last executing test programs: 41.997601273s ago: executing program 1 (id=104): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc855) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000080f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 41.996678984s ago: executing program 1 (id=105): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usbip_server_init(0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 41.399574137s ago: executing program 1 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800bec010062726964676500000c0002800500190007000000ee220729e09a68983fb65d8fc3416394b8f8349859c0a49f960e66f8f6b5dd1774c8bac320bc21ac86ef5f46f54c0eb154c88d5fdcae6ee6625f6fca27cd4ac678ae5bc2997de4951f364fb323d5cebeb05425c15ea9c6c6651831592aacf8e22ef4a7b45ee0f87928baee3b650a62b7ed742c8854a4832c463deb8b34dac912d4d5571b"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x401}]}}}]}, 0x40}}, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 41.396378487s ago: executing program 1 (id=111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0/../file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0), 0x2, 0x1) umount2(&(0x7f0000000240)='./file0/../file0/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 41.290268649s ago: executing program 1 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x2, 0x7, 0x300, 0x0, 0x0, {0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6075}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20024001}, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="49f3d58b65a20e4236fd47ac23d1dab6b371a4f3256b35c163866c8c70403bb27a5c0789ae3c8499aea45eaea4b65e78965f9cd7dba452595a6108e05d4197b53bbe6fb53c", 0x45}, {&(0x7f0000000280)="9862eb1a4a421cf7f232a9c36ef41252199cfefa44d4ef5e3c7baf457ddb617832c6441fec4b932130ee1f411fd96fd7ba8f1ff3708e24061d771b5f29d11bcebfd3bc267b24be6dc28707d87db5f2276dd4e86e8c2f8cebca80c9077771891543a985d0f834e97f98f7d6c309da3d90b6984eab81d16a989464b5e624a50349f8d1c2ca9488c834393f8a3a5486b97f75f59574d7e5d31af67097a6348df1fcc9ef", 0xa2}, {&(0x7f0000000340)="457f7a52e8ad48c3bcbcc9d20131609c3ffa47c484db3133c435548a668b6bb7fcd1db704ce9af240c523b463e2a68bf58670dad99fc4a40d1909b6238cd872a5e819c9e9f03769da582b15436e596cce4508791b6e639479b77ac040326f2f7d5b8847dc4414d500ef8f64a913d08d6505febb2713c88a33f3c1b0717eacdd97fe430dabf7554d74c1b56107459a3368229c7bae522f4e7060ef282476c41dea0", 0xa1}, {&(0x7f0000000400)="cf499ca459ebda736cc272a9a699fe7adb6a74e234a38b247765a19bb08a5990e84478a6deaf69ed70545c0d4d4c6208b196f4dece1dee59f0417a8273ee8a1bd830473f114cd11b4e753044618f46abe5696d2b3188e1b5ec0bc80d197797702ee02edb55e0832ce7e7f2c49bd608748054bb3ec19714160797c951c1a6226f7167d6fbba24dd5daf19e534ccc4cc16e220503695ee6682e53244183807b0dd2cc573e49f75af4f60e2349ba89c9d5372741fae6930809fd01d1bea105edb3a192135780093b12b217cc438fd1a0178534fa6ef5f502ef3923d61dab006135d566562f3d901a0a273a45b0d14315e", 0xef}], 0x4, &(0x7f0000000540)}, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x80, 0x1ae) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000600)) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000640)) ioctl$SIOCRSACCEPT(r4, 0x89e3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000940)={&(0x7f0000000680), 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELFLOWTABLE={0x164, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4266}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x13, 0x6, "295cb2dc364ece5894810ec52d7310"}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x230}, 0x1, 0x0, 0x0, 0x4004094}, 0x4080) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980), &(0x7f00000009c0)=0x8) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x33, &(0x7f0000000a00)="c4c4bba39777562b054172b00750fa94ac0b1efbefff418556a6984208052cc11286e93fb61db93d7226f2d59b35e4bcf2d852", 0xd, 0x0, &(0x7f0000000a40)="64280ea664cf9f1a1945b20379"}) r7 = syz_open_procfs(0x0, &(0x7f0000000b00)='attr/prev\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000b40)={"60d068e4ae8871b30075ffe3347b336c", 0x0, 0x0, {0x401, 0x1}, {0x8}, 0x10f4, [0x2, 0x5, 0x1, 0x6, 0x8457, 0x44, 0x6, 0x8001, 0x2, 0x7, 0x6, 0xd76c, 0xffffffffffffffff, 0x5c3d, 0x6, 0x84]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000c40)={{r2}, r8, 0x14, @unused=[0x3ff, 0xfffffffffffeffff, 0x1, 0xff], @name="167d3cd757d35764e46cf0ed3db75b4ad9ca141d00bff6458bd4296788ddcf7c290fd3509684cb19d567460a04238f7d1d22fe48298c1129b6d924b5383a6c2f3a39da6668d8774b089c102509c6fb81b21030675479327b2cf4753564f6e3f59eec1b5dd31495847aa1180d2935a63357e48f2aed0f3b40cd126a5b2c7542f385875eea8788cfc553d367ec0aeab2f9aad3dee4f492b46f71937f27c38827d14fdd41ffad94c4267b49874179f7107cc3a4a8a0465af4be0cf6b03f9091e213990889a493b2035ddfb921d56506e0f5ff1c8df3bec0874950455784f0311533a8612205ec0702ae66599ed389eafaea546a153ecc2b804cec15b262baafb4aa0f58028c5e6ed530b58cc3f7a3fff2cd072f19bf5258db1ff9ac5936fd5c430d170a67d61e8695e5b2f98762712984edf9c871e686577766fa4634cb50ad565341d8c595bf80b7166b29892b0533cf193b5835ca65a95dcef1a1df192b35880d089c4fe6850eb6a5a21fca116b49b2d5cef1c85e6b373da32bde71b728437a5936d1538c8a47c8840b9c8190bb21af9bc9fd0e8d45461a5e4673431d00283048acf2891b1c9d1c7938d163e70c721099844f5240e3e110f793465a17d61d7ae11ca2695e209da2bb936315b6221cc1e19dbdcb400b2fa364a8f1062f463691c91921be74d0c456cff59c55db776d078b2a8977c8c7ca55130d06b6cf3a883f8354fe69ee3ff50e1b4a4f6ff47674b33b24eebe4180982df71268c4166cedc1207cc4624fff2796690be6ffc17c11997fdf5ee872951f0978753ddc128b912d8722d071fce40f168a76aeb202263296283d8818e34858c6691c68d4159e892fe69777308c9ebd0e423ae28f1cd1868062d81cba50a67b53417acb8653ee3ac5dbe5a1415ee33751120b71e875dab7c1987b34197c189b707f5d3051bacb2851ead4a4647765bc9223fa57994de4fbaae358dd59dd954e18496ead07c7def067af86a0ad255578668a99ab53844c7d50d2c6abcc566e5cdd70cefebf412b64104769fca853c8daf5f73810de1019f9303c9df706b3078434c76374c318639e3e56686b88255c8cf0d05d95472fc64a050227fd9fb04833b41a12fa8eff8659884d43ae9252f484f50cb0333d291c4de3c03d09b8200f8670e6ae636af0f3924442e10264d57998cd6fd1131165fc867c82f2380e3e28655b02a028116cb1dbdca580401576511d887bf5e05f771591573716b03782e579dd07ef93198d791493976d3ff2d8d63c60063b012ef87c7228bea45787c7b55b9e4c59403d3922310b037140cad8fcd0b1dca8e65c56ed9a418c430a6eca21c38a84c5da70c4826d09b280a8c4deec4bf3bb6839bf721191c535a04eff185d931c91680a637bc8c7d687a31937579e36e0e90c508f7a63db00da457789ed9ae3383c6b7c2dde384941dd2e2613225023fe6c99c65cd08b7438c3a6baac6b076c848417b8ac1e4d402c21a5905bbf4deaef487e27b0b01c473a250b0fee9e8198e99efeb7628460ae16fce2fc7d88e466566682033ee15efb1d6fcb59ca2c9fceabdb7688e24bee3c09d0815b274e343781a6510f1d88e1651600933f81950f7e159be3baf7cc65d6b1d3fc780037a97be2e9edef55959e129473f655b188f8dfb5d6441714ba89aafa4b8f16536cd7cce614fb0b42646bb959498b89241230c239ce447cfbfae01d81d90473970c872f05c56654f6414b02cfe2ce3af86b5a3f8d6d86ee8cadadd66caad6e1ace350aea62803517f3e33895f52bcbc9550f20fb53d1a5d0b5aa2b4c5d57ea9eeefaa2c06339304c912dae32c99ba8803a871696c6c1aa08e3ac0f224be6353e001e46df61d306a3cf99c9e12f2cd72e7c91b2b5bbe463d69db152d8fa321b362b778778f21aeddc77c7d91eab3f4e8af850d192db9da461ca2809c5285da547e26b88f9f0871beb8a995f43f31ce200b6f81e85293a0df0fa3e169b25aae2691751a058bc5cf20e414194897efdcb49810be1a62914c57df4927e35476755a2a2b20c64f87ea557c1040062cec849d547cd132cf863d0c78f440475ed989a0ff7530b93d2faea4f4118c375497893cf67d856536f45980e26f56de9a3c21c112cfa7bb46c86fb5e7081fd69511025ea9623eeefbff68418ba26f3e8dd09386949220a3eb5e2376b4f9f5e44008dfec730fb234b0cc0d03c84b7fe495ac417f67f0f46424d5a6d9139fcc8628c40c626b3d9500ff5f2793e605c07325b60b05c98600fb14670ed5b8cdb71607d41baba1fc9ab1b3fa9ddcbc00c5be6e18da070b00a80b86c6803716a817b960f84086c085933c14b6c01edc05e9c216e4c129df595a7131d0bb50902bea1c8ebd699dc5120e03a38a7c32a545c230447aeb5a3d7d761481e5958a393d45455220cf3f87cafacca1c50fcda16b4d4ad6ad48abeb89b352d921965a9459595648f2180a360ff4455520eaa67059e83e0a510f8973a0f9684e23e3ae158182eb529192d3490baf5d918adf836f70b21a21242756ca802f2403f60baaa6f65bc9871959b799c5545a7130db1f71941776bd457b77f9fb3fb8f916210445134e4ec664e73aeac12f81d2abc43287c1763830ffa6b946bbec3b2803b1a7d2198f1fc5e172a155bb95b5382fc51a305a817ceb857d099a4b29a1e446fe66ee96e3f25829a1ddb07c691578a1670e72d79a3b77c34b2088a5f2895a4421fd1778a3fcb4e357a9f3fb84b62f770e242ca6597ac0b071cc543d8a9d24526844ae22d6ace438629bdf4b96a3ce5c2bb12dbada97ca2d754d663f5999d51383c776375f8c7ba5cd531b6d7205e67901a5fe76c30cb1f619a9805014800b2441ceba8aa17f2de705a89931bb5cf99a7bc3f83d64d661c7ebbdff6ad1fee47ce05c94b076df07a5c27bd29cb3ffab4003849fe63ebaa210b9592dca7f928a20d4cf30fdcc6c0d478172f57f6075ad539703749cf2e98be825fa0a917c76494260ab3ba7970b4a335e4f1c84aae73b91453c4942581cef59680733765f80135ca57a13253ec284cb72f1194d80d96ef24ac7b26d7b799f9aa808cda4e18eea1e7a7bae3e5dc3ff8426b75e1ea5f2e981d80703d8ebc8b2bfe8202ff3f7991d3d4dc6f1e3bc604edb5c12c9efef3e97c22e244574e145c5be406e9b88561c6a4f93425945733a8f0bb435d2f97c6d50963160cd60f975713dceadac76dea3d6a1ca92d1e99252c91a93debc8e54b80b8856e7137cbae6f91841432510463c418e25b5013d82b7f731077387f93673c4f44981c7e1fb4d8c4f50ae0586ef8c20419b98def83d86acbb1bf068210fd4b374c64428183bd6bd1dd1f412eee7af999101ac84f688457a1dbc6f05b9ee0e0128c5d01cedc1b830718928d04ba9adde473ceb33a50be035491001cd88d0d0b1ee7b170f2a9bfc0700426bec58057af08ff690db01bc41dd87d592c9fd25b439ae51023d24778ec2a63e6c724a59cef69a28aa2192f7b1a925603edcc4a930c8e3587e217360a8e6cbe5f65ef291d38596291cbb29673a6e669cf1eb059dcfbdd25d051af481ebfeda2c3cdac583d6b2719448d8715cad59c8e6c2a8312c0d1be4c6f7392b6353023be7e81b472b780a73cd0509ea299e1f5cb4218ebcb415986d40536fdbd54de56c7e6db2e1930b8647bcc0b8276e76f259a36c1b778cd60622e7990ea104ee7dc5659c417ca11af8f54281cfca9869bdc3c56b26cd4be1491454fae9e9cdea0d66dabbd9d6b8d38ae184598192ccc85ef2ec5bc5844b54ede1cbdbd2715faef1efa23dcb4c1a5af185beab14db96a943897237eb4dceb2cd87926a2dceea47290281df2446746ef69a598ca9d430c1c120f55af11d32945f3bd772ed79afe70a122d93b43b45bd8c6e5d6ba35f35e47358bdff43decbffc6d05ddb8a36a306d4176f6995cc9388ee384e0c4477b8807024928a5a80b86c588a799720c4390f6c42e816b69fca494b69abb7dbf68bb12e5e4eb0d70b85c33b39971279eb30ef5c5fcb4fa9e5d91e642bb09a98e316645899a251662f4fe3a2b7a78920b19ddfb4c1074fe2fa1a6277d1b4b982a1f3ce0911a3222a9534ada24fdc56fd89b09282ff06ea7b6c098c706fc955386ca1c41b14d961b4104a7cc8d4634c3b7ce05918afa1f2e2b5116b968879a9d30ff70c6a0ce00a5fdb21cecfb8cae6c450b153c6147d8426d2fc6744cf341661b5136464e571869813547697bb6b757a6a8d60324a49c6a69aca10db9b260a17f959e5311b13fa1c850cf6ac07856c953f5c3de5b5c4a9574958bb8ebc6039dc4677808daaaa3867bb80cd373f3a8b30bb057a27ae9104d5b44fae0781359a2a1875e335cd80c4db5fd0932da3e7cc2b3b9e717d1455aca269df0b596456533ce0269f55f850b65547b596f1c231ca8f19ce143f84d67d17e9050155360080fa7d5ef6a79a84af810e0735473dc8eee4e5f4f609f0f9bf69560e3f206f54e6412728cfef362095a62f81a1fab0c239310db9863199828b43471cd0c384941b74a9f3d3b3bb1bbc696e8b178e7e22874bd8fe74d2cfa8218701f51ac3113999b05db96f168b7fa45271b4457c98c91e002e9f21ca3fa04b5d50e7df571c15ec084733eb531fa60f4af1efb7f1a776f87c77a84bd5d359df4737e0fd7c6ab39a472ce9a0c657edaff626fc254320278e07c68ea1830f89ce7fdc2a776891cbe45f617dc69b1c0982210749aee9dff32214da0080f562613400211c5c018a0f8b2c602011ca3a13998a6d68a5dbb73fe089dfe7fab6c562e682e8d0a3cf3fce7541479a3f39d10f31fecf565e8bcecd2144348ccb3890b13a4f4b58539ff3f5a4e47096225557a0d1cbef1a4978b882ced27116842fba86ca7a7f4ee5cdaa4b5b1c48721220d3ebe8bb922bbe886b0eb4cd1188a795ba0bfdb784d103e84238a4293ea7078576f1d3b7bbae986aa068372260ef3c6e1d76fb115cfe24b545ee028aa1f3ba35a3a1555ba7cdafb3bb695169e9a04c9af41188c45c5d86406a514a0873831257b6deb8ba6905afb6465178eaf980afb544dc1482f28d40f5773788431b2bf386f59622e2d352c133d307454fecc1af11e5e3b01dec18254a0fe90b1c6ec0319b095d7dba0c18c86486f7a5ca889e06c68ee36be3e329f7613cf01c27016075a460fecaa103b607e30acbff3147c2c1edcbd6e4e54d7d5edfc069f83aba18c198b8558c991fde85f786bf20df82e21336aa04423aaafa73adce0bbfaff8106c7d7f70db11301640a7ff74da74eb5db197f65102d2c09380f488eb09312c07304219698c0cbfba1940b1301d891d35b0f87f365b2ac5face08be86a95f4a30df728eb21d2a92fef8d5777f200f43282554b82fe49d7878903347d6ddfa5cbd5307b6b17bf75073eb0562f29c2206e855e200d765bab083c9c1efdf01d5a468973a34e92f86363809d9bf9538b7e33cf6322741f373c9b2aadd48c00f8c82d815cfb7f52ea20da409ccc1086683c4b99505f4e9a5b49a0a943318203fd1b328655eb43eda91df096c1889caf8e3b5a2e3842e2f7da7cb7a1e98aeee2a60ae0d5edef74df8ec2efc673dd3e37dd33a3b0e24f9ed55adb67ce0100611eb810093ac4d4a448eb0a34fd62aecae949e96f2c731e066f3c4e2d3e67f7675b6220f2a9683a6284fd1291f1f4fc2aa303ebef740c0f354b9d76412590c36"}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c80), r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001d00)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x64, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x64}}, 0x20008000) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000001e40)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001e80)=0x28) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001ec0)={r7}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r11, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, r12, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008014) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000002140)={&(0x7f0000002040), 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r12, 0x500, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) 41.079450639s ago: executing program 1 (id=113): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x6, 0xbf8b, 0x4f6}) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r4, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000240)) close_range(r7, 0xffffffffffffffff, 0x0) 41.053284648s ago: executing program 32 (id=113): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x6, 0xbf8b, 0x4f6}) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r4, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000240)) close_range(r7, 0xffffffffffffffff, 0x0) 30.550036915s ago: executing program 4 (id=326): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) mlock(&(0x7f0000179000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 30.548194883s ago: executing program 4 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@dfltgid}]}}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) (async) tkill(r2, 0x12) (async) wait4(r2, 0x0, 0x4000000a, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) (async) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x4044000) 30.460277599s ago: executing program 4 (id=330): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc855) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 30.338133529s ago: executing program 4 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0xa}}]}, 0xcc}}, 0x0) (async) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 30.239249362s ago: executing program 4 (id=338): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) unshare(0x22020600) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x2000000000000243, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r9, 0xfff) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501400009078080036521b0fc26f65348e7afb2f787fba38af6539d7fd25f9f2e7848909d2c5f0ef6727773b258b14f5b7cd6558dd012ff0429314a17c313d837ad51a5fd173adbdaec098156b20d65a50e2e5fb64043adc1ba8409caad770bf00480bb383291eb3b5414321fd092c0a86a4ae99d409dbe0df8f"], 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454da, 0x0) 30.18773376s ago: executing program 4 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1a103e43) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x4, 0x0, 0xfffe}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64) sendmsg$inet(r5, &(0x7f0000002500)={&(0x7f0000001040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002400)=[{&(0x7f0000001300)="12435b2e1ff55f98dccc3bc0152fd40f21c2f6aba99257ea0dba29753e176085c0295cc55e8bc058faf0d3299afac9ecbedeca49b73c3d80babdc640c83a6dadabcc560cc5c880f77b3b", 0x4a}, {&(0x7f0000001380)="a466a01fd9ecd21de0b666cc8a0f72247a1ec44efd91218f90ec3cab49d4bd10499effbfbaa41e8f424e58bac5a86ad81b5afdfce6d2b151e7c6fcdcf66e9ef983485155fce1913e1112c7b149a479d4958e9e20db859d3b99c7ec6a4e9a27675fdfbc1f69928acaf71e023492dc", 0x6e}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000001140)="8c8dac6d17d320c2ff4807", 0xb}], 0x4, &(0x7f0000002540)=ANY=[@ANYBLOB="c2000000000000000000000007000000441ce8737f00000100000004ac14143b000008000a010102008de0772c6b58d590bbcae1b7378bea00000682080a31936ab476070e0578dca368e6de18a06180e0441c915164010101000000020000000000000003ac1414aa609a7886440fafc8f275209fa5da996c1a4fd64424c193ac1414bb000000180a010100000000050a01010000000002ac1414aa0000000000000000000000140000000000000000000000010000000100000000000000"], 0xb0}, 0x4) (async) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) (rerun: 32) 29.90815124s ago: executing program 3 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2802, 0x1, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(r1, &(0x7f0000000100)='./file2\x00', 0x1000, 0x7) 29.850002237s ago: executing program 3 (id=352): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) setuid(0xee00) (async) r0 = socket$unix(0x1, 0x1, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x0, 0x40000000}}, 0x2e) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}]}, 0x48}}, 0x30) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) shmctl$SHM_UNLOCK(0x0, 0xc) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') 29.719658777s ago: executing program 3 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r2, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a003400020202020202000034005080110001005a4ac6ae0963ee7ffa96cb120900000009000100408922a0bd00000005000200010000000800030001ac0f"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000090000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb700000008000000b703000000000000850000008d0000009500000000000000e796f0ef35a3f18b90dba197903bee65ed4a1ae8a9b919ab47875a08e676aaa9bff23017c676021e13703423706c045a697891b390170d979a29027fc6e8526e80a7a5c37d0e655993e41ad1ecb3bd8aca34b1cc80ae7889bb8a1866befe6ab5bf5c84"], &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x10) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x80}}, 0x990) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8], 0x24}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180)=0xffff7fff, 0x4) 29.619181448s ago: executing program 3 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x7, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x80000001, 0xe, 0x5, 0x7, 0x10, 0x5, 0x9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) mount$bind(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000100)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000600)='./cgroup\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101090, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002500), 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x400464d1, &(0x7f0000000400)=0x8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0xf) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 29.60563699s ago: executing program 3 (id=359): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="130000001a001f00030300f9002304000a04d6", 0x13) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r2, 0x541b, &(0x7f0000000000)={0x3, @null}) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f00000002c0)=""/62, 0x3e}], 0x2) 29.17900908s ago: executing program 3 (id=366): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc855) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e0080000c000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 29.081409352s ago: executing program 33 (id=366): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc855) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e0080000c000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 15.167077491s ago: executing program 34 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1a103e43) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x4, 0x0, 0xfffe}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64) sendmsg$inet(r5, &(0x7f0000002500)={&(0x7f0000001040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002400)=[{&(0x7f0000001300)="12435b2e1ff55f98dccc3bc0152fd40f21c2f6aba99257ea0dba29753e176085c0295cc55e8bc058faf0d3299afac9ecbedeca49b73c3d80babdc640c83a6dadabcc560cc5c880f77b3b", 0x4a}, {&(0x7f0000001380)="a466a01fd9ecd21de0b666cc8a0f72247a1ec44efd91218f90ec3cab49d4bd10499effbfbaa41e8f424e58bac5a86ad81b5afdfce6d2b151e7c6fcdcf66e9ef983485155fce1913e1112c7b149a479d4958e9e20db859d3b99c7ec6a4e9a27675fdfbc1f69928acaf71e023492dc", 0x6e}, {&(0x7f0000001400)="2bc71c6401fca67629c87c9253075094d1bcf7719243d768237e28002af814da27bcfcd5e39d7f77ea2afdded6dff2b42a03fc9bc13989f8e96abd0794d2902584909450053bb449f032d36a575fc862c1df856ba70f0ee9388b6d976ca033e8f7a0b4e7f8e1cd495ec8991adbfd92ec8de87b85e5ab023071bdecbe08bbd3e9f84a804bcefed6a60516b7b36e401cf227cebc9e2ed6d4efa6a6075581856c3c70139731f61fad1ab6199b12273d5b1c84a86809ff67ce116de7fe4bc2000838a889daa10a6cfd95b1759b7f01c836548665e96e387ede1eaa1fb1ef2cdbd1bb2958d6078fa0b845fb94a4430682067a3206ec84dc46e4d91a675964ebacc31f4f5c9131e573f4df772450b742bf1a0d0b3304c33ac5af0aea8a23784868b84a866a0ef5bbae1e98c354671ef2e96e3e8137a05ec3b1cf944de789388ff785854dcc971c1b315e749bc55796637cdff18005ad63d1d727539250b26793761d1f1c7bea3c414556bee067bd645d0b804621c220491867e2076f54258e39f5ab66dfa2b5d13ef1fd1f1f42de0b7fea84ebeb08b3ff7889ee4183995afc8258db6e3c3a1217cc4dcb33878273431696b4414c91d68edda0b10405c3d4c4876655bca145d1c4cf5ef38f6a67d7d2755cfad2256667a5eac1a83a156c3362bfca02a40232323f7afe475e16265bb2e39b7f375c4932c2daac816facc71eb4b52afd253e81047da66bd7d016c5b12d22fcf6621f0e17365074b5423731eaf8211bdb740b0819d7758bac7606c780921642ec009cdc66ef87f9bf315f749e0c98c67efddda11325fbfe4b9780b8362460f75664426c352aa7e6287c76cf5734f03a8d0ab89d69ae5f774d501b0ee2066ee40beedb14ec7c7f18ae793c0968e75c71e5a8031e9703e697dfcc316c33fc6d2caad66adb3e770bc8eae68add4972de100f087b7f59b83b2cd3de745603b15c4abb9c4ec2a5ba27db3604bff51ae0e3497face10078ce6faaea0fcc9edeafc11a53e3a41dcab66fd18e644c5625e08d4846f21da6b135a3c067ae51cc20a1a2dcbc2973bfd060164eeeed051d7cdc374fd7f04bf37b28e187c6378847da46f2114781cda78a03e5757d44b71411732d2b359fecf9b021a24d0967b8d3b1ecc0586f61daf476525553aa5795b8b6ac6de7fd165972e4f6903f3fbac504b8a58f9f41b103c926ef6ce0d765feda1d21d12416a5c0d39e1b9d9bc59fa0c68799f40b47993dbc61a4740f8238da3f872b6e272e9258ea09a82a9eb172cea4275ad0caaf67e0a47c5ab5b62b2db4bba5c2f3f2b2f8a202f859a8693d85abe273adefbd01900d29e22a906280652e27be97287969d81738fee7007d99166c7c5977eb6390a16e014a913651b25964f22d17a56d81328559ee09a76df1aea72a62a5ca113431fbd0a52abe9202ea47abc9a2fa7d4af96485d79dade282767079619272ec902381228258c9938bccfb5d0b62ad47cde8c69e6b5a61d904e7ab8fe687cf28fd5a05539f9ae24b881ed3eb3571b6c3fc72930d34f0519db2c07ef06b9947ed1f5a5f8b35bea311aeeb82e4b96dd08cc480320847cd5a43b1ee2bb0073f1ec78735b4d809ef8f53defdd18bbfa9b5cf8053a15793d62f208589ff5bd19d6d5b27cb6ebfd990a2eacf11e66db1bf214ec78c08f3ca7858004dace5eadf05b94a57f464d82da040d0e6b355021664e87dc8b92d77d842a1deb39b74112d2d7b346845ec04b47e00aef7d620d463b5e8d10b93bf05053028161ee4c598ee9a445043ec0ec3d0fad292547b8bf19d41b5da19b0b05489e057927076414b5d26edb61998bc0940fe78e4e6416b8b5944dcf2987224faf0f103b3a3586ad90ccd7c002a71059155db2cf03d503dd17073d0161a1a01b789435a4af9daebf38dd74d73ed7031646e4a3f3f8bb8defacca3e91fdd6b4ddab417456a4937325d2bab7e170e9127bd0c2d42d78769023d23356a5366732f64f9ac3c98ba96d18377800125305b4818a9e92ada781a41b5073f856b71803d52b56ad0e1a595159f12405f6200cb562fe2365830664c86020cb12ad0ef18c803f3ca3b0670877adc9c0a6f301605758e1b4c5123168edbfb3c9c54aac6c12ff5acdf1cb120c67b472f34809838eb383c60bae75443d29f6b5be28df748e6ee071d79640f17005efe9f8cfeb66a27d9937e1943d7f79f9dffe3869f578e30d1bbf0407c12fb52bdc50244a86c9307736e8b2743b50c084b97f1b23bfd33afcbf49bfc491d9fe57aa0763a84054716eba6e148d55c344186b5968855986c51f508011c2cc2b5fb31408d3f8f7a425f8dd0337daad13644943ebfd8f34cffd53092176e0646be33f8e9c4f35d68ae6cc6cfffdbf8c4b78e8206f42d43fe97c4687c08fa86dd9bf60aac4f4f2ca5c5d10c7310587b7ecc2879cf0ce3cd23e232d49dfc3c7a0a1e91fc8d422a78b106a4f0d2f2831e190442123a8652daef83b85c09654b6cd7ad16e9ad99aaf77b75348009864ec9ecc207342c075083472541df02b4b8bb340029bc7f70152ce5ebadbf1ba75d494ac36d0374628709c670989eb1d620f7f6726bb0ca2c5eba089c7a358539f0ee74e91b27217beb16b4ff530d789fb43e6199d2a0393235027fe941739bef6d8f9d992ad618e12c149eb5f86a748738da46d3758de3db843e6e31285b36067a00130321878a84693127ec67597ec236314d29a11da10c3cd91dbd0566856e445f4396fc04685c95097883af244f125925f19ea28110de42a0316ec828d6c7483a11957af1d74f386f0a1113abc18a56c2c4b6ff85a57b8bfadbb409f0e0ca3e14017321ce20c3ad7ddf243509ea7e2f1cd9b0d5c589ba87770b4acbd006f38f25e5f1eecbf1ec1e1569fcb3873673562f6e81d8a6466d66b283137b70c1390de92181862bc8309ae51cfdb4b1b2e6e263bad13d4aa07fd2b720cce626b9fe28440e844e66ed67800981c9cc70e16456a20e3a64635656fb844ea038906d3386088133393dfb1cc02c4b65d8499015537ca69df72976a4e0e27fc58f8ce98eca0fd1e67075706a7bdbcc9f02e44c76838cfc65c1e689cf2dd5c52e5fd5e5a606eb3e5574380e5448390ccd88f90182b762fe29119c7aa3e19a518e6f560598e7b65a332458189933da0d8364d12af2f30aef0dc6ba7f16dfb3b1699ee3de3f3427f9094a3e447d6ed7fab0e59c084ed085d3346c0a931321162c4beb0408c576f3d36733dcb9b6fe860fcfb248d9017a6cc1dbfc9b1b4119c4db3a0926978feed5fc96faa7b32a3a8a95b6e7186dfeb31707b37e146ef2a94cebc1ee86a33605fc67fce378d0f259c13ad929f08c046bfff1246efb00975efc7fb54ad5f6302d4264166e916aa6da43a9907f3b4426eebb09abf0b8ae1048a518f824f4f0ee5f9d3f14a06c8cfdaea753176341630a86c1823d973ba1cf25837847d4881d3d64f776178ce36275e5e1d5183cd87499e4678411f6ae6b4456c7234d4124e86e1155fc28002a7ea7b87f504af9e4dd3e722e89d0c108339cd7a20c36de9ad8a4f3060e1094513ee947079f19c31da6147082509a26ec4b80568c95ff176a0b4cae141ccf39d567281d9999db703b1762eb689276e943bbfc5730f5d8f8890f213b8c023bcdd3eb54b024d5eee6cab1ed52b38bfc1b9f223e24163e9ea6c8e3ab12b58b29819ed81b70897121cbd804d352deac3dc16d33586a640c06a92fe31b2a50f1e0f05fe81eadc7f8323c80484c609bc33dbcb5ffd1595d5724004074520f103d8fd6b8e949f665a3ccaad7dad352196f7d5e40eb5eb4cf73393e1d3f8b4f9545d1a484a222d8a64d45b7b5ec73df7332db7be2395df934810ea8a90cfba2669bbd4ff1ca2b71a22dfb97d2393ceab7f2f35276ce5e893844dfd6e372a84e4314fa453173af78a4410f1a2a115b31ef6ccff71e206bbe0d36ffeea8c4ac00afd8c5d2354093ba625a1ef918ecc2aeac3e2e6cb47848c36e28093275d3ff19469cb7ce01dcefd664b35aa9237c032c2b9ac8f54ceaca07628d74d2c409e6154bbcd63a601d91161fc6233bae17b431e5eaf73315b2f9319cd45d26d49e7bc62546df197b2432df7934bf4e83315e88eb2cee7b0ba102e388020259d41037215c32bee46fdf395bee143e3c6d3f286a17c3bba445ab9296e12691534e0de0cfba1653f52e334520efa89c29ca21aa8b40b9b4cca41c011e575b971aade61ab5448aa16de68913a1a2c40149edd0fab6ab118b76fd0113d08a9b51f087c199da29cc9360df737d05dd4fa8213aedf969d180ab35e7019832f1eb169737687653a807f9b35994064d942572d86342a81484c0ce733e79975bddb09b42e287fd17aad53e58ea5b31c813b822ed0fb4452da3175dc0029db491e39b91f581c86f093a3b2e1a333532d1a67b519279d97a6966e5e3c286e1741eac1fdd8e46fbc5c84db523cc9a3dcf93cb7845983d368ae4599c2f23d4777b62d4512d485da56cea8a26f9c266605126b877e8cc0bc262ebad594d5e07ae044f9a8dba07201952def540455a7c601b1b0703f16a582160be7cf7d8c028879daa2cf552cc0de64cfb7c21aa14b5c3c9c9178a981862fa46b6788146576cb7e271f8c6c542be40df0af43be8445f47f77873574529ca5a13b249a72ad44b3d284c79168ec560c53c8eafa2242fd809da3e8036a3cc84ab47ea858382dbedb78d3bcfa2ce1be45fe50faf420fc03e69eb3988d9476e7c1f72b50a9e27b42749e5690cf28f0560b80289419d5c8f33b11558d3f2b5bc06dcf95e760a334d3b9ff43f07a66afa5625d929412bb81802199cd778ca18f67a09aa71067b21d745e3003dbbd4aaba6c3c50d181106a30ffc34ee0152efa50c460d19785531b45ac3167b4b42d4aadd6f1d7ada78394ae7b99c52316bec9691fd44b37c8ec745a0c7692b7f0642ac509d4e785045b1153e55a6617dfeb43d5fd6b6f38276b9cb6b5b7a652cb19e36c28991ca3e83766b637a613d18637033381e6aaf7ceafe02deff2ddd99f05aa9337ab2acec99d9c5907915e18f5163f59e70b507d48636fc94cd9283199185050b29e608c7427f0686501583000d0ebbcebde1691203bb80cc1523a75d5d9c9cf2f15f99c819dfe0627a44fc2b9b413c9f35921d40aedd34491cbe40744e989ed247c2fa2666fbd8de141ed8865797ece3cff395eea109ff6929a747a87140dfb7d7721544744d30c3276ab14f6ddc2ba6fb26af3e8dfd06ccdb355317ba7237c18346a0cd3b46d4f7bde020e2f05bfc387515a3d928b451a90efb77143f44c0f65e49c98edebb90e98dc095d3035fd68fc93b84022347ee6cb61bd3b690d34a17a6a56fa5f202d031606de5fc9b3e6ee2f8a84c9fc36956e653cf5ae5f413e234dd3c4a038130a5d8e0a0ee4dd917002b4976aa6c5a15ec5e0a43b8b0d47e24c3f3306cd9ff277258c15a240bc3230b34bf855d90ebb7e5d20487250f7c612aafdcbe90acc087f1754b9cbaecc1a03942a42c84343ac714a4450f1c8d8477a748f30e8d1772f1dab4e6b09643de7b50d986c66b525e84baa456f7dbc2b3495622d220ee9a0f9d0de5f7ed4fc53cf82891aef2d2bf36ef9fa5618e0b80686e32272723bac91456e031ee30c292431632a581292e0160701a8ef6f1d0ab49aff15e9607b9b694aa448342cc6303b5beac7190f56a3140fc3fef19919c432daf069a54d653a518c647eaa1a42d269645ef8014c01db4d7b66d9347dbb928c1460bce006382c4c90e510082a600c6c28aa5d", 0x1000}, {&(0x7f0000001140)="8c8dac6d17d320c2ff4807", 0xb}], 0x4, &(0x7f0000002540)=ANY=[@ANYBLOB="c2000000000000000000000007000000441ce8737f00000100000004ac14143b000008000a010102008de0772c6b58d590bbcae1b7378bea00000682080a31936ab476070e0578dca368e6de18a06180e0441c915164010101000000020000000000000003ac1414aa609a7886440fafc8f275209fa5da996c1a4fd64424c193ac1414bb000000180a010100000000050a01010000000002ac1414aa0000000000000000000000140000000000000000000000010000000100000000000000"], 0xb0}, 0x4) (async) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) (rerun: 32) 10.39037855s ago: executing program 6 (id=696): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x36040800) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x29) r2 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x2, 0x0, @d}, 0x18, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000540)={0x6, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "0000080100", 0x240000, 0x1fd}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x1) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x2, "e4815826b1af9d911c9e181942f697619ff1bcb06be129cd593711aab0d1884a", 0x3234564e}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x654}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 10.260030475s ago: executing program 6 (id=697): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x32938f0d0ef8ba62, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b2a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.855219285s ago: executing program 6 (id=717): syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x123a42, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) (async) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff2ecafcc67af208004500002000000000002f907800000000e000000118a3dd100c907801000000000000000000000000000000000075c9b050822dcaac87401c6a76f41c4b0f72906818920e9b2ef26e25075e0fb657bfaec5ad76ed5bdfe07d97e58f7acc17ca7561d2a6db5d9b70b548cc6f6d0a498f0ad7f71a962b90a380aaac13ca48994a19842caa97e6e69085252159faf1debb5b16dcaa6302e6f60d678ee4a215248a0eb73e1cb41efc1ba09433864beec44d32a1b5296f6a0a4192eaafb92aff72ff"], 0x0) futex(0x0, 0x81, 0xfffffffb, 0x0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0x6}, 0x2) 8.854984924s ago: executing program 6 (id=718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='task_rename\x00', r2, 0x0, 0x1049c}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='+}[@\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0x1}], 0x1}}], 0x1, 0x4008440) close(0x3) 8.780213852s ago: executing program 6 (id=720): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) statx(r0, &(0x7f0000000240)='./file0\x00', 0x400, 0x800, &(0x7f0000000380)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000002050003000200000009000200920f7a310000000004000100070000008cd3"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = accept4$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000280)=0x6e, 0x800) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000300)={0x2, 0x3, 0x9e, &(0x7f0000000500)=""/158}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) setpgid(r7, 0x0) setpgid(0x0, r7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x16, @val=@iter={&(0x7f0000000100)=@map_fd=r0, 0x10}}, 0x20) 8.237221578s ago: executing program 6 (id=722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffd, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000000200e000000214000600626f6e643000"/37], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140a, 0x625, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000) 1.368735683s ago: executing program 2 (id=844): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc855) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e0080000000080211000000080211000001505050505050000000000000000c000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.367133756s ago: executing program 2 (id=845): socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0xfffffd6c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xad1a, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0xfffffd6c) (async) listen(r0, 0x9) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$usbfs(&(0x7f00000001c0), 0xad1a, 0x101301) (async) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async) 1.270420169s ago: executing program 2 (id=846): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="010000000000000014001a80100004800c000980"], 0x34}}, 0x0) 1.20994106s ago: executing program 2 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10, 0x5}}, './file0\x00'}) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000240)) ptrace(0x10, r3) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) wait4(r3, 0x0, 0x0, &(0x7f0000000500)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="ea0d000000d800660f3824992e000000660f3880a95a6d59a03e0fc7bcbccf25000066b8e7000f00d0b80c0000000f23d80f21f835000000f00f23f80f2092c74424000020f8bbc7442402b6110000c7442406000000000f011c240f78310fc79cb000000080", 0x66}], 0x1, 0x19, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f0000000140)={'wlan1\x00'}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.118832844s ago: executing program 2 (id=849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c010000100033060000000000000000ac1e0001000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/310], 0x15c}}, 0x0) setuid(0xee00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="09020000000000000000010000000300040002000088e023a9938e2d18dbb11f10c326431d6b5285b57f066051247dfdc615c0baed47b69b69fe09059b592621725fa9884c98ef0db7cd06f1ad09563ebf62625caacb175b83"], 0x1c}}, 0x10) syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r3 = syz_usb_connect$printer(0x22029da0690a8a38, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x5, 0xfd, 0xfa, 0xfd28db7ec62ded9c, 0x8}, 0x107, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4, [{0x73, &(0x7f0000000100)=@string={0x73, 0x3, "8a2574bdb2d04e34fd9e006806dbd269c9e114b83193629c8bd1cb9316b9669cbd312067c231d3d52360d9c51f96aad96f57fd8c3f4d5cb5bdf005abfd7ae6082f851360d805c9274273ea290f4a523285876b0d23ed467c0c4107b597a3b089eedd2c2d286ef2f1a5862558a5097a5863"}}, {0xe9, &(0x7f0000000ac0)=@string={0xe9, 0x3, "3714d1ed81486460a53599f56621e28bef30c6e4ad59821d2281566121c115c42958672be29f8f8a7e91e19e71ce9f566046be7bf49350936a4fe8367e4f450853a691996c38da52f4c7eaf6336cf6cbb43b9504681d2dafdc6bc88ac129669f026651f68822db9d67775bddca8cb169d7f109fc20487e8965d07e2114378600fa112413bd9264b7de5fa3f097512104e5f46959ca20a3501d4962ba7ca41a255b46cf59552e7f451f065998ddc3f3a0a58c23c9daceb948c934240c779ceab78249423449f89edd750cdd4393be3068cfdeda726f6f3509f9ee91ef20c957a5f7b144d9396a11"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mlockall(0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b7050000000000007910a80000000000c3a00000000000009500000000ca39496efaa63ab93dc5352d000000614329ebfe769a60e49a52eac935e5d370ed06a46d492970fa2c53fb2795fcf811ef4aebd8cf707e73c58a0287e296cec1eb97a155fe6a0529ad8f69249c2cc6cd66eaff44dd2941f74ec2d4366c25fdf426910fab2f2e3108771150df82fc0727f0cb78658662"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mlockall(0x0) eventfd(0x9) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000740)={0x5, 0x5, 0x7ff}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x2000, 0x2, 0xbfdffffc}, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x2f) bind$packet(r7, &(0x7f0000000280)={0x11, 0x0, r8, 0x1, 0xf, 0x6, @link_local}, 0x14) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/212, 0xd4}], 0x1, 0x1b, 0x0) 570.166067ms ago: executing program 2 (id=852): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8253015eaa7280090008b70f027ac50eecdc447b73a1e00431b000000f09172c420728d0df51502b40b431fc6a9aed1d5a1815286bb75b772e5a4a794fa9a731a1ef485124b19f0e214e07e57021519f154967fa93fb6b05535f76a39de6260"], 0x28}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast2, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d4, 0x6c}, 0x2, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x8ec, 0x4, 0xffffff, 0x11a}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r5) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000036000/0x1000)=nil, &(0x7f000021e000/0x3000)=nil, 0x1000, 0x3}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) mremap(&(0x7f0000154000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) 478.963897ms ago: executing program 5 (id=856): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="a1831c39f47a3d946469b159f64d0ba5", 0x10}], 0x1}], 0x1, 0x2004001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x0, 0x11) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES16=r2], 0x1c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="300000002a0ce02e00030500"/23, @ANYRES32, @ANYBLOB], 0x30}], 0x1}, 0x0) ioctl$sock_SIOCDELRT(r11, 0x890c, &(0x7f00000002c0)={0x0, @nfc={0x27, r10, 0xfeffffff, 0x4}, @can, @llc={0x1a, 0x335, 0x8, 0x9, 0x6, 0x4, @remote}, 0x1, 0x0, 0x0, 0x0, 0x1aad, &(0x7f0000000000)='geneve0\x00', 0x800, 0x8, 0x2}) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x8006, 0x8000, 0x5}, 0x1c) 308.441478ms ago: executing program 0 (id=859): r0 = userfaultfd(0x80001) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = io_uring_setup(0x67bb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0xfffffffd}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/251, 0xfb}], 0x6) 179.795043ms ago: executing program 0 (id=860): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@rose, @null, @remote, @default, @netrom, @bcast, @null, @bcast]}, &(0x7f00000000c0)=0x48, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000100)) 179.487836ms ago: executing program 5 (id=861): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xdb0890038a23e817, 0x0, 0x7, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110725bd7000fbdbc12504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) timer_create(0x3, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x203) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 179.263023ms ago: executing program 0 (id=862): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc855) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000864000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 107.116146ms ago: executing program 5 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x50) 106.720092ms ago: executing program 0 (id=864): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, &(0x7f0000000180)="3cbd6cee", &(0x7f0000000300)=""/211}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r6], 0x38}}, 0x4000080) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async) syz_emit_ethernet(0x50, &(0x7f0000000040)={@remote, @random="68462484020a", @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@generic={0x600, "c87d401c673863747baa6c46389b4ecad411e7d1044ba6253b4f01659d7381b513bd7b6733d919229e3fc0b3bc7a7325634492bd4bdd5eff43d95c57d657"}}}, &(0x7f0000000240)={0x0, 0x1, [0x14dae83f, 0xe6f, 0x17c, 0xad4]}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 106.497784ms ago: executing program 5 (id=865): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001940)=""/34, 0x22}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000001380)=""/151, 0xc9}, {&(0x7f0000001440)=""/201, 0xc9}, {&(0x7f0000001540)=""/165, 0xa5}], 0x6}, 0x1}], 0x1, 0x10003, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000001640)={{}, {0x1, 0x3}, [{0x2, 0x1, 0xee01}, {0x2, 0x1}, {0x2, 0x1}, {}], {0x4, 0x2}, [{0x8, 0x5}], {0x10, 0x4}}, 0x4c, 0x0) pipe2$9p(&(0x7f0000000140), 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000000100)='./control\x00', 0x0) open(&(0x7f0000000200)='./control\x00', 0x400000, 0x8) rmdir(&(0x7f0000000180)='./control\x00') r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) socket$inet6_udp(0xa, 0x2, 0x0) 50.326797ms ago: executing program 0 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0431000000b401002c0012800b00010067726574617000001c000280050017000000000005000a0001000000080001004408"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 50.12673ms ago: executing program 5 (id=867): r0 = socket(0x10, 0x803, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'bridge0\x00'}) (async) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000340)={0x9, 0x0, '\x00', {0x0, @reserved}}) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4212, r2, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) capget(&(0x7f0000000080)={0x78a82, r2}, &(0x7f00000000c0)={0x7, 0x2, 0xfffffffb, 0x159, 0xe1ce, 0x2}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3b94, &(0x7f0000000180)={0x48}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 296.574µs ago: executing program 0 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') unshare(0x66020280) 0s ago: executing program 5 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x8000}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000000)="66ba6100b8d7000000efb96b020000b8558d82b5ba201fa7690f300f013e641ad30f01c866b896008ec08fe9209559d80f12f7440f20c03502000000440f22c0660fed30", 0x44}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=871): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r1, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10, 0x800) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x57f, &(0x7f0000000000)={0x0, 0x807734, 0x80, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b9380900000f32e4640f813500f2e0c60f3accf609f0818b46f0f094baf80c66b8347e228066efbafc0c66b8641ec70366ef660fc73266b80500000066b9cb0000000f01c1b802008ed0", 0x4b}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) sendto(r9, 0x0, 0x0, 0x4014, 0x0, 0x0) kernel console output (not intermixed with test programs): t 3(dummy0) entered blocking state [ 59.912297][ T6300] bridge0: port 3(dummy0) entered forwarding state [ 59.998252][ T6298] /dev/sr0: Can't open blockdev [ 60.006727][ T6278] input: syz1 as /devices/virtual/input/input6 [ 60.030079][ T6314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6314 comm=syz.3.88 [ 60.063779][ T6321] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 60.217100][ T6336] sp0: Synchronizing with TNC [ 60.221987][ T6336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=6336 comm=syz.2.96 [ 60.228163][ T6335] [U] è [ 60.255672][ T5327] Bluetooth: hci0: command tx timeout [ 60.336979][ T5327] Bluetooth: hci1: command tx timeout [ 60.337023][ T5968] Bluetooth: hci2: command tx timeout [ 60.487469][ T6351] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 60.490409][ T6351] syzkaller1: entered promiscuous mode [ 60.492110][ T6351] syzkaller1: entered allmulticast mode [ 60.527835][ T6354] MPI: mpi too large (16392 bits) [ 60.576628][ T5968] Bluetooth: hci3: command tx timeout [ 60.582633][ T6358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.715719][ T6039] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 60.746096][ T5978] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.780683][ T6368] ======================================================= [ 60.780683][ T6368] WARNING: The mand mount option has been deprecated and [ 60.780683][ T6368] and is ignored by this kernel. Remove the mand [ 60.780683][ T6368] option from the mount to silence this warning. [ 60.780683][ T6368] ======================================================= [ 60.793345][ T6368] cgroup: name respecified [ 60.868444][ T6039] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.872840][ T6039] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 60.877395][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 60.881554][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 187, setting to 64 [ 60.885716][ T6039] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.893755][ T6039] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 60.899014][ T6039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.902515][ T6039] usb 5-1: Product: syz [ 60.904363][ T6039] usb 5-1: Manufacturer: syz [ 60.906229][ T6039] usb 5-1: SerialNumber: syz [ 60.910854][ T6039] usb 5-1: config 0 descriptor?? [ 60.914333][ T6349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.917556][ T5978] usb 8-1: config 0 has no interfaces? [ 60.921982][ T5978] usb 8-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 60.923893][ T6039] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 60.925397][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.931672][ T5978] usb 8-1: Product: syz [ 60.933015][ T5978] usb 8-1: Manufacturer: syz [ 60.934740][ T5978] usb 8-1: SerialNumber: syz [ 60.938248][ T5978] usb 8-1: config 0 descriptor?? [ 61.105705][ T6047] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.145070][ T6377] __nla_validate_parse: 19 callbacks suppressed [ 61.145081][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 61.198617][ T6039] usb 5-1: USB disconnect, device number 2 [ 61.211807][ T6351] syz.3.100 (6351): attempted to duplicate a private mapping with mremap. This is not supported. [ 61.266602][ T6047] usb 7-1: Using ep0 maxpacket: 8 [ 61.270142][ T6047] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 61.272612][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.278204][ T6047] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.282031][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.285459][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.290663][ T6047] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 61.292976][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.296513][ T6047] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.300635][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.313417][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.316353][ T53] usb 8-1: USB disconnect, device number 2 [ 61.319444][ T6047] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 61.321795][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.325181][ T6047] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.328871][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.332308][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.338205][ T6047] usb 7-1: string descriptor 0 read error: -22 [ 61.340198][ T6047] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 61.342969][ T6047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.352339][ T6047] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 61.454983][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.513829][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.524680][ T40] kauditd_printk_skb: 254 callbacks suppressed [ 61.524690][ T40] audit: type=1400 audit(1757383840.024:459): avc: denied { execute } for pid=6382 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.533950][ T40] audit: type=1400 audit(1757383840.024:460): avc: denied { execute_no_trans } for pid=6382 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.541536][ T40] audit: type=1400 audit(1757383840.034:461): avc: denied { execmem } for pid=6382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.550788][ T40] audit: type=1400 audit(1757383840.054:462): avc: denied { allowed } for pid=6374 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.557331][ T40] audit: type=1400 audit(1757383840.064:463): avc: denied { create } for pid=6374 comm="syz.2.109" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.563765][ T40] audit: type=1400 audit(1757383840.064:464): avc: denied { write } for pid=6374 comm="syz.2.109" name="adutux0" dev="devtmpfs" ino=2866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.583403][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.649035][ T1465] usb 7-1: USB disconnect, device number 2 [ 61.659407][ T1149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.663369][ T40] audit: type=1400 audit(1757383840.164:465): avc: denied { create } for pid=6383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.667993][ T5327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.670083][ T40] audit: type=1400 audit(1757383840.164:466): avc: denied { read write } for pid=6383 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.673718][ T5327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.680494][ T40] audit: type=1400 audit(1757383840.164:467): avc: denied { open } for pid=6383 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.685030][ T5327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.690988][ T40] audit: type=1400 audit(1757383840.174:468): avc: denied { ioctl } for pid=6383 comm="syz-executor" path="socket:[12421]" dev="sockfs" ino=12421 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.694884][ T5327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.706658][ T5327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.779661][ T1149] bridge_slave_1: left allmulticast mode [ 61.781548][ T1149] bridge_slave_1: left promiscuous mode [ 61.783858][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.797668][ T1149] bridge_slave_0: left allmulticast mode [ 61.799466][ T1149] bridge_slave_0: left promiscuous mode [ 61.801566][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.826539][ T6387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6387 comm=syz.0.115 [ 61.830468][ T6387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6387 comm=syz.0.115 [ 62.036229][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 62.048540][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.053842][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.058581][ T1149] bond0 (unregistering): Released all slaves [ 62.087422][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 62.096450][ T6396] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 62.130807][ T6383] chnl_net:caif_netlink_parms(): no params data found [ 62.145086][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 62.174521][ T6404] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 62.177531][ T6404] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 62.184377][ T6406] ipvlan2: entered promiscuous mode [ 62.190807][ T6406] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 62.259025][ T6414] kvm: pic: non byte read [ 62.261860][ T6414] kvm: pic: level sensitive irq not supported [ 62.262117][ T6414] kvm: pic: non byte read [ 62.268512][ T6414] kvm: pic: level sensitive irq not supported [ 62.268822][ T6414] kvm: pic: non byte read [ 62.273313][ T6414] kvm: pic: non byte read [ 62.276471][ T6414] kvm: pic: non byte read [ 62.279055][ T6414] kvm: pic: non byte read [ 62.281492][ T6414] kvm: pic: single mode not supported [ 62.281500][ T6414] kvm: pic: level sensitive irq not supported [ 62.283832][ T6414] kvm: pic: non byte read [ 62.288772][ T6414] kvm: pic: non byte read [ 62.291487][ T6414] kvm: pic: non byte read [ 62.315748][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.318091][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.320423][ T6383] bridge_slave_0: entered allmulticast mode [ 62.323126][ T6383] bridge_slave_0: entered promiscuous mode [ 62.335912][ T6421] overlayfs: upper fs does not support file handles, falling back to index=off. [ 62.357792][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.361182][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.364274][ T6383] bridge_slave_1: entered allmulticast mode [ 62.368595][ T6383] bridge_slave_1: entered promiscuous mode [ 62.421569][ T6422] nvme_fabrics: missing parameter 'transport=%s' [ 62.423912][ T6422] nvme_fabrics: missing parameter 'nqn=%s' [ 62.444381][ T1149] hsr_slave_0: left promiscuous mode [ 62.447881][ T1149] hsr_slave_1: left promiscuous mode [ 62.450190][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.450952][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 62.452812][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.459681][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.462061][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.479045][ T1149] veth1_macvtap: left promiscuous mode [ 62.481428][ T1149] veth0_macvtap: left promiscuous mode [ 62.483671][ T1149] veth1_vlan: left promiscuous mode [ 62.485612][ T1149] veth0_vlan: left promiscuous mode [ 62.622597][ T6435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6435 comm=syz.3.128 [ 62.630508][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 62.634429][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 62.907424][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 62.951147][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 63.328013][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.347860][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.405542][ T6383] team0: Port device team_slave_0 added [ 63.409469][ T6383] team0: Port device team_slave_1 added [ 63.410664][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 63.443155][ T6442] vxlan0: entered promiscuous mode [ 63.461404][ T220] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.464128][ T220] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.468074][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.470480][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.478757][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.483317][ T220] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.487168][ T220] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.490368][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.492565][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.501702][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.536450][ T6448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.133'. [ 63.540624][ T6447] netlink: 44 bytes leftover after parsing attributes in process `syz.0.133'. [ 63.580535][ T6383] hsr_slave_0: entered promiscuous mode [ 63.583766][ T6383] hsr_slave_1: entered promiscuous mode [ 63.588208][ T6383] debugfs: 'hsr0' already exists in 'hsr' [ 63.590652][ T6383] Cannot create hsr debugfs directory [ 63.653930][ T6451] ip6gre1: entered allmulticast mode [ 63.658522][ T6451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 63.733832][ T6383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.738890][ T6383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.743306][ T6383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.747632][ T6383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.785792][ T5327] Bluetooth: hci3: command tx timeout [ 63.793939][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.807544][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.814898][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.817425][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.824380][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.826732][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.933226][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.999148][ T6478] validate_nla: 1 callbacks suppressed [ 63.999164][ T6478] netlink: 'syz.2.140': attribute type 13 has an invalid length. [ 64.033251][ T1465] IPVS: starting estimator thread 0... [ 64.035537][ T6483] IPVS: nq: FWM 3 0x00000003 - no destination available [ 64.056672][ T6047] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.071270][ T6383] veth0_vlan: entered promiscuous mode [ 64.077509][ T6383] veth1_vlan: entered promiscuous mode [ 64.090832][ T6383] veth0_macvtap: entered promiscuous mode [ 64.094363][ T6383] veth1_macvtap: entered promiscuous mode [ 64.104018][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.109626][ T6493] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.111555][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.124750][ T1262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.129322][ T1262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.133891][ T1262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.137624][ T6484] IPVS: using max 43 ests per chain, 103200 per kthread [ 64.138629][ T1262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.179627][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.182959][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.199086][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.201732][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.228067][ T6047] usb 5-1: Using ep0 maxpacket: 8 [ 64.232628][ T6047] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 64.235478][ T6047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.238663][ T6047] usb 5-1: Product: syz [ 64.239995][ T6047] usb 5-1: Manufacturer: syz [ 64.241449][ T6047] usb 5-1: SerialNumber: syz [ 64.246175][ T6047] usb 5-1: config 0 descriptor?? [ 64.252181][ T6047] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 64.546120][ T840] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.698230][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.702329][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.705352][ T840] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.710262][ T840] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.713546][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.717849][ T840] usb 8-1: config 0 descriptor?? [ 64.736670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.755797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.771104][ T6530] kvm: pic: non byte write [ 64.936155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.989294][ T6555] FAULT_INJECTION: forcing a failure. [ 64.989294][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.993483][ T6555] CPU: 3 UID: 0 PID: 6555 Comm: syz.4.159 Not tainted syzkaller #0 PREEMPT(full) [ 64.993496][ T6555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.993502][ T6555] Call Trace: [ 64.993507][ T6555] [ 64.993511][ T6555] dump_stack_lvl+0x16c/0x1f0 [ 64.993545][ T6555] should_fail_ex+0x512/0x640 [ 64.993565][ T6555] _copy_from_user+0x2e/0xd0 [ 64.993580][ T6555] copy_msghdr_from_user+0x98/0x160 [ 64.993609][ T6555] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 64.993628][ T6555] ___sys_sendmsg+0xfe/0x1d0 [ 64.993637][ T6558] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 64.993643][ T6555] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.993672][ T6555] __sys_sendmsg+0x16d/0x220 [ 64.993684][ T6555] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.993705][ T6555] do_syscall_64+0xcd/0x4c0 [ 64.993725][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.993753][ T6555] RIP: 0033:0x7f2a3a78ebe9 [ 64.993762][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.993771][ T6555] RSP: 002b:00007f2a3b6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.993781][ T6555] RAX: ffffffffffffffda RBX: 00007f2a3a9c5fa0 RCX: 00007f2a3a78ebe9 [ 64.993787][ T6555] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 64.993793][ T6555] RBP: 00007f2a3b6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 64.993799][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.993804][ T6555] R13: 00007f2a3a9c6038 R14: 00007f2a3a9c5fa0 R15: 00007fffc3785878 [ 64.993817][ T6555] [ 65.100268][ T6460] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.103500][ T6460] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 65.108017][ T6460] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.111506][ T6460] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 65.123380][ T6047] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 65.127530][ T6047] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 65.131998][ T6047] usb 5-1: USB disconnect, device number 3 [ 65.141381][ T840] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 65.306077][ T6577] netlink: 'syz.4.164': attribute type 29 has an invalid length. [ 65.308949][ T6577] netlink: 'syz.4.164': attribute type 29 has an invalid length. [ 65.463788][ T6583] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 65.472093][ T6583] cramfs: wrong magic [ 65.577352][ T6588] FAULT_INJECTION: forcing a failure. [ 65.577352][ T6588] name failslab, interval 1, probability 0, space 0, times 1 [ 65.581276][ T6588] CPU: 2 UID: 0 PID: 6588 Comm: syz.4.169 Not tainted syzkaller #0 PREEMPT(full) [ 65.581290][ T6588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.581295][ T6588] Call Trace: [ 65.581299][ T6588] [ 65.581303][ T6588] dump_stack_lvl+0x16c/0x1f0 [ 65.581321][ T6588] should_fail_ex+0x512/0x640 [ 65.581334][ T6588] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 65.581348][ T6588] should_failslab+0xc2/0x120 [ 65.581360][ T6588] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 65.581370][ T6588] ? __alloc_skb+0x2b2/0x380 [ 65.581384][ T6588] __alloc_skb+0x2b2/0x380 [ 65.581399][ T6588] ? __pfx___alloc_skb+0x10/0x10 [ 65.581412][ T6588] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 65.581428][ T6588] netlink_alloc_large_skb+0x69/0x130 [ 65.581443][ T6588] netlink_sendmsg+0x6a1/0xdd0 [ 65.581458][ T6588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.581476][ T6588] ____sys_sendmsg+0xa98/0xc70 [ 65.581492][ T6588] ? copy_msghdr_from_user+0x10a/0x160 [ 65.581504][ T6588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.581525][ T6588] ___sys_sendmsg+0x134/0x1d0 [ 65.581539][ T6588] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.581566][ T6588] __sys_sendmsg+0x16d/0x220 [ 65.581579][ T6588] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.581600][ T6588] do_syscall_64+0xcd/0x4c0 [ 65.581614][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.581624][ T6588] RIP: 0033:0x7f2a3a78ebe9 [ 65.581633][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.581642][ T6588] RSP: 002b:00007f2a3b6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.581652][ T6588] RAX: ffffffffffffffda RBX: 00007f2a3a9c5fa0 RCX: 00007f2a3a78ebe9 [ 65.581659][ T6588] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 65.581664][ T6588] RBP: 00007f2a3b6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 65.581670][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.581675][ T6588] R13: 00007f2a3a9c6038 R14: 00007f2a3a9c5fa0 R15: 00007fffc3785878 [ 65.581688][ T6588] [ 65.677220][ T6592] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 65.761347][ T6600] team0 (unregistering): Port device team_slave_0 removed [ 65.766805][ T6600] team0 (unregistering): Port device team_slave_1 removed [ 65.865971][ T5327] Bluetooth: hci3: command tx timeout [ 65.915055][ T6612] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 66.015994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.035890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.038534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.126381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.544491][ T40] kauditd_printk_skb: 224 callbacks suppressed [ 66.544501][ T40] audit: type=1400 audit(1757383845.044:693): avc: denied { create } for pid=6633 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.555015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.574380][ T40] audit: type=1400 audit(1757383845.074:694): avc: denied { allowed } for pid=6635 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.581646][ T40] audit: type=1400 audit(1757383845.074:695): avc: denied { map } for pid=6635 comm="syz.0.183" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.593862][ T40] audit: type=1400 audit(1757383845.074:696): avc: denied { read write } for pid=6635 comm="syz.0.183" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.603323][ T40] audit: type=1400 audit(1757383845.074:697): avc: denied { map } for pid=6635 comm="syz.0.183" path="socket:[14546]" dev="sockfs" ino=14546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.759766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.775911][ T6649] FAULT_INJECTION: forcing a failure. [ 66.775911][ T6649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.781381][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 66.781395][ T6649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.781401][ T6649] Call Trace: [ 66.781404][ T6649] [ 66.781408][ T6649] dump_stack_lvl+0x16c/0x1f0 [ 66.781424][ T6649] should_fail_ex+0x512/0x640 [ 66.781446][ T6649] _copy_from_iter+0x29f/0x1720 [ 66.781462][ T6649] ? __alloc_skb+0x200/0x380 [ 66.781475][ T6649] ? __pfx__copy_from_iter+0x10/0x10 [ 66.781490][ T6649] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 66.781508][ T6649] netlink_sendmsg+0x829/0xdd0 [ 66.781524][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.781542][ T6649] ____sys_sendmsg+0xa98/0xc70 [ 66.781557][ T6649] ? copy_msghdr_from_user+0x10a/0x160 [ 66.781569][ T6649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.781590][ T6649] ___sys_sendmsg+0x134/0x1d0 [ 66.781603][ T6649] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.781631][ T6649] __sys_sendmsg+0x16d/0x220 [ 66.781643][ T6649] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.781664][ T6649] do_syscall_64+0xcd/0x4c0 [ 66.781678][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.781689][ T6649] RIP: 0033:0x7f65de58ebe9 [ 66.781698][ T6649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.781707][ T6649] RSP: 002b:00007f65df37f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.781744][ T6649] RAX: ffffffffffffffda RBX: 00007f65de7c5fa0 RCX: 00007f65de58ebe9 [ 66.781752][ T6649] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 66.781758][ T6649] RBP: 00007f65df37f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.781763][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.781769][ T6649] R13: 00007f65de7c6038 R14: 00007f65de7c5fa0 R15: 00007ffebdee9628 [ 66.781782][ T6649] [ 66.867271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.886760][ T40] audit: type=1400 audit(1757383845.384:698): avc: denied { read } for pid=6651 comm="syz.2.190" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.894794][ T40] audit: type=1400 audit(1757383845.384:699): avc: denied { open } for pid=6651 comm="syz.2.190" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.903114][ T40] audit: type=1400 audit(1757383845.394:700): avc: denied { map } for pid=6651 comm="syz.2.190" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.910428][ T40] audit: type=1400 audit(1757383845.394:701): avc: denied { execute } for pid=6651 comm="syz.2.190" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.918855][ T40] audit: type=1400 audit(1757383845.394:702): avc: denied { map_create } for pid=6653 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.949109][ T6666] __nla_validate_parse: 7 callbacks suppressed [ 66.949120][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 67.131426][ T6671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 67.179202][ T6675] netlink: 'syz.0.196': attribute type 3 has an invalid length. [ 67.181736][ T6675] netlink: 124 bytes leftover after parsing attributes in process `syz.0.196'. [ 67.230854][ T1465] usb 8-1: USB disconnect, device number 3 [ 67.411773][ T6691] FAULT_INJECTION: forcing a failure. [ 67.411773][ T6691] name failslab, interval 1, probability 0, space 0, times 0 [ 67.417343][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(full) [ 67.417368][ T6691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.417378][ T6691] Call Trace: [ 67.417384][ T6691] [ 67.417390][ T6691] dump_stack_lvl+0x16c/0x1f0 [ 67.417415][ T6691] should_fail_ex+0x512/0x640 [ 67.417439][ T6691] should_failslab+0xc2/0x120 [ 67.417457][ T6691] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 67.417474][ T6691] ? skb_clone+0x190/0x3f0 [ 67.417497][ T6691] skb_clone+0x190/0x3f0 [ 67.417516][ T6691] netlink_deliver_tap+0xabd/0xd30 [ 67.417541][ T6691] netlink_unicast+0x64c/0x870 [ 67.417564][ T6691] ? __pfx_netlink_unicast+0x10/0x10 [ 67.417585][ T6691] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 67.417611][ T6691] netlink_sendmsg+0x8d1/0xdd0 [ 67.417635][ T6691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.417664][ T6691] ____sys_sendmsg+0xa98/0xc70 [ 67.417688][ T6691] ? copy_msghdr_from_user+0x10a/0x160 [ 67.417728][ T6691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.417763][ T6691] ___sys_sendmsg+0x134/0x1d0 [ 67.417784][ T6691] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.417832][ T6691] __sys_sendmsg+0x16d/0x220 [ 67.417851][ T6691] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.417886][ T6691] do_syscall_64+0xcd/0x4c0 [ 67.417908][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.417924][ T6691] RIP: 0033:0x7fb6d218ebe9 [ 67.417937][ T6691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.417952][ T6691] RSP: 002b:00007fb6d2f59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.417967][ T6691] RAX: ffffffffffffffda RBX: 00007fb6d23c5fa0 RCX: 00007fb6d218ebe9 [ 67.417977][ T6691] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 67.417985][ T6691] RBP: 00007fb6d2f59090 R08: 0000000000000000 R09: 0000000000000000 [ 67.417994][ T6691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.418003][ T6691] R13: 00007fb6d23c6038 R14: 00007fb6d23c5fa0 R15: 00007fff381789f8 [ 67.418024][ T6691] [ 67.537883][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 67.572304][ T6702] mkiss: ax0: crc mode is auto. [ 67.680287][ T6708] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 67.682730][ T6708] netlink: 236 bytes leftover after parsing attributes in process `syz.0.205'. [ 67.713586][ T6710] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.717116][ T6710] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 67.719570][ T6710] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.721838][ T6710] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 67.847818][ T6719] FAULT_INJECTION: forcing a failure. [ 67.847818][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 67.853335][ T6719] CPU: 3 UID: 0 PID: 6719 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 67.853355][ T6719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.853366][ T6719] Call Trace: [ 67.853372][ T6719] [ 67.853378][ T6719] dump_stack_lvl+0x16c/0x1f0 [ 67.853405][ T6719] should_fail_ex+0x512/0x640 [ 67.853426][ T6719] ? __pfx_skb_network_protocol+0x10/0x10 [ 67.853446][ T6719] should_failslab+0xc2/0x120 [ 67.853466][ T6719] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 67.853485][ T6719] ? skb_clone+0x190/0x3f0 [ 67.853508][ T6719] skb_clone+0x190/0x3f0 [ 67.853530][ T6719] dev_queue_xmit_nit+0x3e7/0xca0 [ 67.853558][ T6719] dev_hard_start_xmit+0x5c3/0x740 [ 67.853575][ T6719] ? skb_clone+0x190/0x3f0 [ 67.853598][ T6719] __dev_queue_xmit+0xa46/0x4490 [ 67.853625][ T6719] ? __pfx___dev_queue_xmit+0x10/0x10 [ 67.853662][ T6719] ? __asan_memcpy+0x3c/0x60 [ 67.853688][ T6719] ? __asan_memcpy+0x3c/0x60 [ 67.853731][ T6719] ? __skb_clone+0x570/0x760 [ 67.853755][ T6719] netlink_deliver_tap+0xa87/0xd30 [ 67.853782][ T6719] netlink_unicast+0x64c/0x870 [ 67.853807][ T6719] ? __pfx_netlink_unicast+0x10/0x10 [ 67.853829][ T6719] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 67.853858][ T6719] netlink_sendmsg+0x8d1/0xdd0 [ 67.853885][ T6719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.853916][ T6719] ____sys_sendmsg+0xa98/0xc70 [ 67.853942][ T6719] ? copy_msghdr_from_user+0x10a/0x160 [ 67.853962][ T6719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.853999][ T6719] ___sys_sendmsg+0x134/0x1d0 [ 67.854021][ T6719] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.854072][ T6719] __sys_sendmsg+0x16d/0x220 [ 67.854093][ T6719] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.854135][ T6719] do_syscall_64+0xcd/0x4c0 [ 67.854158][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.854176][ T6719] RIP: 0033:0x7f65de58ebe9 [ 67.854190][ T6719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.854206][ T6719] RSP: 002b:00007f65df37f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.854222][ T6719] RAX: ffffffffffffffda RBX: 00007f65de7c5fa0 RCX: 00007f65de58ebe9 [ 67.854234][ T6719] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 67.854243][ T6719] RBP: 00007f65df37f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.854252][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.854262][ T6719] R13: 00007f65de7c6038 R14: 00007f65de7c5fa0 R15: 00007ffebdee9628 [ 67.854286][ T6719] [ 67.935775][ T5327] Bluetooth: hci3: command tx timeout [ 68.201742][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 68.205654][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.355664][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 68.358444][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 68.360914][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.363880][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.367167][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.370413][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.374576][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.378023][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.462380][ T6756] FAULT_INJECTION: forcing a failure. [ 68.462380][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 68.466227][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT(full) [ 68.466240][ T6756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.466246][ T6756] Call Trace: [ 68.466250][ T6756] [ 68.466254][ T6756] dump_stack_lvl+0x16c/0x1f0 [ 68.466271][ T6756] should_fail_ex+0x512/0x640 [ 68.466285][ T6756] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 68.466302][ T6756] should_failslab+0xc2/0x120 [ 68.466314][ T6756] __kmalloc_cache_noprof+0x6a/0x3e0 [ 68.466329][ T6756] ? rtnl_newlink+0x11b/0x2000 [ 68.466345][ T6756] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.466361][ T6756] rtnl_newlink+0x11b/0x2000 [ 68.466378][ T6756] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.466390][ T6756] ? find_held_lock+0x2b/0x80 [ 68.466403][ T6756] ? avc_has_perm_noaudit+0x117/0x3b0 [ 68.466417][ T6756] ? avc_has_perm_noaudit+0x149/0x3b0 [ 68.466431][ T6756] ? __lock_acquire+0x62e/0x1ce0 [ 68.466453][ T6756] ? find_held_lock+0x2b/0x80 [ 68.466464][ T6756] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.466477][ T6756] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.466488][ T6756] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 68.466502][ T6756] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.466515][ T6756] rtnetlink_rcv_msg+0x95e/0xe90 [ 68.466529][ T6756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.466546][ T6756] ? ref_tracker_free+0x37c/0x830 [ 68.466561][ T6756] netlink_rcv_skb+0x155/0x420 [ 68.466575][ T6756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.466589][ T6756] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.466607][ T6756] ? netlink_deliver_tap+0x1ae/0xd30 [ 68.466622][ T6756] netlink_unicast+0x5aa/0x870 [ 68.466637][ T6756] ? __pfx_netlink_unicast+0x10/0x10 [ 68.466650][ T6756] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 68.466667][ T6756] netlink_sendmsg+0x8d1/0xdd0 [ 68.466683][ T6756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.466701][ T6756] ____sys_sendmsg+0xa98/0xc70 [ 68.466717][ T6756] ? copy_msghdr_from_user+0x10a/0x160 [ 68.466730][ T6756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.466751][ T6756] ___sys_sendmsg+0x134/0x1d0 [ 68.466764][ T6756] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.466792][ T6756] __sys_sendmsg+0x16d/0x220 [ 68.466805][ T6756] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.466825][ T6756] do_syscall_64+0xcd/0x4c0 [ 68.466840][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.466850][ T6756] RIP: 0033:0x7f2a3a78ebe9 [ 68.466859][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.466868][ T6756] RSP: 002b:00007f2a3b6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.466878][ T6756] RAX: ffffffffffffffda RBX: 00007f2a3a9c5fa0 RCX: 00007f2a3a78ebe9 [ 68.466884][ T6756] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 68.466890][ T6756] RBP: 00007f2a3b6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 68.466895][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.466901][ T6756] R13: 00007f2a3a9c6038 R14: 00007f2a3a9c5fa0 R15: 00007fffc3785878 [ 68.466913][ T6756] [ 68.584325][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 68.589030][ T24] usbtmc 8-1:16.0: can't read capabilities [ 68.649009][ T6776] netlink: 'syz.2.225': attribute type 3 has an invalid length. [ 68.652113][ T6776] netlink: 124 bytes leftover after parsing attributes in process `syz.2.225'. [ 68.714527][ T6781] netlink: 256 bytes leftover after parsing attributes in process `syz.2.227'. [ 68.717792][ T6781] unsupported nlmsg_type 40 [ 68.788321][ T24] usb 8-1: USB disconnect, device number 4 [ 68.854979][ T6790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.231'. [ 68.901998][ T6792] FAULT_INJECTION: forcing a failure. [ 68.901998][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 68.904424][ T5327] Bluetooth: hci3: ISO packet for unknown connection handle 3584 [ 68.911152][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT(full) [ 68.911167][ T6792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.911173][ T6792] Call Trace: [ 68.911177][ T6792] [ 68.911181][ T6792] dump_stack_lvl+0x16c/0x1f0 [ 68.911198][ T6792] should_fail_ex+0x512/0x640 [ 68.911211][ T6792] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 68.911224][ T6792] should_failslab+0xc2/0x120 [ 68.911236][ T6792] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 68.911247][ T6792] ? __alloc_skb+0x2b2/0x380 [ 68.911260][ T6792] __alloc_skb+0x2b2/0x380 [ 68.911271][ T6792] ? __pfx___alloc_skb+0x10/0x10 [ 68.911281][ T6792] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.911299][ T6792] netlink_ack+0x15d/0xb80 [ 68.911317][ T6792] netlink_rcv_skb+0x332/0x420 [ 68.911330][ T6792] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.911344][ T6792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.911366][ T6792] ? netlink_deliver_tap+0x1ae/0xd30 [ 68.911381][ T6792] netlink_unicast+0x5aa/0x870 [ 68.911396][ T6792] ? __pfx_netlink_unicast+0x10/0x10 [ 68.911409][ T6792] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 68.911426][ T6792] netlink_sendmsg+0x8d1/0xdd0 [ 68.911442][ T6792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.911460][ T6792] ____sys_sendmsg+0xa98/0xc70 [ 68.911476][ T6792] ? copy_msghdr_from_user+0x10a/0x160 [ 68.911488][ T6792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.911509][ T6792] ___sys_sendmsg+0x134/0x1d0 [ 68.911522][ T6792] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.911550][ T6792] __sys_sendmsg+0x16d/0x220 [ 68.911562][ T6792] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.911583][ T6792] do_syscall_64+0xcd/0x4c0 [ 68.911597][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.911608][ T6792] RIP: 0033:0x7f0b5418ebe9 [ 68.911617][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.911626][ T6792] RSP: 002b:00007f0b55062038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.911636][ T6792] RAX: ffffffffffffffda RBX: 00007f0b543c5fa0 RCX: 00007f0b5418ebe9 [ 68.911642][ T6792] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 68.911648][ T6792] RBP: 00007f0b55062090 R08: 0000000000000000 R09: 0000000000000000 [ 68.911654][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.911659][ T6792] R13: 00007f0b543c6038 R14: 00007f0b543c5fa0 R15: 00007ffdf07eff98 [ 68.911671][ T6792] [ 68.928507][ T6796] 9pnet: p9_errstr2errno: server reported unknown error ?ãØnª [ 68.928507][ T6796] k‡l‹?¤³ [ 68.959540][ T6798] fuse: Bad value for 'rootmode' [ 69.060522][ T6802] netlink: 'syz.2.235': attribute type 3 has an invalid length. [ 69.064258][ T6802] netlink: 236 bytes leftover after parsing attributes in process `syz.2.235'. [ 69.149507][ T6808] dummy0: left allmulticast mode [ 69.152289][ T6808] bridge0: port 3(dummy0) entered disabled state [ 69.160956][ T6808] bridge_slave_0: left allmulticast mode [ 69.163367][ T6808] bridge_slave_0: left promiscuous mode [ 69.165329][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.171553][ T6808] bridge_slave_1: left allmulticast mode [ 69.173405][ T6808] bridge_slave_1: left promiscuous mode [ 69.176042][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.184032][ T6808] bond0: (slave bond_slave_0): Releasing backup interface [ 69.191022][ T6808] bond0: (slave bond_slave_1): Releasing backup interface [ 69.200017][ T6808] team0: Port device team_slave_0 removed [ 69.207135][ T6808] team0: Port device team_slave_1 removed [ 69.209775][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.212355][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.216919][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.219990][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.471610][ T6828] netlink: 'syz.2.244': attribute type 3 has an invalid length. [ 69.474023][ T6828] netlink: 124 bytes leftover after parsing attributes in process `syz.2.244'. [ 69.556846][ T6829] binder: 6822:6829 ioctl 40103d0b 200000000000 returned -22 [ 69.735239][ T6855] FAULT_INJECTION: forcing a failure. [ 69.735239][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 69.741517][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) [ 69.741532][ T6855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.741538][ T6855] Call Trace: [ 69.741541][ T6855] [ 69.741545][ T6855] dump_stack_lvl+0x16c/0x1f0 [ 69.741564][ T6855] should_fail_ex+0x512/0x640 [ 69.741579][ T6855] should_failslab+0xc2/0x120 [ 69.741592][ T6855] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 69.741603][ T6855] ? skb_clone+0x190/0x3f0 [ 69.741618][ T6855] skb_clone+0x190/0x3f0 [ 69.741631][ T6855] netlink_deliver_tap+0xabd/0xd30 [ 69.741647][ T6855] netlink_unicast+0x71f/0x870 [ 69.741662][ T6855] ? __pfx_netlink_unicast+0x10/0x10 [ 69.741675][ T6855] ? __pfx_rtnl_newlink+0x10/0x10 [ 69.741719][ T6855] netlink_ack+0x696/0xb80 [ 69.741737][ T6855] netlink_rcv_skb+0x332/0x420 [ 69.741751][ T6855] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.741765][ T6855] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.741783][ T6855] ? netlink_deliver_tap+0x1ae/0xd30 [ 69.741798][ T6855] netlink_unicast+0x5aa/0x870 [ 69.741813][ T6855] ? __pfx_netlink_unicast+0x10/0x10 [ 69.741827][ T6855] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 69.741851][ T6855] netlink_sendmsg+0x8d1/0xdd0 [ 69.741876][ T6855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.741908][ T6855] ____sys_sendmsg+0xa98/0xc70 [ 69.741934][ T6855] ? copy_msghdr_from_user+0x10a/0x160 [ 69.741954][ T6855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.741990][ T6855] ___sys_sendmsg+0x134/0x1d0 [ 69.742013][ T6855] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.742063][ T6855] __sys_sendmsg+0x16d/0x220 [ 69.742079][ T6855] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.742101][ T6855] do_syscall_64+0xcd/0x4c0 [ 69.742121][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.742138][ T6855] RIP: 0033:0x7f0b5418ebe9 [ 69.742152][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.742167][ T6855] RSP: 002b:00007f0b55062038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.742183][ T6855] RAX: ffffffffffffffda RBX: 00007f0b543c5fa0 RCX: 00007f0b5418ebe9 [ 69.742193][ T6855] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 69.742202][ T6855] RBP: 00007f0b55062090 R08: 0000000000000000 R09: 0000000000000000 [ 69.742211][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.742220][ T6855] R13: 00007f0b543c6038 R14: 00007f0b543c5fa0 R15: 00007ffdf07eff98 [ 69.742244][ T6855] [ 69.849922][ T6862] netlink: 'syz.3.255': attribute type 3 has an invalid length. [ 70.004287][ T6882] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 70.015472][ T6890] FAULT_INJECTION: forcing a failure. [ 70.015472][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 70.017883][ T5327] Bluetooth: hci3: command tx timeout [ 70.019591][ T6890] CPU: 3 UID: 0 PID: 6890 Comm: syz.3.264 Not tainted syzkaller #0 PREEMPT(full) [ 70.019605][ T6890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.019611][ T6890] Call Trace: [ 70.019615][ T6890] [ 70.019619][ T6890] dump_stack_lvl+0x16c/0x1f0 [ 70.019636][ T6890] should_fail_ex+0x512/0x640 [ 70.019650][ T6890] ? __pfx_skb_network_protocol+0x10/0x10 [ 70.019662][ T6890] should_failslab+0xc2/0x120 [ 70.019675][ T6890] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 70.019687][ T6890] ? skb_clone+0x190/0x3f0 [ 70.019700][ T6890] skb_clone+0x190/0x3f0 [ 70.019713][ T6890] dev_queue_xmit_nit+0x3e7/0xca0 [ 70.019729][ T6890] dev_hard_start_xmit+0x5c3/0x740 [ 70.019739][ T6890] ? skb_clone+0x190/0x3f0 [ 70.019753][ T6890] __dev_queue_xmit+0xa46/0x4490 [ 70.019768][ T6890] ? __pfx___dev_queue_xmit+0x10/0x10 [ 70.019788][ T6890] ? __asan_memcpy+0x3c/0x60 [ 70.019804][ T6890] ? __asan_memcpy+0x3c/0x60 [ 70.019818][ T6890] ? __skb_clone+0x570/0x760 [ 70.019832][ T6890] netlink_deliver_tap+0xa87/0xd30 [ 70.019848][ T6890] netlink_unicast+0x71f/0x870 [ 70.019863][ T6890] ? __pfx_netlink_unicast+0x10/0x10 [ 70.019875][ T6890] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.019893][ T6890] netlink_ack+0x696/0xb80 [ 70.019909][ T6890] netlink_rcv_skb+0x332/0x420 [ 70.019924][ T6890] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.019939][ T6890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.019957][ T6890] ? netlink_deliver_tap+0x1ae/0xd30 [ 70.019972][ T6890] netlink_unicast+0x5aa/0x870 [ 70.019987][ T6890] ? __pfx_netlink_unicast+0x10/0x10 [ 70.020000][ T6890] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 70.020017][ T6890] netlink_sendmsg+0x8d1/0xdd0 [ 70.020032][ T6890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.020050][ T6890] ____sys_sendmsg+0xa98/0xc70 [ 70.020066][ T6890] ? copy_msghdr_from_user+0x10a/0x160 [ 70.020078][ T6890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.020099][ T6890] ___sys_sendmsg+0x134/0x1d0 [ 70.020113][ T6890] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.020145][ T6890] __sys_sendmsg+0x16d/0x220 [ 70.020157][ T6890] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.020178][ T6890] do_syscall_64+0xcd/0x4c0 [ 70.020193][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.020204][ T6890] RIP: 0033:0x7fb6d218ebe9 [ 70.020213][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.020222][ T6890] RSP: 002b:00007fb6d2f59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.020232][ T6890] RAX: ffffffffffffffda RBX: 00007fb6d23c5fa0 RCX: 00007fb6d218ebe9 [ 70.020238][ T6890] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 70.020244][ T6890] RBP: 00007fb6d2f59090 R08: 0000000000000000 R09: 0000000000000000 [ 70.020249][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.020255][ T6890] R13: 00007fb6d23c6038 R14: 00007fb6d23c5fa0 R15: 00007fff381789f8 [ 70.020268][ T6890] [ 70.246288][ T6900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.422682][ T6912] use of bytesused == 0 is deprecated and will be removed in the future, [ 70.425391][ T6912] use the actual size instead. [ 70.430766][ T6912] trusted_key: syz.3.270 sent an empty control message without MSG_MORE. [ 70.581310][ T6920] FAULT_INJECTION: forcing a failure. [ 70.581310][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.585700][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.4.273 Not tainted syzkaller #0 PREEMPT(full) [ 70.585714][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.585720][ T6920] Call Trace: [ 70.585724][ T6920] [ 70.585728][ T6920] dump_stack_lvl+0x16c/0x1f0 [ 70.585746][ T6920] should_fail_ex+0x512/0x640 [ 70.585762][ T6920] _copy_to_user+0x32/0xd0 [ 70.585779][ T6920] simple_read_from_buffer+0xcb/0x170 [ 70.585792][ T6920] proc_fail_nth_read+0x197/0x240 [ 70.585804][ T6920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.585817][ T6920] ? rw_verify_area+0xcf/0x6c0 [ 70.585832][ T6920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.585844][ T6920] vfs_read+0x1e1/0xcf0 [ 70.585856][ T6920] ? __pfx___mutex_lock+0x10/0x10 [ 70.585870][ T6920] ? __pfx_vfs_read+0x10/0x10 [ 70.585883][ T6920] ? __fget_files+0x20e/0x3c0 [ 70.585898][ T6920] ksys_read+0x12a/0x250 [ 70.585908][ T6920] ? __pfx_ksys_read+0x10/0x10 [ 70.585922][ T6920] do_syscall_64+0xcd/0x4c0 [ 70.585936][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.585947][ T6920] RIP: 0033:0x7f2a3a78d5fc [ 70.585956][ T6920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.585965][ T6920] RSP: 002b:00007f2a3b6f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.585975][ T6920] RAX: ffffffffffffffda RBX: 00007f2a3a9c5fa0 RCX: 00007f2a3a78d5fc [ 70.585981][ T6920] RDX: 000000000000000f RSI: 00007f2a3b6f40a0 RDI: 0000000000000009 [ 70.585987][ T6920] RBP: 00007f2a3b6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 70.585992][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.585998][ T6920] R13: 00007f2a3a9c6038 R14: 00007f2a3a9c5fa0 R15: 00007fffc3785878 [ 70.586011][ T6920] [ 70.650806][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.877643][ T6950] process 'syz.4.282' launched './file1' with NULL argv: empty string added [ 71.193748][ T6993] 9p: Unknown Cache mode or invalid value loos% [ 71.299844][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329575][ T7013] program syz.3.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.366272][ T1114] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 71.368989][ T1114] ata1.00: irq_stat 0x40000000 [ 71.370613][ T1114] ata1.00: failed command: ZAC MANAGEMENT OUT [ 71.372579][ T1114] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 9 [ 71.372579][ T1114] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 71.379764][ T1114] ata1.00: status: { DRDY ERR } [ 71.381789][ T1114] ata1.00: error: { ABRT } [ 71.384302][ T1114] ata1.00: device reported invalid CHS sector 0 [ 71.398502][ T7016] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 71.414328][ T7016] overlayfs: failed to resolve './file1': -2 [ 71.626860][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 71.629954][ T1114] ata1: failed to read log page 10h (errno=-5) [ 71.631662][ T1114] ata1.00: exception Emask 0x1 SAct 0x400 SErr 0x0 action 0x0 [ 71.635100][ T1114] ata1.00: irq_stat 0x40000000 [ 71.637703][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 71.639601][ T1114] ata1.00: cmd 61/28:50:e6:05:10/00:00:00:00:00/40 tag 10 ncq dma 20480 out [ 71.639601][ T1114] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 71.646009][ T1114] ata1.00: status: { DRDY } [ 71.651195][ T1114] ata1.00: configured for UDMA/100 [ 71.653803][ T1114] ata1: EH complete [ 71.662856][ T40] kauditd_printk_skb: 307 callbacks suppressed [ 71.662868][ T40] audit: type=1400 audit(1757383850.164:1010): avc: denied { bind } for pid=7039 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.674453][ T40] audit: type=1400 audit(1757383850.164:1011): avc: denied { write } for pid=7039 comm="syz.4.311" path="socket:[17639]" dev="sockfs" ino=17639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.682935][ T40] audit: type=1400 audit(1757383850.164:1012): avc: denied { create } for pid=7039 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.689323][ T40] audit: type=1400 audit(1757383850.164:1013): avc: denied { setopt } for pid=7039 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.695427][ T40] audit: type=1400 audit(1757383850.174:1014): avc: denied { setopt } for pid=7039 comm="syz.4.311" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.710222][ T7046] Bluetooth: MGMT ver 1.23 [ 71.714539][ T40] audit: type=1400 audit(1757383850.214:1015): avc: denied { read write } for pid=7047 comm="syz.3.314" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.728458][ T40] audit: type=1400 audit(1757383850.214:1016): avc: denied { open } for pid=7047 comm="syz.3.314" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.729175][ T7050] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000001' [ 71.735877][ T40] audit: type=1400 audit(1757383850.214:1017): avc: denied { ioctl } for pid=7047 comm="syz.3.314" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.745207][ T40] audit: type=1400 audit(1757383850.234:1018): avc: denied { read write } for pid=7047 comm="syz.3.314" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.753742][ T40] audit: type=1400 audit(1757383850.234:1019): avc: denied { open } for pid=7047 comm="syz.3.314" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.823483][ T7061] tc_dump_action: action bad kind [ 71.842916][ T7064] syz_tun: refused to change device tx_queue_len [ 71.847455][ T7063] syz_tun: refused to change device tx_queue_len [ 71.973443][ T7085] netlink: 'syz.0.325': attribute type 30 has an invalid length. [ 72.090044][ T7106] __nla_validate_parse: 6 callbacks suppressed [ 72.090054][ T7106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.331'. [ 72.094661][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 72.206313][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 72.275431][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 72.387830][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 72.465917][ T7147] vlan2: entered promiscuous mode [ 72.467609][ T7147] vlan2: entered allmulticast mode [ 72.470637][ T7147] hsr_slave_1: entered allmulticast mode [ 72.485427][ T7147] fuse: blksize only supported for fuseblk [ 72.486875][ T7149] Invalid ELF header type: 0 != 1 [ 72.759730][ T7166] NILFS (nbd3): device size too small [ 72.784472][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'. [ 72.856261][ T7172] netlink: 348 bytes leftover after parsing attributes in process `syz.3.355'. [ 72.887158][ T7172] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.355'. [ 72.973013][ T7180] netlink: 200 bytes leftover after parsing attributes in process `syz.0.358'. [ 73.162327][ T7183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=7183 comm=syz.0.360 [ 73.370448][ T7195] QAT: Stopping all acceleration devices. [ 73.545531][ T7202] netlink: 68 bytes leftover after parsing attributes in process `syz.0.368'. [ 73.633533][ T5968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.653042][ T5968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.656984][ T5968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.660842][ T5968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.665008][ T5968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.782009][ T7212] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 73.784135][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.790438][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 73.793743][ T7216] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 73.808059][ T7216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.808297][ T7213] vhci_hcd: connection closed [ 73.811828][ T46] vhci_hcd: stop threads [ 73.815001][ T46] vhci_hcd: release socket [ 73.817730][ T46] vhci_hcd: disconnect device [ 73.817869][ T7216] vlan4: entered promiscuous mode [ 73.820884][ T7216] bond2: entered promiscuous mode [ 73.822560][ T7216] vlan4: entered allmulticast mode [ 73.824184][ T7216] bond2: entered allmulticast mode [ 73.831574][ T7204] chnl_net:caif_netlink_parms(): no params data found [ 73.850176][ T7216] gretap1: entered promiscuous mode [ 73.854891][ T7216] bond2: (slave gretap1): making interface the new active one [ 73.858121][ T7216] gretap1: entered allmulticast mode [ 73.860695][ T7216] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 73.948503][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.951202][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.953702][ T7204] bridge_slave_0: entered allmulticast mode [ 73.954821][ T5327] Bluetooth: hci1: ISO packet too small [ 73.957752][ T7204] bridge_slave_0: entered promiscuous mode [ 73.962233][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.965354][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.968655][ T7204] bridge_slave_1: entered allmulticast mode [ 73.972426][ T7204] bridge_slave_1: entered promiscuous mode [ 74.017604][ T7204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.022234][ T7204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.063989][ T7204] team0: Port device team_slave_0 added [ 74.067849][ T7204] team0: Port device team_slave_1 added [ 74.105341][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.108970][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.116972][ T7204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.121340][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.123541][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.132711][ T7204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.180015][ T7204] hsr_slave_0: entered promiscuous mode [ 74.182470][ T7204] hsr_slave_1: entered promiscuous mode [ 74.184453][ T7204] debugfs: 'hsr0' already exists in 'hsr' [ 74.186312][ T7204] Cannot create hsr debugfs directory [ 74.337899][ T7204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.347560][ T7235] pim6reg: entered allmulticast mode [ 74.350160][ T7204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.357077][ T7235] pim6reg: left allmulticast mode [ 74.378833][ T7204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.384718][ T7204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.400490][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.402751][ T7204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.435253][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.444831][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.458194][ T7247] Device name not specified. [ 74.458194][ T7247] [ 74.458234][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.469380][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.472540][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.484839][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.487228][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.616453][ T7204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.765340][ T7204] veth0_vlan: entered promiscuous mode [ 74.772465][ T7204] veth1_vlan: entered promiscuous mode [ 74.790688][ T7204] veth0_macvtap: entered promiscuous mode [ 74.795204][ T7204] veth1_macvtap: entered promiscuous mode [ 74.805099][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.829975][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.834630][ T1149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.839655][ T1149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.842818][ T1149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.848426][ T1149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916391][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.918785][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.940392][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.942758][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.199425][ T7300] mkiss: ax0: crc mode is auto. [ 75.379567][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.558828][ T7309] netlink: 'syz.2.394': attribute type 25 has an invalid length. [ 75.601863][ T7315] overlayfs: failed to resolve './file1': -2 [ 75.696667][ T5327] Bluetooth: hci2: command tx timeout [ 75.722652][ T7335] hfsplus: unable to find HFS+ superblock [ 75.759663][ T7342] binder: 7341:7342 ioctl c0306201 200000000080 returned -14 [ 75.783816][ T7323] program syz.2.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.787250][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.855073][ T7357] usb usb7: usbfs: process 7357 (syz.5.411) did not claim interface 0 before use [ 75.858296][ T7359] netlink: 'syz.5.411': attribute type 1 has an invalid length. [ 75.860854][ T7359] NCSI netlink: No device for ifindex 0 [ 76.351800][ T6029] IPVS: starting estimator thread 0... [ 76.378491][ T7397] overlayfs: maximum fs stacking depth exceeded [ 76.456455][ T7395] IPVS: using max 45 ests per chain, 108000 per kthread [ 76.635273][ T7417] kvm: MONITOR instruction emulated as NOP! [ 76.680033][ T40] kauditd_printk_skb: 366 callbacks suppressed [ 76.680045][ T40] audit: type=1400 audit(1757383855.184:1386): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 76.732563][ T40] audit: type=1400 audit(1757383855.234:1387): avc: denied { create } for pid=7429 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.744342][ T40] audit: type=1400 audit(1757383855.234:1388): avc: denied { module_request } for pid=7429 comm="syz.0.435" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.754621][ T40] audit: type=1400 audit(1757383855.244:1389): avc: denied { map_create } for pid=7433 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.761530][ T40] audit: type=1400 audit(1757383855.254:1390): avc: denied { map_read map_write } for pid=7433 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.769465][ T40] audit: type=1400 audit(1757383855.264:1391): avc: denied { read } for pid=7433 comm="syz.2.437" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.777594][ T40] audit: type=1400 audit(1757383855.264:1392): avc: denied { open } for pid=7433 comm="syz.2.437" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.785951][ T40] audit: type=1400 audit(1757383855.264:1393): avc: denied { ioctl } for pid=7433 comm="syz.2.437" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.795866][ T40] audit: type=1400 audit(1757383855.264:1394): avc: denied { read } for pid=7433 comm="syz.2.437" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.804422][ T40] audit: type=1400 audit(1757383855.264:1395): avc: denied { open } for pid=7433 comm="syz.2.437" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.814747][ T7443] IPv6: addrconf: prefix option has invalid lifetime [ 77.058499][ T1465] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.217423][ T1465] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.221631][ T1465] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 77.225287][ T1465] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.228789][ T1465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.237398][ T7441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.244256][ T1465] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.443194][ T53] usb 5-1: USB disconnect, device number 4 [ 77.602483][ T7463] binder: 7460:7463 ioctl c0306201 200000000080 returned -14 [ 77.682016][ T7461] binder: 7460:7461 ioctl 551f 0 returned -22 [ 77.775921][ T5327] Bluetooth: hci2: command tx timeout [ 78.414118][ T7489] 8021q: VLANs not supported on ip6gre0 [ 78.483051][ T7495] __nla_validate_parse: 9 callbacks suppressed [ 78.483067][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'. [ 78.509519][ T7495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.695300][ T7508] program syz.0.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.772963][ T7518] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 78.816873][ T7520] overlayfs: overlapping lowerdir path [ 78.852245][ T7523] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 78.896473][ T7528] capability: warning: `syz.2.464' uses 32-bit capabilities (legacy support in use) [ 79.155845][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 79.308771][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.311203][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 79.312884][ T24] usb 10-1: config 0 has no interfaces? [ 79.324625][ T24] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 79.330869][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.333397][ T24] usb 10-1: Product: syz [ 79.334725][ T24] usb 10-1: Manufacturer: syz [ 79.337238][ T24] usb 10-1: SerialNumber: syz [ 79.341001][ T24] usb 10-1: config 0 descriptor?? [ 79.381637][ T7550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.471504][ T7550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.614612][ T7550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.622974][ T61] usb 10-1: USB disconnect, device number 2 [ 79.682306][ T7550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.782847][ T1149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.792180][ T46] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807227][ T46] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.815345][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 79.815833][ T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.847602][ T7560] netlink: 45 bytes leftover after parsing attributes in process `syz.2.477'. [ 79.855922][ T5327] Bluetooth: hci2: command tx timeout [ 79.918844][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 79.922260][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 79.925900][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 79.944646][ T7568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.480'. [ 79.966701][ T7570] overlayfs: failed to resolve 'verity=require': -2 [ 80.174638][ T7582] netlink: 48 bytes leftover after parsing attributes in process `syz.5.484'. [ 80.373721][ T7601] MINIX-fs: blocksize too small for device [ 80.434590][ T7601] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 80.506006][ T5327] Bluetooth: hci1: unexpected event 0x04 length: 21 > 10 [ 80.506027][ T5327] Bluetooth: unknown link type 201 [ 80.510849][ T5327] Bluetooth: hci1: connection err: -111 [ 80.514867][ T7603] batman_adv: batadv0: Adding interface: gretap2 [ 80.518463][ T7603] batman_adv: batadv0: Interface activated: gretap2 [ 80.559629][ T7611] vlan2: entered promiscuous mode [ 80.561442][ T7611] vlan2: entered allmulticast mode [ 80.563091][ T7611] hsr_slave_1: entered allmulticast mode [ 80.692928][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 80.711900][ T7622] 9pnet_fd: Insufficient options for proto=fd [ 81.537532][ T7639] kvm: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 81.541682][ T7639] kvm: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 81.585369][ T7641] overlayfs: failed to resolve 'verity=require': -2 [ 81.723343][ T40] kauditd_printk_skb: 220 callbacks suppressed [ 81.723362][ T40] audit: type=1400 audit(1757383860.224:1616): avc: denied { create } for pid=7644 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.733877][ T40] audit: type=1400 audit(1757383860.224:1617): avc: denied { setopt } for pid=7644 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.742507][ T40] audit: type=1400 audit(1757383860.224:1618): avc: denied { lock } for pid=7644 comm="syz.2.505" path="socket:[22019]" dev="sockfs" ino=22019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.752591][ T40] audit: type=1400 audit(1757383860.244:1619): avc: denied { read write } for pid=5967 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.762987][ T40] audit: type=1400 audit(1757383860.244:1620): avc: denied { open } for pid=5967 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.773322][ T40] audit: type=1400 audit(1757383860.244:1621): avc: denied { ioctl } for pid=5967 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.784748][ T40] audit: type=1400 audit(1757383860.264:1622): avc: denied { name_bind } for pid=7648 comm="syz.2.506" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 81.794310][ T40] audit: type=1400 audit(1757383860.264:1623): avc: denied { create } for pid=7648 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.802610][ T40] audit: type=1400 audit(1757383860.274:1624): avc: denied { ioctl } for pid=7648 comm="syz.2.506" path="socket:[20774]" dev="sockfs" ino=20774 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.812089][ T40] audit: type=1400 audit(1757383860.274:1625): avc: denied { listen } for pid=7648 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 81.913663][ T7639] kvm_intel: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf [ 81.930088][ T7639] kvm: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf [ 81.933087][ T7639] kvm: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae [ 81.935775][ T5327] Bluetooth: hci1: command 0x0406 tx timeout [ 81.937606][ T5970] Bluetooth: hci2: command tx timeout [ 81.953115][ T7662] syz.2.510 uses old SIOCAX25GETINFO [ 81.959804][ T7639] kvm: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b [ 81.980374][ T7639] kvm: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a [ 81.984146][ T7639] kvm: kvm [7638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a [ 83.581961][ T7679] block nbd5: Attempted send on invalid socket [ 83.584550][ T7679] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.588419][ T7679] block nbd5: Attempted send on invalid socket [ 83.590858][ T7679] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.594685][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 83.599322][ T7679] block nbd5: Attempted send on invalid socket [ 83.601909][ T7679] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.605086][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 83.610500][ T7679] block nbd5: Attempted send on invalid socket [ 83.613078][ T7679] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.616315][ T7679] block nbd5: Attempted send on invalid socket [ 83.618892][ T7679] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.622722][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 83.628106][ T7679] block nbd5: Attempted send on invalid socket [ 83.631776][ T7679] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.636358][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 83.640330][ T7679] block nbd5: Attempted send on invalid socket [ 83.642514][ T7679] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.645808][ T7679] block nbd5: Attempted send on invalid socket [ 83.648515][ T7679] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.652632][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 83.657076][ T7679] block nbd5: Attempted send on invalid socket [ 83.659785][ T7679] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.663941][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 83.668482][ T7679] block nbd5: Attempted send on invalid socket [ 83.671214][ T7679] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.675410][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 83.679181][ T7688] max out of range [ 83.679928][ T7679] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 83.684745][ T7679] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 83.862086][ T7706] __nla_validate_parse: 4 callbacks suppressed [ 83.862100][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.524'. [ 84.188426][ T7723] devpts: Bad value for 'max' [ 84.303169][ T7668] ceph: No mds server is up or the cluster is laggy [ 84.303283][ T7675] ceph: No mds server is up or the cluster is laggy [ 84.389891][ T7735] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 84.714832][ T7752] netlink: 'syz.5.540': attribute type 2 has an invalid length. [ 84.777639][ T7756] loop6: detected capacity change from 0 to 2560 [ 84.787932][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.792067][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.795021][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.798106][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.800770][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.803589][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.806640][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.809223][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.811737][ T7756] ldm_validate_partition_table(): Disk read failed. [ 84.815036][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.815737][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.824360][ T7756] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.827352][ T7756] Dev loop6: unable to read RDB block 0 [ 84.829673][ T7756] loop6: unable to read partition table [ 84.831810][ T7756] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 84.833096][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 84.844195][ T7760] ldm_validate_partition_table(): Disk read failed. [ 84.848171][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 84.854442][ T7760] Dev loop6: unable to read RDB block 0 [ 84.858157][ T7760] loop6: unable to read partition table [ 84.873122][ T7756] bridge0: entered promiscuous mode [ 84.875079][ T7756] macsec1: entered promiscuous mode [ 84.880560][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.541'. [ 84.883728][ T7756] netlink: 152 bytes leftover after parsing attributes in process `syz.2.541'. [ 84.890002][ T7756] macvlan1: entered promiscuous mode [ 84.891793][ T7756] macvlan1: entered allmulticast mode [ 84.898305][ T7756] bridge0: port 1(macvlan1) entered blocking state [ 84.901118][ T7756] bridge0: port 1(macvlan1) entered disabled state [ 84.906563][ T7756] netlink: 152 bytes leftover after parsing attributes in process `syz.2.541'. [ 85.145984][ T5978] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 85.433199][ T5978] usb 10-1: Using ep0 maxpacket: 8 [ 85.439954][ T5978] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 85.443475][ T5978] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.447916][ T5978] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.451961][ T5978] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.456457][ T5978] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.462035][ T5978] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.465909][ T5978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.569143][ T7794] syzkaller1: entered promiscuous mode [ 85.571638][ T7794] syzkaller1: entered allmulticast mode [ 85.677159][ T5978] usb 10-1: GET_CAPABILITIES returned 0 [ 85.679628][ T5978] usbtmc 10-1:16.0: can't read capabilities [ 85.800345][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 85.804421][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.556'. [ 85.932515][ T7762] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 85.934216][ T1465] usb 10-1: USB disconnect, device number 3 [ 86.042307][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.560'. [ 86.153190][ T7821] /dev/sg0: Can't lookup blockdev [ 86.155957][ T7821] tmpfs: Bad value for 'nr_blocks' [ 86.249591][ T7827] cgroup: release_agent respecified [ 86.439350][ T7836] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 86.448048][ T7836] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 86.782096][ T7841] random: crng reseeded on system resumption [ 86.787413][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 86.787427][ T40] audit: type=1400 audit(1757383865.284:1788): avc: denied { append } for pid=7840 comm="syz.5.569" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.803676][ T40] audit: type=1400 audit(1757383865.284:1789): avc: denied { open } for pid=7840 comm="syz.5.569" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.814990][ T40] audit: type=1400 audit(1757383865.304:1790): avc: denied { read write } for pid=7840 comm="syz.5.569" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.824397][ T40] audit: type=1400 audit(1757383865.304:1791): avc: denied { open } for pid=7840 comm="syz.5.569" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.834339][ T40] audit: type=1400 audit(1757383865.314:1792): avc: denied { ioctl } for pid=7840 comm="syz.5.569" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.845477][ T40] audit: type=1400 audit(1757383865.314:1793): avc: denied { ioctl } for pid=7840 comm="syz.5.569" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.855517][ T40] audit: type=1400 audit(1757383865.314:1794): avc: denied { create } for pid=7840 comm="syz.5.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.866402][ T40] audit: type=1400 audit(1757383865.314:1795): avc: denied { bind } for pid=7840 comm="syz.5.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.873944][ T40] audit: type=1400 audit(1757383865.314:1796): avc: denied { listen } for pid=7840 comm="syz.5.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.881786][ T40] audit: type=1400 audit(1757383865.314:1797): avc: denied { prog_load } for pid=7840 comm="syz.5.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.099240][ T7843] overlayfs: failed to resolve './file1': -2 [ 87.561455][ T5970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.564805][ T5970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.570667][ T5970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.576352][ T5970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.581086][ T5970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.713761][ T7881] netlink: 'syz.5.579': attribute type 1 has an invalid length. [ 87.768958][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 87.796192][ T7884] comedi comedi1: fl512: a I/O base address must be specified [ 87.807877][ T7884] netlink: 44 bytes leftover after parsing attributes in process `syz.5.581'. [ 87.813458][ T7886] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 88.002018][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.004968][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.008517][ T7866] bridge_slave_0: entered allmulticast mode [ 88.019973][ T7866] bridge_slave_0: entered promiscuous mode [ 88.033093][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.038698][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.041022][ T7866] bridge_slave_1: entered allmulticast mode [ 88.060751][ T7866] bridge_slave_1: entered promiscuous mode [ 88.146683][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.152614][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.211204][ T7866] team0: Port device team_slave_0 added [ 88.214744][ T7866] team0: Port device team_slave_1 added [ 88.254911][ T7905] tmpfs: Bad value for 'mpol' [ 88.274185][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.277034][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.284993][ T7866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.290284][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.290292][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.290306][ T7866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.342480][ T7908] dlm: non-version read from control device 0 [ 88.360873][ T7866] hsr_slave_0: entered promiscuous mode [ 88.363239][ T7866] hsr_slave_1: entered promiscuous mode [ 88.365372][ T7866] debugfs: 'hsr0' already exists in 'hsr' [ 88.368489][ T7866] Cannot create hsr debugfs directory [ 88.376286][ T7908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7908 comm=syz.2.588 [ 88.388983][ T5377] pmem0: [POWERTEC] [ 88.507851][ T7917] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 88.572329][ T7918] netlink: 'syz.2.591': attribute type 39 has an invalid length. [ 88.627357][ T7866] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.642619][ T7866] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.660998][ T7866] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.668902][ T7866] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.707329][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.709569][ T7866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.711933][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.714166][ T7866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.747210][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.763870][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.769104][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.801586][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.807798][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.810696][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.820888][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.823207][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.982580][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.072318][ T7966] __nla_validate_parse: 1 callbacks suppressed [ 89.072334][ T7966] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.602'. [ 89.079371][ T7966] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.602'. [ 89.139663][ T7866] veth0_vlan: entered promiscuous mode [ 89.153077][ T7866] veth1_vlan: entered promiscuous mode [ 89.179846][ T7866] veth0_macvtap: entered promiscuous mode [ 89.187721][ T7866] veth1_macvtap: entered promiscuous mode [ 89.202043][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.210899][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.219913][ T1262] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.222762][ T1262] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.225576][ T1262] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.228352][ T1262] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.231117][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.605'. [ 89.295428][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.304220][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.318854][ T7981] nbd_handle_cmd: 3 callbacks suppressed [ 89.318868][ T7981] block nbd5: Attempted send on invalid socket [ 89.323530][ T7981] blk_print_req_error: 3 callbacks suppressed [ 89.323540][ T7981] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 89.331261][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.331497][ T7981] SQUASHFS error: Failed to read block 0x0: -5 [ 89.333733][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.339356][ T7981] unable to read squashfs_super_block [ 89.346944][ T7982] block nbd5: Attempted send on invalid socket [ 89.349836][ T7982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 89.354110][ T7982] SQUASHFS error: Failed to read block 0x0: -5 [ 89.356920][ T7982] unable to read squashfs_super_block [ 89.440421][ T7990] mmap: syz.5.611 (7990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.506122][ T8004] openvswitch: netlink: Tunnel attr 16352 out of range max 16 [ 89.548811][ T8009] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 89.618210][ T5970] Bluetooth: hci4: command tx timeout [ 89.758756][ T8029] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 89.762289][ T8029] netlink: 500 bytes leftover after parsing attributes in process `syz.2.625'. [ 89.811684][ T8033] 9pnet_fd: Insufficient options for proto=fd [ 89.814194][ T8033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.818680][ T8033] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 89.937738][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 90.114849][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 90.149359][ T8079] 9pnet_fd: p9_fd_create_tcp (8079): problem connecting socket to 127.0.0.1 [ 90.309896][ T8089] delete_channel: no stack [ 90.428573][ T8106] netlink: 348 bytes leftover after parsing attributes in process `syz.5.650'. [ 90.581970][ T8120] netlink: 72 bytes leftover after parsing attributes in process `syz.0.654'. [ 90.614221][ T8128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 90.623555][ T8128] erspan0: entered promiscuous mode [ 90.658393][ T8137] fuse: Unknown parameter 'fž 0x0000000000000003' [ 90.665120][ T8136] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 90.687837][ T8136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.711958][ T8136] bond2: (slave geneve3): making interface the new active one [ 90.718530][ T8136] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 90.726271][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 90.774996][ T8154] dns_resolver: Unsupported content type (234) [ 90.786597][ T8153] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 90.830472][ T8153] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 90.851309][ T8163] ufs: You didn't specify the type of your ufs filesystem [ 90.851309][ T8163] [ 90.851309][ T8163] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 90.851309][ T8163] [ 90.851309][ T8163] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 90.864384][ T8163] ufs: ufstype=old is supported read-only [ 90.867312][ T8163] ufs: ufs_fill_super(): bad magic number [ 91.188135][ T8183] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 91.311852][ T8189] (syz.2.676,8189,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 91.315398][ T8189] (syz.2.676,8189,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 91.323619][ T8192] netlink: 'syz.5.678': attribute type 7 has an invalid length. [ 91.416858][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.682'. [ 91.485648][ T8233] nbd: illegal input index 1879048192 [ 91.600865][ T8235] netlink: 'syz.5.686': attribute type 1 has an invalid length. [ 91.613594][ T8235] bond1: entered promiscuous mode [ 91.616579][ T8235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.629759][ T8235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.632173][ T8235] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 91.636271][ T8235] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 91.641615][ T8235] bond1: (slave ip6gre1): making interface the new active one [ 91.644171][ T8235] ip6gre1: entered promiscuous mode [ 91.647000][ T8235] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 91.705976][ T5970] Bluetooth: hci4: command tx timeout [ 91.706067][ T53] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 91.831458][ T40] kauditd_printk_skb: 386 callbacks suppressed [ 91.831469][ T40] audit: type=1400 audit(1757383870.333:2184): avc: denied { execute } for pid=8242 comm="syz.5.689" name="file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.844091][ T40] audit: type=1400 audit(1757383870.333:2185): avc: denied { execute_no_trans } for pid=8242 comm="syz.5.689" path="/111/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.853181][ T40] audit: type=1400 audit(1757383870.333:2186): avc: denied { remount } for pid=8242 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.878317][ T53] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.881519][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.885445][ T53] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.889976][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.894024][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.898867][ T53] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.902001][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.907971][ T53] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.912758][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.918322][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.923217][ T53] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.928318][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.932634][ T53] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.939435][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.944082][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.950647][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.956887][ T53] usb 7-1: string descriptor 0 read error: -22 [ 91.959555][ T53] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.963001][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.981383][ T53] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 92.102947][ T8262] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 92.105971][ T40] audit: type=1400 audit(1757383870.603:2187): avc: denied { read } for pid=8261 comm="syz.6.695" dev="nsfs" ino=4026533993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.112647][ T40] audit: type=1400 audit(1757383870.603:2188): avc: denied { open } for pid=8261 comm="syz.6.695" path="net:[4026533993]" dev="nsfs" ino=4026533993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.120070][ T40] audit: type=1400 audit(1757383870.603:2189): avc: denied { create } for pid=8261 comm="syz.6.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.128017][ T40] audit: type=1400 audit(1757383870.603:2190): avc: denied { bind } for pid=8261 comm="syz.6.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.137804][ T40] audit: type=1400 audit(1757383870.603:2191): avc: denied { setopt } for pid=8261 comm="syz.6.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.232076][ T40] audit: type=1400 audit(1757383870.733:2192): avc: denied { name_bind } for pid=8263 comm="syz.6.696" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 92.240400][ T40] audit: type=1400 audit(1757383870.733:2193): avc: denied { node_bind } for pid=8263 comm="syz.6.696" saddr=fe80::1c src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.545995][ T6352] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 92.563025][ T8272] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 92.582807][ T8274] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.587388][ T8275] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.714318][ T6352] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.721686][ T6352] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.725375][ T6352] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.732775][ T6352] usb 11-1: config 0 descriptor?? [ 92.737865][ T6352] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 92.938522][ T9] usb 11-1: USB disconnect, device number 2 [ 93.703629][ T8334] netlink: 'syz.6.718': attribute type 10 has an invalid length. [ 93.707307][ T8334] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 93.710452][ T8334] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 93.715312][ T8334] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 93.755777][ T8337] netlink: 'syz.6.720': attribute type 1 has an invalid length. [ 93.773820][ T8337] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 93.776899][ T5970] Bluetooth: hci4: command tx timeout [ 93.981081][ T6352] IPVS: starting estimator thread 0... [ 94.065566][ T8341] IPVS: using max 45 ests per chain, 108000 per kthread [ 94.400574][ T8349] tmpfs: Invalid gid '0x00000000ffffffff' [ 94.425856][ T8351] __nla_validate_parse: 5 callbacks suppressed [ 94.425867][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.726'. [ 94.473977][ T8356] netlink: 32 bytes leftover after parsing attributes in process `syz.5.727'. [ 94.584184][ T8361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=8361 comm=syz.5.729 [ 94.618711][ T8365] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 94.634177][ T8365] CIFS mount error: No usable UNC path provided in device string! [ 94.634177][ T8365] [ 94.641555][ T8365] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.657905][ T8365] syz.0.730: attempt to access beyond end of device [ 94.657905][ T8365] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 94.662202][ T8365] gfs2: error -5 reading superblock [ 94.724748][ T8367] usb usb8: check_ctrlrecip: process 8367 (syz.0.731) requesting ep 01 but needs 81 [ 94.728495][ T8367] usb usb8: usbfs: process 8367 (syz.0.731) did not claim interface 0 before use [ 94.731627][ T8368] usb usb8: check_ctrlrecip: process 8368 (syz.0.731) requesting ep 01 but needs 81 [ 94.734558][ T8368] usb usb8: usbfs: process 8368 (syz.0.731) did not claim interface 0 before use [ 94.975637][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.128022][ T34] usb 5-1: config 53 has an invalid interface number: 172 but max is 0 [ 95.130662][ T34] usb 5-1: config 53 contains an unexpected descriptor of type 0x1, skipping [ 95.133297][ T34] usb 5-1: config 53 contains an unexpected descriptor of type 0x1, skipping [ 95.137910][ T34] usb 5-1: config 53 has no interface number 0 [ 95.139867][ T34] usb 5-1: config 53 interface 172 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 95.142849][ T34] usb 5-1: config 53 interface 172 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 95.146492][ T34] usb 5-1: config 53 interface 172 altsetting 4 endpoint 0xE has invalid maxpacket 47253, setting to 64 [ 95.150002][ T34] usb 5-1: config 53 interface 172 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 95.153371][ T34] usb 5-1: config 53 interface 172 has no altsetting 0 [ 95.159748][ T34] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1250, bcdDevice=b8.f0 [ 95.162714][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.165041][ T34] usb 5-1: Product: syz [ 95.166684][ T34] usb 5-1: Manufacturer: syz [ 95.168043][ T34] usb 5-1: SerialNumber: syz [ 95.390162][ T34] option 5-1:53.172: GSM modem (1-port) converter detected [ 95.400610][ T34] usb 5-1: USB disconnect, device number 5 [ 95.407939][ T34] option 5-1:53.172: device disconnected [ 95.784940][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.5.741'. [ 95.790683][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.794028][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.846588][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.743'. [ 95.856743][ T5970] Bluetooth: hci4: command tx timeout [ 95.908695][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.745'. [ 96.107354][ T8436] ipvlan3: entered promiscuous mode [ 96.109541][ T8436] bridge0: port 3(ipvlan3) entered blocking state [ 96.111639][ T8436] bridge0: port 3(ipvlan3) entered disabled state [ 96.113724][ T8436] ipvlan3: entered allmulticast mode [ 96.115449][ T8436] bridge0: entered allmulticast mode [ 96.118660][ T8436] ipvlan3: left allmulticast mode [ 96.120284][ T8436] bridge0: left allmulticast mode [ 96.255568][ T1465] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.261380][ T8445] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 96.346410][ T840] usb 7-1: USB disconnect, device number 3 [ 96.397224][ T8453] No source specified [ 96.405731][ T1465] usb 5-1: Using ep0 maxpacket: 8 [ 96.409077][ T1465] usb 5-1: config 0 has no interfaces? [ 96.411226][ T1465] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.414823][ T1465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.419166][ T8458] netlink: 'syz.5.761': attribute type 2 has an invalid length. [ 96.420525][ T1465] usb 5-1: config 0 descriptor?? [ 96.486038][ T8462] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 96.488105][ T8462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.490639][ T8462] vhci_hcd vhci_hcd.0: Device attached [ 96.519487][ T8464] block nbd5: Attempted send on invalid socket [ 96.522093][ T8464] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 96.526212][ T8464] XFS (nbd5): SB validate failed with error -5. [ 96.578713][ T8465] vhci_hcd: connection closed [ 96.578890][ T8219] vhci_hcd: stop threads [ 96.581766][ T8219] vhci_hcd: release socket [ 96.583184][ T8219] vhci_hcd: disconnect device [ 96.831344][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.835817][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.839305][ T6029] usb 5-1: USB disconnect, device number 6 [ 96.925603][ T1465] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 97.077296][ T1465] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.082073][ T1465] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.087287][ T1465] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.091078][ T1465] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.098599][ T8487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.106334][ T1465] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.108949][ T40] kauditd_printk_skb: 186 callbacks suppressed [ 97.108961][ T40] audit: type=1400 audit(1757383875.613:2380): avc: denied { read } for pid=8489 comm="syz.5.770" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.127140][ T40] audit: type=1400 audit(1757383875.613:2381): avc: denied { open } for pid=8489 comm="syz.5.770" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.134378][ T40] audit: type=1400 audit(1757383875.613:2382): avc: denied { ioctl } for pid=8489 comm="syz.5.770" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.208157][ T40] audit: type=1400 audit(1757383875.713:2383): avc: denied { write } for pid=8489 comm="syz.5.770" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.234278][ T8490] kvm: pic: non byte write [ 97.303516][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.307576][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.311536][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.315050][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.320046][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.327287][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.333727][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.337818][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.341684][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.357283][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.375550][ T40] audit: type=1400 audit(1757383875.873:2384): avc: denied { execmem } for pid=8492 comm="syz.5.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.390411][ T6352] usb 7-1: USB disconnect, device number 4 [ 97.408202][ T40] audit: type=1400 audit(1757383875.913:2385): avc: denied { getopt } for pid=8498 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.414756][ T40] audit: type=1400 audit(1757383875.913:2386): avc: denied { create } for pid=8498 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 97.428715][ T40] audit: type=1400 audit(1757383875.923:2387): avc: denied { create } for pid=8500 comm="syz.5.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.435143][ T40] audit: type=1400 audit(1757383875.923:2388): avc: denied { create } for pid=8502 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.451560][ T40] audit: type=1400 audit(1757383875.923:2389): avc: denied { write } for pid=8502 comm="syz.2.774" path="socket:[25092]" dev="sockfs" ino=25092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.484016][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 97.487509][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 97.546427][ T8501] netlink: 'syz.5.773': attribute type 1 has an invalid length. [ 97.548892][ T8501] netlink: 500 bytes leftover after parsing attributes in process `syz.5.773'. [ 97.712768][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'. [ 97.722370][ T8538] netlink: 'syz.2.784': attribute type 39 has an invalid length. [ 97.865971][ T8549] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.789'. [ 97.907710][ T8552] syz.0.790 (8552) used obsolete PPPIOCDETACH ioctl [ 98.120028][ T8578] XFS (nullb0): Invalid superblock magic number [ 98.181291][ T8591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.189624][ T8591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8591 comm=syz.5.799 [ 99.070715][ T8617] binder: 8616:8617 ioctl c0306201 200000000240 returned -11 [ 99.153040][ T8622] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 99.161185][ T8622] nbd: error processing sock list [ 99.804858][ T8688] __nla_validate_parse: 7 callbacks suppressed [ 99.804870][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.828'. [ 99.810437][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.828'. [ 99.881126][ T5970] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 99.888508][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.830'. [ 99.891729][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.830'. [ 99.918368][ T8694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.830'. [ 99.957296][ T8696] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 99.998937][ T8701] comedi comedi1: fl512: a I/O base address must be specified [ 100.185988][ T8705] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 100.188937][ T8705] SELinux: failed to load policy [ 100.197867][ T8705] overlayfs: missing 'workdir' [ 100.241575][ T8717] nfs4: Unknown parameter 'atadv0' [ 100.475622][ T6352] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 100.566251][ T8730] netlink: 44 bytes leftover after parsing attributes in process `syz.0.842'. [ 100.591367][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.594800][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.625609][ T6352] usb 10-1: Using ep0 maxpacket: 16 [ 100.633243][ T6352] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 100.637488][ T6352] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 100.640633][ T6352] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 100.644119][ T6352] usb 10-1: language id specifier not provided by device, defaulting to English [ 100.649726][ T6352] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.652598][ T6352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.655387][ T6352] usb 10-1: Product: syz [ 100.656839][ T6352] usb 10-1: Manufacturer: 䧛뭜䮘ã¿ç—šë‰’㵟⮂ä‘䒱枖î®î³µâ°”䮩턭†鱀䭊೙é¸äª¬ìµ¿á­¾ç”³æ•Œâ½“â¹ï­Œã‡¡å’‹ïªáš¡æ™£ãŽºá§¦æˆ¯çª¶ã¥¿à¨žã‹œê•Šï­£â›°ï¦³ä¯Žë²¥ç¾£å£žï”»â‰—íµê‹Šá†£â„ªé„šì‡¦ï€¼æ¦—櫯é á¿¾ãŸ‡á”œé‘¸ã¹šÕšâ½µâ¡©ìº¡îŠ¿íŸ¬å äŸ¹ã¯‡æŽ€ë‚ƒå»»ç¡§â ±â¹â¬©îŸ—縣ìƒÐ”鷫䚑쭓⽰ﶳ㼸눨㉼郵짾쮿弅짼ᡈ킃斡⟔⩃规퓴圛æ¹à¼§ë“¡à¤¬Ë¨ï¼½èª„梯춧왱滺 [ 100.668251][ T6352] usb 10-1: SerialNumber: syz [ 100.835825][ T840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.880388][ T6352] cdc_ncm 10-1:1.0: bind() failure [ 100.884783][ T6352] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 100.887477][ T6352] cdc_ncm 10-1:1.1: bind() failure [ 100.894885][ T6352] usb 10-1: USB disconnect, device number 4 [ 100.985849][ T840] usb 5-1: Using ep0 maxpacket: 8 [ 100.995240][ T840] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.005566][ T840] usb 5-1: config 179 has no interface number 0 [ 101.008312][ T840] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 101.012927][ T840] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 101.021215][ T840] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 101.026499][ T840] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26223, setting to 1024 [ 101.031451][ T840] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.037511][ T840] usb 5-1: config 179 interface 65 has no altsetting 0 [ 101.040389][ T840] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 101.044142][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.050841][ T8731] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.075947][ T840] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input11 [ 101.125941][ T5362] input input11: unable to receive magic message: -110 [ 101.156046][ T5362] input input11: unable to receive magic message: -32 [ 101.160900][ T5362] input input11: unable to receive magic message: -32 [ 101.164652][ T5362] input input11: unable to receive magic message: -32 [ 101.169504][ T5362] input input11: unable to receive magic message: -32 [ 101.183428][ T5362] input input11: unable to receive magic message: -32 [ 101.239946][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 101.242801][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.845'. [ 101.245840][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 101.248694][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 101.273069][ T1465] usb 5-1: USB disconnect, device number 7 [ 101.273147][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 101.900676][ T8761] comedi comedi3: bad chanlist[0]=0x8000fffd chan=65533 range length=0 [ 102.003050][ T8763] Invalid ELF header type: 0 != 1 [ 102.026141][ T8772] loop1: detected capacity change from 0 to 7 [ 102.032875][ T8772] Dev loop1: unable to read RDB block 7 [ 102.037461][ T8772] loop1: unable to read partition table [ 102.039748][ T8772] loop1: partition table beyond EOD, truncated [ 102.051024][ T8772] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.116618][ T40] kauditd_printk_skb: 282 callbacks suppressed [ 102.116629][ T40] audit: type=1400 audit(1757383880.623:2672): avc: denied { read } for pid=8764 comm="syz.2.852" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.129952][ T40] audit: type=1400 audit(1757383880.623:2673): avc: denied { open } for pid=8764 comm="syz.2.852" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.138420][ T40] audit: type=1400 audit(1757383880.623:2674): avc: denied { setopt } for pid=8785 comm="syz.5.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.144422][ T40] audit: type=1400 audit(1757383880.623:2675): avc: denied { accept } for pid=8785 comm="syz.5.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.151198][ T40] audit: type=1400 audit(1757383880.623:2676): avc: denied { write } for pid=8785 comm="syz.5.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.158692][ T40] audit: type=1400 audit(1757383880.623:2677): avc: denied { create } for pid=8785 comm="syz.5.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.166654][ T40] audit: type=1400 audit(1757383880.623:2678): avc: denied { getopt } for pid=8785 comm="syz.5.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.178131][ T40] audit: type=1400 audit(1757383880.633:2679): avc: denied { allowed } for pid=8789 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.187365][ T40] audit: type=1400 audit(1757383880.693:2680): avc: denied { read } for pid=8785 comm="syz.5.856" path="socket:[26548]" dev="sockfs" ino=26548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.197469][ T40] audit: type=1400 audit(1757383880.703:2681): avc: denied { read write } for pid=8785 comm="syz.5.856" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.246562][ T8787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3114 sclass=netlink_route_socket pid=8787 comm=syz.5.856 [ 102.368972][ T8822] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 102.399597][ T8827] netlink: 'syz.5.861': attribute type 11 has an invalid length. [ 102.403168][ T8827] netlink: 'syz.5.861': attribute type 11 has an invalid length. [ 102.492088][ T8841] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 102.503512][ T8844] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 102.647526][ T8852] /dev/sr0: Can't open blockdev [ 102.717407][ T8872] ================================================================== [ 102.717417][ T8872] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 102.717451][ T8872] Write of size 8 at addr ffffc900053e9000 by task syz.5.871/8872 [ 102.717463][ T8872] [ 102.717469][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.5.871 Not tainted syzkaller #0 PREEMPT(full) [ 102.717483][ T8872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.717491][ T8872] Call Trace: [ 102.717497][ T8872] [ 102.717501][ T8872] dump_stack_lvl+0x116/0x1f0 [ 102.717522][ T8872] print_report+0xcd/0x630 [ 102.717535][ T8872] ? __virt_addr_valid+0x81/0x610 [ 102.717551][ T8872] ? sys_imageblit+0x1a6f/0x1e60 [ 102.717567][ T8872] kasan_report+0xe0/0x110 [ 102.717579][ T8872] ? sys_imageblit+0x1a6f/0x1e60 [ 102.717595][ T8872] sys_imageblit+0x1a6f/0x1e60 [ 102.717611][ T8872] ? get_page_from_freelist+0x1b34/0x38e0 [ 102.717622][ T8872] ? __pfx_sys_imageblit+0x10/0x10 [ 102.717640][ T8872] ? rcu_is_watching+0x12/0xc0 [ 102.717653][ T8872] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 102.717663][ T8872] ? kasan_save_track+0x14/0x30 [ 102.717675][ T8872] ? __kasan_slab_free+0x60/0x70 [ 102.717686][ T8872] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 102.717700][ T8872] bit_putcs+0x90f/0xde0 [ 102.717718][ T8872] ? __pfx_bit_putcs+0x10/0x10 [ 102.717731][ T8872] ? fb_get_color_depth+0x120/0x250 [ 102.717742][ T8872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.717759][ T8872] ? __pfx_bit_putcs+0x10/0x10 [ 102.717772][ T8872] fbcon_putcs+0x384/0x4a0 [ 102.717784][ T8872] do_update_region+0x2e6/0x3f0 [ 102.717802][ T8872] invert_screen+0x1e4/0x590 [ 102.717815][ T8872] ? __pfx_invert_screen+0x10/0x10 [ 102.717828][ T8872] ? __pfx_complement_pos+0x10/0x10 [ 102.717840][ T8872] ? trace_kmalloc+0x2b/0xd0 [ 102.717851][ T8872] ? __kmalloc_noprof.cold+0x5c/0x61 [ 102.717866][ T8872] ? find_held_lock+0x2b/0x80 [ 102.717878][ T8872] clear_selection+0x59/0x70 [ 102.717891][ T8872] vc_do_resize+0xd9b/0x10e0 [ 102.717904][ T8872] ? __pfx_vc_do_resize+0x10/0x10 [ 102.717919][ T8872] fbcon_set_disp+0x7ad/0xe50 [ 102.717931][ T8872] set_con2fb_map+0x703/0x1080 [ 102.717943][ T8872] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 102.717956][ T8872] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 102.717969][ T8872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.717980][ T8872] do_fb_ioctl+0x328/0x7e0 [ 102.717993][ T8872] ? __pfx_do_fb_ioctl+0x10/0x10 [ 102.718009][ T8872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.718025][ T8872] ? selinux_file_ioctl+0x180/0x270 [ 102.718040][ T8872] fb_ioctl+0xe5/0x150 [ 102.718053][ T8872] ? __pfx_fb_ioctl+0x10/0x10 [ 102.718065][ T8872] __x64_sys_ioctl+0x18b/0x210 [ 102.718081][ T8872] do_syscall_64+0xcd/0x4c0 [ 102.718100][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.718112][ T8872] RIP: 0033:0x7fe17078ebe9 [ 102.718121][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.718132][ T8872] RSP: 002b:00007fe17154e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.718143][ T8872] RAX: ffffffffffffffda RBX: 00007fe1709c5fa0 RCX: 00007fe17078ebe9 [ 102.718150][ T8872] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 102.718157][ T8872] RBP: 00007fe170811e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.718164][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.718170][ T8872] R13: 00007fe1709c6038 R14: 00007fe1709c5fa0 R15: 00007ffdbfdced18 [ 102.718180][ T8872] [ 102.718184][ T8872] [ 102.718187][ T8872] The buggy address belongs to a vmalloc virtual mapping [ 102.718195][ T8872] Memory state around the buggy address: [ 102.718201][ T8872] ffffc900053e8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 102.718208][ T8872] ffffc900053e8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 102.718215][ T8872] >ffffc900053e9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 102.718220][ T8872] ^ [ 102.718225][ T8872] ffffc900053e9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 102.718232][ T8872] ffffc900053e9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 102.718237][ T8872] ================================================================== [ 102.718244][ T8872] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.718251][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.5.871 Not tainted syzkaller #0 PREEMPT(full) [ 102.718263][ T8872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.718270][ T8872] Call Trace: [ 102.718274][ T8872] [ 102.718278][ T8872] dump_stack_lvl+0x3d/0x1f0 [ 102.718290][ T8872] vpanic+0x6e8/0x7a0 [ 102.718306][ T8872] ? __pfx_vpanic+0x10/0x10 [ 102.718322][ T8872] ? __pfx_vprintk_emit+0x10/0x10 [ 102.718336][ T8872] ? sys_imageblit+0x1a6f/0x1e60 [ 102.718350][ T8872] panic+0xca/0xd0 [ 102.718364][ T8872] ? __pfx_panic+0x10/0x10 [ 102.718380][ T8872] check_panic_on_warn+0xab/0xb0 [ 102.718389][ T8872] end_report+0x107/0x170 [ 102.718400][ T8872] kasan_report+0xee/0x110 [ 102.718412][ T8872] ? sys_imageblit+0x1a6f/0x1e60 [ 102.718433][ T8872] sys_imageblit+0x1a6f/0x1e60 [ 102.718452][ T8872] ? get_page_from_freelist+0x1b34/0x38e0 [ 102.718463][ T8872] ? __pfx_sys_imageblit+0x10/0x10 [ 102.718480][ T8872] ? rcu_is_watching+0x12/0xc0 [ 102.718493][ T8872] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 102.718504][ T8872] ? kasan_save_track+0x14/0x30 [ 102.718513][ T8872] ? __kasan_slab_free+0x60/0x70 [ 102.718525][ T8872] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 102.718538][ T8872] bit_putcs+0x90f/0xde0 [ 102.718552][ T8872] ? __pfx_bit_putcs+0x10/0x10 [ 102.718566][ T8872] ? fb_get_color_depth+0x120/0x250 [ 102.718577][ T8872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.718589][ T8872] ? __pfx_bit_putcs+0x10/0x10 [ 102.718600][ T8872] fbcon_putcs+0x384/0x4a0 [ 102.718611][ T8872] do_update_region+0x2e6/0x3f0 [ 102.718630][ T8872] invert_screen+0x1e4/0x590 [ 102.718641][ T8872] ? __pfx_invert_screen+0x10/0x10 [ 102.718652][ T8872] ? __pfx_complement_pos+0x10/0x10 [ 102.718667][ T8872] ? trace_kmalloc+0x2b/0xd0 [ 102.718678][ T8872] ? __kmalloc_noprof.cold+0x5c/0x61 [ 102.718692][ T8872] ? find_held_lock+0x2b/0x80 [ 102.718705][ T8872] clear_selection+0x59/0x70 [ 102.718714][ T8872] vc_do_resize+0xd9b/0x10e0 [ 102.718727][ T8872] ? __pfx_vc_do_resize+0x10/0x10 [ 102.718740][ T8872] fbcon_set_disp+0x7ad/0xe50 [ 102.718757][ T8872] set_con2fb_map+0x703/0x1080 [ 102.718771][ T8872] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 102.718785][ T8872] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 102.718800][ T8872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.718813][ T8872] do_fb_ioctl+0x328/0x7e0 [ 102.718828][ T8872] ? __pfx_do_fb_ioctl+0x10/0x10 [ 102.718845][ T8872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.718863][ T8872] ? selinux_file_ioctl+0x180/0x270 [ 102.718880][ T8872] fb_ioctl+0xe5/0x150 [ 102.718892][ T8872] ? __pfx_fb_ioctl+0x10/0x10 [ 102.718905][ T8872] __x64_sys_ioctl+0x18b/0x210 [ 102.718920][ T8872] do_syscall_64+0xcd/0x4c0 [ 102.718934][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.718944][ T8872] RIP: 0033:0x7fe17078ebe9 [ 102.718952][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.718962][ T8872] RSP: 002b:00007fe17154e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.718971][ T8872] RAX: ffffffffffffffda RBX: 00007fe1709c5fa0 RCX: 00007fe17078ebe9 [ 102.718978][ T8872] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 102.718984][ T8872] RBP: 00007fe170811e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.718990][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.718996][ T8872] R13: 00007fe1709c6038 R14: 00007fe1709c5fa0 R15: 00007ffdbfdced18 [ 102.719005][ T8872] [ 102.719660][ T8872] Kernel Offset: disabled VM DIAGNOSIS: 02:11:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888024b2a440 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000000 RSP=ffffc900050d7f18 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe17152d6c0 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558c505808 CR3=0000000055d30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbfdcf226 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbfdcf226 00007ffdbfdcf22c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1709974a8 00007fe1709974a0 00007fe170997498 00007fe170997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1714fd100 00007fe170997460 00007fe170997478 00007fe1709974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1709974b8 00007fe1709974b0 00007fe1709974a8 00007fe1709974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc9000427ef30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe17154e6c0 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f023ffc CR3=000000003c203000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbfdcf226 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbfdcf226 00007ffdbfdcf22c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe170812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1709974a8 00007fe1709974a0 00007fe170997498 00007fe170997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1714fd100 00007fe170997460 00007fe170997478 00007fe1709974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1709974b8 00007fe1709974b0 00007fe1709974a8 00007fe1709974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888025e60000 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555558b29500 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65df33cf98 CR3=00000000647b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=00000000e002fefe Opmask02=00000000c0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfa21b9d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfa21cc46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfa21cc46 00007ffdfa21cc4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb743012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb743012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb743012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb743012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb743012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb743012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888024350000 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004d20a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebdee99b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebdee9b36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebdee9b36 00007ffebdee9b3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65de612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65de612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65de612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65de612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65de612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65de612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000