last executing test programs: 35.302261423s ago: executing program 1 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) 35.232263735s ago: executing program 1 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x37f, 0x0, 0x100000005}, {0x21e, 0x0, 0x1}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, "cf"}}}}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x4401, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000080000000000000000079184000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) 35.232041778s ago: executing program 1 (id=465): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x10000009, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x22911c0, 0x1, 0x5, 0x4, 0xffffbe9e, 0x0, 0x0, 0x2, 0xe}}, 0x50) (async) sendto$packet(r1, &(0x7f0000000240)="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", 0x166, 0x4000800, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 35.161904236s ago: executing program 1 (id=466): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) syz_io_uring_setup(0x6, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x31a}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0x8, &(0x7f0000000040), 0x10000089, 0x1a, 0x1}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000040)={@lba=0x1, 0x1, 0x28, &(0x7f0000000000)=""/40}) syz_emit_ethernet(0x55, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x47, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074b2c89256c505b9fc63538d19dba32efd618d4756028ea9"}}}}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0x995}, 0x18) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$netrom(r7, &(0x7f0000000240)={{0x3, @bcast, 0x3fe}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x3, r8}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'rose0\x00', 0x1000}) r9 = memfd_create(&(0x7f00000003c0)='e\xf4b\x88-\x05', 0x0) pwritev(r9, &(0x7f0000000180)=[{&(0x7f0000000700)="1a", 0x1}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000080)="9e", 0x1}], 0x1}}], 0x1, 0x4000050) sendfile(r1, r9, 0x0, 0x8000fb00) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r10}, 0x18) set_mempolicy_home_node(&(0x7f000082a000/0x2000)=nil, 0x2000, 0x1, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 35.025173532s ago: executing program 1 (id=469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x8, 0x80180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000000000000000000000c9"}}) 34.751788796s ago: executing program 1 (id=477): shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4040080) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) shutdown(0xffffffffffffffff, 0x1) (async) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4040080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) (async) 34.692796766s ago: executing program 32 (id=477): shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4040080) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) shutdown(0xffffffffffffffff, 0x1) (async) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4040080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) (async) 9.844549909s ago: executing program 3 (id=982): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600), 0x4000) 9.843813584s ago: executing program 3 (id=983): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x7, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x3, &(0x7f00000000c0)={0x13, "0329aedbf37e5ad4a9b6347d1d85ea5c315c660ec032e386e8512900"}}) mount(&(0x7f0000000180)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23, 0x3) 9.758186967s ago: executing program 3 (id=984): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) (async, rerun: 64) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x2b, 0x41ef36e0, 0xffffffff80404003, 0x8f4, 0x4, 0xffffffa0, 0x9, 0x0, 0x0, 0x80, 0x1}}, 0x50) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) (async) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) 7.990051079s ago: executing program 3 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) 7.989896129s ago: executing program 3 (id=1022): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000100)={0x400, {{0xa, 0x4e20, 0xe4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[], 0x154}}, 0x40004) 7.620018475s ago: executing program 3 (id=1026): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0xdc0, 0xfffffffffffffe39, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read(r3, &(0x7f0000000080)=""/65, 0x41) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000022c0)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000200)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0xfff3}, {0xd, 0xfff1}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)={0x1180, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1}, [@nested={0x10fb, 0xb5, 0x0, 0x1, [@nested={0x100c, 0xca, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @u32=0xffffb5db}, @generic="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"]}, @generic="14bbe85683722cae7c2142a9b95a243071591ab411bf5f6f5c4748c095e87b3098f9e8", @typed={0x5, 0x7f, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x77}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x63ef9bd3}, @generic="cc901d0b6f7ef20256f8ff83f44fa8dde4bbdb4d536d7170f16ebd896d04c3eda3729ed03b895481ded0f3afc56e42cc1ec87ba6f0796bbd8b8cff2d8cda6cef301abd5463aaa72638cece1868b7a58eb7c4680aed32", @generic="275b3e8918a7fc5870bc586424ef02062ede64dce58211989e85278ba65ba2353161bfd622f10acad81b118c41024c2df47a7bf6100875c6fdb99d488297592f4c5d19566e2d", @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x117, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@local}, @generic="bc608123c353802129ee62bbc5bcbc5902bfa3da7887113468b40280b384b9b96d58f05e0377921b785c970964f392e424c2c3bf119ed28e419579588c2366f51074adc463b1e823e6f1be852c9ce3fd6cc710aba3cf6b73315f", @nested={0x4, 0x47}]}, 0x1180}}, 0x0) 7.598475137s ago: executing program 33 (id=1026): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0xdc0, 0xfffffffffffffe39, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read(r3, &(0x7f0000000080)=""/65, 0x41) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000022c0)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000200)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0xfff3}, {0xd, 0xfff1}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)={0x1180, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1}, [@nested={0x10fb, 0xb5, 0x0, 0x1, [@nested={0x100c, 0xca, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @u32=0xffffb5db}, @generic="f899294617c4423894c6e454dc7a785003905cd19de7d707cf4a3d1e85374ef49f3ef1ba919fb39db4bd26b402548405d59465d7bb07385c1cc681785b94a58549bf85abc5b38bb4060e06f51cb405aeeca9b5131c998af932959fce67b292e0e99f06a63c62dbd85f005a3da390faa666f6e7524ecfcc52ce020b6b4d080cd06e0be812f432f673f065dee75ea5dcf40e0703b29aa25ffee38790c704a3aae77a5a96f9d549c34fddb0a0d6454f409fc18287d34f5504a625ab93cb83c39f3aa80e5fc118c351770453d6bbe5efcc26802c3b048dee85a6809444320bb7d237ab91995654ef23159b29cc794a5d9bc9c3c3de61ad2a645714480898e8684665e96f54b81017fbaf568697235024eef12ff524a6ce11a7b2c3d51c932511980cd29726bc9caa3db8cd5d4671fdefa15b52a11686d33bc43fc93f8a1aa0f8b8a8bb3c9ad18548483cb38a9f19dc26929b3655e4d76d1ab29cbdf8ac10f3f508fc0260ecb61fdaef7ed7c740b83d0ceeed158aef63f7ce22aaff9b14b4e3de571088f8eae7332165e206b06102fc5bdbebbb380fbcc30fd90e435bb468f354f7d87f86e1ded3580370ab648113d64c9992bed5559d474864e6d707618d6de041c5aa0bc3512bfc3a8c0f825901a9d9df4085ef43e37d4bdf157857a94f026e28854d4ffb3c40d86ad9307a9776733428a5c93709b9397a57f7d215b34bcd00b9ad5540be7fadaa9fb24962b22910ca3b6343d3d578ada20ef559a9a2321043e0649a1efa68caac6b44c7b3d6ec4b89291cdc4b6d4602211202591449c0900f2e7b99a8f6e25ac5c25d3263947656992f60037fdf7d83ac97a846627a50764c508b35609cfb9caf534662a24c898b6c450b8c5e32899df7e2bec914e6c6ef8c018e2c06448002aa6cd668264f170968e42ca5eecfa6ee6b7d82a88728bd96a1e125aa41e3d56f4fc4e01c4a51d01cf803e381349afd785d5235054b32e8c5682c8332c47c92ff2320c3e73244041d6886a7bb915d1120f84f098f1beea60ab6aa4e4b6e02371674bfd07a573f07f4df62368d510296de9fd74d61c1429b191e1ba2ff6031df03fdca34a772ebf89b0ea07a30dd130ed4b251c45edc2e35edaf04e371a395ee3cff1a12482f658822dc6a6190d52387565053ebd80ce5e1a41ec0d4ad75a2c2352537ad2b268d931d2bd8f23e7709a40dbf1cd7a53afc7ddf9cfe19cf5738ef957e5bed2ede86ca74643d7f8159076a0d4362161b7f35729b237918a3b21bcf34dbafaf1c1086e3b591e7532f428d18bcc7ea3616f240f010c2119f683fbf54ee37a7310c48a105e3293d177a8f1951ef21ec82d8c95b45c525f405436eeab9d768dc29fc460370f5b456420e2128736022cd205efce728e375790e9fa678903386db56b9f11dea02e6a266865b2ac647ef82032c2fbf325cecb8e1bd6e30d5efe10f82b1e2d418e7b2b1d97755fd792767e4a13c080059d8dcd34a85f32e3f0a0f3f6046b7ded80ecdef8ad3b586123a1b15926af27f67f64a62b8b18b116460c12a84666f825915ccc38a0cb62fdc3c8c1d09c2df725a94d6d92e32fcf7b64eac71663958640c471a0042eda5d0e692a373b597d110960e54c9d79e7bc2d21778882ac9f16b80fbc43f556411f91df146dd09c365d017f2e40d80fc2625e7de7e251c9aab6997894022141f48bd430186dfee938798175233b47278168ab50042684f242552e6b10b30806476f788b0ba26a53ee20df3fcf742824953a22b1dcdf93646ae13f091c8a21efd6f4c67fcb00983dde2aeb48ce30b4ca76a309a150cd09f4d7dffdc2a5fcf3916576ba932411715cde4cb9a811436e39ef3e7fd9c472bcbd3800d1ec25e838edce3054f375a19ce7b345ee88fb91c3bf8d5ed9c87f9ec90eaa9fa73475981f009b322ef04370e8b45a80b9b77306ec3ea3d9632d907c1c57caed70d683551090b450acb68a070d043688d51bc4cfe71e582930ce5acb6bce5fc5a327378b559adc10318236a646036afd30f9ebb99edcb06d32e4328f3092f51f9ee43cad64bf805ca32a6fa55cb56962948338759f26c583852c25d740ecc1a520c7c8fb335cc7f8198f8635984ce5997ee092a24d4337f452b63606a43b5c4c6c285e44b72c5d66b5ff208040f28879e24b3a2680a5ebdc33b9ea4e215cc7ee891ddc9fb85dcc0bb20bc028ea868a8c2c5011e6513a8001143110e6b135cd154c04ed7574505c666481f6a688ac7bba9f1933b6d2334547438d512b0d2bf991f60cf311fa397239b348c0afc18bfaadb565fff3b3e5e3a8911d113b9c06d1ac1f34e280ae618e8b7bd9abda9fece7c08afe93c80d6fd3a8515dba700b78721409c1fabd7d2276b95cd28fa3e20ae6464517dd63066e5be2563da4defcad0b808e8dc6245a5a4fae310bb6132b6e8a1ab8dc51df80848efbc19de18618f23baa3716333ca47973c3ecaf635130be0dcb06161466751b18e529811808d23763ada92b2498088e52c9d367241692da986dcb8a692654798eabe4add18259eba911e2864d5b788531b00c5c17d92769d64963ac5923c739c6676bc632451b2cdbb8e73d1329fc9899f89c2fd38b4a9f669c451b8915aa098a8f1841618a0af38dbab3ab935596a9281bc70e9de968eb56d4dab44da7ec70dc7bdb1415ca94a95be8706b62f395196cae3bc52e82987a438b44208850ca8da00e55305c5897d7edc9aca0e6dca5cba0389bd70f4767cece60ad0553be7cfa714081cc7148b29caa8d8abaafec63a1a07ae299be8d83472db5480194a252fe33a2cbc177d27ae65c0af14c21626044e52bb25ba4fe8a4f7b00c5fbd61a5afc92b492476acf1f8083a0f24d9169f1412b4a7750375e1c4d3494a794d4c374b8fb95be15f654b997fa2741f837ddd5e4d631d654432e37b35e3d952afbec823e08b6dc223358c5f90f07013ca78c708f31dff6e1fbca9200c65a9989ef507d249cecbed22677b696ebc2c493503031f770407e48d1a28c836d7005fdd2240b82756bc5a15cbf4630d9eff2b753f605a87c8e77ab3cf0511f2588489251b43e152a80ef5cbbefc8658f8f9031a5fca126e414905be6d50513827ce2d057c91ffb02e3c5fd021c735150b46d90175de7ef343499526c42d4ad3a6ff38abe63d2575a4197f3d55a8464e34cfa2a823313e189af7c77ac07bf52b6d70985042ed243ed46897cdba0670c5384d2c0b9533cd1b5ff8711fb5cda05c6d8c8cfa0a7d85d3381881c3f23fb17cdb3126db93f1db4672ca1743911c343b2a303a3c7c86254d097dfc7ea6c20636d8543c867a055f601f5563f836416c3b4051d15931c9789746b610efade01f5ae6f75ce21f7dedffe7053d2f8c9524f04b75d3db9b4a9c0a364ee4fcb2b9e25a55ff643494aa93d3281c7dd8a74192c7a3d8c4bdb2b3fcc1fd854a9f0581d3cc81cc55bbc4e5cc81dc6a0c2d7f68f2ef1d4ab194740062ba5fc65f1e5e1d882ce46287635fe724806c9f263e67af7da363b68bb37f3cec46b1f48af2d00ec3095aacb568e438d3ef58616b6867dc4c7f0376d727b5cc0b3efdeefc8d033dfad2c5387e061b9fa728c891d88b4337f256cf08a267f265dbe1247bc086aade97493519378ac145988c8161b3699c27b28dd05b4b7101c3d515732ee1946a4082f4ea3ff3516380d578092f374b674ab9b74338129e2c29cf8aa943cb10ea2e4aa74b652be8f946dc2d3ebbba85d171b369a56045a8196b0ca65bc865a37a2614c7656af850b8f99800279b9317df2deec634a8af23fcb88a1e41eb3fb36407d28338b7a33c85bba61ac06ca40748258d3875196b4ac3972e9b4dc98d74a8e9d6af1b667fb597937766c144537a4627535f2d433faaa3170f7b3dc7b4f233cabc1ba38e2cca14d9c3b52d2ba859f7e1011b8de3d2d0abc58a7bfe4d2c2964ed354579069036f1c73a4d8803ad6add547622a0f33dfa971a50d5642761f953794cfe9da909174671581e2ab9a285b3f4b23e486dc41dc7e6ba3da5019f0812e376e65d73046fa23fdb700c3aa8a210606bef64838f363e88bfa9e0a0fcf252d710f2046f43a7d2f9452e831b6381dd8a8bb734d76036667e191446bf7fadc483ee8f9bcb3cd99af4b17f70720bf6c0ae613ff89fa774d6de46a27d231939d9e664c71b702f29295c19a973a4e376f4d14212d40910d406fe52ecd0d05c51e8687f7430d1fc8ac8b09716a18bf81a09cdda2125ee411a00349dadb5a64005332982a95e9278d45437eb3797bb9f5c34c59160f4674bde7d109ac13a78caaddbcbad82e7e29f97b5774767e60a7bac9257dd528f2b9b053654819a13e8210b8766815a8428579de2bb9bbd758a66c8a9d01dafb5285d895332b70913b4ab739376fd0cebfdd5a8559bd6139e116906e55f62795d349bb93bae7ed95f09c7abe00b323128e389aad5e6b0873ab92c4029452ee0faa7d7360caedb69aa44a10d5f75d4c1d06b62217bff0b9a76f9291bd57711beeae63c3d9c6f0a24ad5207763742a34b7eecf00af5ac5650d1b56f8083939ea8ff2d0f5c53f9e7c2ed3fb5cea43f798e7800f20a1be32b90a88b562ec39bd124d5757915f5d556f2de062e73401e953f8c1e3ffa139834c54948be203322f0b6520db5748cde552c23d76e04630648c91797a4d099242a5b2ede8012d26904239b532d622ee4139430747e23966807f9b90fe03399aebb43de66626833dbc5ae9dc4d2fab5f136d984297d999266ecc03de1f3716217e8e535bb0da35495918bf0bdce806ee017d461cb3bcef41aa5dc80ed6b8c8076fb06dc0c74a500562dd22565de21c525bc14af9cb380b97643cb8904bf1ea765cc05234dc9540212b31c2e95892a07353cb19c16023cfe4b5d6e32ef55df7c78e0175e56f518d6a33207cf0e222f92b45537f0cea8c1589385a31743d5e25698276ade50c0925930f6ae65d836598834f8715027381ab1b12b6cf0114e140aa754c764eafdef22a15e8ddf339316d95a3ab1e86281980698ea0b278237dfd1a588c9d1074d63d6a6191dd3286cabceeb11fb2c8b30687b52dd34f597ddf512c6fab41f298e88f1708a2ce8fa2ae067375c70ea1f6c9692b585244015982631a028ce942485b15f23c6e02889bf7182fdd9225dff68e96f0217796d8f5484f8b548fededc78cd25d16d34071cf3a1e102100feffe18fc0b81b0b2fb7c03c0dc61e2319f15655d50d725f8f4e68d13515e6fdfb9cec05dca001e9e1a043edfc5dd49dbc2051de79c61c5baa2cda8908dfa513f202602d52309d45aea58b8f816423c90f11d0ed1068673804bef79e2903102d2ae7f5e20072df1c719c7f9b25893cf6f6b7a430d92c27016522d4eeb8314cb02196c613431c5eddd7acf3d88c230aa0c6757e3052ba540ea3937de8ad8b868760886d5f2a25034911ec532878efa7cb98682b9f4044c77b2aa6fadd3ca69b8d9ba4e9ccfa787b0174a27f53d799bfca5b8a83f9fb9836cd732f68a250587cd4ca60328e9b7a8edde77cd595995ad580801dd123b527326b3cc9bf283690b4978725d000e362dcb2643e84f8c509c45ef7551674bd7d1304d76cd76b9b1133a675b1caff7c33c9863dae758f02b3943a49bc77215f25c8b0f5ce985acbfddb2aaa6fed41102413d45a80e5a290789012e4b95cc022c50dcf9c0c9797e1dd257eb2da59dc8474a52fd850a0d21475c36252077d46032bb4a205ca2f101e895446b856db64159f031a205a80cca63642b2a580e8437d764cdbdeb9cffd03d1868"]}, @generic="14bbe85683722cae7c2142a9b95a243071591ab411bf5f6f5c4748c095e87b3098f9e8", @typed={0x5, 0x7f, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x77}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x63ef9bd3}, @generic="cc901d0b6f7ef20256f8ff83f44fa8dde4bbdb4d536d7170f16ebd896d04c3eda3729ed03b895481ded0f3afc56e42cc1ec87ba6f0796bbd8b8cff2d8cda6cef301abd5463aaa72638cece1868b7a58eb7c4680aed32", @generic="275b3e8918a7fc5870bc586424ef02062ede64dce58211989e85278ba65ba2353161bfd622f10acad81b118c41024c2df47a7bf6100875c6fdb99d488297592f4c5d19566e2d", @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x117, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@local}, @generic="bc608123c353802129ee62bbc5bcbc5902bfa3da7887113468b40280b384b9b96d58f05e0377921b785c970964f392e424c2c3bf119ed28e419579588c2366f51074adc463b1e823e6f1be852c9ce3fd6cc710aba3cf6b73315f", @nested={0x4, 0x47}]}, 0x1180}}, 0x0) 777.62161ms ago: executing program 5 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)={[{}]}) 717.047838ms ago: executing program 5 (id=1119): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x8, 0x80180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0xc9]}}) 651.014129ms ago: executing program 5 (id=1121): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x101, 0x870, {0x10, 0x1}, {0x48, 0x2}, @rumble={0x3, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x200, &(0x7f00000005c0)) r3 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x8000, 0x10000, 0x8003}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x101, 0x870, {0x10, 0x1}, {0x48, 0x2}, @rumble={0x3, 0x8}}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) (async) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x200, &(0x7f00000005c0)) (async) io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x8000, 0x10000, 0x8003}) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) (async) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) (async) dup(r0) (async) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) (async) fcntl$setown(r1, 0x8, 0x0) (async) 588.285449ms ago: executing program 5 (id=1123): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) read(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000160001002abd"], 0x2c}}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, "3932a3", 0x28, 0x6, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x0, 0xa, 0x3, 0x2, 0x85b5, 0x0, 0x1, 0x4, 0x16475f0d6f0e1032, 0x2, 0x100, 0x0, 0x1, 0x4e20, 0x4e22}, 0xfffffc8b, 0x1}, 0x2, 0x2}}}}}}}}, 0x0) 587.978102ms ago: executing program 5 (id=1124): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, r0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000000)={0x10, 0x1}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1) fcntl$setpipe(r0, 0x407, 0x8001a0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100), 0x4) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x0) 513.459222ms ago: executing program 5 (id=1125): syz_usbip_server_init(0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xfffffffc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000013c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000001380)={&(0x7f0000001540)={0x100, r4, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="a35fc145396c55856a0396785dd3"}, @NL80211_ATTR_HE_OBSS_PD={0x7c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4e}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "c266a49645ac1fde"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xfc}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "b23183cd38160855"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "c990bc623d30b2f8"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x30}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x5}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0x6, 0xa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="120189000000", 0x0, 0x0, 0x11, 0x0, 0x0}) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001640)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @remote}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x91}, 0x404c044) syz_clone(0x40a0200, &(0x7f0000000280)="efde49a31545f4424dcd588a7ae64b2516d9c58e0866556ad642314686f347e2d868dec936dd6391714ed73ecb4536a0e85d6848e82b5fc6654a1c86176146299b4406ec61c13fd16acf25daceddb2efd125fe6beb0b080f443a009d958f85021edbc98782d6e8572d71e0ff884a538989bafc59d7f08da06f66b658500b8ad1278eaadb5f238a9378143f355932576c100e302e75a2090790f1edcc61a0f90e6b1252cba969bd6e0c5e5921fc72e270634ae4", 0xb3, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000380)="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") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffc, 0x8001, 0xfffe}, 0x14) shutdown(r0, 0x2) 459.464558ms ago: executing program 2 (id=1127): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x5e4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x100, 0x1, 0x4, 0xfffffffa}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x574, 0x1, [@m_xt={0x128, 0xd, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xf5, 0x6, "ce8e76314fd47d2db494d11c6a9405548770bb0b0456b4ddd349b5af24184e33757417c01176defce43e0aaa38d0c51112647460d6afb98fc66799ea21b53d25e253cb260a2c34534537f2fa5a9212db67df73b5d45cda5295a1bdf9e57926398720ece87683a3cfdc1326885833af9aa15ba1062fa571a9bf4a489a9bab35dfc88e595404d1e8d86f7957264bfdfccb720725b635f31fe0acc377ae3dc471327a9abf99d20f8c696cb30fd06b9915966c4cf94299b642eecff0aa3faa43992b39354b32286556f46f6c453e9f63b452f726c7dff19bee3189b35ff430ca4f3f8005a869ce9aeba1d17140622ccd648801"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x6c, 0x20, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x29, 0x6, "f3fc6f1765985269869034a8ae95af885ed2dd331f6c78e20503c0821b067fea856a883abf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x90, 0x1d, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x4, 0xfffffffb, 0x40f2429c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2aa4, 0x7, 0xa2, 0x8001}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x50f1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x12, 0x6, "138f58e62ec643ccfdb9aa00835f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x94, 0x15, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0xe5, 0x5, 0x1, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f93, 0x4}}]}, {0x43, 0x6, "cd870de26d95113930afe719678066dc09bdfc1842aad60aa4a79ede5303e90a45c2c481693d226d64286d34c092d037d30b71d01a55525aaa741f4bc538da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x128, 0x1f, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x10}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x7a52b54f, 0x5, 0x7, 0x4}}]}, {0xd3, 0x6, "be33a904030d3f4a9dc7dad89b9b5a888b68824578aec1ebaf901001b256fe946e7a30444403b3ddad8f2d9ea9e40eff727589b7fde98332ff5fae9633f444588909fe9b253e68382cef1d40b0e5c7bec7a22bebb29d6b96ec97799aa929ebb426a40f727ec5b88fab466913e62e182d40af996d84efbb2643e7092cb1a6db32327c74f54620a4825495b16d1d2b9ec4f0b98011ac841079b201defe98856885a230517886b1c02a8df77a9b28c7aa568e4715148b4abbbda5e25f28ff321e6015c1141a5e99a9fb3058db2d88fdb4"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x190, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x3, 0x10000000, 0x40, 0x80}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0xffffffffffffffff, 0xb, 0x7}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x42, 0x7, 0x6, 0x1}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x1, 0x2, 0x7d}, 0x4, r1}}]}, {0xe1, 0x6, "d8558ac71bd4419e165d0bb5dc39fdf6f18eb29ad9e8313a00db0576617c95f227c47ba2faa2d3d53cc208b4a0671d47a4efbdf5d9446baa6a192df5167635c00e1bb54e48e05b89fc2fc24dc253b97e9d7eefbc2448f92b000be40bc2c09d01cd77236440a6ae4854400be2df31e7744297cd5e888cf388ee3c1f409d2c5a967dc3dc57936bdd104161be71bd65bb264c2ed50ca4201e1a0354c3cd4e4bcb16ee1a3e59c9dfa9bb45f29a42d6b67aa4a6795642fb495f724a6f019c04f847a4719e59f965884ba363f803e76104b199985220ed596eeed6d7bfdd2277"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 396.305184ms ago: executing program 2 (id=1128): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000224e00000000", 0x58}], 0x1) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_gact={0x30, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}}, 0x0) 395.183347ms ago: executing program 2 (id=1130): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="0000531a9226a028", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname(r2, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000100)=0x80) socket$kcm(0xa, 0x2, 0x3a) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="0000531a9226a028", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x44000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) (async) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockname(r2, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000100)=0x80) (async) 297.369808ms ago: executing program 4 (id=1131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x33}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x0) 296.603965ms ago: executing program 2 (id=1132): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) openat$ubi_ctrl(0xffffff9c, 0x0, 0x200002, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 296.155272ms ago: executing program 0 (id=1133): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x37, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x20, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x8200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) sendto$inet(r0, &(0x7f0000000180)='!', 0x1, 0x4040845, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) 160.594956ms ago: executing program 4 (id=1134): acct(0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x40, &(0x7f0000000080)) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x14000, 0x82, 0x1}, 0x18) open_tree(r2, &(0x7f0000000200)='./file0\x00', 0x80000) 160.020373ms ago: executing program 4 (id=1135): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}, {0xa, 0x4e24, 0x0, @local, 0x45f}, r0, 0x4}}, 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0xffffffffffffff05, &(0x7f0000000700)={&(0x7f00000004c0)=@polexpire={0xcc, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x3ff, 0x2, 0x60, 0x120, 0x73, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x4, 0x10000000000, 0x7fffffff, 0x8, 0x7}, {0x1, 0x4c67, 0x9, 0x449f}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="0025000000a00200240022800b00010700000074617000001400028006000300a600000008000700ac14141387388d38e8432bdde023abd3e62cb820c646c26ee897f4190468c65e024b1e320e6187f61cad61526b20fdf721d238aebb45367e1370d55648ececaae951ae387cd1ae4a1a491d701cca27262861dababa4a6f869032675e1f1145f31da5ad7237cb424acd9de866db484041ea6a90332ddd4bab096353aa4cc35e5621578656c550f3b6ec4c4469841f4d7583c8c16a0d3ee5cbd5fc97da228701ecd8c32146fd050863144f952ac02f100423a08818d73e5aca582e48f223685ca00562c599785bded826ea609efd1eb0eafea50e217b6b071594669e4c2980147d945b4b894cd3753fa78ffc6ba8bc745398b3f6095620a9856666d5a9633f448d5d6405023b7d9aeef33c10af9d99c5bad1c080ae5e8525e9a322667d7637fe57eb539c610a6e01ac"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) 158.401616ms ago: executing program 0 (id=1136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a090000cd95a69c00000000000000000000ffff"], 0x4c}}, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x42, 0x4, {0x2, @pix_mp={0x6, 0x1, 0x59565955, 0x2, 0x3, [{0x1, 0x9}, {0x52, 0x4}, {0x9, 0x3}, {0xffffffff, 0x3}, {0x4, 0x81}, {0x7, 0x101}, {0x0, 0x6}, {0x81, 0xf21f}], 0x7, 0x5, 0x3, 0x1, 0x7}}}) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 158.25709ms ago: executing program 2 (id=1137): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) landlock_restrict_self(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045439, 0x40bea7b87a0000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}}, 0x14}}, 0x4010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) open_by_handle_at(r3, &(0x7f00000002c0)=@OVL_FILEID_V1={0x81, 0xf8, {'\x00', {0x0, 0xfb, 0x7e, 0x7, 0x3, "fe121221f1c083c7151135d6fa31e026", "53607ad6b96555d8a1b65a061f56e48d11ab8fc1ffc64f5044029f0f788ab0062ad94d8d42933b43d114bfb77e4d8f1c4d9d3a1a4c03f27e6336351b0d648e0e5cb9dc23a99ead2ebcd9bd6b09f0a831dfc5d5efab83511214b2ab03961808dc6534ff639a8edd771b"}}}, 0x200000) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000c80)=@ethtool_coalesce={0xe, 0x4, 0x10000, 0x80000001, 0x1, 0x84, 0x1, 0xe3a, 0xef2, 0x400, 0xb, 0x3, 0x3, 0x6, 0x3, 0x45, 0x8, 0x3, 0xb58, 0x3, 0x2000000, 0x2, 0x7}}) r5 = gettid() tkill(r5, 0x16) tkill(r5, 0x33) 82.804822ms ago: executing program 4 (id=1138): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="ea0189bdebb0c1009e91a21a6d420ee9b95082abd6431cc7af2c4a6b8a009a148bf1bf622f02bfdbd8a78ecb", 0x8c}], 0x2}, 0x20000000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="ea0189bdebb0c1009e91a21a6d420ee9b95082abd6431cc7af2c4a6b8a009a148bf1bf622f02bfdbd8a78ecb", 0x8c}], 0x2}, 0x20000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) (async) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001dc0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 82.001593ms ago: executing program 2 (id=1139): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f78d9ca38fff48f3be52163448412ba82bf1efd3f2a95475108a3d2646b426e819282a5e8d28a1f36896a1f75ed1e891a26840f2884af8002118b5493ccc56f6bba2f41d7f2d0b6d06a6162c16babab5276443d4c464d255744b00dfa55d8c0b75070c21b23e5d07a05009a7e53a231c", 0x70}], 0x1}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) sendto$inet(r0, 0x0, 0x0, 0x80, &(0x7f00000007c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000640)=0x13) socket(0x18, 0xa, 0x3) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000280)={0xff01, 0x5, 0x8, 0x0, 0x1b, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0xa) recvfrom$inet(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000020000001a0f00000700000004800000", @ANYRES32, @ANYBLOB="0700000008000600000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000100009d03000000c1000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd7605205c3dceb44cc4c7b3664e29fb000000000000000000") ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) 81.747205ms ago: executing program 0 (id=1140): connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) (async) open$dir(&(0x7f0000000400)='./file0\x00', 0xa6002, 0x288) (async) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) (async) io_setup(0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1b) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0xc090) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) r3 = socket$inet(0x2, 0x6, 0x2000000) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@arm64={0x2, 0x2, 0xd2, '\x00', 0x7}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000300)) 81.520372ms ago: executing program 4 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x6f9, 0x0}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r5, &(0x7f0000000380)='./mnt\x00', r5, &(0x7f0000000340)='./file0\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84a1, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x2, 0x6, 0x6, 0x2, 0x80, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x5800ef0df82ee96a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x189}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, @ldst={0x3, 0x2, 0x3, 0x7, 0x7, 0x18, 0x1}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0xffff0001, 0xb1, &(0x7f00000001c0)=""/177, 0x41000, 0xc, '\x00', r2, @fallback=0x26, r3, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94) stat(&(0x7f0000000300)='./file0\x00', 0x0) 78.162859ms ago: executing program 0 (id=1142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x2}, 0x10) (async) write(r3, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000000000", 0x1b) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x40}}, 0x4810) (async) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}, @ra={0x5, 0x2, 0x80}]}]}}}}}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x20, 0x400, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x2000c001) (async) close(r2) 635.006µs ago: executing program 4 (id=1143): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500001c0000000000029078ac160001ac1414aa2200907864010102"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x101, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x24000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = geteuid() sendmsg$nl_xfrm(r2, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)=@acquire={0x190, 0x17, 0x100, 0x70bd27, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x4d5, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, @in6=@remote, 0x4e20, 0x5b0, 0x4e22, 0xa88, 0xa, 0x80, 0xa0, 0x29, r3, r4}, {{@in=@remote, @in=@multicast1, 0x4e23, 0x0, 0x4e21, 0x400, 0xa, 0x20, 0x0, 0x8, r7, r8}, {0x0, 0x2, 0xfffffffffffffe00, 0x3, 0x0, 0x100000000, 0x5}, {0x0, 0x80000000, 0x7, 0x10000}, 0x3800000, 0x6e6bb0, 0x0, 0x1, 0x4}, 0x3, 0x546, 0x3, 0x70bd2b}, [@replay_esn_val={0x34, 0x17, {0x6, 0x70bd27, 0x70bd2d, 0x70bd26, 0x70bd27, 0xfffffff9, [0x430, 0x8, 0x4, 0x7, 0x9, 0x8]}}, @lifetime_val={0x24, 0x9, {0x6, 0x80000001, 0x401}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @etimer_thresh={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4880}, 0x4000090) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x0, 0x0, 0x1b0, 0x368, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @local, [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffffff], 'veth0_vlan\x00', 'pimreg1\x00', {0xff}, {}, 0x1, 0x30, 0x1, 0x8}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 233.826µs ago: executing program 0 (id=1144): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) (async) r2 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000440), 0x4) close(r2) 0s ago: executing program 0 (id=1145): r0 = socket(0x2b, 0x1, 0x1) (async) r1 = socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='thermal_power_allocator_pid\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) (rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) close_range(r1, r0, 0x0) r3 = openat$ttyprintk(0xffffff9c, &(0x7f0000001b40), 0x101000, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000001b80)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ribute type 10 has an invalid length. [ 65.575704][ T6889] batman_adv: batadv0: Adding interface: team0 [ 65.578708][ T6889] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.591995][ T6889] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 65.606133][ T6893] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 65.609301][ T6893] team0: entered promiscuous mode [ 65.610930][ T6893] team_slave_0: entered promiscuous mode [ 65.613309][ T6893] team_slave_1: entered promiscuous mode [ 65.616191][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.618406][ T6893] batman_adv: batadv0: Interface activated: team0 [ 65.620524][ T6893] batman_adv: batadv0: Interface deactivated: team0 [ 65.623133][ T6893] batman_adv: batadv0: Removing interface: team0 [ 65.669323][ T6897] netlink: 'syz.2.273': attribute type 6 has an invalid length. [ 65.672768][ T6897] netlink: 'syz.2.273': attribute type 5 has an invalid length. [ 65.679539][ T6897] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 65.690997][ T6897] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 65.696159][ T6897] cramfs: wrong magic [ 65.710396][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.714285][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.719300][ T836] usb 6-1: usb_control_msg returned -71 [ 65.721591][ T6903] batadv_slave_1: entered promiscuous mode [ 65.721766][ T836] usbtmc 6-1:16.0: can't read capabilities [ 65.723938][ T6903] batadv_slave_1: left promiscuous mode [ 65.731787][ T836] usb 6-1: USB disconnect, device number 2 [ 65.776262][ T6909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.788500][ T6908] block device autoloading is deprecated and will be removed. [ 65.789802][ T6909] mkiss: ax0: crc mode is auto. [ 65.882008][ T6917] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 65.901237][ T6919] bridge_slave_0: left allmulticast mode [ 65.903079][ T6919] bridge_slave_0: left promiscuous mode [ 65.905484][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.914911][ T6919] bridge_slave_1: left allmulticast mode [ 65.916783][ T6919] bridge_slave_1: left promiscuous mode [ 65.918792][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.929661][ T6919] bond0: (slave bond_slave_0): Releasing backup interface [ 65.936120][ T6919] bond0: (slave bond_slave_1): Releasing backup interface [ 65.950072][ T6919] team0: Port device team_slave_0 removed [ 65.958296][ T6919] team0: Port device team_slave_1 removed [ 65.961382][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.965379][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.969605][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.972721][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.010897][ T6927] 9pnet_virtio: no channels available for device 127.0.0.1 [ 66.136269][ T6938] 9pnet: p9_errstr2errno: server reported unknown error @ [ 66.250625][ T6942] random: crng reseeded on system resumption [ 66.328473][ T6943] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.359328][ T6942] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.361617][ T6942] overlayfs: failed to set xattr on upper [ 66.363554][ T6942] overlayfs: ...falling back to redirect_dir=nofollow. [ 66.365846][ T6942] overlayfs: ...falling back to index=off. [ 66.367885][ T6942] overlayfs: ...falling back to uuid=null. [ 66.370314][ T6942] overlayfs: ...falling back to xino=off. [ 66.372656][ T6942] overlayfs: conflicting lowerdir path [ 66.392149][ T6942] team0 (unregistering): Port device team_slave_0 removed [ 66.401052][ T6942] team0 (unregistering): Port device team_slave_1 removed [ 66.777775][ T6955] __nla_validate_parse: 40 callbacks suppressed [ 66.777789][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 66.783778][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'. [ 66.807216][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 66.807227][ T40] audit: type=1400 audit(1745379387.800:411): avc: denied { ioctl } for pid=6954 comm="syz.2.290" path="socket:[13723]" dev="sockfs" ino=13723 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.972546][ T40] audit: type=1400 audit(1745379387.960:412): avc: denied { setattr } for pid=6965 comm="syz.2.295" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.981208][ T40] audit: type=1400 audit(1745379387.970:413): avc: denied { map } for pid=6965 comm="syz.2.295" path="socket:[13736]" dev="sockfs" ino=13736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.053788][ T6970] loop8: detected capacity change from 0 to 7 [ 67.057016][ T6544] Dev loop8: unable to read RDB block 7 [ 67.058817][ T6544] loop8: AHDI p1 p3 p4 [ 67.060182][ T6544] loop8: partition table partially beyond EOD, truncated [ 67.062773][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 67.064988][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 67.070327][ T6970] Dev loop8: unable to read RDB block 7 [ 67.072294][ T6970] loop8: AHDI p1 p3 p4 [ 67.073707][ T6970] loop8: partition table partially beyond EOD, truncated [ 67.076751][ T6970] loop8: p1 start 975770946 is beyond EOD, truncated [ 67.078971][ T6970] loop8: p3 start 6514546 is beyond EOD, truncated [ 67.139251][ T40] audit: type=1400 audit(1745379388.130:414): avc: denied { create } for pid=6976 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.449393][ T6988] netlink: 'syz.0.302': attribute type 7 has an invalid length. [ 67.452599][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 67.472819][ T40] audit: type=1400 audit(1745379388.460:415): avc: denied { bind } for pid=6986 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.506411][ T40] audit: type=1400 audit(1745379388.500:416): avc: denied { connect } for pid=6990 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.515036][ T6989] netlink: 'syz.1.303': attribute type 4 has an invalid length. [ 67.517533][ T40] audit: type=1400 audit(1745379388.500:417): avc: denied { ioctl } for pid=6990 comm="syz.2.305" path="socket:[13082]" dev="sockfs" ino=13082 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.518160][ T6989] netlink: 17 bytes leftover after parsing attributes in process `syz.1.303'. [ 67.546625][ T6996] loop8: detected capacity change from 0 to 7 [ 67.550858][ T6544] Dev loop8: unable to read RDB block 7 [ 67.553040][ T6544] loop8: AHDI p1 p3 p4 [ 67.555022][ T6544] loop8: partition table partially beyond EOD, truncated [ 67.558521][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 67.561380][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 67.567374][ T6996] Dev loop8: unable to read RDB block 7 [ 67.569617][ T6996] loop8: AHDI p1 p3 p4 [ 67.571411][ T6996] loop8: partition table partially beyond EOD, truncated [ 67.574642][ T6996] loop8: p1 start 975770946 is beyond EOD, truncated [ 67.576929][ T6996] loop8: p3 start 6514546 is beyond EOD, truncated [ 67.636532][ T40] audit: type=1400 audit(1745379388.630:418): avc: denied { bind } for pid=6993 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.653574][ T40] audit: type=1400 audit(1745379388.640:419): avc: denied { ioctl } for pid=7004 comm="syz.2.308" path="socket:[17952]" dev="sockfs" ino=17952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.656353][ T7005] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.665428][ T7005] overlayfs: failed to set xattr on upper [ 67.667673][ T7005] overlayfs: ...falling back to redirect_dir=nofollow. [ 67.669770][ T7005] overlayfs: ...falling back to index=off. [ 67.671597][ T7005] overlayfs: ...falling back to uuid=null. [ 67.673455][ T7005] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 67.749240][ T40] audit: type=1400 audit(1745379388.740:420): avc: denied { write } for pid=7012 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.764614][ T7016] netlink: 108 bytes leftover after parsing attributes in process `syz.2.310'. [ 68.219856][ T7033] loop8: detected capacity change from 0 to 7 [ 68.223609][ T6544] Dev loop8: unable to read RDB block 7 [ 68.225462][ T6544] loop8: AHDI p1 p3 p4 [ 68.226815][ T6544] loop8: partition table partially beyond EOD, truncated [ 68.229283][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 68.231712][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 68.240328][ T7033] Dev loop8: unable to read RDB block 7 [ 68.242797][ T7033] loop8: AHDI p1 p3 p4 [ 68.245053][ T7033] loop8: partition table partially beyond EOD, truncated [ 68.248736][ T7033] loop8: p1 start 975770946 is beyond EOD, truncated [ 68.251792][ T7033] loop8: p3 start 6514546 is beyond EOD, truncated [ 68.296697][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 68.317435][ T7037] relay: one or more items not logged [item size (56) > sub-buffer size (5)] [ 68.388521][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 68.437963][ T7047] netlink: 'syz.0.321': attribute type 10 has an invalid length. [ 68.448837][ T7047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.661958][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.328'. [ 68.665887][ T7066] tipc: Invalid UDP bearer configuration [ 68.665929][ T7066] tipc: Enabling of bearer rejected, failed to enable media [ 68.700316][ T7066] netlink: 'syz.2.328': attribute type 2 has an invalid length. [ 68.702888][ T7066] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 68.932280][ T7069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.329'. [ 68.935184][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 69.161764][ T7074] bio_check_eod: 2 callbacks suppressed [ 69.161779][ T7074] syz.2.331: attempt to access beyond end of device [ 69.161779][ T7074] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 69.170197][ T7074] befs: (nbd2): unable to read superblock [ 69.333639][ T7090] hfsplus: Unknown parameter 'discard' [ 69.528178][ T7100] random: crng reseeded on system resumption [ 69.644308][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.708039][ T7115] loop8: detected capacity change from 0 to 7 [ 69.712271][ T6544] Dev loop8: unable to read RDB block 7 [ 69.714093][ T6544] loop8: AHDI p1 p3 p4 [ 69.716007][ T6544] loop8: partition table partially beyond EOD, truncated [ 69.718594][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 69.720735][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 69.725954][ T7115] Dev loop8: unable to read RDB block 7 [ 69.728276][ T7115] loop8: AHDI p1 p3 p4 [ 69.729866][ T7115] loop8: partition table partially beyond EOD, truncated [ 69.732696][ T7115] loop8: p1 start 975770946 is beyond EOD, truncated [ 69.736287][ T7115] loop8: p3 start 6514546 is beyond EOD, truncated [ 69.806299][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 69.811781][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.818112][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.822070][ T7118] uprobe: syz.2.347:7118 failed to unregister, leaking uprobe [ 69.825972][ T57] usb 5-1: unable to get BOS descriptor or descriptor too short [ 69.829055][ T57] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 69.831987][ T57] usb 5-1: can't read configurations, error -71 [ 69.915023][ T7128] lo: entered promiscuous mode [ 69.916740][ T7128] tunl0: entered promiscuous mode [ 69.918551][ T7128] gre0: entered promiscuous mode [ 69.920259][ T7128] gretap0: entered promiscuous mode [ 69.922012][ T7128] erspan0: entered promiscuous mode [ 69.923819][ T7128] ip_vti0: entered promiscuous mode [ 69.926577][ T7128] ip6_vti0: entered promiscuous mode [ 69.928625][ T7128] sit0: entered promiscuous mode [ 69.930389][ T7128] ip6tnl0: entered promiscuous mode [ 69.932219][ T7128] ip6gre0: entered promiscuous mode [ 69.934810][ T7128] ip6gretap0: entered promiscuous mode [ 69.936639][ T7128] vcan0: entered promiscuous mode [ 69.938473][ T7128] bond0: entered promiscuous mode [ 69.940092][ T7128] bond_slave_0: entered promiscuous mode [ 69.942004][ T7128] bond_slave_1: entered promiscuous mode [ 69.944237][ T7128] nlmon0: entered promiscuous mode [ 69.947245][ T7128] caif0: entered promiscuous mode [ 69.949509][ T7128] batadv0: entered promiscuous mode [ 69.951691][ T7130] netlink: 'syz.3.351': attribute type 15 has an invalid length. [ 69.951938][ T7128] vxcan0: entered promiscuous mode [ 69.957390][ T7128] vxcan1: entered promiscuous mode [ 69.959644][ T7128] veth0: entered promiscuous mode [ 69.962022][ T7128] veth1: entered promiscuous mode [ 69.964828][ T7128] wg0: entered promiscuous mode [ 69.966943][ T7128] wg1: entered promiscuous mode [ 69.969128][ T7128] wg2: entered promiscuous mode [ 69.971201][ T7128] veth0_to_bridge: entered promiscuous mode [ 69.973764][ T7128] bridge_slave_0: entered promiscuous mode [ 69.976363][ T7128] veth1_to_bridge: entered promiscuous mode [ 69.979500][ T7128] bridge_slave_1: entered promiscuous mode [ 69.981974][ T7128] veth0_to_bond: entered promiscuous mode [ 69.984844][ T7128] veth1_to_bond: entered promiscuous mode [ 69.987389][ T7128] veth0_to_team: entered promiscuous mode [ 69.989923][ T7128] veth1_to_team: entered promiscuous mode [ 69.992461][ T7128] veth0_to_batadv: entered promiscuous mode [ 69.995197][ T7128] batadv_slave_0: entered promiscuous mode [ 69.997663][ T7128] veth1_to_batadv: entered promiscuous mode [ 69.999893][ T7128] batadv_slave_1: entered promiscuous mode [ 70.002052][ T7128] xfrm0: entered promiscuous mode [ 70.003738][ T7128] veth0_to_hsr: entered promiscuous mode [ 70.005769][ T7128] veth1_to_hsr: entered promiscuous mode [ 70.008022][ T7128] hsr0: entered promiscuous mode [ 70.009654][ T7128] veth1_virt_wifi: entered promiscuous mode [ 70.011577][ T7128] veth0_virt_wifi: entered promiscuous mode [ 70.013486][ T7128] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 70.016094][ T7128] vlan0: entered promiscuous mode [ 70.017836][ T7128] vlan1: entered promiscuous mode [ 70.019571][ T7128] macvlan0: entered promiscuous mode [ 70.021565][ T7128] macvlan1: entered promiscuous mode [ 70.023315][ T7128] ipvlan0: entered promiscuous mode [ 70.025205][ T7128] ipvlan1: entered promiscuous mode [ 70.027141][ T7128] macvtap0: entered promiscuous mode [ 70.028899][ T7128] macsec0: entered promiscuous mode [ 70.030653][ T7128] geneve0: entered promiscuous mode [ 70.032375][ T7128] geneve1: entered promiscuous mode [ 70.034076][ T7128] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 70.036529][ T7128] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 70.038932][ T7128] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 70.041326][ T7128] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 70.043808][ T7128] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 70.046278][ T7128] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 70.076239][ T7132] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 70.294902][ T7147] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.297852][ T7147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.300611][ T7147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.303425][ T7147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.355170][ T7158] xt_hashlimit: size too large, truncated to 1048576 [ 70.390245][ T7161] 9pnet: p9_errstr2errno: server reported unknown error @ [ 70.479115][ T7182] loop8: detected capacity change from 0 to 7 [ 70.482632][ T7182] Dev loop8: unable to read RDB block 7 [ 70.484519][ T7182] loop8: AHDI p1 p3 p4 [ 70.485907][ T7182] loop8: partition table partially beyond EOD, truncated [ 70.489512][ T7182] loop8: p1 start 975770946 is beyond EOD, truncated [ 70.492237][ T7182] loop8: p3 start 6514546 is beyond EOD, truncated [ 70.734512][ T7203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7203 comm=syz.3.373 [ 70.760739][ T7201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=7201 comm=syz.1.372 [ 70.876363][ T7205] sctp: [Deprecated]: syz.3.374 (pid 7205) Use of int in maxseg socket option. [ 70.876363][ T7205] Use struct sctp_assoc_value instead [ 70.923685][ T7207] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 71.250123][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.253010][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.414433][ T5941] Bluetooth: hci3: command tx timeout [ 71.430789][ T7222] usb usb8: usbfs: process 7222 (syz.2.379) did not claim interface 0 before use [ 71.887838][ T7213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.890583][ T7213] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.899626][ T7213] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.905370][ T7213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.907278][ T7213] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.910049][ T7213] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.912402][ T7213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.914427][ T7213] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.918481][ T7213] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.921499][ T7213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.923840][ T7213] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.927653][ T7213] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.931144][ T7213] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.969332][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 71.969342][ T40] audit: type=1400 audit(1745379392.960:447): avc: denied { view } for pid=7226 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.990092][ T7229] __nla_validate_parse: 11 callbacks suppressed [ 71.990128][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 72.068407][ T40] audit: type=1400 audit(1745379393.060:448): avc: denied { map } for pid=7232 comm="syz.3.384" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.082347][ T7237] qrtr: Invalid version 48 [ 72.160413][ T40] audit: type=1400 audit(1745379393.150:449): avc: denied { listen } for pid=7240 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.163617][ T7241] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=7241 comm=syz.0.387 [ 72.210989][ T40] audit: type=1400 audit(1745379393.200:450): avc: denied { append } for pid=7242 comm="syz.1.388" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.296210][ T7254] ip6t_rpfilter: unknown options [ 72.311775][ T7258] netlink: 'syz.0.392': attribute type 11 has an invalid length. [ 72.315324][ T7258] netlink: 224 bytes leftover after parsing attributes in process `syz.0.392'. [ 72.332540][ T7260] loop8: detected capacity change from 0 to 7 [ 72.336082][ T7260] Dev loop8: unable to read RDB block 7 [ 72.337885][ T7260] loop8: AHDI p1 p3 p4 [ 72.339328][ T7260] loop8: partition table partially beyond EOD, truncated [ 72.342024][ T7260] loop8: p1 start 975770946 is beyond EOD, truncated [ 72.344568][ T7260] loop8: p3 start 6514546 is beyond EOD, truncated [ 72.364217][ T40] audit: type=1400 audit(1745379393.350:451): avc: denied { setopt } for pid=7261 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.392605][ T40] audit: type=1400 audit(1745379393.380:452): avc: denied { remount } for pid=7242 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.434030][ T7274] 0f 1 [ 77.338433][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.343272][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.348203][ T40] audit: type=1400 audit(1745379398.340:487): avc: denied { read write } for pid=7538 comm="syz.0.482" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.348406][ T40] audit: type=1400 audit(1745379398.340:488): avc: denied { open } for pid=7538 comm="syz.0.482" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.359779][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.370263][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.380867][ T40] audit: type=1400 audit(1745379398.370:489): avc: denied { ioctl } for pid=7538 comm="syz.0.482" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.399198][ T40] audit: type=1400 audit(1745379398.390:490): avc: denied { mounton } for pid=7540 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.414297][ T7543] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 77.516150][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 77.609948][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.614240][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.620330][ T7540] bridge_slave_0: entered allmulticast mode [ 77.622924][ T7540] bridge_slave_0: entered promiscuous mode [ 77.626975][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.629339][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.631618][ T7540] bridge_slave_1: entered allmulticast mode [ 77.634487][ T7540] bridge_slave_1: entered promiscuous mode [ 77.641884][ T7559] loop8: detected capacity change from 0 to 7 [ 77.645855][ T6544] Dev loop8: unable to read RDB block 7 [ 77.653275][ T6544] loop8: AHDI p1 p3 p4 [ 77.655714][ T6544] loop8: partition table partially beyond EOD, truncated [ 77.659265][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 77.661804][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 77.665097][ T7559] Dev loop8: unable to read RDB block 7 [ 77.669955][ T7559] loop8: AHDI p1 p3 p4 [ 77.674365][ T7559] loop8: partition table partially beyond EOD, truncated [ 77.677242][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.677795][ T7559] loop8: p1 start 975770946 is beyond EOD, truncated [ 77.682291][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.682845][ T7559] loop8: p3 start 6514546 is beyond EOD, truncated [ 77.726827][ T7561] XFS (nbd2): no-recovery mounts must be read-only. [ 77.730447][ T7540] team0: Port device team_slave_0 added [ 77.736628][ T7540] team0: Port device team_slave_1 added [ 77.765460][ T7561] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 77.778435][ T7561] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.787991][ T5941] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 77.789634][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.793332][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.804245][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.809359][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.811613][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.820616][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.859459][ T7540] hsr_slave_0: entered promiscuous mode [ 77.861951][ T7540] hsr_slave_1: entered promiscuous mode [ 77.864064][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.866643][ T7540] Cannot create hsr debugfs directory [ 78.012083][ T7540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.016245][ T7540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.020584][ T7540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.025277][ T7540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.074890][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.085815][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.090755][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.093784][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.099680][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.101983][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.208243][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.215595][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.342289][ T7540] veth0_vlan: entered promiscuous mode [ 78.347204][ T7540] veth1_vlan: entered promiscuous mode [ 78.369776][ T7540] veth0_macvtap: entered promiscuous mode [ 78.375791][ T7540] veth1_macvtap: entered promiscuous mode [ 78.387360][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.391548][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.395747][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.399736][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.403200][ T7588] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 78.403865][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.414679][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.418535][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.422697][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.426620][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.430483][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.438339][ T7588] batman_adv: batadv0: Adding interface: team0 [ 78.440360][ T7588] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.449542][ T7588] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.457298][ T7540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.461006][ T7588] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 78.461041][ T7540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.463701][ T7588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.492'. [ 78.470938][ T7540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.473722][ T7540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.478295][ T7588] team0: entered promiscuous mode [ 78.480838][ T7588] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.483421][ T7588] batman_adv: batadv0: Interface activated: team0 [ 78.486236][ T7588] batman_adv: batadv0: Interface deactivated: team0 [ 78.488505][ T7588] batman_adv: batadv0: Removing interface: team0 [ 78.491091][ T7588] bridge0: port 1(team0) entered blocking state [ 78.493333][ T7588] bridge0: port 1(team0) entered disabled state [ 78.497403][ T7588] team0: entered allmulticast mode [ 78.501343][ T7588] netlink: 68 bytes leftover after parsing attributes in process `syz.0.492'. [ 78.505998][ T7589] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 78.511819][ T7589] bridge0: port 1(team0) entered disabled state [ 78.515540][ T7589] team0: left allmulticast mode [ 78.517254][ T7589] team0: left promiscuous mode [ 78.519429][ T7589] bridge0: port 1(team0) entered disabled state [ 78.526082][ T7589] batman_adv: batadv0: Adding interface: team0 [ 78.528626][ T7589] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.536883][ T7589] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.578200][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.581512][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.600122][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.602842][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.655836][ T7596] loop8: detected capacity change from 0 to 7 [ 78.658807][ T7596] Dev loop8: unable to read RDB block 7 [ 78.660578][ T7596] loop8: AHDI p1 p3 p4 [ 78.662004][ T7596] loop8: partition table partially beyond EOD, truncated [ 78.664781][ T7596] loop8: p1 start 975770946 is beyond EOD, truncated [ 78.666905][ T7596] loop8: p3 start 6514546 is beyond EOD, truncated [ 78.811987][ T7611] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.498'. [ 78.814978][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 78.872758][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 79.004778][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.007360][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.484332][ T5941] Bluetooth: hci2: command tx timeout [ 79.533851][ T7614] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 79.664460][ T7622] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 79.692851][ T7629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=7629 comm=syz.3.504 [ 79.729411][ T7633] loop8: detected capacity change from 0 to 7 [ 79.733337][ T7633] Dev loop8: unable to read RDB block 7 [ 79.735959][ T7633] loop8: AHDI p1 p3 p4 [ 79.737316][ T7633] loop8: partition table partially beyond EOD, truncated [ 79.739786][ T7633] loop8: p1 start 975770946 is beyond EOD, truncated [ 79.741966][ T7633] loop8: p3 start 6514546 is beyond EOD, truncated [ 79.776121][ T7640] netlink: 9 bytes leftover after parsing attributes in process `syz.0.507'. [ 79.779058][ T7640] 0: renamed from hsr_slave_1 (while UP) [ 79.783484][ T7640] 0: entered allmulticast mode [ 79.789445][ T7640] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 79.796768][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.507'. [ 79.804451][ T5941] Bluetooth: hci4: command 0x1003 tx timeout [ 79.807685][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.981966][ T7667] fuse: Bad value for 'user_id' [ 79.981987][ T7668] fuse: Bad value for 'user_id' [ 79.985413][ T7667] fuse: Bad value for 'user_id' [ 79.985684][ T7668] fuse: Bad value for 'user_id' [ 79.991692][ T7668] tmpfs: Unknown parameter 'pol' [ 79.991741][ T7667] tmpfs: Unknown parameter 'pol' [ 80.050152][ T7673] fuse: Bad value for 'user_id' [ 80.052173][ T7673] fuse: Bad value for 'user_id' [ 80.066594][ T6010] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/3 [ 80.070328][ T6010] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 80.294505][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.404213][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.554280][ T64] usb 5-1: device descriptor read/64, error -71 [ 80.578780][ T7688] unknown channel width for channel at 909000KHz? [ 80.734565][ T7700] loop8: detected capacity change from 0 to 7 [ 80.739326][ T6544] Dev loop8: unable to read RDB block 7 [ 80.741544][ T6544] loop8: AHDI p1 p3 p4 [ 80.743192][ T6544] loop8: partition table partially beyond EOD, truncated [ 80.746507][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 80.749158][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 80.757018][ T7700] Dev loop8: unable to read RDB block 7 [ 80.758842][ T7700] loop8: AHDI p1 p3 p4 [ 80.760250][ T7700] loop8: partition table partially beyond EOD, truncated [ 80.762785][ T7700] loop8: p1 start 975770946 is beyond EOD, truncated [ 80.765721][ T7700] loop8: p3 start 6514546 is beyond EOD, truncated [ 80.794425][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.924920][ T64] usb 5-1: device descriptor read/64, error -71 [ 80.971956][ T7704] mmap: syz.2.528 (7704) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.979027][ T7713] KVM: debugfs: duplicate directory 7713-7 [ 81.034770][ T64] usb usb5-port1: attempt power cycle [ 81.051721][ T7722] netlink: del zone limit has 8 unknown bytes [ 81.084297][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.088278][ T7725] trusted_key: encrypted_key: insufficient parameters specified [ 81.091205][ T7724] trusted_key: encrypted_key: insufficient parameters specified [ 81.386268][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.414685][ T64] usb 5-1: device descriptor read/8, error -71 [ 81.416221][ T7734] /dev/sr0: Can't open blockdev [ 81.498058][ T835] cfg80211: failed to load regulatory.db [ 81.564255][ T5954] Bluetooth: hci2: command tx timeout [ 81.664189][ T64] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 81.695044][ T64] usb 5-1: device descriptor read/8, error -71 [ 81.779087][ T7743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.804681][ T64] usb usb5-port1: unable to enumerate USB device [ 81.947156][ T7747] xt_policy: output policy not valid in PREROUTING and INPUT [ 82.019832][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1d [ 82.028788][ T7754] hpfs: hpfs_map_sector(): read error [ 82.075558][ T7756] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 82.078393][ T7756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.082981][ T7756] vhci_hcd vhci_hcd.0: Device attached [ 82.156147][ T7761] loop8: detected capacity change from 0 to 7 [ 82.159091][ T7761] Dev loop8: unable to read RDB block 7 [ 82.161032][ T7761] loop8: AHDI p1 p3 p4 [ 82.162454][ T7761] loop8: partition table partially beyond EOD, truncated [ 82.165510][ T7761] loop8: p1 start 975770946 is beyond EOD, truncated [ 82.167800][ T7761] loop8: p3 start 6514546 is beyond EOD, truncated [ 82.212121][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 82.212131][ T40] audit: type=1400 audit(1745379403.200:517): avc: denied { setopt } for pid=7762 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.220481][ T40] audit: type=1400 audit(1745379403.210:518): avc: denied { connect } for pid=7762 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.314237][ T57] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 82.324327][ T64] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 82.392934][ T40] audit: type=1400 audit(1745379403.380:519): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.419384][ T7775] __nla_validate_parse: 1 callbacks suppressed [ 82.419406][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 82.486837][ T64] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.489495][ T64] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 82.492380][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.497597][ T64] usb 8-1: config 0 descriptor?? [ 82.577115][ T40] audit: type=1400 audit(1745379403.570:520): avc: denied { execmod } for pid=7774 comm="syz.4.549" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 82.705585][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 82.708449][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 82.711404][ T7756] netlink: 'syz.3.542': attribute type 20 has an invalid length. [ 82.719162][ T64] usb 8-1: USB disconnect, device number 6 [ 82.723437][ T7757] usb 43-1: recv xbuf, 0 [ 82.726721][ T63] vhci_hcd: stop threads [ 82.728706][ T63] vhci_hcd: release socket [ 82.731063][ T63] vhci_hcd: disconnect device [ 82.762487][ T7800] loop8: detected capacity change from 0 to 7 [ 82.765613][ T7800] Dev loop8: unable to read RDB block 7 [ 82.768077][ T7800] loop8: AHDI p1 p3 p4 [ 82.769967][ T7800] loop8: partition table partially beyond EOD, truncated [ 82.773056][ T7800] loop8: p1 start 975770946 is beyond EOD, truncated [ 82.781911][ T7800] loop8: p3 start 6514546 is beyond EOD, truncated [ 82.794503][ T57] vhci_hcd: vhci_device speed not set [ 82.822562][ T7802] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 82.826659][ T40] audit: type=1400 audit(1745379403.820:521): avc: denied { remount } for pid=7801 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.837115][ T40] audit: type=1400 audit(1745379403.830:522): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.180147][ T7810] veth0_macvtap: left promiscuous mode [ 83.182072][ T7810] macvtap0: entered promiscuous mode [ 83.185778][ T7810] veth0_macvtap: entered promiscuous mode [ 83.191663][ T7810] team0: Device macvtap0 failed to register rx_handler [ 83.195611][ T7810] veth0_macvtap: left promiscuous mode [ 83.471360][ T7877] netlink: 88 bytes leftover after parsing attributes in process `syz.3.560'. [ 83.644267][ T5954] Bluetooth: hci2: command tx timeout [ 83.733305][ T7888] loop8: detected capacity change from 0 to 7 [ 83.737214][ T6544] Dev loop8: unable to read RDB block 7 [ 83.739004][ T6544] loop8: AHDI p1 p3 p4 [ 83.740442][ T6544] loop8: partition table partially beyond EOD, truncated [ 83.742787][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 83.745021][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 83.751255][ T7888] Dev loop8: unable to read RDB block 7 [ 83.753053][ T7888] loop8: AHDI p1 p3 p4 [ 83.755721][ T7888] loop8: partition table partially beyond EOD, truncated [ 83.758191][ T7888] loop8: p1 start 975770946 is beyond EOD, truncated [ 83.760774][ T7888] loop8: p3 start 6514546 is beyond EOD, truncated [ 83.789952][ T7890] fuse: Bad value for 'fd' [ 83.930240][ T40] audit: type=1400 audit(1745379404.920:523): avc: denied { map } for pid=7904 comm="syz.2.567" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.945250][ T40] audit: type=1400 audit(1745379404.920:524): avc: denied { execute } for pid=7904 comm="syz.2.567" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.984501][ T835] IPVS: starting estimator thread 0... [ 84.048457][ T7912] bridge0: port 1(syz_tun) entered blocking state [ 84.051410][ T7912] bridge0: port 1(syz_tun) entered disabled state [ 84.054423][ T57] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 84.065432][ T7912] syz_tun: entered allmulticast mode [ 84.071941][ T7912] syz_tun: entered promiscuous mode [ 84.075215][ T7908] IPVS: using max 45 ests per chain, 108000 per kthread [ 84.078483][ T7912] bridge0: port 1(syz_tun) entered blocking state [ 84.081443][ T7912] bridge0: port 1(syz_tun) entered forwarding state [ 84.106745][ T7912] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 84.121896][ T7915] x_tables: duplicate underflow at hook 1 [ 84.161137][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 84.166768][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 84.173164][ T7919] ipvlan2: entered promiscuous mode [ 84.177422][ T7919] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 84.194158][ T40] audit: type=1400 audit(1745379405.180:525): avc: denied { write } for pid=7918 comm="syz.2.572" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.195257][ T7919] IPv6: sit2: Disabled Multicast RS [ 84.217254][ T57] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.220394][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.224838][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.228245][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.383567][ T7930] overlayfs: missing 'lowerdir' [ 84.392560][ T7940] openvswitch: netlink: Missing key (keys=40, expected=80) [ 84.397246][ T40] audit: type=1400 audit(1745379405.390:526): avc: denied { lock } for pid=7938 comm="syz.3.576" path="socket:[21331]" dev="sockfs" ino=21331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 84.437532][ T57] usb 9-1: usb_control_msg returned -32 [ 84.440939][ T57] usbtmc 9-1:16.0: can't read capabilities [ 84.562940][ T7951] loop8: detected capacity change from 0 to 7 [ 84.565816][ T6544] Dev loop8: unable to read RDB block 7 [ 84.567574][ T6544] loop8: AHDI p1 p3 p4 [ 84.568891][ T6544] loop8: partition table partially beyond EOD, truncated [ 84.571317][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 84.573403][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 84.589162][ T7953] block nbd0: not configured, cannot reconfigure [ 84.592759][ T7953] program syz.2.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.597077][ T7951] Dev loop8: unable to read RDB block 7 [ 84.597104][ T7951] loop8: AHDI p1 p3 p4 [ 84.597123][ T7951] loop8: partition table partially beyond EOD, truncated [ 84.597275][ T7951] loop8: p1 start 975770946 is beyond EOD, truncated [ 84.607922][ T7951] loop8: p3 start 6514546 is beyond EOD, truncated [ 84.834466][ T7965] netlink: 144 bytes leftover after parsing attributes in process `syz.4.565'. [ 85.081813][ T7984] loop8: detected capacity change from 0 to 7 [ 85.084874][ T7984] Dev loop8: unable to read RDB block 7 [ 85.087582][ T7984] loop8: AHDI p1 p3 p4 [ 85.090747][ T7984] loop8: partition table partially beyond EOD, truncated [ 85.093202][ T7984] loop8: p1 start 975770946 is beyond EOD, truncated [ 85.095735][ T7984] loop8: p3 start 6514546 is beyond EOD, truncated [ 85.151839][ T7988] bond1 (unregistering): Released all slaves [ 85.295120][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 85.516049][ T8019] input: syz0 as /devices/virtual/input/input9 [ 85.567685][ T8022] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 85.570326][ T8022] macvtap0: left promiscuous mode [ 85.637418][ T8027] loop8: detected capacity change from 0 to 7 [ 85.639960][ T8027] Dev loop8: unable to read RDB block 7 [ 85.641764][ T8027] loop8: AHDI p1 p3 p4 [ 85.643154][ T8027] loop8: partition table partially beyond EOD, truncated [ 85.654728][ T8027] loop8: p1 start 975770946 is beyond EOD, truncated [ 85.656862][ T8027] loop8: p3 start 6514546 is beyond EOD, truncated [ 85.724545][ T5954] Bluetooth: hci2: command tx timeout [ 85.993601][ T8041] sp0: Synchronizing with TNC [ 86.547874][ T8070] netem: incorrect gi model size [ 86.550067][ T8070] netem: change failed [ 86.582847][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.613'. [ 86.685914][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 86.689014][ T8080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.846389][ T57] usb 9-1: USB disconnect, device number 2 [ 86.941909][ T8119] loop8: detected capacity change from 0 to 7 [ 86.946428][ T6544] Dev loop8: unable to read RDB block 7 [ 86.948395][ T6544] loop8: AHDI p1 p3 p4 [ 86.949716][ T6544] loop8: partition table partially beyond EOD, truncated [ 86.952164][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 86.955945][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 86.958995][ T8119] Dev loop8: unable to read RDB block 7 [ 86.961276][ T8119] loop8: AHDI p1 p3 p4 [ 86.963082][ T8119] loop8: partition table partially beyond EOD, truncated [ 86.966778][ T8119] loop8: p1 start 975770946 is beyond EOD, truncated [ 86.969549][ T8119] loop8: p3 start 6514546 is beyond EOD, truncated [ 87.002073][ T8120] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 87.167472][ T8133] openvswitch: netlink: Multiple metadata blocks provided [ 87.217431][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 87.217442][ T40] audit: type=1400 audit(1745379408.210:537): avc: denied { mount } for pid=8135 comm="syz.4.636" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 87.247081][ T40] audit: type=1400 audit(1745379408.240:538): avc: denied { unmount } for pid=7540 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 87.274428][ T8141] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 87.373752][ T8151] xt_hashlimit: size too large, truncated to 1048576 [ 87.429895][ T8160] QAT: Stopping all acceleration devices. [ 87.458543][ T40] audit: type=1400 audit(1745379408.450:539): avc: denied { map } for pid=8161 comm="syz.2.644" path="socket:[25668]" dev="sockfs" ino=25668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.476398][ T8162] __nla_validate_parse: 3 callbacks suppressed [ 87.476409][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 87.562563][ T8169] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 87.566621][ T8169] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 87.763223][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 87.770559][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 87.801785][ T8180] netlink: 'syz.2.650': attribute type 58 has an invalid length. [ 87.805105][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.650'. [ 87.836693][ T40] audit: type=1400 audit(1745379408.830:540): avc: denied { read } for pid=8185 comm="syz.4.653" dev="sockfs" ino=25675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.867889][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 87.870444][ T8192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8192 comm=syz.0.654 [ 87.890786][ T8191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.891499][ T40] audit: type=1400 audit(1745379408.880:541): avc: denied { ioctl } for pid=8195 comm="syz.4.655" path="socket:[23013]" dev="sockfs" ino=23013 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.893089][ T8193] ipvlan1: entered allmulticast mode [ 87.907278][ T8193] veth0_vlan: entered allmulticast mode [ 87.909100][ T8193] bond1: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.912806][ T8193] bond1: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 87.921887][ T8193] bond1: (slave ipvlan1): Error -95 calling set_mac_address [ 88.016714][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 88.074269][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 88.204570][ T835] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.221878][ T40] audit: type=1400 audit(1745379409.210:542): avc: denied { connect } for pid=8236 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.236854][ T57] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.240720][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.244677][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.247639][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.251521][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.254365][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.258635][ T57] usb 8-1: config 0 descriptor?? [ 88.278100][ T40] audit: type=1400 audit(1745379409.270:543): avc: denied { setopt } for pid=8244 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.334087][ T8249] loop8: detected capacity change from 0 to 7 [ 88.336951][ T8249] Dev loop8: unable to read RDB block 7 [ 88.338802][ T8249] loop8: unable to read partition table [ 88.340675][ T8249] loop8: partition table beyond EOD, truncated [ 88.342693][ T8249] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 88.360140][ T835] usb 9-1: Using ep0 maxpacket: 8 [ 88.370587][ T835] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 88.373764][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.379871][ T835] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.385058][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.385359][ T8254] syz.0.670 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.394600][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.400550][ T835] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 88.403724][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.414327][ T835] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.419133][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.423572][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.430751][ T835] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 88.433524][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.438905][ T835] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.443698][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.448690][ T835] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.456052][ T835] usb 9-1: string descriptor 0 read error: -22 [ 88.458689][ T835] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 88.462468][ T835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.471069][ T8264] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 88.474410][ T8264] netlink: 228 bytes leftover after parsing attributes in process `syz.0.674'. [ 88.476378][ T835] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 88.478012][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.0.674'. [ 88.563612][ T8282] sctp: [Deprecated]: syz.2.678 (pid 8282) Use of int in max_burst socket option deprecated. [ 88.563612][ T8282] Use struct sctp_assoc_value instead [ 88.601062][ T8284] erofs (device loop2): cannot find valid erofs superblock [ 88.668256][ T57] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 88.678632][ T835] usb 9-1: USB disconnect, device number 3 [ 88.680568][ T57] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 88.732794][ T40] audit: type=1400 audit(1745379409.720:544): avc: denied { setopt } for pid=8294 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.740668][ T40] audit: type=1400 audit(1745379409.720:545): avc: denied { getopt } for pid=8294 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.822295][ T40] audit: type=1400 audit(1745379409.810:546): avc: denied { wake_alarm } for pid=8308 comm="syz.0.685" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.932633][ T8318] loop8: detected capacity change from 0 to 7 [ 88.937189][ T6544] Dev loop8: unable to read RDB block 7 [ 88.939206][ T6544] loop8: AHDI p1 p3 p4 [ 88.940553][ T6544] loop8: partition table partially beyond EOD, truncated [ 88.943207][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 88.947809][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 88.952301][ T8318] Dev loop8: unable to read RDB block 7 [ 88.954601][ T8318] loop8: AHDI p1 p3 p4 [ 88.955979][ T8318] loop8: partition table partially beyond EOD, truncated [ 88.958542][ T8318] loop8: p1 start 975770946 is beyond EOD, truncated [ 88.960743][ T8318] loop8: p3 start 6514546 is beyond EOD, truncated [ 89.121368][ T8335] IPVS: persistence engine module ip_vs_pe_" not found [ 89.759262][ T8350] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 89.761781][ T8350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.697'. [ 89.765349][ T5954] block nbd0: Receive control failed (result -32) [ 89.770433][ T8349] block nbd0: shutting down sockets [ 90.159903][ T8395] syz.4.713: attempt to access beyond end of device [ 90.159903][ T8395] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 90.164007][ T8395] qnx6: unable to read the first superblock [ 90.172397][ T8395] syz.4.713: attempt to access beyond end of device [ 90.172397][ T8395] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 90.176604][ T8395] qnx6: unable to read the first superblock [ 90.178525][ T8395] qnx6: unable to read the first superblock [ 90.181719][ T8397] netlink: 'syz.2.714': attribute type 21 has an invalid length. [ 90.184778][ T8397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.714'. [ 90.187706][ T8397] netlink: 'syz.2.714': attribute type 5 has an invalid length. [ 90.190176][ T8397] netlink: 'syz.2.714': attribute type 6 has an invalid length. [ 90.287218][ T8401] ipvlan1: left promiscuous mode [ 90.775444][ T837] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.816981][ T836] usb 8-1: USB disconnect, device number 7 [ 90.934318][ T837] usb 5-1: Using ep0 maxpacket: 16 [ 90.937209][ T837] usb 5-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 90.941155][ T837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.943293][ T837] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 90.946412][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.950788][ T837] usb 5-1: config 0 descriptor?? [ 90.955525][ T837] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 91.003522][ T8437] mkiss: ax0: crc mode is auto. [ 91.161081][ T837] usb 5-1: USB disconnect, device number 9 [ 91.210471][ T8442] PKCS8: Unsupported PKCS#8 version [ 91.325602][ T8447] overlayfs: failed to resolve 'async': -2 [ 91.417007][ T8458] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 91.448505][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.451950][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.452231][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.452314][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.452374][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453132][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453201][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453266][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453609][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453676][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453734][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453791][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453850][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.453908][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.454002][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.454062][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.454775][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.454883][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.454942][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455002][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455425][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455488][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455546][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455603][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455658][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455716][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455771][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455829][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455887][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.455944][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456002][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456060][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456116][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456171][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456226][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456304][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456360][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456416][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456471][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456528][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456583][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456639][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456695][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456751][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456808][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456868][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456928][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.456988][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.457048][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.457105][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.458639][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.458798][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.458951][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.459110][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.459272][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.459428][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.459601][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.459710][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.602577][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.607062][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.611227][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.615012][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.618763][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.624391][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.627718][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 91.690443][ T8469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 91.971886][ T8514] overlay: Unknown parameter 'smackfsroot' [ 92.153987][ T8535] hfsplus: unable to find HFS+ superblock [ 92.158326][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.162520][ T8538] hfsplus: unable to find HFS+ superblock [ 92.163191][ T8536] bond0: (slave rose0): Enslaving as an active interface with an up link [ 92.188988][ T8542] program syz.3.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.213311][ T8545] hugetlbfs: Bad value 'e' for mount option 'size' [ 92.213311][ T8545] [ 92.261029][ T8551] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 92.472746][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 92.472757][ T40] audit: type=1400 audit(1745379413.460:569): avc: denied { setopt } for pid=8573 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.514943][ T8579] sg_write: process 201 (syz.4.771) changed security contexts after opening file descriptor, this is not allowed. [ 92.526983][ T40] audit: type=1400 audit(1745379413.520:570): avc: denied { create } for pid=8575 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 92.552840][ T40] audit: type=1400 audit(1745379413.540:571): avc: denied { ioctl } for pid=8582 comm="syz.4.772" path="socket:[23514]" dev="sockfs" ino=23514 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.556266][ T8583] trusted_key: encrypted_key: master key parameter 'user8new' is invalid [ 92.565369][ T8583] __nla_validate_parse: 15 callbacks suppressed [ 92.565377][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 92.624464][ T8589] xt_HMARK: spi-set and port-set can't be combined [ 92.737408][ T8603] 0f 1 [ 104.381653][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.384742][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.390350][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.393926][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.401070][ T7859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.471564][ T7859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.505430][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 104.616291][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.618703][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.620918][ T9330] bridge_slave_0: entered allmulticast mode [ 104.623475][ T9330] bridge_slave_0: entered promiscuous mode [ 104.633814][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.636142][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.638478][ T9330] bridge_slave_1: entered allmulticast mode [ 104.641740][ T9330] bridge_slave_1: entered promiscuous mode [ 104.644328][ T7859] bridge_slave_1: left allmulticast mode [ 104.646265][ T7859] bridge_slave_1: left promiscuous mode [ 104.648825][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.653366][ T7859] bridge_slave_0: left allmulticast mode [ 104.655832][ T7859] bridge_slave_0: left promiscuous mode [ 104.658438][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.980186][ T6010] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 105.007174][ T7859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.011828][ T7859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.016995][ T7859] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 105.020532][ T7859] bond0 (unregistering): Released all slaves [ 105.067905][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.082656][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.140595][ T9330] team0: Port device team_slave_0 added [ 105.144121][ T9330] team0: Port device team_slave_1 added [ 105.168893][ T6010] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 105.173584][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.177254][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.185079][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.191669][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.199501][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.203733][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.211780][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.215378][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.219884][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.224187][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.224873][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.227528][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.229815][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.234001][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.242096][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.243218][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.247492][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.248038][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.250219][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.253012][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.260890][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.270342][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.273070][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.276618][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.279551][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.282315][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.285716][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.288732][ T6010] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.291605][ T6010] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.294886][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.298820][ T6010] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 105.301653][ T6010] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 105.304869][ T6010] usb 9-1: Product: syz [ 105.306451][ T6010] usb 9-1: Manufacturer: syz [ 105.308415][ T6010] usb 9-1: SerialNumber: syz [ 105.308496][ T9346] loop8: detected capacity change from 0 to 7 [ 105.312922][ T9330] hsr_slave_0: entered promiscuous mode [ 105.315587][ T9330] hsr_slave_1: entered promiscuous mode [ 105.316663][ T6010] usb 9-1: config 0 descriptor?? [ 105.317642][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.322408][ T9346] Dev loop8: unable to read RDB block 7 [ 105.324195][ T9346] loop8: AHDI p1 p3 p4 [ 105.325539][ T9346] loop8: partition table partially beyond EOD, truncated [ 105.327538][ T9330] Cannot create hsr debugfs directory [ 105.328798][ T6010] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 105.328988][ T9346] loop8: p1 start 975770946 is beyond EOD, truncated [ 105.329002][ T9346] loop8: p3 start 6514546 is beyond EOD, truncated [ 105.475137][ T9361] No source specified [ 105.505006][ T7859] hsr_slave_0: left promiscuous mode [ 105.507293][ T7859] hsr_slave_1: left promiscuous mode [ 105.509567][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.511948][ T7859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.515325][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.517633][ T7859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.542913][ T7859] veth1_macvtap: left promiscuous mode [ 105.544965][ T7859] veth0_macvtap: left promiscuous mode [ 105.547229][ T7859] veth1_vlan: left promiscuous mode [ 105.548984][ T7859] veth0_vlan: left promiscuous mode [ 105.569078][ T9367] xt_ipcomp: unknown flags 12 [ 105.590959][ T9367] __nla_validate_parse: 7 callbacks suppressed [ 105.590970][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'. [ 105.598492][ T40] audit: type=1400 audit(1745380193.824:624): avc: denied { write } for pid=9362 comm="syz.0.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.640695][ T40] audit: type=1400 audit(1745380193.869:625): avc: denied { lock } for pid=9368 comm="syz.2.1043" path="/292/bus/cpuset.effective_cpus" dev="9p" ino=36831577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.839388][ T9373] openvswitch: netlink: IP tunnel TTL not specified. [ 106.120688][ T7859] team0 (unregistering): Port device team_slave_1 removed [ 106.180630][ T7859] team0 (unregistering): Port device team_slave_0 removed [ 106.232383][ T5954] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 106.483058][ T9376] loop8: detected capacity change from 0 to 7 [ 106.485703][ T9376] Dev loop8: unable to read RDB block 7 [ 106.488128][ T9376] loop8: AHDI p1 p3 p4 [ 106.489656][ T9376] loop8: partition table partially beyond EOD, truncated [ 106.491958][ T9376] loop8: p1 start 975770946 is beyond EOD, truncated [ 106.494130][ T9376] loop8: p3 start 6514546 is beyond EOD, truncated [ 106.655364][ T6010] usb 9-1: USB disconnect, device number 5 [ 106.658326][ T6010] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 106.665778][ T9330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.682192][ T9330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.688890][ T5954] Bluetooth: hci3: command tx timeout [ 106.692190][ T9330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.705130][ T9330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.758483][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.762776][ T9387] validate_nla: 4 callbacks suppressed [ 106.762788][ T9387] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 106.767270][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.768260][ T9387] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1049'. [ 106.773760][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.776149][ T7821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.783329][ T9387] : renamed from bond0 [ 106.801692][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.804012][ T7864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.905271][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.956261][ T34] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 107.023345][ T9330] veth0_vlan: entered promiscuous mode [ 107.028674][ T9330] veth1_vlan: entered promiscuous mode [ 107.050389][ T9330] veth0_macvtap: entered promiscuous mode [ 107.059296][ T9330] veth1_macvtap: entered promiscuous mode [ 107.067695][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.071339][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.076509][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.083494][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.086780][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.090596][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.095843][ T9330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.098772][ T9330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.102936][ T9330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.105944][ T9330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.134686][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 107.138686][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.141561][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.144354][ T34] usb 5-1: Product: syz [ 107.145704][ T34] usb 5-1: Manufacturer: syz [ 107.147749][ T34] usb 5-1: SerialNumber: syz [ 107.147865][ T9330] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 107.152384][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.159606][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.162177][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.175848][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.178667][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.202943][ T40] audit: type=1400 audit(1745380195.267:626): avc: denied { mounton } for pid=9330 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.275977][ T9408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1051'. [ 107.387261][ T9412] loop8: detected capacity change from 0 to 7 [ 107.389689][ T9412] Dev loop8: unable to read RDB block 7 [ 107.391591][ T9412] loop8: AHDI p1 p3 p4 [ 107.393365][ T9412] loop8: partition table partially beyond EOD, truncated [ 107.396408][ T9412] loop8: p1 start 975770946 is beyond EOD, truncated [ 107.399201][ T9412] loop8: p3 start 6514546 is beyond EOD, truncated [ 107.426941][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 107.429741][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 107.576527][ T40] audit: type=1400 audit(1745380195.611:627): avc: denied { ioctl } for pid=9422 comm="syz.2.1058" path="socket:[31338]" dev="sockfs" ino=31338 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.585932][ T9423] tmpfs: User quota inode hardlimit too large. [ 107.588247][ T9423] netlink: 'syz.2.1058': attribute type 10 has an invalid length. [ 107.590616][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1058'. [ 107.593616][ T9423] geneve0: left promiscuous mode [ 107.598642][ T9423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.601420][ T9423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.604112][ T9423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.606800][ T9423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.612966][ T9423] geneve0: entered promiscuous mode [ 107.614974][ T9423] team0: Port device geneve0 added [ 107.652780][ T40] audit: type=1400 audit(1745380195.675:628): avc: denied { nlmsg_write } for pid=9426 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.822686][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 107.827063][ T34] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 107.849536][ T6544] udevd[6544]: setting mode of /dev/usb/lp0 to 020660 failed: Read-only file system [ 107.853632][ T6544] udevd[6544]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: Read-only file system [ 107.931263][ T9446] loop8: detected capacity change from 0 to 7 [ 107.934060][ T6544] Dev loop8: unable to read RDB block 7 [ 107.935850][ T6544] loop8: AHDI p1 p3 p4 [ 107.937203][ T6544] loop8: partition table partially beyond EOD, truncated [ 107.940417][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 107.942497][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 107.947032][ T9446] Dev loop8: unable to read RDB block 7 [ 107.948864][ T9446] loop8: AHDI p1 p3 p4 [ 107.950487][ T9446] loop8: partition table partially beyond EOD, truncated [ 107.953417][ T9446] loop8: p1 start 975770946 is beyond EOD, truncated [ 107.955604][ T9446] loop8: p3 start 6514546 is beyond EOD, truncated [ 107.997999][ T40] audit: type=1400 audit(1745380195.992:629): avc: denied { mounton } for pid=9452 comm="syz.4.1066" path="/153/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 108.007560][ T40] audit: type=1400 audit(1745380196.001:630): avc: denied { remount } for pid=9452 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.078726][ T9463] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 108.099725][ T9463] bond2: entered promiscuous mode [ 108.101930][ T9463] bond2: entered allmulticast mode [ 108.111558][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 108.122005][ T9463] ip6gretap1: entered allmulticast mode [ 108.126538][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1068'. [ 108.132443][ T9463] bond2: left promiscuous mode [ 108.134516][ T9463] bond2: left allmulticast mode [ 108.136475][ T9463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.176388][ T9469] hpfs: hpfs_map_sector(): read error [ 108.201598][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1071'. [ 108.204896][ T9471] nbd: illegal input index -16777216 [ 108.214104][ T9471] netlink: 'syz.5.1071': attribute type 25 has an invalid length. [ 108.269081][ C2] usblp0: nonzero write bulk status received: -71 [ 108.280355][ T9] usb 5-1: USB disconnect, device number 10 [ 108.294414][ T9] usblp0: removed [ 108.312363][ T9485] sp0: Synchronizing with TNC [ 108.431788][ T9492] netlink: zone id is out of range [ 108.493849][ T9495] tun0: tun_chr_ioctl cmd 1074025677 [ 108.495610][ T9495] tun0: linktype set to 769 [ 108.531268][ T40] audit: type=1400 audit(1745380196.475:631): avc: denied { getopt } for pid=9499 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.648507][ T9511] NILFS (nullb0): couldn't find nilfs on the device [ 108.880374][ T9531] netlink: 'syz.0.1085': attribute type 21 has an invalid length. [ 108.911142][ T9536] loop8: detected capacity change from 0 to 7 [ 108.913893][ T6544] Dev loop8: unable to read RDB block 7 [ 108.915894][ T6544] loop8: AHDI p1 p3 p4 [ 108.917241][ T6544] loop8: partition table partially beyond EOD, truncated [ 108.919690][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 108.921876][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 108.926155][ T9536] Dev loop8: unable to read RDB block 7 [ 108.927963][ T9536] loop8: AHDI p1 p3 p4 [ 108.929329][ T9536] loop8: partition table partially beyond EOD, truncated [ 108.931794][ T9536] loop8: p1 start 975770946 is beyond EOD, truncated [ 108.933893][ T9536] loop8: p3 start 6514546 is beyond EOD, truncated [ 108.962317][ T9541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9541 comm=syz.2.1088 [ 108.972472][ T5941] Bluetooth: hci3: command tx timeout [ 109.008869][ T9544] can0: slcan on ptm1. [ 109.024417][ T9547] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 109.210248][ T9558] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9558 comm: syz.4.1090) [ 109.241646][ T9561] sp0: Synchronizing with TNC [ 109.338052][ T9568] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 109.365632][ T9568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.412784][ T9574] syz.5.1095: attempt to access beyond end of device [ 109.412784][ T9574] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 109.418489][ T9574] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 109.461206][ T9576] loop8: detected capacity change from 0 to 7 [ 109.464497][ T9576] Dev loop8: unable to read RDB block 7 [ 109.466916][ T9576] loop8: AHDI p1 p3 p4 [ 109.468691][ T9576] loop8: partition table partially beyond EOD, truncated [ 109.471734][ T9576] loop8: p1 start 975770946 is beyond EOD, truncated [ 109.474644][ T9576] loop8: p3 start 6514546 is beyond EOD, truncated [ 109.520305][ T9578] Cannot find add_set index 0 as target [ 109.784919][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 109.784930][ T40] audit: type=1326 audit(1745380197.631:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.797631][ T40] audit: type=1326 audit(1745380197.631:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.805956][ T40] audit: type=1326 audit(1745380197.631:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.813515][ T40] audit: type=1326 audit(1745380197.631:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.822147][ T40] audit: type=1326 audit(1745380197.631:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.831176][ T40] audit: type=1326 audit(1745380197.631:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.838837][ T40] audit: type=1326 audit(1745380197.631:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.846531][ T40] audit: type=1326 audit(1745380197.631:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.847604][ T9530] can0 (unregistered): slcan off ptm1. [ 109.848203][ T9587] xt_l2tp: invalid flags combination: c [ 109.854110][ T40] audit: type=1326 audit(1745380197.631:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.854153][ T40] audit: type=1326 audit(1745380197.631:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65edd8e169 code=0x7fc00000 [ 109.911873][ T9593] rose0: entered allmulticast mode [ 109.948745][ T9598] ata3.00: invalid multi_count 1 ignored [ 110.827392][ T9622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5888 sclass=netlink_route_socket pid=9622 comm=syz.2.1111 [ 111.113411][ T9647] loop8: detected capacity change from 0 to 7 [ 111.117588][ T6544] Dev loop8: unable to read RDB block 7 [ 111.119350][ T6544] loop8: AHDI p1 p3 p4 [ 111.120629][ T6544] loop8: partition table partially beyond EOD, truncated [ 111.123020][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 111.125116][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 111.131124][ T9647] Dev loop8: unable to read RDB block 7 [ 111.132829][ T9647] loop8: AHDI p1 p3 p4 [ 111.134125][ T9647] loop8: partition table partially beyond EOD, truncated [ 111.136534][ T9647] loop8: p1 start 975770946 is beyond EOD, truncated [ 111.138596][ T9647] loop8: p3 start 6514546 is beyond EOD, truncated [ 111.183702][ T9651] __nla_validate_parse: 4 callbacks suppressed [ 111.183712][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1121'. [ 111.188285][ T9651] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1121'. [ 111.190955][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1121'. [ 111.194503][ T9651] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1121'. [ 111.197175][ T9651] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1121'. [ 111.203229][ T5949] Bluetooth: hci3: command 0x040f tx timeout [ 111.301301][ T9665] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 111.303409][ T9665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.306525][ T9665] vhci_hcd vhci_hcd.0: Device attached [ 111.312773][ T9665] netlink: 'syz.5.1125': attribute type 1 has an invalid length. [ 111.315276][ T9665] netlink: 'syz.5.1125': attribute type 1 has an invalid length. [ 111.319879][ T9666] vhci_hcd: connection closed [ 111.320152][ T7825] vhci_hcd: stop threads [ 111.322997][ T7825] vhci_hcd: release socket [ 111.324384][ T7825] vhci_hcd: disconnect device [ 111.425236][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 111.432858][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 111.440935][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 111.458863][ T9679] loop8: detected capacity change from 0 to 7 [ 111.461808][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 111.462278][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.466349][ T6544] Dev loop8: unable to read RDB block 7 [ 111.469110][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 111.469410][ T6544] loop8: AHDI p1 p3 p4 [ 111.478125][ T6544] loop8: partition table partially beyond EOD, truncated [ 111.481850][ T6544] loop8: p1 start 975770946 is beyond EOD, truncated [ 111.486178][ T6544] loop8: p3 start 6514546 is beyond EOD, truncated [ 111.490671][ T9679] Dev loop8: unable to read RDB block 7 [ 111.500305][ T9679] loop8: AHDI p1 p3 p4 [ 111.502129][ T9679] loop8: partition table partially beyond EOD, truncated [ 111.506158][ T9679] loop8: p1 start 975770946 is beyond EOD, truncated [ 111.508833][ T9679] loop8: p3 start 6514546 is beyond EOD, truncated [ 111.535014][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 111.549137][ T9690] ipvlan3: entered promiscuous mode [ 111.551096][ T9690] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 111.553413][ T9690] : (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.702441][ T9698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9698 comm=syz.4.1135 [ 111.713523][ T9702] trusted_key: syz.0.1136 sent an empty control message without MSG_MORE. [ 111.821214][ T9721] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 111.840838][ T9721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.871228][ T9721] bond3: (slave veth5): Enslaving as an active interface with a down link [ 111.877923][ T9721] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 111.886928][ T9721] syz.4.1143: attempt to access beyond end of device [ 111.886928][ T9721] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 111.891141][ T9734] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN NOPTI [ 111.891787][ T9721] XFS (nbd4): SB validate failed with error -5. [ 111.894875][ T9734] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 111.901261][ T9734] CPU: 0 UID: 0 PID: 9734 Comm: syz.0.1145 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 111.904868][ T9734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.908384][ T9734] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 111.910454][ T9734] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 d8 72 99 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 111.916471][ T9734] RSP: 0018:ffffc90004207168 EFLAGS: 00010206 [ 111.918926][ T9734] RAX: dffffc0000000000 RBX: ffff888048aebc00 RCX: ffffffff895a0804 [ 111.921483][ T9734] RDX: 00000000000a2403 RSI: ffffffff8b21dd18 RDI: 0000000000512018 [ 111.923928][ T9734] RBP: ffff8880326a0000 R08: 0000000000000005 R09: 0000000000000000 [ 111.926380][ T9734] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88804f3475e8 [ 111.928785][ T9734] R13: ffff888041a16f00 R14: 0000000000512000 R15: ffff888048aec160 [ 111.931198][ T9734] FS: 00007f65eecda6c0(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 111.933970][ T9734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.936020][ T9734] CR2: 000020000000e000 CR3: 000000005c5de000 CR4: 0000000000352ef0 [ 111.938909][ T9734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.941337][ T9734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.943808][ T9734] Call Trace: [ 111.944853][ T9734] [ 111.945792][ T9734] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 111.947765][ T9734] ? stack_trace_save+0x8e/0xc0 [ 111.949283][ T9734] ? __pfx_stack_trace_save+0x10/0x10 [ 111.950955][ T9734] ? check_path.constprop.0+0x24/0x50 [ 111.952702][ T9734] ? save_trace+0x4e/0x380 [ 111.954122][ T9734] ? add_lock_to_list+0x9d/0x130 [ 111.955661][ T9734] ? lockdep_unlock+0x64/0xe0 [ 111.957318][ T9734] ? __lock_acquire+0xf7f/0x1ba0 [ 111.958864][ T9734] ? lock_acquire+0x179/0x350 [ 111.960352][ T9734] ? smc_diag_dump_proto+0x2ce/0x420 [ 111.962025][ T9734] smc_diag_dump_proto+0x26d/0x420 [ 111.963646][ T9734] smc_diag_dump+0x84/0x90 [ 111.965039][ T9734] netlink_dump+0x53b/0xd00 [ 111.966639][ T9734] ? __pfx_netlink_dump+0x10/0x10 [ 111.968504][ T9734] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 111.970467][ T9734] ? __pfx_netlink_lookup+0x10/0x10 [ 111.972100][ T9734] __netlink_dump_start+0x6d6/0x990 [ 111.973743][ T9734] smc_diag_handler_dump+0x1f9/0x240 [ 111.975401][ T9734] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 111.977256][ T9734] ? __pfx_smc_diag_dump+0x10/0x10 [ 111.978854][ T9734] ? sock_diag_lock_handler+0x10f/0x2e0 [ 111.980574][ T9734] sock_diag_rcv_msg+0x437/0x790 [ 111.982133][ T9734] netlink_rcv_skb+0x16a/0x440 [ 111.983662][ T9734] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 111.985352][ T9734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.987370][ T9734] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.989258][ T9734] netlink_unicast+0x53a/0x7f0 [ 111.990732][ T9734] ? __pfx_netlink_unicast+0x10/0x10 [ 111.992376][ T9734] ? __build_skb_around+0x278/0x3b0 [ 111.993956][ T9734] netlink_sendmsg+0x8d1/0xdd0 [ 111.995417][ T9734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.997363][ T9734] ____sys_sendmsg+0xa95/0xc70 [ 111.998846][ T9734] ? copy_msghdr_from_user+0x10a/0x160 [ 112.000500][ T9734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.002115][ T9734] ___sys_sendmsg+0x134/0x1d0 [ 112.003579][ T9734] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.005175][ T9734] __sys_sendmsg+0x16d/0x220 [ 112.006823][ T9734] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.008657][ T9734] ? __x64_sys_futex+0x1e0/0x4c0 [ 112.010197][ T9734] ? rcu_is_watching+0x12/0xc0 [ 112.011654][ T9734] do_syscall_64+0xcd/0x260 [ 112.013060][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.014932][ T9734] RIP: 0033:0x7f65edd8e169 [ 112.016446][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.022795][ T9734] RSP: 002b:00007f65eecda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.025456][ T9734] RAX: ffffffffffffffda RBX: 00007f65edfb5fa0 RCX: 00007f65edd8e169 [ 112.028275][ T9734] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000001e [ 112.031215][ T9734] RBP: 00007f65ede10a68 R08: 0000000000000000 R09: 0000000000000000 [ 112.033579][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.036317][ T9734] R13: 0000000000000000 R14: 00007f65edfb5fa0 R15: 00007ffcd5d16208 [ 112.039527][ T9734] [ 112.040576][ T9734] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.042138][ T9734] ---[ end trace 0000000000000000 ]--- [ 112.043948][ T9734] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 112.046105][ T9734] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 d8 72 99 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 112.053146][ T9734] RSP: 0018:ffffc90004207168 EFLAGS: 00010206 [ 112.053156][ T9734] RAX: dffffc0000000000 RBX: ffff888048aebc00 RCX: ffffffff895a0804 [ 112.053163][ T9734] RDX: 00000000000a2403 RSI: ffffffff8b21dd18 RDI: 0000000000512018 [ 112.053170][ T9734] RBP: ffff8880326a0000 R08: 0000000000000005 R09: 0000000000000000 [ 112.053176][ T9734] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88804f3475e8 [ 112.053182][ T9734] R13: ffff888041a16f00 R14: 0000000000512000 R15: ffff888048aec160 [ 112.053189][ T9734] FS: 00007f65eecda6c0(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 112.053212][ T9734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.053221][ T9734] CR2: 000020000000e000 CR3: 000000005c5de000 CR4: 0000000000352ef0 [ 112.053227][ T9734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.053233][ T9734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.053240][ T9734] Kernel panic - not syncing: Fatal exception [ 112.053883][ T9734] Kernel Offset: disabled VM DIAGNOSIS: 03:37:13 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e4ab5 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc90004206b60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=70203a4e4153414b R12=0000000000000000 R13=000000000000002e R14=ffffffff9ae26460 R15=ffffffff854e4a50 RIP=ffffffff854e4adf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f65eecda6c0 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000e000 CR3=000000005c5de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65edf83488 00007f65edf83480 00007f65edf83478 00007f65edf83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65eeaed100 00007f65edf83440 00007f65edf83458 00007f65edf834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65edf83498 00007f65edf83490 00007f65edf83488 00007f65edf83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a4415c0 RCX=ffffffff81af38b9 RDX=ffff888029e78000 RSI=ffffffff81af3893 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900032775c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007c76 R12=ffffed100d4882b9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a53b040 RIP=ffffffff81af3895 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe23bee7d60 CR3=00000000251c6000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe23b3836a3 00007fe23b3836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4d4ee30 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584396b0c 0000555584396950 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584395a79 0000555584395990 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 013810002fffc804 00100007fbc81000 08a3fffe04010000 0008060c0167ce00 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08002ffff8030204 90002fffe8030004 90002fffd8030004 88002fffd00302b8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c60484002fffcc03 1404002fffc80358 020808a3fffe0338 100004dcbfc80401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806060101 ce00080004dcbff8 030204900004dcbf e8030004900004dc ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100017d003000800 17c80302b0040017 c40301e0040017c0 0300080017b80300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000300 RBX=ffffffff905bbb80 RCX=fffffbfff20b7770 RDX=0000000000000003 RSI=0000000000000004 RDI=ffffffff905bbb80 RBP=1ffff92000698f79 RSP=ffffc900034c7bb8 R8 =0000000000000001 R9 =fffffbfff20b7770 R10=ffffffff905bbb83 R11=0000000000000001 R12=ffffffff905bbb84 R13=00000000000000ff R14=fffffbfff20b7770 R15=ffffc900034c7bf8 RIP=ffffffff8b7570ee RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f65eecb96c0 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd40304da05 CR3=000000005c5de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ede11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65edf83488 00007f65edf83480 00007f65edf83478 00007f65edf83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65eeaed100 00007f65edf83440 00007f65edf83458 00007f65edf834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65edf83498 00007f65edf83490 00007f65edf83488 00007f65edf83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000c046c RBX=0000000000000003 RCX=ffffffff8b72b419 RDX=ffffed100d4e65be RSI=ffffffff8bf46540 RDI=ffffffff8191b751 RBP=ffffed1003bd3000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801de98000 R14=ffffffff90864910 R15=0000000000000000 RIP=ffffffff8b729caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000004ec46000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7011a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7011a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7011a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7011a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7011aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7011bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7183488 00007f75d7183480 00007f75d7183478 00007f75d7183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7ced100 00007f75d7183440 00007f75d7183458 00007f75d71834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75d7183498 00007f75d7183490 00007f75d7183488 00007f75d7183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000