attributes in process `syz.5.681'. [ 115.833594][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.840388][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.682'. [ 115.844912][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.682'. [ 115.848384][ T8488] netlink: 'syz.5.682': attribute type 6 has an invalid length. [ 115.863990][ T40] audit: type=1400 audit(1760012015.918:607): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33702 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 115.875297][ T40] audit: type=1400 audit(1760012015.918:608): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=33702 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 115.900776][ T8493] Cannot find add_set index 3 as target [ 115.934772][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.943589][ T40] audit: type=1400 audit(1760012015.998:609): avc: denied { setopt } for pid=8497 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.956937][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 116.030599][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.033772][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.036280][ T8482] bridge_slave_0: entered allmulticast mode [ 116.038893][ T8482] bridge_slave_0: entered promiscuous mode [ 116.043721][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.046091][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.048342][ T8482] bridge_slave_1: entered allmulticast mode [ 116.051346][ T8482] bridge_slave_1: entered promiscuous mode [ 116.102520][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.115457][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.127381][ T40] audit: type=1326 audit(1760012016.178:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.5.686" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb663f8eec9 code=0x0 [ 116.170997][ T8482] team0: Port device team_slave_0 added [ 116.181789][ T5940] block nbd2: Receive control failed (result -32) [ 116.193137][ T8472] block nbd2: shutting down sockets [ 116.195736][ T8482] team0: Port device team_slave_1 added [ 116.243332][ T8509] MINIX-fs: blocksize too small for device [ 116.250073][ T8509] MINIX-fs: blocksize too small for device [ 116.329768][ T8517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 116.331902][ T8517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.336395][ T8517] vhci_hcd vhci_hcd.0: Device attached [ 116.338437][ T8519] vhci_hcd: connection closed [ 116.338920][ T1147] vhci_hcd: stop threads [ 116.342757][ T1147] vhci_hcd: release socket [ 116.344196][ T1147] vhci_hcd: disconnect device [ 116.345127][ T8514] could not allocate digest TFM handle cryptd(blake2b-160) [ 116.359137][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 116.655683][ T13] bond0 (unregistering): Released all slaves [ 116.662014][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.664194][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.672621][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.678050][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.681069][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.691693][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.697349][ T40] audit: type=1400 audit(1760012016.748:611): avc: denied { egress } for pid=47 comm="kworker/u32:3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 116.708462][ T40] audit: type=1400 audit(1760012016.748:612): avc: denied { sendto } for pid=47 comm="kworker/u32:3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 116.772775][ T8482] hsr_slave_0: entered promiscuous mode [ 116.775532][ T8482] hsr_slave_1: entered promiscuous mode [ 116.778428][ T8482] debugfs: 'hsr0' already exists in 'hsr' [ 116.780529][ T8482] Cannot create hsr debugfs directory [ 116.817961][ T40] audit: type=1400 audit(1760012016.868:613): avc: denied { create } for pid=8526 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.818743][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 116.980467][ T13] hsr_slave_0: left promiscuous mode [ 116.982959][ T13] hsr_slave_1: left promiscuous mode [ 117.002896][ T13] veth1_macvtap: left promiscuous mode [ 117.004863][ T13] veth0_macvtap: left promiscuous mode [ 117.006815][ T13] veth1_vlan: left promiscuous mode [ 117.081704][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.151684][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 117.213665][ T13] team0 (unregistering): Port device vlan0 removed [ 117.266955][ T8559] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.301521][ T6012] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 117.486652][ T6012] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 117.489607][ T6012] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 117.493744][ T6012] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 117.496753][ T6012] usb 7-1: config 1 has no interface number 0 [ 117.498468][ T6012] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.502152][ T6012] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.505858][ T6012] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.508789][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.530532][ T6012] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 117.737020][ T6012] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 117.803129][ T5940] Bluetooth: hci1: command tx timeout [ 117.947390][ T9] usb 7-1: USB disconnect, device number 6 [ 117.955531][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 118.392720][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 118.427728][ T8575] ufs: You didn't specify the type of your ufs filesystem [ 118.427728][ T8575] [ 118.427728][ T8575] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 118.427728][ T8575] [ 118.427728][ T8575] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 118.438656][ T8575] ufs: ufstype=old is supported read-only [ 118.441905][ T8575] ufs: ufs_fill_super(): bad magic number [ 118.574814][ T8579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.579447][ T8582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.758649][ T8591] sp0: Synchronizing with TNC [ 118.796435][ T8591] netlink: 'syz.5.712': attribute type 5 has an invalid length. [ 118.859103][ T8596] IPVS: length: 18 != 8 [ 118.861250][ T8596] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 118.871501][ T2300] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 118.881113][ T8596] veth0_vlan: left promiscuous mode [ 118.886219][ T8596] veth0_vlan: entered promiscuous mode [ 118.891335][ T8596] team0: Device veth0_vlan failed to register rx_handler [ 118.929013][ T8598] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 118.976452][ T8482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.984503][ T8482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.990470][ T8482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.996723][ T8482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.011921][ T2300] usb 7-1: device descriptor read/64, error -71 [ 119.042951][ T8624] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.043971][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.051349][ T8624] CIFS mount error: No usable UNC path provided in device string! [ 119.051349][ T8624] [ 119.056926][ T8624] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 119.064348][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.070863][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.073223][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.077500][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.079832][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.229390][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.242371][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 119.261597][ T2300] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 119.381930][ T8482] veth0_vlan: entered promiscuous mode [ 119.386895][ T8482] veth1_vlan: entered promiscuous mode [ 119.391714][ T2300] usb 7-1: device descriptor read/64, error -71 [ 119.404675][ T8482] veth0_macvtap: entered promiscuous mode [ 119.409190][ T8482] veth1_macvtap: entered promiscuous mode [ 119.417729][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.425072][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.432060][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.435612][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.438480][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.442953][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.482805][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.485411][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.498367][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.500896][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.512248][ T2300] usb usb7-port1: attempt power cycle [ 119.539295][ T8641] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.543016][ T8641] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 119.545901][ T8641] overlayfs: missing 'lowerdir' [ 119.851782][ T2300] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 119.872215][ T2300] usb 7-1: device descriptor read/8, error -71 [ 119.882800][ T5940] Bluetooth: hci1: command tx timeout [ 120.112342][ T2300] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 120.142818][ T2300] usb 7-1: device descriptor read/8, error -71 [ 120.252777][ T2300] usb usb7-port1: unable to enumerate USB device [ 120.465460][ T8663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.727'. [ 120.465462][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.727'. [ 120.522474][ T841] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 120.545242][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 120.545257][ T40] audit: type=1400 audit(1760012020.598:616): avc: denied { watch_reads } for pid=8666 comm="syz.4.728" path="/3/file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.558842][ T40] audit: type=1400 audit(1760012020.608:617): avc: denied { mount } for pid=8666 comm="syz.4.728" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 120.652994][ T841] usb 8-1: device descriptor read/64, error -71 [ 120.695707][ T8674] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 120.891524][ T841] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 121.021519][ T841] usb 8-1: device descriptor read/64, error -71 [ 121.100796][ T8690] ======================================================= [ 121.100796][ T8690] WARNING: The mand mount option has been deprecated and [ 121.100796][ T8690] and is ignored by this kernel. Remove the mand [ 121.100796][ T8690] option from the mount to silence this warning. [ 121.100796][ T8690] ======================================================= [ 121.115540][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.735'. [ 121.121460][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.735'. [ 121.121507][ T8692] cgroup: Unknown subsys name '4' [ 121.141819][ T841] usb usb8-port1: attempt power cycle [ 121.311603][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 121.491651][ T841] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 121.512168][ T841] usb 8-1: device descriptor read/8, error -71 [ 121.705964][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 121.742003][ T8711] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 121.744549][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 121.752674][ T8711] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 121.752672][ T1146] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.752848][ T1146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.755181][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 121.757786][ T1146] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.757807][ T1146] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.781498][ T841] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 121.806117][ T841] usb 8-1: device descriptor read/8, error -71 [ 121.825761][ T8716] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 121.833675][ T8716] exFAT-fs (nullb0): invalid boot record signature [ 121.836534][ T8716] exFAT-fs (nullb0): failed to read boot sector [ 121.839074][ T8716] exFAT-fs (nullb0): failed to recognize exfat type [ 121.844243][ T40] audit: type=1400 audit(1760012021.898:618): avc: denied { setattr } for pid=8715 comm="syz.4.742" name="CAN_J1939" dev="sockfs" ino=27865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.845783][ T8716] exfat: Unknown parameter 'discardµ´&îNZgä´ðXqüÓ•Jf½Êo vvKe G%´í-ž½@ZÃæÜoN>#°¨¾MÂqå½æ€î(' [ 121.911492][ T40] audit: type=1400 audit(1760012021.948:619): avc: denied { create } for pid=8722 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.919287][ T40] audit: type=1400 audit(1760012021.958:620): avc: denied { connect } for pid=8722 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.919330][ T40] audit: type=1400 audit(1760012021.958:621): avc: denied { bind } for pid=8722 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.921637][ T841] usb usb8-port1: unable to enumerate USB device [ 121.957611][ T8723] tty tty3: ldisc open failed (-12), clearing slot 2 [ 122.272318][ T8739] binder: 8738:8739 ioctl c0306201 200000000b80 returned -14 [ 122.317576][ T5940] Bluetooth: Frame is too long (len 67, expected len 4) [ 122.524947][ T8750] Mount JFS Failure: -22 [ 122.535479][ T8750] SELinux: policydb version 275 does not match my version range 15-35 [ 122.539160][ T8750] SELinux: failed to load policy [ 122.541173][ T40] audit: type=1400 audit(1760012022.588:622): avc: denied { load_policy } for pid=8746 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.955280][ T40] audit: type=1400 audit(1760012023.008:623): avc: denied { write } for pid=8758 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.956032][ T8759] 9pnet_fd: Insufficient options for proto=fd [ 123.075862][ T40] audit: type=1400 audit(1760012023.128:624): avc: denied { accept } for pid=8761 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.127848][ T40] audit: type=1400 audit(1760012023.178:625): avc: denied { write } for pid=8761 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.129370][ T8763] NILFS (nbd4): device size too small [ 123.320701][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 123.341204][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 123.391490][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 124.067918][ T8804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 124.070703][ T8804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.073925][ T8804] vhci_hcd vhci_hcd.0: Device attached [ 124.275107][ T8811] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 124.277851][ T8812] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 124.296223][ T8811] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.331558][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 124.335744][ T841] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 124.491767][ T841] usb 8-1: Using ep0 maxpacket: 16 [ 124.495357][ T841] usb 8-1: config 0 has no interfaces? [ 124.497615][ T841] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 124.497718][ T8817] QAT: Device 6 not found [ 124.501215][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.504695][ T8817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8817 comm=syz.2.772 [ 124.508327][ T841] usb 8-1: config 0 descriptor?? [ 124.592002][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 124.595235][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 124.599231][ T5940] Bluetooth: hci1: hardware error 0x00 [ 124.722709][ T8805] usb 43-1: recv xbuf, 0 [ 124.729421][ T29] usb 8-1: USB disconnect, device number 9 [ 124.734104][ T1146] vhci_hcd: stop threads [ 124.736046][ T1146] vhci_hcd: release socket [ 124.740390][ T1146] vhci_hcd: disconnect device [ 124.791853][ T9] vhci_hcd: vhci_device speed not set [ 124.805943][ T8835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.831591][ T8838] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 124.835017][ T8838] netlink: 'syz.2.778': attribute type 4 has an invalid length. [ 124.838214][ T8838] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.778'. [ 125.026069][ T8849] syzkaller1: entered promiscuous mode [ 125.027752][ T8849] syzkaller1: entered allmulticast mode [ 125.218604][ T8858] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.349547][ T5929] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 125.471865][ T5929] Bluetooth: hci0: command 0x040f tx timeout [ 126.298017][ T8914] overlayfs: conflicting options: userxattr,redirect_dir=on [ 126.304012][ T8915] Bluetooth: MGMT ver 1.23 [ 126.311879][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 126.311893][ T40] audit: type=1400 audit(1760012026.368:635): avc: denied { setopt } for pid=8912 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.369069][ T8918] __nla_validate_parse: 2 callbacks suppressed [ 126.369084][ T8918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.805'. [ 126.682521][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 126.751664][ T58] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 126.897469][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.900807][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.912033][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 126.916296][ T58] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 126.921341][ T58] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 126.926294][ T58] usb 8-1: can't read configurations, error -61 [ 126.969287][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.974604][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.053347][ T58] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 127.070255][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.074668][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.164154][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.168192][ T5929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.172632][ T5929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.178536][ T5929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.187482][ T5929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.188162][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.194217][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.201555][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 127.204258][ T58] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 127.208813][ T58] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 127.212629][ T58] usb 8-1: can't read configurations, error -61 [ 127.215662][ T58] usb usb8-port1: attempt power cycle [ 127.340046][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 127.344800][ T82] bridge_slave_1: left allmulticast mode [ 127.346809][ T82] bridge_slave_1: left promiscuous mode [ 127.348806][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.354310][ T82] bridge_slave_0: left allmulticast mode [ 127.356128][ T82] bridge_slave_0: left promiscuous mode [ 127.357984][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.437938][ T8932] overlayfs: missing 'workdir' [ 127.561986][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 127.562410][ T58] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 127.592475][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 127.595121][ T58] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 127.599509][ T58] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 127.602890][ T58] usb 8-1: can't read configurations, error -61 [ 127.682364][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.688280][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.694152][ T82] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 127.698218][ T82] bond0 (unregistering): Released all slaves [ 127.731517][ T58] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 127.752382][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 127.755155][ T58] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 127.759888][ T58] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 127.766148][ T58] usb 8-1: can't read configurations, error -61 [ 127.771796][ T58] usb usb8-port1: unable to enumerate USB device [ 127.790191][ T40] audit: type=1400 audit(1760012027.838:636): avc: denied { ioctl } for pid=8945 comm="syz.2.815" path="socket:[31817]" dev="sockfs" ino=31817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.835277][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'. [ 127.844633][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.847566][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.850747][ T8924] bridge_slave_0: entered allmulticast mode [ 127.855038][ T8924] bridge_slave_0: entered promiscuous mode [ 127.864143][ T8949] bond0: entered promiscuous mode [ 127.865988][ T8949] bond_slave_0: entered promiscuous mode [ 127.868029][ T8949] bond_slave_1: entered promiscuous mode [ 127.870818][ T8949] batadv0: entered promiscuous mode [ 127.873988][ T8949] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 127.878114][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.881211][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.886577][ T8924] bridge_slave_1: entered allmulticast mode [ 127.890405][ T8924] bridge_slave_1: entered promiscuous mode [ 127.966672][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.972549][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.026027][ T8924] team0: Port device team_slave_0 added [ 128.029229][ T8924] team0: Port device team_slave_1 added [ 128.086463][ T82] hsr_slave_0: left promiscuous mode [ 128.088576][ T82] hsr_slave_1: left promiscuous mode [ 128.090588][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.094948][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.098785][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.102507][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.141323][ T8975] efs: device does not support 512 byte blocks [ 128.143609][ T82] veth1_macvtap: left promiscuous mode [ 128.143648][ T8975] device does not support 512 byte blocks [ 128.143648][ T8975] [ 128.145402][ T82] veth0_macvtap: left promiscuous mode [ 128.150081][ T82] veth1_vlan: left promiscuous mode [ 128.152053][ T82] veth0_vlan: left promiscuous mode [ 128.211774][ T6012] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 128.371489][ T6012] usb 8-1: Using ep0 maxpacket: 32 [ 128.373647][ T6012] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 128.377396][ T6012] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 128.379965][ T6012] usb 8-1: can't read configurations, error -61 [ 128.413598][ T40] audit: type=1400 audit(1760012028.468:637): avc: denied { shutdown } for pid=8981 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.512322][ T6012] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 128.683096][ T6012] usb 8-1: Using ep0 maxpacket: 32 [ 128.686382][ T6012] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 128.690925][ T6012] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 128.694359][ T6012] usb 8-1: can't read configurations, error -61 [ 128.697260][ T6012] usb usb8-port1: attempt power cycle [ 128.779076][ T82] team0 (unregistering): Port device team_slave_1 removed [ 128.856779][ T82] team0 (unregistering): Port device team_slave_0 removed [ 129.031517][ T6012] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 129.052147][ T6012] usb 8-1: Using ep0 maxpacket: 32 [ 129.057894][ T6012] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 129.062388][ T6012] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 129.065476][ T6012] usb 8-1: can't read configurations, error -61 [ 129.201689][ T6012] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 129.221950][ T6012] usb 8-1: Using ep0 maxpacket: 32 [ 129.224967][ T6012] usb 8-1: too many configurations: 139, using maximum allowed: 8 [ 129.229921][ T6012] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 129.231937][ T5940] Bluetooth: hci1: command tx timeout [ 129.233681][ T6012] usb 8-1: can't read configurations, error -61 [ 129.238562][ T6012] usb usb8-port1: unable to enumerate USB device [ 129.323171][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.325873][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.334881][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.347415][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.349648][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.358199][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.392387][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 129.405141][ T8924] hsr_slave_0: entered promiscuous mode [ 129.407689][ T8924] hsr_slave_1: entered promiscuous mode [ 129.409913][ T8924] debugfs: 'hsr0' already exists in 'hsr' [ 129.411826][ T8924] Cannot create hsr debugfs directory [ 129.587224][ T9013] XFS (nbd5): SB validate failed with error -5. [ 129.632624][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 129.638072][ T8924] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.642971][ T8924] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.648860][ T8924] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.654780][ T8924] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.724767][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.736030][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.742270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.745163][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.756421][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.759433][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.890795][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.035594][ T8924] veth0_vlan: entered promiscuous mode [ 130.040700][ T8924] veth1_vlan: entered promiscuous mode [ 130.053879][ T9064] omfs: Invalid superblock (0) [ 130.062036][ T8924] veth0_macvtap: entered promiscuous mode [ 130.067757][ T8924] veth1_macvtap: entered promiscuous mode [ 130.080223][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.086236][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.094865][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.098617][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.104007][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.110079][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.158120][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.161327][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.174749][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.177285][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.185280][ T40] audit: type=1400 audit(1760012030.238:638): avc: denied { mounton } for pid=8924 comm="syz-executor" path="/syzkaller.HEKSRg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 130.196273][ T40] audit: type=1400 audit(1760012030.248:639): avc: denied { mount } for pid=8924 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 130.233771][ T40] audit: type=1400 audit(1760012030.288:640): avc: denied { append } for pid=9070 comm="syz.6.810" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.237345][ T9071] netlink: 45 bytes leftover after parsing attributes in process `syz.6.810'. [ 130.346733][ T9085] netlink: 'syz.5.852': attribute type 12 has an invalid length. [ 130.434762][ T40] audit: type=1400 audit(1760012030.488:641): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 130.467545][ T40] audit: type=1400 audit(1760012030.518:642): avc: denied { ioctl } for pid=9106 comm="syz.5.858" path="socket:[31460]" dev="sockfs" ino=31460 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.517209][ T9124] syz.2.861: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.523613][ T9124] CPU: 1 UID: 0 PID: 9124 Comm: syz.2.861 Not tainted syzkaller #0 PREEMPT(full) [ 130.523635][ T9124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.523646][ T9124] Call Trace: [ 130.523670][ T9124] [ 130.523678][ T9124] dump_stack_lvl+0x16c/0x1f0 [ 130.523728][ T9124] warn_alloc+0x248/0x3a0 [ 130.523755][ T9124] ? __pfx_warn_alloc+0x10/0x10 [ 130.523789][ T9124] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 130.523816][ T9124] ? __vmalloc_node_noprof+0xad/0xf0 [ 130.523841][ T9124] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 130.523870][ T9124] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 130.523894][ T9124] ? __lock_acquire+0x62e/0x1ce0 [ 130.523920][ T9124] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.523944][ T9124] ? ___kmalloc_large_node+0xed/0x160 [ 130.523968][ T9124] __kvmalloc_node_noprof+0x431/0x9c0 [ 130.523985][ T9124] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 130.524006][ T9124] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 130.524031][ T9124] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 130.524049][ T9124] hashlimit_mt_check_common+0x8c0/0x1460 [ 130.524081][ T9124] hashlimit_mt_check_v1+0x2fc/0x370 [ 130.524101][ T9124] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 130.524120][ T9124] ? find_held_lock+0x2b/0x80 [ 130.524148][ T9124] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 130.524170][ T9124] xt_check_match+0x283/0xa50 [ 130.524188][ T9124] ? __schedule+0x1928/0x5de0 [ 130.524211][ T9124] ? __pfx_xt_check_match+0x10/0x10 [ 130.524233][ T9124] ? pcpu_alloc_noprof+0x1f5/0x14c0 [ 130.524261][ T9124] ? xt_find_match+0x1f6/0x290 [ 130.524284][ T9124] find_check_entry.constprop.0+0x317/0x9b0 [ 130.524313][ T9124] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 130.524343][ T9124] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.524370][ T9124] ? kfree+0x2b8/0x6d0 [ 130.524389][ T9124] ? translate_table+0xba1/0x1720 [ 130.524415][ T9124] translate_table+0xc98/0x1720 [ 130.524446][ T9124] ? __pfx_translate_table+0x10/0x10 [ 130.524475][ T9124] do_ipt_set_ctl+0x570/0xae0 [ 130.524495][ T9124] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 130.524512][ T9124] ? find_held_lock+0x2b/0x80 [ 130.524535][ T9124] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 130.524555][ T9124] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.524578][ T9124] ? sockopt_release_sock+0x52/0x60 [ 130.524603][ T9124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.524628][ T9124] ? sockopt_release_sock+0x52/0x60 [ 130.524663][ T9124] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 130.524684][ T9124] nf_setsockopt+0x8d/0xf0 [ 130.524703][ T9124] ip_setsockopt+0xcb/0xf0 [ 130.524727][ T9124] udp_setsockopt+0x7d/0xd0 [ 130.524744][ T9124] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.524764][ T9124] do_sock_setsockopt+0xf3/0x1d0 [ 130.524784][ T9124] __sys_setsockopt+0x1a0/0x230 [ 130.524810][ T9124] __x64_sys_setsockopt+0xbd/0x160 [ 130.524832][ T9124] ? do_syscall_64+0x91/0xfa0 [ 130.524854][ T9124] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.524877][ T9124] do_syscall_64+0xcd/0xfa0 [ 130.524901][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.524917][ T9124] RIP: 0033:0x7f6710f8eec9 [ 130.524931][ T9124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.524946][ T9124] RSP: 002b:00007f6711e18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.524962][ T9124] RAX: ffffffffffffffda RBX: 00007f67111e6090 RCX: 00007f6710f8eec9 [ 130.524972][ T9124] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 130.524982][ T9124] RBP: 00007f6711011f91 R08: 0000000000000448 R09: 0000000000000000 [ 130.524991][ T9124] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 130.525001][ T9124] R13: 00007f67111e6128 R14: 00007f67111e6090 R15: 00007ffea9119ee8 [ 130.525026][ T9124] [ 130.525032][ T9124] Mem-Info: [ 130.655321][ T9124] active_anon:6132 inactive_anon:26 isolated_anon:0 [ 130.655321][ T9124] active_file:4077 inactive_file:31575 isolated_file:0 [ 130.655321][ T9124] unevictable:1768 dirty:89 writeback:0 [ 130.655321][ T9124] slab_reclaimable:9531 slab_unreclaimable:69724 [ 130.655321][ T9124] mapped:24330 shmem:2401 pagetables:1708 [ 130.655321][ T9124] sec_pagetables:304 bounce:0 [ 130.655321][ T9124] kernel_misc_reclaimable:0 [ 130.655321][ T9124] free:477165 free_pcp:11018 free_cma:0 [ 130.671290][ T9124] Node 0 active_anon:24528kB inactive_anon:104kB active_file:15936kB inactive_file:126096kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97112kB dirty:344kB writeback:0kB shmem:6068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13168kB pagetables:6092kB sec_pagetables:1216kB all_unreclaimable? yes Balloon:0kB [ 130.682240][ T9124] Node 1 active_anon:0kB inactive_anon:0kB active_file:372kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.691608][ T9124] Node 0 DMA free:15180kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:8kB free_cma:0kB [ 130.700694][ T9124] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 130.702951][ T9124] Node 0 DMA32 free:312132kB boost:61972kB min:89520kB low:96404kB high:103288kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24280kB inactive_anon:104kB active_file:15940kB inactive_file:126100kB unevictable:3536kB writepending:348kB zspages:0kB present:2080628kB managed:1265760kB mlocked:0kB bounce:0kB free_pcp:7420kB local_pcp:1496kB free_cma:0kB [ 130.713683][ T9124] lowmem_reserve[]: 0 0 0 0 0 [ 130.715868][ T9124] Node 1 Normal free:1581520kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:372kB inactive_file:204kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:37096kB local_pcp:11604kB free_cma:0kB [ 130.727104][ T9124] lowmem_reserve[]: 0 0 0 0 0 [ 130.728840][ T9124] Node 0 DMA: 5*4kB (U) 7*8kB (U) 8*16kB (U) 8*32kB (U) 6*64kB (U) 8*128kB (U) 6*256kB (U) 7*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 15180kB [ 130.734503][ T9124] Node 0 DMA32: 7*4kB (ME) 1211*8kB (UME) 839*16kB (UME) 611*32kB (UME) 352*64kB (UME) 121*128kB (UME) 132*256kB (UME) 124*512kB (UME) 58*1024kB (UM) 11*2048kB (UM) 13*4096kB (UM) = 313156kB [ 130.740798][ T9124] Node 1 Normal: 184*4kB (UME) 145*8kB (UME) 195*16kB (UME) 338*32kB (UME) 194*64kB (UME) 165*128kB (UME) 149*256kB (UME) 144*512kB (UM) 139*1024kB (UM) 8*2048kB (UE) 308*4096kB (UM) = 1581528kB [ 130.747871][ T9124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.750924][ T9124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.755095][ T9124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.758222][ T9124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.762235][ T9124] 38050 total pagecache pages [ 130.763835][ T9124] 0 pages in swap cache [ 130.765292][ T9124] Free swap = 124996kB [ 130.767850][ T9124] Total swap = 124996kB [ 130.769245][ T9124] 1048443 pages RAM [ 130.770580][ T9124] 0 pages HighMem/MovableOnly [ 130.772581][ T9124] 282690 pages reserved [ 130.773903][ T9124] 0 pages cma reserved [ 130.895266][ T9149] netlink: 3 bytes leftover after parsing attributes in process `syz.2.863'. [ 131.173767][ T9077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.176105][ T9077] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 131.207668][ T9077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.210198][ T9077] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 131.226647][ T9077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.228699][ T9077] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 131.232878][ T9077] [ 131.233857][ T9077] ====================================================== [ 131.236639][ T9077] WARNING: possible circular locking dependency detected [ 131.239337][ T9077] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.240789][ T9077] ------------------------------------------------------ [ 131.244846][ T9077] syz.6.850/9077 is trying to acquire lock: [ 131.246777][ T9077] ffff8880376b8840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 131.251034][ T9077] [ 131.251034][ T9077] but task is already holding lock: [ 131.253440][ T9077] ffff8880376b8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 131.257081][ T9077] [ 131.257081][ T9077] which lock already depends on the new lock. [ 131.257081][ T9077] [ 131.261317][ T9077] [ 131.261317][ T9077] the existing dependency chain (in reverse order) is: [ 131.264420][ T9077] [ 131.264420][ T9077] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 131.266863][ T9077] __mutex_lock+0x193/0x1060 [ 131.268532][ T9077] l2cap_info_timeout+0x79/0xa0 [ 131.270177][ T9077] process_one_work+0x9cf/0x1b70 [ 131.271850][ T9077] worker_thread+0x6c8/0xf10 [ 131.273408][ T9077] kthread+0x3c2/0x780 [ 131.274830][ T9077] ret_from_fork+0x672/0x7d0 [ 131.276495][ T9077] ret_from_fork_asm+0x1a/0x30 [ 131.278147][ T9077] [ 131.278147][ T9077] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 131.281261][ T9077] __lock_acquire+0x12a6/0x1ce0 [ 131.282859][ T9077] lock_acquire+0x179/0x350 [ 131.284395][ T9077] __flush_work+0x4e4/0xcc0 [ 131.285933][ T9077] __cancel_work_sync+0x10c/0x130 [ 131.287674][ T9077] l2cap_conn_del+0x5af/0x730 [ 131.289248][ T9077] l2cap_disconn_cfm+0x96/0xd0 [ 131.290873][ T9077] hci_conn_hash_flush+0x10b/0x260 [ 131.292590][ T9077] hci_dev_close_sync+0x602/0x11d0 [ 131.294287][ T9077] hci_dev_do_close+0x2e/0x90 [ 131.295917][ T9077] hci_rfkill_set_block+0x225/0x360 [ 131.298035][ T9077] rfkill_set_block+0x1fb/0x550 [ 131.300297][ T9077] rfkill_fop_write+0x2c0/0x580 [ 131.302493][ T9077] vfs_write+0x2a0/0x11d0 [ 131.304490][ T9077] ksys_write+0x1f8/0x250 [ 131.306480][ T9077] do_syscall_64+0xcd/0xfa0 [ 131.308482][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.310703][ T9077] [ 131.310703][ T9077] other info that might help us debug this: [ 131.310703][ T9077] [ 131.313898][ T9077] Possible unsafe locking scenario: [ 131.313898][ T9077] [ 131.316230][ T9077] CPU0 CPU1 [ 131.318112][ T9077] ---- ---- [ 131.319816][ T9077] lock(&conn->lock#2); [ 131.321189][ T9077] lock((work_completion)(&(&conn->info_timer)->work)); [ 131.324435][ T9077] lock(&conn->lock#2); [ 131.327246][ T9077] lock((work_completion)(&(&conn->info_timer)->work)); [ 131.330187][ T9077] [ 131.330187][ T9077] *** DEADLOCK *** [ 131.330187][ T9077] [ 131.333543][ T9077] 6 locks held by syz.6.850/9077: [ 131.335662][ T9077] #0: ffffffff905a3428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 131.339413][ T9077] #1: ffff8880561f8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 131.342248][ T9077] #2: ffff8880561f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 131.345198][ T9077] #3: ffffffff9036d188 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 131.348999][ T9077] #4: ffff8880376b8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 131.352862][ T9077] #5: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 131.356608][ T9077] [ 131.356608][ T9077] stack backtrace: [ 131.359059][ T9077] CPU: 2 UID: 0 PID: 9077 Comm: syz.6.850 Not tainted syzkaller #0 PREEMPT(full) [ 131.359081][ T9077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.359096][ T9077] Call Trace: [ 131.359102][ T9077] [ 131.359109][ T9077] dump_stack_lvl+0x116/0x1f0 [ 131.359135][ T9077] print_circular_bug+0x275/0x350 [ 131.359161][ T9077] check_noncircular+0x14c/0x170 [ 131.359189][ T9077] __lock_acquire+0x12a6/0x1ce0 [ 131.359219][ T9077] lock_acquire+0x179/0x350 [ 131.359233][ T9077] ? __flush_work+0x4d0/0xcc0 [ 131.359254][ T9077] ? mark_held_locks+0x49/0x80 [ 131.359279][ T9077] ? __flush_work+0x4d0/0xcc0 [ 131.359298][ T9077] __flush_work+0x4e4/0xcc0 [ 131.359316][ T9077] ? __flush_work+0x4d0/0xcc0 [ 131.359336][ T9077] ? detach_if_pending+0x1b1/0x280 [ 131.359360][ T9077] ? __pfx___flush_work+0x10/0x10 [ 131.359381][ T9077] ? __pfx_wq_barrier_func+0x10/0x10 [ 131.359409][ T9077] ? __pfx___might_resched+0x10/0x10 [ 131.359429][ T9077] ? __pfx___mutex_lock+0x10/0x10 [ 131.359456][ T9077] __cancel_work_sync+0x10c/0x130 [ 131.359476][ T9077] l2cap_conn_del+0x5af/0x730 [ 131.359493][ T9077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.359520][ T9077] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 131.359537][ T9077] l2cap_disconn_cfm+0x96/0xd0 [ 131.359555][ T9077] hci_conn_hash_flush+0x10b/0x260 [ 131.359573][ T9077] hci_dev_close_sync+0x602/0x11d0 [ 131.359589][ T9077] ? __pfx_bt_err+0x10/0x10 [ 131.359610][ T9077] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 131.359625][ T9077] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.359664][ T9077] hci_dev_do_close+0x2e/0x90 [ 131.359692][ T9077] hci_rfkill_set_block+0x225/0x360 [ 131.359707][ T9077] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.359729][ T9077] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 131.359745][ T9077] rfkill_set_block+0x1fb/0x550 [ 131.359767][ T9077] rfkill_fop_write+0x2c0/0x580 [ 131.359786][ T9077] ? __pfx_rfkill_fop_write+0x10/0x10 [ 131.359806][ T9077] ? __pfx_bpf_lsm_inode_setintegrity+0x10/0x10 [ 131.359823][ T9077] ? security_file_permission+0x71/0x210 [ 131.359850][ T9077] ? rw_verify_area+0xcf/0x6c0 [ 131.359866][ T9077] ? __pfx_rfkill_fop_write+0x10/0x10 [ 131.359878][ T9077] vfs_write+0x2a0/0x11d0 [ 131.359888][ T9077] ? __pfx_vfs_write+0x10/0x10 [ 131.359903][ T9077] ? find_held_lock+0x2b/0x80 [ 131.359917][ T9077] ? __fget_files+0x204/0x3c0 [ 131.359933][ T9077] ? __fget_files+0x20e/0x3c0 [ 131.359951][ T9077] ksys_write+0x1f8/0x250 [ 131.359964][ T9077] ? __pfx_ksys_write+0x10/0x10 [ 131.359980][ T9077] do_syscall_64+0xcd/0xfa0 [ 131.360002][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.360017][ T9077] RIP: 0033:0x7f4e0ad8eec9 [ 131.360029][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.360046][ T9077] RSP: 002b:00007f4e0bbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.360063][ T9077] RAX: ffffffffffffffda RBX: 00007f4e0afe6090 RCX: 00007f4e0ad8eec9 [ 131.360073][ T9077] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 131.360085][ T9077] RBP: 00007f4e0ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.360100][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.360109][ T9077] R13: 00007f4e0afe6128 R14: 00007f4e0afe6090 R15: 00007ffcfb393298 [ 131.360125][ T9077] [ 131.475351][ T5940] Bluetooth: hci1: command tx timeout [ 133.551544][ T5940] Bluetooth: hci1: command tx timeout [ 135.631687][ T5940] Bluetooth: hci1: command tx timeout [ 137.711658][ T5940] Bluetooth: hci1: command tx timeout [ 137.803380][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.805911][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 12:13:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000002af31dc RCX=ffffffff89700fb6 RDX=ffff888029b08000 RSI=0000000000000000 RDI=0000000000000006 RBP=000000a7c5ac471b RSP=ffffc90000007b70 R8 =0000000000000006 R9 =0000000000000000 R10=000000a7c5ac471b R11=0000000000000003 R12=00000000000186a0 R13=0000000000000003 R14=000000000044b82f R15=0000000000000000 RIP=ffffffff81bc74b0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8606717d60 CR3=000000005ffff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc47fbe200 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb66401305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb66401313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffea000116b000 RCX=ffffffff81f93d5f RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900039673b0 R8 =0000000000000000 R9 =fffff9400022d600 R10=0000000000000000 R11=0000000000000000 R12=ffff88801d680048 R13=0000000000000000 R14=0000000000000000 R15=ffff88807ffd7400 RIP=ffffffff81bc6e33 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe701ccdbc CR3=0000000055f1b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61c2b0bdbec1f3b9 076e3d04c9d09a08 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb66401305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb66401313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6641b74a8 00007fb6641b74a0 00007fb6641b7498 00007fb6641b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb664d1d100 00007fb6641b7460 00007fb6641b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6641b74b8 00007fb6641b74b0 00007fb6641b74a8 00007fb6641b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852f8b15 RDI=ffffffff9ae017e0 RBP=ffffffff9ae017a0 RSP=ffffc90004fcf178 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ae017a0 R15=ffffffff852f8ab0 RIP=ffffffff852f8b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4e0bbd56c0 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556afcc25da8 CR3=000000003f991000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0008000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645c89cd600 00005645c89cd600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb9f6f880 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f70206e65687720 726f727245203a31 696368203a68746f 6f7465756c42205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 426b383235313835 31203d20294d5528 20426b363930342a 3830332029455528 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20426b383430322a 3820294d55282042 6b343230312a3933 3120294d55282042 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b3231352a343431 2029454d55282042 6b3635322a393431 2029454d55282042 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b3832312a353631 2029454d55282042 6b34362a34393120 29454d552820426b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81610476 RDX=ffff88802eb70000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90003b7fed8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=00000000000000e6 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bc6e72 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556b087500 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556afcc0f300 CR3=0000000051bf2000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffeff7ff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ce8a9b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a04c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a04c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a04c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a04c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a04c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a04c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000