last executing test programs: 43.708612466s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) (async) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001700000000000000080009000d000000", 0x24) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x2028060}}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='./bus\x00') (async) unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) 43.491139245s ago: executing program 3 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f00003a4000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)=@x86={0x3, 0x8, 0x0, 0x0, 0x5, 0x4d, 0x2, 0x6, 0x1, 0x9, 0x8, 0x94, 0x0, 0x20f8c6, 0x80001, 0x9, 0xff, 0x9, 0x5, '\x00', 0x5, 0xe734}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) 43.281175053s ago: executing program 3 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x1, {{0x1e, 0x4, 0x2, 0x5, 0x78, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @broadcast, {[@rr={0x7, 0x1f, 0xc7, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010101, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x44, 0x21, 0x3, 0x0, [{@multicast1, 0x1}, {@private=0xa010101, 0xbe25}, {@broadcast, 0x3}, {@loopback, 0x6}, {@empty, 0x4}, {@private=0xa010100, 0x1}, {@multicast1, 0x5}, {@broadcast, 0x8}]}]}}}}}) syz_clone(0x4100000, &(0x7f0000000240)="f6922fd579785b8767bc7dc571ce5e7d9cf7f20bcb594c01a8f81b1d6e8f262725d7c8258362c050a53bad22067731a1992ab0b7b5f0eb8c92957a523b04", 0x3e, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)="24c9ef806f130f") r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x7, r4, 0x7, r5}, 0x10) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000002340)={0xc, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x6a}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 43.04047727s ago: executing program 3 (id=14): r0 = fanotify_init(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fanotify_mark(r0, 0x1, 0x2, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0xe, 0x800) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000340)=0x80000000, &(0x7f0000000380)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000080), 0x41800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300533e552ee5", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099000000"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="2a003300d0000000080211000001080211000000505050505050000004040000b900760604051900030100000600cd0000000000dfc2c1c14721677cbfc6ababc60f66dce9ad4cde592a8bb7e1bb1b2781fc37917a61da269979b7ff5ef053"], 0x50}}, 0x0) 41.709334763s ago: executing program 3 (id=39): write(0xffffffffffffffff, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d", 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "92eecaa98407c49f", "7930285eb54d33eeb97c53d9078c74df", "bd53559e", "ef4a6a5d3c211bfc"}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40841}, 0x400c8d0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r5 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x40000000) r6 = socket$inet(0x2, 0x6, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x3a4, r7, 0x500, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f36}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3c6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x96}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc025}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x1ff, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9a5e}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9a2, @private1, 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x400, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1}}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb27}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x45}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd106}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x802}, 0x4048000) socket(0x40000000015, 0x5, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) 41.69941819s ago: executing program 32 (id=39): write(0xffffffffffffffff, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d", 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "92eecaa98407c49f", "7930285eb54d33eeb97c53d9078c74df", "bd53559e", "ef4a6a5d3c211bfc"}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40841}, 0x400c8d0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r5 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x40000000) r6 = socket$inet(0x2, 0x6, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x3a4, r7, 0x500, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f36}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3c6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x96}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc025}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x1ff, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9a5e}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9a2, @private1, 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x400, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1}}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb27}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x45}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd106}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x802}, 0x4048000) socket(0x40000000015, 0x5, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) 35.282019261s ago: executing program 0 (id=104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 35.221974514s ago: executing program 0 (id=106): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x401, 0x5]}, @noop, @noop, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x4, 0x6, 0x590, 0x298, 0x298, 0x298, 0xd0, 0x1c8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@mcast2, @remote, [], [], 'geneve1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'wg2\x00', 'veth1_to_bond\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x3}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'vlan1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@local}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x39, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_clone(0x80, &(0x7f0000000340)="60c89582ae01c9fef36be87d4f0ba98ebf9ecfc975dd11fc7c9532409500ee1d27c5b7884cb7f427095c869f043831410d0cd9ad1cda87c5a6c74eb2dac96da83e6fc451773f6626906630ef9403ea18ebdc1fcdd8dd2c8632b65ddd23cfe67b2d28472118bc130aaa646c0aad8a0dd96c9422bf2ea4fee590b61a695e6a11866f19f2d37a1c82dab373fa0e4ad812abcb26770bbf545127604bd9d2d3fdc6af4153f16ab87d8d99e6c8919e642704ba7b0ac783613487c131fd28ac2fc075bf0d31acabcd4100114f3e079f86d9b686f7e61966ec4a40864fe013f1abb86409c91406352c91b265", 0xe8, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000440)="9be1cf541592f1225604e7aecf10e525d4bcba6b9bb09ee96d508b9842897daeedb35cc091af0628ac1edf9c67f4e5c076976cc25dc389daf6e20e18553aedd52f382bdf0c379b6988dba777e6a6de3d517846b6bc6d95086de6f660816d37a0b4e2f63a1b666523969fccb1e2b80df3739dcbde827c44d64e2d82d99305229413df52ce453036ee692955a4345affc961a8410ebc6e") 35.130718651s ago: executing program 0 (id=108): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000075c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000007700)={0x0, 0x0, &(0x7f00000076c0)={&(0x7f0000007600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000030000000000000008000300", @ANYRES32=r3, @ANYBLOB="04003400"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 34.841195133s ago: executing program 0 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r1, &(0x7f0000000080)=""/153, 0x99) getdents64(r1, &(0x7f00000001c0)=""/147, 0x93) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xeef, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x1a0, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0xa1, {0x9, 0x21, 0xbbc4, 0x8, 0x1, {0x22, 0x490}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x7, 0x81}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x8, 0x2, 0xff, 0x5f}, 0x27, &(0x7f0000000100)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x2, 0xc0, 0x7f, 0x6}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a7d9b2ec0d1fdc3768626e74740c82cf"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2819}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3c52}}]}) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) 34.311977567s ago: executing program 0 (id=126): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/36) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x20, 0x8) 34.139467122s ago: executing program 0 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x101000) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000340)={0x980000, 0x9, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9b090e, 0x6, '\x00', @string=0x0}}) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff35, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001c0000012cbd7000fedbdf251c000000", @ANYRES8=r1, @ANYBLOB="8000de00080004880008000008000800", @ANYRES32=r1, @ANYRESDEC=0x0], 0x34}}, 0x800) 34.107339888s ago: executing program 33 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x101000) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000340)={0x980000, 0x9, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9b090e, 0x6, '\x00', @string=0x0}}) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff35, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001c0000012cbd7000fedbdf251c000000", @ANYRES8=r1, @ANYBLOB="8000de00080004880008000008000800", @ANYRES32=r1, @ANYRESDEC=0x0], 0x34}}, 0x800) 10.96119905s ago: executing program 1 (id=470): r0 = socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x21, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 10.859621644s ago: executing program 1 (id=471): ioctl$FIBMAP(0xffffffffffffffff, 0x5385, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x2}, 0x20) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5a1f, 0x8, 0xa5, 0xffff, 0x6, 0xb1166a1}}}}]}, 0x4c}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xa}, {0x0, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x800) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xb, 0xa}, {0x1, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4000) 10.761527904s ago: executing program 1 (id=473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2}, {@in=@remote, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x1}, {0x0, 0x400}, 0x0, 0x4, 0xa, 0x3, 0x0, 0x90}, [@algo_crypt={0x4c, 0x2, {{'ecb(cipher_null)\x00'}, 0x20, "19c503cd"}}, @replay_esn_val={0x1c, 0x17, {0x501c87fb5741b023, 0x0, 0x0, 0x0, 0x0, 0x10001}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x851, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000fddb40a2fad0df25021d7c87c600010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000440)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x92}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="6c265f09221f43febbb85e1a9bb9b8e3e3e1c296fc870c46408ec2c9fa2246c0a1aed4f9847d701d307f254cf2fed05850fc15fa46a4f8b76bbf00", 0x3b}, {&(0x7f0000000580)="e01fe8bf2d80", 0x6}, {&(0x7f0000000600)="268921762d78460abed9e74c1a5f83a95faa710f1511740979f8c3aa143368a31bddf3d7f3743a695f6bd1d4a8d2e60952f39b03a15c26ff698e4bb3f2e3f98ed48d6d27a2f51d40c2e3d0d9b14b6cffb01c1e58cee76d06e95c6179ba752a01988c02edb88b20e9900a1c5c88c61e16227ac8c72af041d32522d96d0a6db5e94f4f68dd7aaeb094afbd5ad3fc7d52238810c89142c35d7003a172e0ba7bf7907bbb4021caa012fa088779d225088b772c5f189e4f9d4bd10a52a6f5da40c72ae4a336a32dacf77acaa059dc2f9668f1482bc1102f7d91bf48b74d7ccd05b58df7350695f5f1fc5eaf2ce87096a2f6956a81afd8332143a940052249f6c8", 0xfe}, {&(0x7f0000000700)="c894ff13df42c82d3b5eacc99ba69412c51a67fc4fcdbcf8bd475fff21a052174b8d15d0bd3f97b507c3d0b9d01de7cb436009a66a83dcb116d8c060", 0x3c}], 0x4, &(0x7f0000000e40)=[{0x90, 0x11, 0xc49, "5444fe3c1addf083da8856e4571056e48059821738492c18abe605a8f074bfdeef20db658b1a1269306c7ace8f8eed08c89a9064b670e3c480bf9c46a6618e4a448a55f8cdeaac47b61fc72ff333e7ccc477667d73034ed58a2ac23cb37c2ff02f5332704672240c448242079cbe9d062164762f2a9a04df74aab1119d12"}, {0xd8, 0x109, 0x4, "182c2df91090caa4981e08f9218f47e49135b67393f7ef769d44280d25a7b9d66a036c13a15352ab07c67045f7633bd1d67f73c252f039e5c52dddf800eaa89867e27e34539b67cfe8dea44fcb243502b608b0a0d980dd5b872ee792a60e560ff303003964dcbd5536403a174a69acfca53adb2dad2cd3060533e57eeb3d11631da4bee118a25d953b536b885e900b69c9e4462fcca32ab6682ab82c88485f3d8cb560fd6c9a89f346923bb858630e87a49acce5a06437bfefd1ec83ffba1140ea8028"}, {0x78, 0x10a, 0x7, "f58ca165f6e1aaffcde43338c328829bccd2364390141e9e2c37a51b30ebbe72342aaf2d2e124c24f94764253787f0f7f1c4f42148cfd3ea0b1cebef61dc27e83fc55774acdceb53e48d47f6bba719c1b2d10a41023857e574b26b6e2ebfe34d467259e9640b"}, {0x70, 0x117, 0x0, "95b3d81ca789c56948cb7aacf011812fa3185590e2ad1f8d30cbfd37d927d010db53b294755068ed564de31114251c983b04470b52b22c22d4735f4bcbabbcc7239dce3f4f7ae150f6229c102e70ae12ea51f1a6e5d1fa3fc56cf83bd065"}], 0x250}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) recvmmsg$unix(r4, &(0x7f0000008240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 10.759712589s ago: executing program 1 (id=476): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28040, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @loopback}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x200040c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006840)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800cd8d000000e5ff000000020000000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) (async) r7 = dup3(r6, r4, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) name_to_handle_at(r7, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)=@reiserfs_5={0x14, 0x5, {0x101, 0x5, 0x4, 0xffff, 0x6}}, &(0x7f0000000240), 0x1200) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r3, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000380)={0x3, 0x5, 0x3, 0x7, 0x1a, "90e05e7611df6e5b7a0b9154245b4688e1efd6"}) 10.511986039s ago: executing program 1 (id=485): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000140), 0x4) 2.765740748s ago: executing program 1 (id=485): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000140), 0x4) 2.471704905s ago: executing program 4 (id=574): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000b80)=@v={0x93, 0x2, 0x90, 0x3, @generic=0xfe, 0x6, 0x8000}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006"], 0x98}}, 0x0) 2.470595247s ago: executing program 4 (id=575): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth1_macvtap\x00', 0x2000}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x5dc, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_EXPR={0x3bc, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x3b0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x114, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "e28933dea395b1646d2c0e2dadc6a083c9404573ff433706ea567e7dd54a477479c6e23faa9b38474c76c1a040e16d66fcfd8e696868337b38058b63f1eb9fda3c9e9466a7904da2b5b8df8f7c073abbfff65d6f3dd84e980a614eec506013be0bf5a0a3d67efb2df2a9e735bbff5131a44e07e12242c33d4b11c8f553956be4e8b84868eadd8020b24513a0bf717b80fddec83397573ba941901384d1c913e9f72a62177b7bf2c11b458d7574d3791169cb29cdbcd843f741428db7d8822a24cc9346dab9be508641cfc06a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x32, 0x1, "18634073e2dcfc4359dcfda7030f4aa49c9b457b047828ff302473a16223770e4051bb3919ff7e1dec703ea2b714"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x15c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x33, 0x1, "196e72b84bac56aebaee6e93e17f88328eae9c9414ae088f402dc0d2ca5c9b20869fac2096353c73f4e88a5d3c40e5"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x98, 0x1, "dfc303e394b4e66bfc47544096121013f2ea26cb3646eda3b0de955af5c52434f732f8854eadcbf665d05948363376cd04a8670affea3cc685a4f98ce6808f67e405cc1d442456d0b40958e798af88bb79a84cb81aca489d22cdf58ec12d6dec37a036544a9944f58b830b901d211e18d2ca32a5433d63f709f7e0e909b00e16412ce38c8d2565aab72897801674b283177b1d4e"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x124, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc4, 0x1, "7ad185cd1f636f2c43033ba5fcaa44f90c504fd19657207cfc1c5d6e83d57e553777ad9c53a3f9b40530b7bbd5d54c482667e5f5c2486a84afdbdb656ae1693d2fc01f1b32fae190e3f6a07a4430983363adc09a6e8dad82bec7d8aa5b9c7e125b98e85ef3acfa0ef7cb61e7ef086f86238885e76bfb8f976014aa7bf4d6d79c827cfdb72256c518948885b4b5569a17f79e317e75b63b00afcf53d1980dc41079058830c699fa35a865cab290059b4074ad2fbe88f3f054b50fc3a29bf6f4bf"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0x4e, 0xd, 0x1, 0x0, "66a5f770734bedaf9967b44b6d2c25dbb6dc3dfb88311324d0d7d11140a74ec0a97e24f8a5a909855d59062e095cbbf52d5aa354fc141e4f84086f97d8ce4cb21287ef35a609418e47a1"}, @NFTA_SET_EXPRESSIONS={0x198, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x50, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7ff}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x5d}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x23}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x624}}, 0x80) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)=""/122, 0x7a}, {&(0x7f00000007c0)=""/59, 0x3b}], 0x2, &(0x7f0000000840)=""/175, 0xaf}, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000940)={'dvmrp1\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000980)={'nicvf0\x00', 0x400}) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a80)=[@text32={0x20, &(0x7f0000000a40)="0f0666bad10466edf20f22420f01d1eff22e0f0f2faec4e23d3a96000000000f08660f209db700", 0x27}], 0x1, 0x23, &(0x7f0000000ac0)=[@dstype3={0x7, 0xc}], 0x1) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000c80)={&(0x7f0000000b00), 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x9c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x22}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000cc0)=[{{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x1}}], 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000d40)={0x1d, r4}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000d80)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000dc0)="5482d56727bd010f67f6baab77bcdc2d07aefeb45efadad1562b9db2ea4f3889b252f7be8c5aa2f5dcc9cb3db3e28f475d262c0e0d78797fbc36cc81d443ffbf302f4ad9cdb8e8e23f2b237229ea4eab9b4129c7dfbe438898601e82f42a345e50c5f3776d4a64a1b8b31225b727ef2f9b4f8b6f65a1c78d5d1385832a1bd1f66f77c71c", 0x84}, {&(0x7f0000000e80)="0ceedbade7e8954b5d97640f07057d56bb4fae9fe38e5859ab0a3c9d4272f88090da90c4f927a34d5e92ee1ba27bd9638f4acfe8dd9d652b519f543851da324d5a6e1b4738e897699cce2ae0e80dd8595d464a0b7a9f884406211c629bb484aec8092d70c20503e371e050515db9fa6d36", 0x71}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="cbcf60027a08000ce449931f4833", 0xe}, {&(0x7f0000001f40)="0a33638f76c9d581af3391c0cbe41544a88e980fb8062aa8d957821e41cd7746f92b34a7e4b49b0e7df627b29d341e1619894fb66c645edd8a0a7e80a51ed75c52e1e4a50f4c68855f6626f42660e2c033124fb02320d9a0a575fe480a1aa7599943acda850283c14e2e78739bc357acb139a4a59d1f541e30325840bbc49fd4d069540c3fc0e07a3d7ddb06667650c510b871deeec0dc4335da0e4acb5fcb87706e9b5b1952519450e53d3c7215520e04f6806ef19bdc9da1564d38afad76aff5", 0xc1}, {&(0x7f0000002040)="10eed032effa1a8636fa69722745fb0bd4755a1b43f471c6503547c540b971da2099a76b6fea82464089a9d9a88d867e047bff8fd74874a09e92d7e84bc30cfb3723", 0x42}, {&(0x7f00000020c0)="792edc1b65fcf56b32fe7953725c11aa21bd64172148c2192aad55f8713bc6967a60baf0990b6575588f07a10864ceabdd35bb841285fc8022460b0e306851d6338ecf8b604fd7e0cc44fcf88298717b4ec530e79d2536914455a8f16371110db1be47f3515e4daf1755ce57140ec45865fb19046f0a4dbb35dab954eff03f0b89200c3b94e3633beaad91fdfbc526a992e72138ac664fde424e382f2dbaf8824724ddbbc466279620ac3f484535a483ff4f5e603824c47fbff275d2648ca208de", 0xc1}, {&(0x7f00000021c0)="e082141787313651a101160ced42a25768562dd954342e32691a1badf64e8d1ce162ac6fa7fd55a6ba09b2fd9e55870e656ef0b14fddad2fd5fbe662c89a3aa01ee3b557197479b57a982b83a51ca5c929b4dd1a72eaac05ecebe07e4f4a6c07eb01634b32a34e2da5e09368dc33d26548f2b8e061d30f21cf2c5350a469018692de555d829c4f0c1b15b2e5f57bc2298c225a0b435bbac5cd0348a50d0e9114fce2cdc52a530eaf1b0b4b698fd000156b975779e4be3983f3238cba", 0xbc}], 0x8, 0x0, 0x0, 0x40044}, 0x2008c810) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000002800)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002380)={0x43c, 0x3f3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x1, 0x8, [0xfffffffb, 0x3b, 0x1, 0x6, 0x5, 0x0, 0x7, 0x8, 0x1, 0x101, 0x7, 0x80000000, 0x80, 0x1000, 0x0, 0x9, 0x1, 0x7, 0x9, 0x100, 0x8, 0x9, 0x6, 0x88, 0xfffffff9, 0x1, 0x6, 0x5, 0xa, 0xd1, 0xb52, 0x0, 0x3, 0x4ace, 0x1000, 0x10000, 0xff, 0x7fffffff, 0x0, 0x2, 0x3, 0x8, 0x8, 0x1, 0x2, 0x2, 0x80, 0x5, 0x0, 0xd17, 0x9, 0x7, 0x3953, 0xfffffff3, 0x7, 0x0, 0x0, 0xc, 0x6, 0x2, 0x800, 0x7ff, 0xf62a, 0x8], [0x6, 0xfffffffa, 0x8000, 0x8, 0x2, 0x7, 0x101, 0x7, 0xfffff0b9, 0x0, 0xfffffffe, 0x8, 0x6, 0x6, 0x3, 0xf, 0x1000, 0x4, 0x200, 0x0, 0x4, 0xb0, 0x2, 0xf, 0x5, 0x2, 0xfffffffb, 0x3, 0x1, 0x0, 0x4, 0x14, 0xc, 0x1, 0x200, 0xc, 0x58, 0x65a, 0x9, 0x6, 0x6e, 0x8, 0x4, 0xc, 0x2, 0x5, 0x7, 0x5, 0xffffffff, 0x1, 0x4, 0x40, 0x1, 0x0, 0x5, 0x8, 0x10000, 0x6, 0x8, 0xfffffffd, 0xffff, 0x10, 0x7, 0xfffffffd], [0x80000001, 0x9, 0xaec, 0x4, 0x7, 0x7b, 0x10000, 0x2, 0xc6, 0xc965, 0x40, 0xb, 0x100, 0x4, 0x0, 0xf0, 0x4, 0x7, 0x7, 0x7, 0x2, 0x2, 0x5, 0x7, 0x2, 0x7, 0xfffffffe, 0x1000, 0x7fff, 0x304, 0x7, 0x3, 0x87b0, 0x5, 0x4, 0x8, 0x1, 0xc, 0x3, 0x1ff, 0x48, 0x9, 0x3ff, 0x7fffffff, 0x83, 0xfffffffa, 0xfffffc01, 0x2, 0x5, 0xd, 0x7f, 0x8, 0x2, 0xca, 0x7ff, 0x10, 0x2, 0x3, 0x1, 0x0, 0xd, 0x4, 0x1], [0x1, 0x8, 0x8, 0x9, 0x5, 0x10001, 0x263, 0x6, 0xfffffff7, 0x5, 0x7, 0x7, 0x80000000, 0x0, 0xffff, 0x8, 0x1, 0x4, 0x1, 0x40, 0x2, 0x3, 0x9, 0x1, 0xffffffff, 0xa, 0x1, 0x9, 0x81, 0x3, 0x5, 0x1, 0x5, 0x0, 0x4, 0x1, 0xffff, 0x5, 0x4, 0x710d, 0x8, 0x7, 0x7, 0x3, 0x98c, 0xf, 0x2, 0x3, 0x9, 0x1, 0xccc00000, 0x9432eaa, 0xcc, 0x18, 0x7, 0x1, 0x1, 0x9, 0x14, 0x9, 0x5, 0x1, 0x9ee, 0xe], 0x19, ['cmp\x00', 'syz0\x00', 'ra[{-.-/,\x00', 'cmp\x00', '-\x00']}, ["", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x401}, 0x8000) (async) write$binfmt_script(r2, &(0x7f0000002840)={'#! ', './file0', [], 0xa, "267257cf0a19f3bb79646e0917e27e4bb4695634986e6c76f0e78c3f239ec6b8df02dc2ff2a185d8e0"}, 0x34) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000028c0), r2) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4048801) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r6, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000029c0)}, {&(0x7f0000002a00)=""/6, 0x6}, {&(0x7f0000002a40)=""/73, 0x49}, {&(0x7f0000002ac0)=""/130, 0x82}, {&(0x7f0000002b80)=""/7, 0x7}], 0x5, &(0x7f0000002c40)=""/221, 0xdd}, 0x10042) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$tipc(r7, &(0x7f0000002e40)={&(0x7f0000002dc0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x3}}, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x0, 0x24004008}, 0x80) (async) pwritev2(r7, &(0x7f0000003180)=[{&(0x7f0000002e80)="86c49def579098a39115b9cc3ca0f43e0f486ed783c2009f9704c66236c664a6a2f8698220a96a3adea904f5625719f946a9edefef0c7275026c092cbed48d8a58a5269bc5fb0ad7698debf533728799db3e809138298a1f3cc11898fc9c485d149329", 0x63}, {&(0x7f0000002f00)="976806dc0c814a8f441173a344636f1613e1a3ace25c6ff02d707df87316dc5e26bdd620a57ed940703fbb68638805662a869eeff94b92e053fca42eafb688ed191bd500e213d730358c0d1e9df24f4644fb26b1425e8efe887ad18a16dff081ad2598255d2256820aa7a0d03fab9bf8160f9c34a086e8e072852e306054d7a5e7655cb548255228b782249ea4cac519ba28fc25852b6178b97bdd06da191b57a23cdce58c0c8377348dc817a9a11f157d4e25280c86a0312aa9b3396ee02f52cc1a92537d2bd03fde4624edadd3d85542d9a75599ec81a27ab7bffe89f0cb1fff13fadb4d860d39d1a56c52596a911e", 0xf0}, {&(0x7f0000003000)="5e97f3cd81c79945e5641c5bf75cee48bd191c4077c276b17916000107f2147d7f10c07723a3061728dc08ff465268d72b44fc13f6f7e29f614bfe4817cd2f42f0fa12de892ed0fbfe2a5047d3fc639463bff342d2c66cc8ec", 0x59}, {&(0x7f0000003080)="b49eb77adeb52560bfb6a42f61c1deccfa8b3f91a911656468e2d208bc0d0b99f8f337cb75fbe75c0cc44cbdaf139a4764fb0fbed029e8f9cf", 0x39}, {&(0x7f00000030c0)="6672c725e3a206eea09c224a527f8c4d380deae2a181f0284cb6904ae76bd23bd296b9845ecff12209b12bdc3c3e10aee4c13cc17db2389f09f474cbdd0cba81e5bb1f2bac14db606d5ae5b410559f92b58656114c340c0ebd7b77fee2781eb341c2caf175a68a9715f0aa45259c58690942b0fa29c14226132ad394c2c0d7e1b3bde7df5b96f4f30e1f4fe2a41d646f1bfb37a96c42d1bd82747217901de9af0417cb1572bc54d5e05702d0a0804f87c5fd10fa53ee37bd2d", 0xb9}], 0x5, 0x4, 0x5, 0x1b) syz_80211_join_ibss(&(0x7f0000003200)='wlan0\x00', &(0x7f0000003240)=@default_ibss_ssid, 0x6, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x50, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x6004}, 0x4081) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000033c0)={0xff2d, 0x40, 0x8003, 0x0, 0x6, 0x5, 0x3, 0x3, 0x0}, &(0x7f0000003400)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000003440)={0x1400, 0x20b, 0xd5, 0x8, r8}, 0x10) (async) ftruncate(r0, 0x10000) 2.301727406s ago: executing program 4 (id=576): r0 = socket$l2tp(0x2, 0x2, 0x73) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = dup(r2) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}]}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) 2.139377362s ago: executing program 4 (id=578): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 64) ioctl$TCFLSH(r0, 0x400455c8, 0x1) (rerun: 64) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000600)={{0x2926, 0x8}, {0x0, 0x1}, 0xfe, 0x1}) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) io_setup(0x7, &(0x7f0000000180)=0x0) (async) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async, rerun: 32) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x118, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff801}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa46f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xd47}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda4229b7, 0xfffffc38}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x4}}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x84}}, @IFLA_VLAN_QOS_MAPPING={0x5, 0x1, {0x6ea, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x96ce, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe0000000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0xffff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x118}}, 0x4000) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) (async) r7 = socket$packet(0x11, 0x2, 0x300) timer_getoverrun(r1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000bc0)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x141a, 0x0, 0x15f1, {[@mptcp=@ack={0x1e, 0x9, 0x9, 0x4, "51e79f48fd"}]}}, {"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"}}}}, 0xfce) (async) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.470817864s ago: executing program 2 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r1, 0x1, 0x0, 0x25dfdbfc, {{0x6c}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002600)={0x20, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x20}}, 0x0) 1.470602955s ago: executing program 2 (id=591): timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x2, 0xa50}}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="62c2b76cf6a1a167724688c12ac6efcd8c39ffb058ff25d389f4a40ce25437676e653979adf51b41bf83fa4ba6f9f0373c7498f85d19cfa06c0602643c0b646ec160f67a9cc65c7a7f1ff527d039a85bf094087a9eedfc562569f68530148f33ad1c107286f1c395c574c705b11905281eb9e9dea497d67eaed636deca6af0afc6c5f281161773a1e889c68ff47244f95655d143b27b5d990af9049364552e198fc93f8db5e8aaf260a944a8cd98fded1eb740f8a26d2590e14a4578f28998d7678ab3bc862749b2a854bff54e95a3fe924eb762cca9877b9ae9eb9701006faf0b158fe7d32ea0be", 0xe8}, {&(0x7f0000000240)="154309963fc36346cd997ebc4bc8b2af9dd02ce6a29e9d796ffbff688dd33ca5d5d8d694c0852cd3fd09d381b95536975084cee0cb30df3b240d69966c63c95a51ca3c28291f6e7b6d80c23a41d384b029a05bd0c5ddf32686ba5aea2789e2bf04ba0180d5ffe1b426298a4a372b5ed45cd37b2d1f3665e68a278e785ce95d7d0e7fca4c8b840a6dc70698c53323a42c7b85f71583f1d5a01dab952e48ef406a49ca818f93f94c23a02892d5d92ec7194e6d3dafcfb0d76f1d81e557b0dc56c03b", 0xc1}, {&(0x7f0000000040)="80ffbf4f61f6ee3c955ac1f75cba4b0861d5d5aaa241324906bbd67fbacffce8699a5924b7f87d7efc2c29b185aee94aca979dff49f9c486f5138af4118a334cf68d4546813c3499bc388f8ba35988d78c93328d0be9165fb21189d2126e783c9ac8cde13eb74b0592a98509ac1886b5fc6739bed9e345bbc70a84cc83b683c626eac5", 0x83}, {&(0x7f0000000340)="b076effe65299e823ac3cf5ed7d1ba0aa3bfb5b6dc6d98c40083053cb2d0f4", 0x1f}], 0x4, &(0x7f0000000400)=[{0x60, 0x10a, 0x3b, "abc8cbf1bc7eb31ffe22c249ba5836163f894c6101508e696062b631baf0be841bbd21da85b61df0d374762e52f889cefd377b359a4ff2a4a6552fef50f3efc6c066840d54f923efe9871598a0"}, {0xe8, 0x112, 0x7, "dcf150cb59319c1031d652b984020a21c7a876c073261abeb44f3917b1f8ddf1b44925bfacae2e8cda3bce6b1e6785f2b8a5f8f3e2a12069e0b1c4565e90ef171e5967b84cdbbfcdd3fb6ae626f9657d37593b5775f643d32a30780ea740fc5601c59b064fa4247b89686600feaee7697b5841bc85474b1f9b8a826bc055b1f51ccd832633d23c79acf9c6bf6e8598bf7a6ca819798733a4a46b39c6ee8767657a3ec4aaa322a2b521ccf3c2ebaecf8b8e83cfe00a6f0f6bb5577f498547f21504a4cc038e7999945a23a820b9c5cbabdf34"}, {0x1010, 0x11, 0x7fff, "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"}, {0x1010, 0x111, 0x2, "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"}, {0xb8, 0x112, 0xd, "4509c0202bcfd3acc061b80f7b4b309b48be970504599ffbe675a3a4bdea2820670dd70c9ea6a7692307201131289f8c2845437807b423ca3451eb123cd9ec0d165f10f492d893e83ffda448463cdc293b7c69f406d0d28dc4e0eb881e0a3a9e3970ebdd08540547d4f7cd684a785a70f636aa8c87cffeec30fe235d47f0bd4a36629e636152a6e02980c5f4abb35c69e8ba72268722e021e08f220945850deb2eb062"}], 0x2220}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108006000a000a010100080002"], 0x30}}, 0x0) timer_delete(r0) 1.401317261s ago: executing program 2 (id=594): syz_open_dev$loop(0x0, 0x75f, 0xa382) r0 = socket$packet(0x11, 0x2, 0x300) r1 = eventfd2(0x0, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c00) (async) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0x4, 0x6, 0x0, 'queue0\x00', 0x6}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000010d802, 0x0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)={0x8, 0x0, [{0xa12, 0x0, 0xc88}, {0xaca, 0x0, 0x40}, {0xb81, 0x0, 0x57a}, {0x877, 0x0, 0x9}, {0xfc3, 0x0, 0x6}, {0x94e, 0x0, 0x7}, {0xbb2, 0x0, 0x80}, {0x9ff}]}) (async) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r1}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.269488312s ago: executing program 2 (id=596): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x880) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}, "060086dd030020a9"}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xb3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x0, 0xee01, 0x42, 0x9}, 0xb, 0x4, 0x7, 0x401, 0x0, 0x0, 0x1849}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000200)={&(0x7f0000000d40)={{@my=0x1, 0x791}, {@hyper, 0x8000}, 0x400, "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"}, 0x418, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x80010, r6, 0xf075e000) 1.180839684s ago: executing program 5 (id=597): r0 = socket$kcm(0x29, 0x5, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x9, @sdr={0x50424752, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdffb, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c041}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000100000000000100000008000300", @ANYRES32=r0], 0x1c}}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="00a1a4f6ab5fa87669f21978401f7811767c2be80c57c5cd3acd2a7ff24aa2ea5ae7a6cafe2c4b44fd282279dec16d2cd2c03a6803a0780af904eae39961426b18b0cc36", 0x44}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r11], &(0x7f0000000280), &(0x7f0000000300)=[r12], &(0x7f0000000340)}) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x2000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x0) r14 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x81) 1.12105763s ago: executing program 5 (id=598): r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x400, 0x7, "590f5ffb9190b5b83acd6f1654fedfcccf9580", 0x640, 0x6}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fcntl$dupfd(r1, 0x406, r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x80) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 1.119449043s ago: executing program 5 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40085, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000140)=0x101, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) readv(r4, &(0x7f0000000240)=[{&(0x7f0000003140)=""/4085, 0xff5}], 0x1) recvfrom(r3, 0x0, 0x0, 0x20, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=r3, @ANYRES8=r2], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x20000050) 380.408224ms ago: executing program 2 (id=600): r0 = openat$adsp1(0xffffff9c, &(0x7f00000002c0), 0x8082, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0xb, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x0, 0x8000, 0x149ec7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b, 0x334e8a}) mmap$dsp(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xa, 0x11, r0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'macsec0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup3(r9, r9, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) sendto$netrom(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000080)={0x7, 0x6, 0x9}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000040002800800", @ANYRES32=r10], 0x3c}}, 0x0) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) 231.016366ms ago: executing program 5 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x3}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x181, 0x0, 0x0, {0x2}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)={0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000008001240000afff116000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x3}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x181, 0x0, 0x0, {0x2}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)={0x1}) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000008001240000afff116000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) (async) 100.262256ms ago: executing program 5 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000180)={&(0x7f0000000500)=[0x4, 0x2, 0x7fff, 0x0, 0x2, 0x5e, 0x9, 0x2, 0x33, 0x7, 0x0, 0x3, 0x0, 0x6, 0x80000001, 0x6, 0xfa, 0x80000000, 0xfa31, 0xc6e, 0x81, 0x1000, 0x4, 0x5, 0xa, 0x8, 0x0, 0x1, 0x0, 0x1, 0x9, 0xe, 0x77d9, 0xffffffff, 0x6ce9, 0x9, 0x0, 0x90000000, 0xf, 0xa, 0xf7a, 0x5, 0x5, 0x2, 0x3, 0xdc, 0x4, 0x80000001, 0x8, 0x2, 0x2, 0x10000, 0x20, 0xb, 0x7, 0xc6, 0x6, 0x80000000, 0x118d244c, 0x3, 0x5, 0x4, 0x59dc1a8, 0x6, 0xd, 0x29dc, 0x4, 0x8, 0x9, 0x0, 0x3, 0x80, 0x2, 0x326, 0x10000, 0x8, 0x100, 0xd7, 0x0, 0x8, 0xfffffffd, 0x200, 0x7, 0xa, 0x3, 0x8, 0x4, 0x1, 0x5, 0x8, 0x1ab, 0x7, 0x40, 0x10, 0xb9a, 0x80000000, 0x3d6, 0x81, 0x5, 0x6, 0x6, 0x6, 0xffffffff, 0x5, 0x3, 0x1, 0x3, 0xd, 0x3c4d, 0x1bd2, 0xa, 0x6, 0x10e1, 0xbd, 0xe, 0x9, 0x1ff, 0x0, 0x2, 0x7, 0x200, 0x0, 0xc, 0x2, 0x8, 0xfc, 0x1, 0x4, 0x7fff, 0xb, 0x2, 0x3, 0x3, 0x363, 0x9, 0xfffffff8, 0xdc, 0x7, 0x101, 0x8, 0x5, 0xfffffffc, 0x9, 0xffff, 0x4, 0x0, 0x100, 0x5, 0x9, 0x6, 0x6, 0x5, 0x1, 0x9, 0xfffffffa, 0x40, 0x8, 0x400, 0x3, 0x6, 0xc, 0x6, 0x3, 0xffffffff, 0x1, 0x9, 0x4, 0x0, 0x2, 0x2c, 0x8, 0x1, 0x7, 0x4, 0x4, 0xfffffffe, 0x80000001, 0x6, 0x80000001, 0x40, 0x3, 0x2c2, 0xff, 0xfffffff9, 0x3, 0x80000000, 0x2, 0x11, 0x111e, 0xfffffff8, 0x2, 0x3, 0x6, 0x8, 0xfffff800, 0x0, 0x3ff, 0x1000, 0x5, 0x4, 0x1000, 0xc, 0x0, 0xd54, 0x21, 0x1, 0x4, 0x4, 0x81, 0x40, 0xfff, 0x10000, 0x80000001, 0x5, 0xe9, 0xfffffff8, 0x30c1c9e0, 0x7ff, 0x7, 0x5e, 0xe74, 0x8, 0xffffff4f, 0x1, 0x10, 0x2, 0x80000000, 0xfffffffb, 0x2, 0x8, 0x1, 0x5, 0xc55, 0x2, 0x5, 0xfff, 0x5, 0x0, 0x2, 0x9, 0x0, 0x8, 0x70, 0xf, 0x302, 0x4, 0x5, 0x2, 0x200, 0x627, 0x81, 0xffff7fff, 0x10001, 0x5, 0x3, 0x401, 0x2, 0x9, 0x38abf3d, 0x2, 0x7, 0x1, 0xfffffffb, 0x0, 0xfffffff8, 0x10001, 0x2, 0xfffffffc, 0x26, 0xfffffff3, 0x7f, 0x0, 0x7ed1, 0x2, 0x2, 0x9, 0x8, 0x7, 0x7, 0x2, 0x0, 0xc5, 0x2, 0xffffae22, 0x6, 0x6, 0xd71, 0x8a08, 0x5, 0x200, 0x4, 0x5, 0x8, 0x285, 0xffff0001, 0xffffff81, 0x3, 0x7, 0xa, 0x1, 0x2, 0x1f, 0x8, 0x1b7e010a, 0x1, 0x4, 0xfffff001, 0x8, 0x0, 0x9b2, 0x1000, 0x0, 0x100, 0x5, 0x100, 0x18, 0x3e, 0x2, 0x0, 0x0, 0x4, 0x40, 0x9, 0x6, 0x8e, 0x1, 0x8000, 0x80, 0x1, 0x600000, 0x80, 0x1, 0x3f81, 0x5f, 0x9, 0x3, 0xe, 0x6, 0x2, 0x6d1, 0x8, 0x4, 0x7ff, 0x7ff, 0x56, 0x6, 0x6, 0x4, 0x5, 0x9, 0x9, 0x6, 0xad, 0x7, 0xd, 0x3, 0xe, 0x9004, 0x86, 0x7f, 0x7, 0x5, 0xf, 0x3, 0x569d, 0x200, 0x2c, 0x1, 0x6, 0x2, 0x2, 0xffff, 0x6, 0x1, 0x400, 0x6, 0x5, 0x0, 0x6, 0x6db, 0xc, 0x81, 0xcb48, 0x2, 0x80000000, 0x8, 0x7, 0x7, 0xfffff800, 0xb, 0x4, 0x7, 0x8, 0x4bf1, 0x7, 0x84, 0xfff, 0x2, 0x41, 0x6, 0xfff, 0x1, 0x3, 0x7, 0x2, 0x2, 0x6, 0x400, 0x0, 0x8, 0x8, 0x91, 0x8, 0x4, 0x0, 0x0, 0x5, 0x401, 0x6, 0x0, 0xc9, 0x1, 0xfff, 0x3ff, 0xd, 0xe, 0x7, 0x2, 0xe96e, 0xf, 0x8, 0x2, 0xfffffff7, 0x1, 0x200, 0xda, 0x40, 0x5, 0x5, 0xc3cc, 0x6, 0x400, 0x3, 0x9820, 0x4, 0x1a, 0x2, 0x3ff, 0x3, 0x3, 0x8, 0x1, 0xd, 0x5, 0x2, 0x8, 0x9, 0x7, 0x10001, 0xc908, 0x4, 0x4, 0x2, 0x5000000, 0x8, 0x5, 0x4, 0x5, 0x4, 0x7fff, 0xb0c, 0x6, 0x0, 0x101, 0x1, 0x3, 0x0, 0xb9, 0xfffffffb, 0x3, 0x200, 0x4, 0x33, 0x7, 0x10, 0x10000, 0x9, 0x1, 0x4, 0x5, 0x9, 0x6, 0xfffffffa, 0x9, 0x8, 0x9, 0x3, 0x8, 0x3c, 0x4, 0x20004000, 0x8, 0x7fc0000, 0x4, 0x4, 0x4, 0x1, 0x1, 0xfff, 0x7fffffff, 0x4, 0x1, 0x3, 0x8, 0x7fff, 0xc48, 0xc0, 0x0, 0x56d, 0x6, 0x80000000, 0xb, 0x6, 0x6, 0xb4, 0x3, 0xffff0000, 0x7, 0x47, 0x1, 0x7dc, 0x400, 0xd, 0xafbb, 0x6, 0xe, 0x1, 0xd400, 0x3, 0x0, 0x8, 0x7, 0xffffffff, 0x4d, 0xc1, 0x47a, 0x7fff, 0x3, 0x100, 0x3677, 0x100, 0x0, 0x401, 0x8, 0x3, 0x3ff, 0x1, 0x57f, 0x44b, 0xfff, 0x3, 0x100, 0x6, 0x83, 0x8, 0x8, 0x6, 0x324, 0x8, 0x0, 0x14, 0x7, 0x2, 0x5, 0x5, 0x0, 0x7, 0x81, 0xc93, 0x7fffffff, 0x7, 0x1, 0x6, 0x1, 0x2, 0x8, 0x0, 0xaa6, 0x7, 0xfff, 0xd69, 0x5, 0xea14, 0x3, 0xe, 0x6, 0x3, 0x400, 0x7fffffff, 0x4, 0x7, 0x2, 0x7ff, 0xfc, 0x608b1ac2, 0x7f, 0x80000000, 0x1000, 0x3, 0x8a, 0x4, 0x6, 0xff, 0x0, 0x0, 0x5b, 0x7fffffff, 0xffffffff, 0xd2, 0x1, 0x80000000, 0x2, 0x5, 0x7, 0x6d, 0x80000000, 0x9, 0x1ff, 0x9, 0x2, 0x2, 0x4, 0x0, 0x3, 0x10001, 0x5, 0x3, 0x6, 0x2, 0xa, 0x6, 0x5, 0xda9, 0xc, 0x7, 0x1, 0xc43, 0x0, 0x3629, 0x1, 0x2, 0x5, 0x81, 0x5, 0x4, 0x2, 0x9, 0x7b, 0x7fffffff, 0x10, 0x499, 0x9, 0xffffffff, 0x7fffffff, 0x7d7, 0x7, 0xddf, 0x40, 0x0, 0x5, 0x5, 0x6, 0x5, 0x2, 0x7b9, 0x994, 0x8, 0x5, 0x542f, 0x86, 0xffff, 0x8523, 0x9, 0x4, 0x80, 0x2, 0x4, 0xdcf66d7, 0x6, 0x7, 0x10, 0x0, 0x9, 0x594d, 0x7, 0x3ff, 0x2, 0xffff24de, 0x1, 0x3f39, 0x6, 0x4, 0x72e9, 0x3, 0x1, 0x3, 0x6, 0xffffd02b, 0x0, 0x2000, 0x9, 0x1, 0x8, 0x8, 0x0, 0x3dfa, 0x8, 0xfff, 0x7, 0x200, 0x2, 0x6, 0x1, 0x6, 0x3, 0x5b7d, 0x8, 0x9, 0x2000000, 0x8, 0x8, 0xb6c, 0x80000001, 0x0, 0x100, 0xf, 0x78, 0x9c3, 0xffff, 0x5, 0x4, 0x100, 0x80, 0x7, 0x9, 0xd, 0x8, 0x2400000, 0x5, 0x9, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0xffffffff, 0x4, 0x1, 0x9, 0x77c, 0x5, 0x9932, 0x1, 0xffffffff, 0x0, 0x1, 0x0, 0x2000000, 0xb, 0x2, 0x7f, 0xff, 0x80, 0x5, 0x8, 0x5, 0x1ff, 0xffffffff, 0xffff, 0xfffffffe, 0x5, 0x7, 0x2, 0x3800, 0x2e91, 0x7, 0x267916f6, 0x8, 0x4e6, 0x6, 0xc5, 0x8, 0x8000, 0x9, 0x9, 0x9, 0x8, 0x6b4, 0x10, 0xfffff316, 0x5, 0x9, 0x6, 0x10, 0xffffffff, 0x9, 0x7, 0x0, 0x0, 0x4, 0x37124f96, 0x9, 0xfffff8be, 0xed6d, 0x7fffffff, 0x54f, 0x800, 0x9, 0x6, 0x6, 0x349, 0x0, 0x9, 0x80000000, 0x3, 0x8, 0x200, 0x7ff, 0x24, 0x8, 0x40, 0x9, 0x110, 0x4e622ee0, 0x2, 0xd, 0x10, 0xdb, 0xfa3, 0xf97, 0x8, 0x8, 0x10000, 0x680000, 0x50, 0x3, 0x6, 0x2, 0x0, 0x7, 0x2, 0x4, 0xc90, 0x3, 0x4558, 0x7f, 0x0, 0xa7d, 0x0, 0xfffffff7, 0x1000, 0x9, 0x8000, 0x80, 0x5, 0xfffffa64, 0x2, 0x3, 0x5, 0xd, 0x4, 0x7ff, 0x10, 0x7, 0xfc7e, 0x1, 0x4, 0x6, 0x59b54f4a, 0xec, 0x3, 0xfffffffa, 0x800, 0x89a, 0x80, 0x1, 0x6908, 0x7, 0x4, 0x8, 0x5, 0x3ff, 0xb0a, 0x460, 0x101, 0x4, 0x3ff, 0x4db, 0x5, 0x2, 0xb, 0x7fffffff, 0x100, 0x0, 0x3, 0x8a1, 0x9, 0x7f, 0x3ff, 0x7f, 0x9, 0x7b, 0xa, 0x800, 0xe, 0x3, 0x9, 0x6, 0xcd, 0x55, 0x823a, 0x3, 0x3, 0x7, 0x6, 0x10, 0x6c000000, 0x4, 0xe, 0x7, 0x2, 0xba46, 0x3, 0x401, 0xe, 0x3, 0x0, 0x2, 0x2, 0x4, 0x9, 0xffffffff, 0xa, 0x7, 0x10d48754, 0xffffffff, 0x4, 0x80, 0x4, 0x2, 0x9, 0x80000001, 0x0, 0x0, 0x2, 0x10, 0x1, 0xff, 0x2, 0x5, 0x7f, 0x1, 0x5, 0xdfc, 0x80000001, 0x9, 0x4a, 0xe21, 0x2, 0x9, 0x9, 0xc2, 0x8, 0x8, 0x7e, 0x7, 0x3, 0xc2, 0x7, 0x6, 0x4, 0x6, 0xb07, 0x5, 0x2a, 0x0, 0x5, 0xfffffe01, 0x9, 0xff, 0x4, 0x0, 0x43, 0xa89, 0xffffff00, 0x1, 0x2, 0x8000000, 0x1, 0x7fff, 0x1000, 0x80, 0x7, 0x0, 0x7, 0x6, 0x4f8c6fc, 0x1, 0x1, 0x8, 0x7fffffff, 0x9, 0x4, 0xa, 0x9, 0x5, 0x12a, 0x4, 0xd3a, 0x0, 0x3, 0x80, 0x5], 0x1, 0x400, 0x10001}) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000084f656b9efb229011315754b25d66196044248196108f9fccf82981794da2fb92e7c3c17902d7a3b6b3e65c1137273cd40a0f7242cdd9d7003dfec973d4f494428b8184438cac84a5f78e93a28487f77b4aab11550a6f823cb529b0b9b55c30255e8f19f329488458e12be5a", @ANYRES16=r1, @ANYBLOB="01000100000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x4c}}, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) 99.344577ms ago: executing program 2 (id=603): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002a00010000000000fcdbdf250300002c0800010029242d00"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) mmap(&(0x7f00001ec000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r2, 0x0) r3 = syz_clone(0x87328000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x25) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f00000000c0)=[0x8, 0x2, 0x1000, 0x9, 0x4], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getrandom(&(0x7f0000000180)=""/225, 0xe1, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r8, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r12 = dup(r5) write$UHID_INPUT(r12, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x10, &(0x7f0000000400)=ANY=[@ANYRESDEC=r10, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRESOCT=r14], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000000000000004000004000000037a31826ccf0b4d4406fe3bf361bacaf6e61bc43d25ec7dc47d46abe10a9d6c07d8793a94a916056884022829ec7204988b4e8aef2039ddb630e163daa922bd332691319c686a85c0456cd610eab0f8a1b842a65409e7da2aac4317cd139df2ef7f1c927129a25de1598b5f0a8d9", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 99.112411ms ago: executing program 5 (id=604): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20450}, 0x4001) syz_io_uring_setup(0x3e, 0x0, 0x0, &(0x7f00000002c0)) r5 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30044005) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)='%pB \x00'}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feff50000000000000000004000000040000000080000000000000000000003000000000500000003000000fbffffff0f020000000600000000000011050000000a000000070000000000001204000000000e3000005f2e00c38a17f602523ea404c17f0553b3917d92da05ec0c0b6abd5ba8018d8e85e2f53cfa821d355858fe2be1529e4c3af4af415f203990fda173749a"], &(0x7f0000000440)=""/255, 0x60, 0xff, 0x1, 0x4, 0x0, @void, @value}, 0x28) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @rand_addr=0x64010101}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000080)) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0b00010000000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0x4e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600), &(0x7f0000000640)=[0x0], 0x0, 0x96, &(0x7f0000000680), 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r13 = openat$mice(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="85200000010000008520000003000000077606000a0000007f0000000300000000000000000000185400000c00"/56], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, &(0x7f0000000340), 0x41100, 0x19, '\x00', 0x0, @fallback=0x1d, r6, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r12, r13, 0x2, &(0x7f0000000900), &(0x7f0000000940)=[{0x21, 0x8000002, 0xc, 0x7}, {0x5, 0x3, 0x2, 0x6}], 0x10, 0xc, @void, @value}, 0x94) r14 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) syz_usb_control_io$hid(r14, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r15 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r15, 0x81044804, &(0x7f0000000180)={0x1, 'A'}) 1.151516ms ago: executing program 4 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0xfffffff7, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0xfffffff7, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 0s ago: executing program 4 (id=606): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="00df00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r2], 0x80000000002, 0x4000000000000370, 0xb}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000012000501000001000000000005001900"], 0x40}}, 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000004c0), 0x84082, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0]) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x80, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "003baabb2ae7a555d300", "33af343c60abc64f2fdc9ddf", "9b3842fc7d849f5ab6eb1c3c"]}) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0xff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200200000000005000007000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) (async, rerun: 64) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x7, 0x50400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000140)={0x0, 0xb11ebf43404e199}) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r10, 0xc03064ca, &(0x7f0000000380)={&(0x7f00000003c0)=[r11, r11, r12, r11], &(0x7f0000000480), 0x8, 0x4, 0x3}) (async) unlink(&(0x7f0000000300)='./file0/file0\x00') (async, rerun: 32) r13 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 32) write$selinux_create(r13, &(0x7f0000000100)=@objname={'system_u:object_r:removable_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x1, 0x20, './file0\x00'}, 0x73) kernel console output (not intermixed with test programs): multicast mode [ 52.089731][ T6261] bond_slave_0: entered allmulticast mode [ 52.091555][ T6261] bond_slave_1: entered allmulticast mode [ 52.094581][ T6261] bond0: left allmulticast mode [ 52.096445][ T6261] bond_slave_0: left allmulticast mode [ 52.098233][ T6261] bond_slave_1: left allmulticast mode [ 52.143376][ T6265] bridge0: port 3(syz_tun) entered blocking state [ 52.148716][ T6265] bridge0: port 3(syz_tun) entered disabled state [ 52.150494][ T6265] syz_tun: entered allmulticast mode [ 52.152844][ T6265] syz_tun: entered promiscuous mode [ 52.154440][ T6265] bridge0: port 3(syz_tun) entered blocking state [ 52.156343][ T6265] bridge0: port 3(syz_tun) entered forwarding state [ 52.165374][ T59] usbhid 6-1:0.0: can't add hid device: -71 [ 52.167187][ T59] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 52.171911][ T59] usb 6-1: USB disconnect, device number 3 [ 52.330256][ T6289] warning: `syz.2.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.585722][ T1491] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 52.726204][ T6317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6317 comm=syz.1.68 [ 52.734400][ T6321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6321 comm=syz.4.67 [ 52.744017][ T1491] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 52.746101][ T1491] usb 7-1: config 0 has no interface number 0 [ 52.747578][ T1491] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.750267][ T1491] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 52.752968][ T1491] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 52.755949][ T1491] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 52.758634][ T1491] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 52.761356][ T1491] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.764602][ T1491] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 52.767031][ T1491] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.770159][ T1491] usb 7-1: config 0 descriptor?? [ 52.772609][ T6289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.774479][ T6289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.779259][ T1491] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 52.791226][ T6331] tipc: Enabling of bearer rejected, failed to enable media [ 52.794433][ T6331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6331 comm=syz.4.67 [ 52.794893][ T5946] Bluetooth: hci3: command tx timeout [ 52.858365][ T6336] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 52.860861][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.864581][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 52.868688][ T6340] vhci_hcd: connection closed [ 52.871245][ T70] vhci_hcd: stop threads [ 52.874129][ T70] vhci_hcd: release socket [ 52.875161][ T5946] Bluetooth: hci0: command tx timeout [ 52.875688][ T5938] Bluetooth: hci1: command tx timeout [ 52.875788][ T70] vhci_hcd: disconnect device [ 52.944993][ T5938] Bluetooth: hci2: command tx timeout [ 52.981496][ T1258] usb 7-1: USB disconnect, device number 2 [ 52.989146][ T1258] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 53.007064][ T1019] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 53.156738][ T6378] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 53.157512][ T6379] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 53.159664][ T6380] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 53.160470][ T6381] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 53.174953][ T1019] usb 6-1: Using ep0 maxpacket: 8 [ 53.177453][ T1019] usb 6-1: config 0 has no interfaces? [ 53.184263][ T1019] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.189699][ T6384] capability: warning: `syz.0.74' uses 32-bit capabilities (legacy support in use) [ 53.190682][ T1019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.196113][ T1019] usb 6-1: config 0 descriptor?? [ 53.305403][ T6397] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.307450][ T6397] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 53.309693][ T6397] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.311990][ T6397] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 53.318325][ T6397] fuse: Bad value for 'group_id' [ 53.319644][ T6397] fuse: Bad value for 'group_id' [ 53.399714][ T1258] usb 6-1: USB disconnect, device number 4 [ 53.510224][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 53.514934][ T6404] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.78'. [ 53.905809][ T95] bond0: (slave bond_slave_0): interface is now down [ 53.906138][ T6413] Zero length message leads to an empty skb [ 53.907602][ T95] bond0: (slave bond_slave_1): interface is now down [ 53.909150][ T95] bond0: now running without any active interface! [ 54.032750][ T6429] netlink: 'syz.1.86': attribute type 32 has an invalid length. [ 54.127173][ T6436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6436 comm=syz.1.88 [ 54.164446][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.89'. [ 54.195308][ T6440] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 54.297792][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 54.302956][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 54.405697][ T6442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.458929][ T6455] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 54.462561][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 54.462572][ T39] audit: type=1400 audit(1734225828.224:299): avc: denied { write } for pid=6454 comm="syz.1.94" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.474907][ T39] audit: type=1400 audit(1734225828.224:300): avc: denied { create } for pid=6457 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.475327][ T6458] sctp: [Deprecated]: syz.4.95 (pid 6458) Use of int in max_burst socket option deprecated. [ 54.475327][ T6458] Use struct sctp_assoc_value instead [ 54.480064][ T39] audit: type=1400 audit(1734225828.244:301): avc: denied { map } for pid=6454 comm="syz.1.94" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.491164][ T39] audit: type=1400 audit(1734225828.244:302): avc: denied { sqpoll } for pid=6463 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.506816][ T6470] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 54.517559][ T6470] bond0: (slave netdevsim0): no link monitoring support [ 54.522412][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.525572][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.526430][ T6470] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 54.527891][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.527961][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.535765][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.537985][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.540393][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.542657][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.545374][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.548087][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.550564][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.553142][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.553992][ T39] audit: type=1400 audit(1734225828.314:303): avc: denied { mounton } for pid=6467 comm="syz.0.96" path="/37/bus/file0" dev="9p" ino=36573849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.555504][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.564455][ T6470] syz.0.96: attempt to access beyond end of device [ 54.564455][ T6470] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 54.571686][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.573861][ T6470] MINIX-fs: unable to read superblock [ 54.574890][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.578646][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.580949][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.583266][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.585661][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.588040][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.590383][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.592862][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.596140][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.599282][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.602282][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.606102][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.609583][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.625023][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.628397][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.631666][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.640014][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.643407][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.647785][ T6474] usb usb9: usbfs: process 6474 (syz.2.98) did not claim interface 0 before use [ 54.681418][ T39] audit: type=1400 audit(1734225828.444:304): avc: denied { execute } for pid=6478 comm="syz.2.100" path="/13/cpuset.memory_pressure_enabled" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.767550][ T39] audit: type=1800 audit(1734225828.524:305): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.99" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 54.797594][ T39] audit: type=1400 audit(1734225828.564:306): avc: denied { read write } for pid=6483 comm="syz.0.99" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.805724][ T39] audit: type=1400 audit(1734225828.564:307): avc: denied { open } for pid=6483 comm="syz.0.99" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.814139][ T39] audit: type=1400 audit(1734225828.574:308): avc: denied { ioctl } for pid=6483 comm="syz.0.99" path="/dev/virtual_nci" dev="devtmpfs" ino=709 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.865035][ T5938] Bluetooth: hci3: command tx timeout [ 54.928621][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 54.999000][ T6502] process 'syz.2.105' launched './file2' with NULL argv: empty string added [ 55.019535][ T6502] nfs4: Unknown parameter 'll' [ 55.055142][ T6511] binder: BINDER_SET_CONTEXT_MGR already set [ 55.056861][ T6511] binder: 6508:6511 ioctl 4018620d 20000100 returned -16 [ 55.113022][ T6509] kvm: pic: non byte write [ 55.309880][ T6525] sp0: Synchronizing with TNC [ 55.314416][ T6525] sp0: Found TNC [ 55.612290][ T6552] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 55.703183][ T6563] sp0: Synchronizing with TNC [ 55.714303][ T6564] [U] [ 55.734012][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 55.851595][ T6572] netlink: 256 bytes leftover after parsing attributes in process `syz.1.125'. [ 56.131646][ T6590] netlink: 'syz.2.131': attribute type 2 has an invalid length. [ 56.141446][ T95] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.143607][ T6594] snd_aloop snd_aloop.0: control 0:65537:4:syz1:-114 is already present [ 56.201061][ T6598] netlink: 'syz.4.135': attribute type 1 has an invalid length. [ 56.205016][ T6598] sch_fq: defrate 116 ignored. [ 56.211155][ T6600] sch_fq: defrate 116 ignored. [ 56.223486][ T95] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.243713][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.246909][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.249650][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.252189][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.254379][ T5946] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.258574][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.310681][ T95] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.391345][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 56.402875][ T6622] binder: 6621:6622 ioctl 4018620d 0 returned -22 [ 56.405248][ T6622] binder: 6621:6622 ioctl c0306201 0 returned -14 [ 56.405359][ T6624] binder: 6621:6624 ioctl c0306201 0 returned -14 [ 56.422228][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 65 > 2 [ 56.425439][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 65 > 2 [ 56.439717][ T95] bond0: (slave netdevsim0): Releasing backup interface [ 56.443556][ T95] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.453939][ T6631] ======================================================= [ 56.453939][ T6631] WARNING: The mand mount option has been deprecated and [ 56.453939][ T6631] and is ignored by this kernel. Remove the mand [ 56.453939][ T6631] option from the mount to silence this warning. [ 56.453939][ T6631] ======================================================= [ 56.463658][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 56.466847][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 56.469120][ T6631] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.506142][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.508612][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.510832][ T6604] bridge_slave_0: entered allmulticast mode [ 56.515886][ T6604] bridge_slave_0: entered promiscuous mode [ 56.519044][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.531649][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.533843][ T6604] bridge_slave_1: entered allmulticast mode [ 56.539041][ T6604] bridge_slave_1: entered promiscuous mode [ 56.553704][ T6638] fuse: Bad value for 'group_id' [ 56.555915][ T6638] fuse: Bad value for 'group_id' [ 56.600907][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.606616][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.672897][ T6604] team0: Port device team_slave_0 added [ 56.683661][ T6649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6649 comm=syz.1.149 [ 56.705501][ T6604] team0: Port device team_slave_1 added [ 56.732627][ T6656] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 56.732627][ T6656] program syz.1.151 not setting count and/or reply_len properly [ 56.742188][ T6659] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 56.743849][ T95] bridge_slave_1: left allmulticast mode [ 56.750535][ T95] bridge_slave_1: left promiscuous mode [ 56.752550][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.760733][ T95] bridge_slave_0: left allmulticast mode [ 56.762621][ T95] bridge_slave_0: left promiscuous mode [ 56.764614][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.923210][ T6675] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 56.924954][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.927635][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 56.930545][ T6675] vhci_hcd vhci_hcd.0: port 0 already used [ 56.933432][ T6676] vhci_hcd: connection closed [ 56.941439][ T12] vhci_hcd: stop threads [ 56.947634][ T12] vhci_hcd: release socket [ 56.948792][ T12] vhci_hcd: disconnect device [ 56.955047][ T5946] Bluetooth: hci3: command tx timeout [ 56.974666][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.977968][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.981035][ T95] bond0 (unregistering): (slave bond1): Releasing backup interface [ 56.983351][ T95] bond0 (unregistering): Released all slaves [ 57.035745][ T95] bond1 (unregistering): Released all slaves [ 57.053627][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.055561][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.063756][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.125870][ T95] IPVS: stopping master sync thread 6381 ... [ 57.126946][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.129417][ T95] IPVS: stopping master sync thread 6380 ... [ 57.129649][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.133276][ T95] IPVS: stopping master sync thread 6379 ... [ 57.135034][ T1258] IPVS: starting estimator thread 0... [ 57.135330][ T6683] IPVS: set_ctl: invalid protocol: 22 172.20.20.42:20000 [ 57.138415][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.142576][ T95] IPVS: stopping master sync thread 6378 ... [ 57.235630][ T6685] IPVS: using max 40 ests per chain, 96000 per kthread [ 57.267033][ T6604] hsr_slave_0: entered promiscuous mode [ 57.269511][ T6604] hsr_slave_1: entered promiscuous mode [ 57.333005][ T5984] hid-generic 0006:10001:0007.0002: unknown main item tag 0x3 [ 57.336935][ T5984] hid-generic 0006:10001:0007.0002: item fetching failed at offset 3/4 [ 57.339258][ T5984] hid-generic 0006:10001:0007.0002: probe with driver hid-generic failed with error -22 [ 57.376859][ T95] hsr_slave_0: left promiscuous mode [ 57.379275][ T95] hsr_slave_1: left promiscuous mode [ 57.382096][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.384131][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.390190][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.392158][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.397338][ T6715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7680 sclass=netlink_route_socket pid=6715 comm=syz.2.164 [ 57.410461][ T95] veth1_macvtap: left promiscuous mode [ 57.411972][ T95] veth0_macvtap: left promiscuous mode [ 57.413582][ T95] veth1_vlan: left promiscuous mode [ 57.415607][ T95] veth0_vlan: left promiscuous mode [ 57.600455][ T6730] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 57.795448][ T1258] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 57.963120][ T1258] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 57.965574][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 57.969307][ T1258] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.972607][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 57.976521][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 57.986467][ T1258] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 57.988427][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 57.991308][ T1258] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.994320][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 57.998104][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.002588][ T1258] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 58.005363][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 58.008311][ T1258] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.012181][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.015278][ T1258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.021742][ T1258] usb 6-1: string descriptor 0 read error: -22 [ 58.023973][ T1258] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 58.027354][ T1258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.047978][ T1258] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 58.061521][ T95] team0 (unregistering): Port device team_slave_1 removed [ 58.119871][ T95] team0 (unregistering): Port device team_slave_0 removed [ 58.317877][ T5946] Bluetooth: hci1: command tx timeout [ 58.367332][ T8] usb 6-1: USB disconnect, device number 5 [ 58.618843][ T6604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.624538][ T6604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.648427][ T6604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.666107][ T6604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.719478][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.726963][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.730794][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.733320][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.746536][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.749134][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.909821][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.992333][ T6784] __nla_validate_parse: 1 callbacks suppressed [ 58.992344][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 58.996532][ T6784] bridge_slAve_0: renamed from lo (while UP) [ 59.061583][ T6604] veth0_vlan: entered promiscuous mode [ 59.065251][ T6604] veth1_vlan: entered promiscuous mode [ 59.077637][ T6604] veth0_macvtap: entered promiscuous mode [ 59.080562][ T6604] veth1_macvtap: entered promiscuous mode [ 59.086823][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.089568][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.092123][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.095054][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.097607][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.100341][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.106409][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.119260][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.122167][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.125303][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.128171][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.130729][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.133407][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.136977][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.141533][ T6604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.143859][ T6604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.147196][ T6604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.150025][ T6604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.190095][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 59.192524][ T6797] netlink: 'syz.1.179': attribute type 3 has an invalid length. [ 59.200371][ T6797] pim6reg527: entered allmulticast mode [ 59.203033][ T6354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.206156][ T6354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.232148][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.234124][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.293880][ T6805] netlink: 'syz.5.132': attribute type 5 has an invalid length. [ 59.330614][ T6809] netlink: 'syz.5.181': attribute type 1 has an invalid length. [ 59.338243][ T6809] bond1: entered allmulticast mode [ 59.340927][ T6809] bond1 (unregistering): Released all slaves [ 59.474951][ T6000] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 59.545656][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 59.545669][ T39] audit: type=1400 audit(1734225833.314:365): avc: denied { read append } for pid=6824 comm="syz.5.183" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.553721][ T39] audit: type=1400 audit(1734225833.314:366): avc: denied { open } for pid=6824 comm="syz.5.183" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.563547][ T39] audit: type=1400 audit(1734225833.324:367): avc: denied { ioctl } for pid=6824 comm="syz.5.183" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.658152][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.661511][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.664420][ T39] audit: type=1400 audit(1734225833.424:368): avc: denied { create } for pid=6837 comm="syz.5.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.664547][ T6000] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.675032][ T39] audit: type=1400 audit(1734225833.434:369): avc: denied { ioctl } for pid=6837 comm="syz.5.184" path="socket:[13201]" dev="sockfs" ino=13201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.678179][ T6000] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 59.686312][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.689754][ T6000] usb 6-1: config 0 descriptor?? [ 59.822141][ T6852] openvswitch: netlink: Unknown nsh attribute 0 [ 59.824243][ T6852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.868998][ T39] audit: type=1400 audit(1734225833.634:370): avc: denied { write } for pid=6854 comm="syz.5.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.880984][ T6849] kvm: pic: non byte write [ 59.896445][ T39] audit: type=1400 audit(1734225833.664:371): avc: denied { write } for pid=6799 comm="syz.1.180" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 59.902243][ T6000] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input7 [ 59.907224][ T39] audit: type=1400 audit(1734225833.664:372): avc: denied { open } for pid=6799 comm="syz.1.180" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 59.984568][ T6000] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input8 [ 60.033627][ T39] audit: type=1400 audit(1734225833.794:373): avc: denied { write } for pid=6864 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.045993][ T6000] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input9 [ 60.055654][ T6000] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input10 [ 60.068230][ T6000] hid-udraw 0003:20D6:CB17.0003: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 60.149645][ T6361] usb 6-1: USB disconnect, device number 6 [ 60.176546][ T1258] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 60.265870][ T6885] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 60.269267][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 60.271601][ T6886] netlink: 'syz.2.194': attribute type 21 has an invalid length. [ 60.320554][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 60.323506][ T39] audit: type=1400 audit(1734225834.084:374): avc: denied { write } for pid=6887 comm="syz.2.196" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 60.335991][ T6888] ptrace attach of "/syz-executor exec"[6895] was attempted by ""[6888] [ 60.345815][ T1258] usb 10-1: Using ep0 maxpacket: 32 [ 60.353456][ T1258] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 60.355725][ T1258] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 60.358936][ T1258] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 60.362602][ T1258] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 60.367509][ T1258] usb 10-1: config 0 interface 0 has no altsetting 0 [ 60.375936][ T1258] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 60.378070][ T1258] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 60.380079][ T1258] usb 10-1: Product: syz [ 60.381082][ T1258] usb 10-1: Manufacturer: syz [ 60.382222][ T1258] usb 10-1: SerialNumber: syz [ 60.385048][ T5946] Bluetooth: hci1: command tx timeout [ 60.387948][ T1258] usb 10-1: config 0 descriptor?? [ 60.392354][ T1258] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 60.395429][ T1258] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 60.521172][ T6906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.199'. [ 60.524629][ T6906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.199'. [ 60.699622][ T1019] usb 10-1: USB disconnect, device number 2 [ 60.702115][ T1019] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 60.776355][ T6932] syz.1.206 uses obsolete (PF_INET,SOCK_PACKET) [ 61.244921][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 61.279247][ T6953] program syz.5.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.338207][ T6960] tmpfs: Unknown parameter 'mpl' [ 61.407004][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 61.409370][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 61.411974][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 61.414306][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 61.417320][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 61.422051][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 61.424413][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 61.427310][ T8] usb 6-1: Product: syz [ 61.428450][ T8] usb 6-1: Manufacturer: syz [ 61.436040][ T6968] ISOFS: Unable to identify CD-ROM format. [ 61.437552][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 61.441271][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 61.443908][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 61.445590][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 61.638726][ T1019] usb 6-1: USB disconnect, device number 7 [ 62.007255][ T6976] fuse: blksize only supported for fuseblk [ 62.284980][ T6000] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 62.429472][ T6993] netlink: 60 bytes leftover after parsing attributes in process `syz.5.224'. [ 62.433032][ T6993] netlink: 60 bytes leftover after parsing attributes in process `syz.5.224'. [ 62.444158][ T6000] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.446606][ T6000] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 62.449240][ T6000] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.451579][ T6000] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 62.454455][ T6000] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 62.466170][ T6000] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.468535][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.470598][ T6000] usb 6-1: Product: syz [ 62.471688][ T6000] usb 6-1: Manufacturer: syz [ 62.475218][ T6000] cdc_wdm 6-1:1.0: skipping garbage [ 62.476614][ T6000] cdc_wdm 6-1:1.0: skipping garbage [ 62.477184][ T5946] Bluetooth: hci1: command tx timeout [ 62.478745][ T6000] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 62.481165][ T6000] cdc_wdm 6-1:1.0: Unknown control protocol [ 62.792264][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.233'. [ 62.794908][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.233'. [ 63.024230][ T7046] overlayfs: statfs failed on './file0' [ 63.027383][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.028947][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.030754][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.032453][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.033937][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.035678][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.037479][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.040151][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.042182][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.044370][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.045836][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.048206][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.050343][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.052204][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.054174][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.056020][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.057598][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.059029][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.060950][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.062514][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.063978][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.065611][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.067109][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.068740][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.070269][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.071884][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.073399][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.075052][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.076554][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.078174][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.078437][ T7050] overlayfs: missing 'lowerdir' [ 63.079813][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.083128][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.084830][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.086361][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 63.087967][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.089597][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.091231][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.092877][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.094531][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.096248][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.097887][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.099566][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.101159][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.102692][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.104251][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.105803][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.107407][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.109031][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.110682][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.112316][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.113946][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.115684][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.117316][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.118939][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.120587][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.122209][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.123849][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.125505][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.127121][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.128746][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.130370][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.132040][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.133734][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.135395][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.137032][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.138675][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.140334][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.141968][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.143561][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.145149][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.146833][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.148428][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.149965][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.151526][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.153097][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.154680][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.156324][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.157873][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.159454][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.161073][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.162701][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.164282][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.165910][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.167544][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.169172][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.170817][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.172449][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.174063][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.175715][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.177389][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.179004][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.180652][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.182267][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.183893][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.185530][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.187147][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.188781][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.190460][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.192091][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.193723][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.195445][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.197074][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.198701][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.200348][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.201970][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.203599][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.205247][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.206902][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.208698][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.210314][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.211939][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.213549][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.215219][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.216922][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.218544][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.220177][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.221798][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.223418][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.225068][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.226721][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.228347][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.229981][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.231645][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.233304][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.234962][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.236592][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.238214][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.239861][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.241509][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.243146][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.244827][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.246452][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 63.247994][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 63.251028][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 63.252872][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 63.257231][ T74] usb 6-1: USB disconnect, device number 8 [ 63.554943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.671144][ T7094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7094 comm=syz.5.249 [ 63.674372][ T7094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7094 comm=syz.5.249 [ 63.721316][ T7099] vivid-000: disconnect [ 63.730471][ T7099] vivid-000: reconnect [ 63.744992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.001514][ T7145] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 64.011893][ T7145] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 64.195723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.411869][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.414165][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.420644][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.422596][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.424574][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.426934][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.428882][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.430927][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.430949][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.430960][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.430972][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.430983][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.430995][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431007][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431018][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431029][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431041][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431052][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431063][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431075][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431086][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431097][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431109][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431120][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431131][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431143][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431154][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431165][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431177][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431188][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431200][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431211][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431222][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431234][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431246][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431257][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431269][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431280][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431292][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431303][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431315][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431326][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.431338][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.435862][ T5984] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 64.537337][ T7199] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 64.539537][ T7199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.541727][ T7199] IPv6: NLM_F_CREATE should be set when creating new route [ 64.544932][ T5946] Bluetooth: hci1: command tx timeout [ 64.605911][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 64.605923][ T39] audit: type=1400 audit(1734225838.374:401): avc: denied { read append } for pid=7209 comm="syz.5.276" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 64.608809][ T5946] Bluetooth: hci1: unexpected cc 0x040d length: 63 > 7 [ 64.613967][ T39] audit: type=1400 audit(1734225838.374:402): avc: denied { open } for pid=7209 comm="syz.5.276" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 64.625320][ T39] audit: type=1400 audit(1734225838.374:403): avc: denied { ioctl } for pid=7209 comm="syz.5.276" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 64.635060][ T6361] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 64.801522][ T39] audit: type=1400 audit(1734225838.564:404): avc: denied { setopt } for pid=7223 comm="syz.5.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.807542][ T39] audit: type=1400 audit(1734225838.564:405): avc: denied { bind } for pid=7223 comm="syz.5.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.813432][ T39] audit: type=1400 audit(1734225838.574:406): avc: denied { write } for pid=7223 comm="syz.5.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.821080][ T6361] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.823762][ T6361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 64.826745][ T6361] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 64.829189][ T6361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.832331][ T6361] usb 6-1: config 0 descriptor?? [ 64.836266][ T6361] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 64.838847][ T6361] dvb-usb: bulk message failed: -22 (3/0) [ 64.844829][ T6361] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 64.847321][ T6361] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 64.849234][ T6361] usb 6-1: media controller created [ 64.851619][ T6361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.861509][ T6361] dvb-usb: bulk message failed: -22 (6/0) [ 64.863276][ T6361] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 64.867124][ T6361] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input11 [ 64.874842][ T6361] dvb-usb: schedule remote query interval to 150 msecs. [ 64.877134][ T6361] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 64.998070][ T39] audit: type=1400 audit(1734225838.764:407): avc: denied { read } for pid=7227 comm="syz.5.280" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.007597][ T39] audit: type=1400 audit(1734225838.764:408): avc: denied { open } for pid=7227 comm="syz.5.280" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.014104][ T39] audit: type=1400 audit(1734225838.764:409): avc: denied { ioctl } for pid=7227 comm="syz.5.280" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.035672][ T1258] dvb-usb: bulk message failed: -22 (1/0) [ 65.037386][ T1258] dvb-usb: error while querying for an remote control event. [ 65.043128][ T7193] dvb-usb: bulk message failed: -22 (2/0) [ 65.054590][ T1258] usb 6-1: USB disconnect, device number 9 [ 65.064022][ T39] audit: type=1400 audit(1734225838.824:410): avc: denied { bind } for pid=7232 comm="syz.5.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.075072][ T1258] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 65.247712][ T7242] __nla_validate_parse: 1 callbacks suppressed [ 65.247723][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 65.606395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803581b000: rx timeout, send abort [ 65.789965][ T7280] use of bytesused == 0 is deprecated and will be removed in the future, [ 65.792356][ T7280] use the actual size instead. [ 65.816381][ T7280] fuse: Bad value for 'group_id' [ 65.817848][ T7280] fuse: Bad value for 'group_id' [ 65.887698][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.299'. [ 65.888378][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 65.942003][ T7308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.945678][ T7308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.946745][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 66.051905][ T7325] bond0: Error: Cannot enslave bond to itself. [ 66.078766][ T7316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.080787][ T7316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.088687][ T7316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.091696][ T7316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.093321][ T7316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.096792][ T7316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.099642][ T7316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.101372][ T7316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.109256][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803581b000: abort rx timeout. Force session deactivation [ 66.113556][ T7316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.116458][ T7316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.118154][ T7328] netlink: 36 bytes leftover after parsing attributes in process `syz.5.307'. [ 66.118485][ T7316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.124329][ T7316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.139890][ T70] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.214995][ T6000] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 66.220052][ T7337] binder: 7330:7337 ioctl 400c620e 20000140 returned -22 [ 66.221108][ T7335] rose0: renamed from bond0 (while UP) [ 66.384935][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 66.387491][ T6000] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 66.389757][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.392242][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.394748][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.397742][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.401085][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.403465][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.492042][ T7349] netlink: 'syz.2.313': attribute type 29 has an invalid length. [ 66.494584][ T7350] netlink: 'syz.2.313': attribute type 29 has an invalid length. [ 66.497256][ T7351] netlink: 'syz.2.313': attribute type 29 has an invalid length. [ 66.545698][ T95] wlan0: Trigger new scan to find an IBSS to join [ 66.611224][ T6000] usb 6-1: usb_control_msg returned -32 [ 66.612829][ T6000] usbtmc 6-1:16.0: can't read capabilities [ 66.934884][ T6361] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.968799][ T7367] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 66.974852][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.977174][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.979723][ T7367] netlink: 168 bytes leftover after parsing attributes in process `syz.1.303'. [ 67.094899][ T6361] usb 7-1: Using ep0 maxpacket: 8 [ 67.100369][ T6361] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 67.103295][ T6361] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.107032][ T6361] usb 7-1: config 0 has no interface number 0 [ 67.109290][ T6361] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 67.113142][ T6361] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 67.116715][ T6361] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.121149][ T6361] usb 7-1: config 0 interface 52 has no altsetting 0 [ 67.124689][ T6361] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 67.128378][ T6361] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 67.131205][ T6361] usb 7-1: Product: syz [ 67.132376][ T6361] usb 7-1: SerialNumber: syz [ 67.134670][ T6361] usb 7-1: config 0 descriptor?? [ 67.172165][ T1258] usb 6-1: USB disconnect, device number 10 [ 67.339737][ T6361] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.52/input/input12 [ 67.343235][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.348725][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.352788][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.356841][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.370904][ T6902] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.375052][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.378024][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.380540][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.383017][ T5337] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.540214][ T7360] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 67.559223][ T5944] usb 7-1: USB disconnect, device number 3 [ 67.822708][ T7373] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 67.986985][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 67.989306][ T7375] bridge_slave_1: left allmulticast mode [ 67.991038][ T7375] bridge_slave_1: left promiscuous mode [ 67.994433][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.998682][ T7375] bridge_slave_0: left allmulticast mode [ 68.000194][ T7375] bridge_slave_0: left promiscuous mode [ 68.001703][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.064878][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.145077][ T5938] Bluetooth: hci4: command 0x1003 tx timeout [ 68.145106][ T5291] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.146283][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.146782][ T5291] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.152308][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.192821][ T7381] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.256446][ T7383] kvm: user requested TSC rate below hardware speed [ 68.273396][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.324'. [ 68.317841][ T7379] vcan0 speed is unknown, defaulting to 1000 [ 68.319203][ T7379] vcan0 speed is unknown, defaulting to 1000 [ 68.323629][ T7379] vcan0 speed is unknown, defaulting to 1000 [ 68.367411][ T7379] infiniband syz1: set active [ 68.370420][ T7379] infiniband syz1: added vcan0 [ 68.374480][ T6004] vcan0 speed is unknown, defaulting to 1000 [ 68.393333][ T7379] RDS/IB: syz1: added [ 68.394702][ T7379] smc: adding ib device syz1 with port count 1 [ 68.396553][ T7379] smc: ib device syz1 port 1 has pnetid [ 68.398963][ T5291] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 68.399542][ T6004] vcan0 speed is unknown, defaulting to 1000 [ 68.404065][ T7379] vcan0 speed is unknown, defaulting to 1000 [ 68.446042][ T7379] vcan0 speed is unknown, defaulting to 1000 [ 68.462012][ T7405] binder: 7404:7405 ioctl c00c6211 0 returned -14 [ 68.497740][ T5291] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 68.501076][ T7379] vcan0 speed is unknown, defaulting to 1000 [ 68.552317][ T7416] xt_hashlimit: size too large, truncated to 1048576 [ 68.557064][ T7379] vcan0 speed is unknown, defaulting to 1000 [ 68.774854][ T5984] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 68.774885][ T7428] block nbd2: Device being setup by another task [ 68.788299][ T7428] block nbd2: shutting down sockets [ 68.954864][ T5984] usb 10-1: Using ep0 maxpacket: 16 [ 68.957473][ T5984] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.960317][ T5984] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.962819][ T5984] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 68.966680][ T5984] usb 10-1: config 0 interface 0 has no altsetting 0 [ 68.968404][ T5984] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 68.970678][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.977821][ T5984] usb 10-1: config 0 descriptor?? [ 69.035108][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 69.037664][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.341'. [ 69.312094][ T7463] netlink: 'syz.1.346': attribute type 2 has an invalid length. [ 69.314336][ T7463] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 69.318336][ T7464] netlink: 'syz.1.346': attribute type 2 has an invalid length. [ 69.320411][ T7464] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 69.465174][ T7473] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 69.466917][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.468974][ T7473] vhci_hcd vhci_hcd.0: Device attached [ 69.471023][ T7474] vhci_hcd: cannot find a urb of seqnum 16384009 max seqnum 0 [ 69.475462][ T12] vhci_hcd: stop threads [ 69.476674][ T12] vhci_hcd: release socket [ 69.477901][ T12] vhci_hcd: disconnect device [ 69.480561][ T7473] Illegal XDP return value 4294967274 on prog (id 31) dev N/A, expect packet loss! [ 69.486231][ T7473] program syz.1.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.633092][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 69.633103][ T39] audit: type=1400 audit(1734225843.394:445): avc: denied { write } for pid=7413 comm="syz.5.332" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.722401][ T5984] usbhid 10-1:0.0: can't add hid device: -71 [ 69.726078][ T5984] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 69.729477][ T5984] usb 10-1: USB disconnect, device number 3 [ 69.736714][ T39] audit: type=1400 audit(1734225843.504:446): avc: denied { shutdown } for pid=7478 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.777483][ T39] audit: type=1400 audit(1734225843.544:447): avc: denied { module_load } for pid=7483 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 69.777509][ T7484] Invalid ELF header type: 2 != 1 [ 70.065270][ T6004] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.068700][ T7509] trusted_key: syz.4.355 sent an empty control message without MSG_MORE. [ 70.144839][ T5291] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.151200][ T39] audit: type=1400 audit(1734225843.914:448): avc: denied { getopt } for pid=7529 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.224861][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 70.224886][ T5291] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.227557][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.235002][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.235866][ T6004] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 70.239438][ T6004] usb 7-1: config 0 has no interface number 0 [ 70.241692][ T6004] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 70.245565][ T6004] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 70.249461][ T6004] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 70.253280][ T6004] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 70.257254][ T6004] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.267870][ T6004] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 70.270970][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.273709][ T6004] usb 7-1: Product: syz [ 70.275337][ T6004] usb 7-1: Manufacturer: syz [ 70.276917][ T6004] usb 7-1: SerialNumber: syz [ 70.279920][ T6004] usb 7-1: config 0 descriptor?? [ 70.349363][ T7539] __nla_validate_parse: 1 callbacks suppressed [ 70.349380][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 70.490494][ T6004] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 70.494852][ T5984] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 70.534238][ T39] audit: type=1400 audit(1734225844.294:449): avc: denied { bind } for pid=7558 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.540020][ T39] audit: type=1400 audit(1734225844.294:450): avc: denied { name_bind } for pid=7558 comm="syz.4.363" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 70.545299][ T39] audit: type=1400 audit(1734225844.294:451): avc: denied { node_bind } for pid=7558 comm="syz.4.363" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 70.684727][ T5984] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.687888][ T5984] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.690471][ T5984] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.692968][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.697421][ T7543] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 70.699168][ T7486] iowarrior 7-1:0.186: ioctl 'IOW_WRITE' is not supported for product=0x1505. [ 70.707339][ T5984] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.707406][ T6361] usb 7-1: USB disconnect, device number 4 [ 70.738655][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 71.005309][ T39] audit: type=1400 audit(1734225844.774:452): avc: denied { write } for pid=7542 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.030045][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.032553][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.240978][ T39] audit: type=1400 audit(1734225845.004:453): avc: denied { read } for pid=7604 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.291247][ T39] audit: type=1400 audit(1734225845.054:454): avc: denied { listen } for pid=7608 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.516251][ T1142] wlan0: Trigger new scan to find an IBSS to join [ 71.896554][ T6000] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 72.062336][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 72.066924][ T6000] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.069511][ T6000] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.071709][ T6000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.074631][ T6000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.077340][ T6000] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 72.080283][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.088290][ T6000] hub 7-1:1.0: bad descriptor, ignoring hub [ 72.089874][ T6000] hub 7-1:1.0: probe with driver hub failed with error -5 [ 72.091905][ T6000] cdc_wdm 7-1:1.0: skipping garbage [ 72.093297][ T6000] cdc_wdm 7-1:1.0: skipping garbage [ 72.096103][ T6000] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 72.096128][ T7657] netlink: 'syz.1.378': attribute type 21 has an invalid length. [ 72.097656][ T6000] cdc_wdm 7-1:1.0: Unknown control protocol [ 72.100452][ T7657] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.132657][ T7661] vim2m vim2m.0: vidioc_s_fmt queue busy [ 72.163091][ T7666] IPv6: Can't replace route, no match found [ 72.234981][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.290875][ T7644] netlink: 256 bytes leftover after parsing attributes in process `syz.2.374'. [ 72.305353][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.305367][ T5291] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.315342][ T5291] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.410022][ T7680] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 72.413134][ T7680] overlayfs: missing 'lowerdir' [ 72.416122][ T6004] usb 7-1: USB disconnect, device number 5 [ 72.449738][ T95] wlan0: Creating new IBSS network, BSSID 62:93:7a:c7:5c:da [ 72.456040][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 72.495912][ T7644] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 72.529567][ T7687] mkiss: ax0: crc mode is auto. [ 72.734932][ T58] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 72.865139][ T58] usb 7-1: device descriptor read/64, error -71 [ 73.104996][ T58] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 73.234874][ T58] usb 7-1: device descriptor read/64, error -71 [ 73.273969][ T6004] usb 10-1: USB disconnect, device number 4 [ 73.355251][ T58] usb usb7-port1: attempt power cycle [ 73.539913][ T7699] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 73.705281][ T58] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 73.726081][ T58] usb 7-1: device descriptor read/8, error -71 [ 73.836064][ T7708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.844952][ T7708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.968694][ T58] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 73.989951][ T58] usb 7-1: device descriptor read/8, error -71 [ 74.095875][ T58] usb usb7-port1: unable to enumerate USB device [ 74.189607][ T7711] FAULT_INJECTION: forcing a failure. [ 74.189607][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.193814][ T7711] CPU: 2 UID: 0 PID: 7711 Comm: syz.5.395 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 74.197204][ T7711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.200993][ T7711] Call Trace: [ 74.202153][ T7711] [ 74.203080][ T7711] dump_stack_lvl+0x16c/0x1f0 [ 74.204835][ T7711] should_fail_ex+0x497/0x5b0 [ 74.206579][ T7711] _copy_from_iter+0x2a1/0x1560 [ 74.208367][ T7711] ? trace_lock_acquire+0x14e/0x1f0 [ 74.210071][ T7711] ? __alloc_skb+0x1fe/0x380 [ 74.211328][ T7711] ? __pfx__copy_from_iter+0x10/0x10 [ 74.212786][ T7711] ? __virt_addr_valid+0x1a4/0x590 [ 74.214079][ T7711] ? __virt_addr_valid+0x5e/0x590 [ 74.215472][ T7711] ? __phys_addr_symbol+0x30/0x80 [ 74.216808][ T7711] ? __check_object_size+0x488/0x710 [ 74.218111][ T7711] netlink_sendmsg+0x813/0xd70 [ 74.219343][ T7711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.220734][ T7711] ____sys_sendmsg+0xaaf/0xc90 [ 74.221996][ T7711] ? copy_msghdr_from_user+0x10b/0x160 [ 74.223424][ T7711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.224813][ T7711] ? __lock_acquire+0xcc5/0x3c40 [ 74.226121][ T7711] ___sys_sendmsg+0x135/0x1e0 [ 74.227339][ T7711] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.228711][ T7711] ? trace_lock_acquire+0x14e/0x1f0 [ 74.230045][ T7711] __sys_sendmmsg+0x201/0x420 [ 74.231253][ T7711] ? __pfx___sys_sendmmsg+0x10/0x10 [ 74.232639][ T7711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.234180][ T7711] ? fput+0x67/0x440 [ 74.235199][ T7711] ? ksys_write+0x1ba/0x250 [ 74.236577][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 74.237839][ T7711] __x64_sys_sendmmsg+0x9c/0x100 [ 74.239123][ T7711] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.240491][ T7711] do_syscall_64+0xcd/0x250 [ 74.241674][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.243219][ T7711] RIP: 0033:0x7f706ad85d19 [ 74.244379][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.249239][ T7711] RSP: 002b:00007f7068bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 74.251373][ T7711] RAX: ffffffffffffffda RBX: 00007f706af75fa0 RCX: 00007f706ad85d19 [ 74.253464][ T7711] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 74.255695][ T7711] RBP: 00007f7068bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.257719][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.259888][ T7711] R13: 0000000000000000 R14: 00007f706af75fa0 R15: 00007ffe1bd20ff8 [ 74.262560][ T7711] [ 74.504930][ T7721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7721 comm=syz.4.397 [ 74.667039][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 74.667050][ T39] audit: type=1400 audit(1734225848.434:464): avc: denied { getopt } for pid=7726 comm="syz.5.400" laddr=fe80::10 lport=49776 faddr=fe80::35 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 74.764475][ T39] audit: type=1400 audit(1734225848.524:465): avc: denied { create } for pid=7733 comm="syz.2.402" name="gre0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.387853][ T39] audit: type=1400 audit(1734225849.154:466): avc: denied { getopt } for pid=7743 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.422241][ T7748] program syz.1.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.436347][ T7751] input: syz0 as /devices/virtual/input/input13 [ 75.437999][ T7751] input: failed to attach handler leds to device input13, error: -6 [ 75.467668][ T39] audit: type=1400 audit(1734225849.234:467): avc: denied { setopt } for pid=7753 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.538866][ T39] audit: type=1400 audit(1734225849.304:468): avc: denied { unlink } for pid=5935 comm="syz-executor" name="gre0" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.553780][ T7759] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.412'. [ 75.555439][ T7757] nbd: socks must be embedded in a SOCK_ITEM attr [ 75.626444][ T7762] block nbd2: shutting down sockets [ 75.628940][ T7762] block nbd2: NBD_DISCONNECT [ 75.630196][ T7762] block nbd2: Send disconnect failed -32 [ 75.724828][ T6004] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.885941][ T6004] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 75.888054][ T6004] usb 9-1: config 0 has no interface number 0 [ 75.889643][ T6004] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.894339][ T6004] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 75.897061][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.899114][ T6004] usb 9-1: Product: syz [ 75.900172][ T6004] usb 9-1: Manufacturer: syz [ 75.901351][ T6004] usb 9-1: SerialNumber: syz [ 75.904017][ T6004] usb 9-1: config 0 descriptor?? [ 75.908932][ T6004] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 76.115559][ T7773] bridge: RTM_NEWNEIGH with invalid ether address [ 76.122612][ T6004] usb 9-1: USB disconnect, device number 2 [ 76.132230][ T6004] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 76.165718][ T833] cfg80211: failed to load regulatory.db [ 76.268596][ T7775] syz.5.417[7775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.268645][ T7775] syz.5.417[7775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.271539][ T7775] syz.5.417[7775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.344355][ T7779] xt_cgroup: invalid path, errno=-2 [ 76.604838][ T1019] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 76.713536][ T39] audit: type=1400 audit(1734225850.474:469): avc: denied { watch_mount } for pid=7786 comm="syz.4.422" path="/91" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.718189][ T7788] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 0, id = 0 [ 76.720188][ T39] audit: type=1400 audit(1734225850.484:470): avc: denied { mount } for pid=7786 comm="syz.4.422" name="/" dev="autofs" ino=19362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 76.776580][ T1019] usb 6-1: unable to get BOS descriptor or descriptor too short [ 76.778921][ T1019] usb 6-1: not running at top speed; connect to a high speed hub [ 76.781697][ T1019] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 76.783950][ T1019] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 76.788131][ T1019] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.792232][ T1019] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.794481][ T1019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.796561][ T1019] usb 6-1: Product: syz [ 76.798175][ T1019] usb 6-1: Manufacturer: syz [ 76.799329][ T1019] usb 6-1: SerialNumber: syz [ 76.816718][ T39] audit: type=1400 audit(1734225850.584:471): avc: denied { unmount } for pid=6128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 77.108490][ T1019] usb 6-1: 0:2 : does not exist [ 77.115062][ T1019] usb 6-1: USB disconnect, device number 11 [ 77.147777][ T7811] xt_hashlimit: size too large, truncated to 1048576 [ 77.150958][ T39] audit: type=1400 audit(1734225850.914:472): avc: denied { setopt } for pid=7810 comm="syz.5.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.216368][ T7817] loop2: detected capacity change from 0 to 7 [ 77.220703][ T7817] Dev loop2: unable to read RDB block 7 [ 77.223174][ T7817] loop2: unable to read partition table [ 77.225341][ T7817] loop2: partition table beyond EOD, truncated [ 77.227389][ T7817] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 77.288330][ T39] audit: type=1400 audit(1734225851.054:473): avc: denied { append } for pid=7831 comm="syz.5.436" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.296166][ T6268] udevd[6268]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.422598][ T7838] IPv6: addrconf: prefix option has invalid lifetime [ 77.450487][ T7841] netlink: 1276 bytes leftover after parsing attributes in process `syz.5.439'. [ 77.453095][ T7841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.510210][ T7849] FAULT_INJECTION: forcing a failure. [ 77.510210][ T7849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.514648][ T7849] CPU: 2 UID: 0 PID: 7849 Comm: syz.2.442 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 77.517493][ T7849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.520290][ T7849] Call Trace: [ 77.521187][ T7849] [ 77.521982][ T7849] dump_stack_lvl+0x16c/0x1f0 [ 77.523248][ T7849] should_fail_ex+0x497/0x5b0 [ 77.524502][ T7849] _copy_from_iter+0x2a1/0x1560 [ 77.526038][ T7849] ? trace_lock_acquire+0x14e/0x1f0 [ 77.527887][ T7849] ? __alloc_skb+0x1fe/0x380 [ 77.529609][ T7849] ? __pfx__copy_from_iter+0x10/0x10 [ 77.531157][ T7849] ? __virt_addr_valid+0x1a4/0x590 [ 77.532521][ T7849] ? __virt_addr_valid+0x5e/0x590 [ 77.533848][ T7849] ? __phys_addr_symbol+0x30/0x80 [ 77.535176][ T7849] ? __check_object_size+0x488/0x710 [ 77.536682][ T7849] netlink_sendmsg+0x813/0xd70 [ 77.537972][ T7849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.539357][ T7849] ____sys_sendmsg+0xaaf/0xc90 [ 77.540630][ T7849] ? copy_msghdr_from_user+0x10b/0x160 [ 77.542075][ T7849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.543448][ T7849] ? __lock_acquire+0xcc5/0x3c40 [ 77.544699][ T7849] ? hlock_class+0x4e/0x130 [ 77.545871][ T7849] ? __lock_acquire+0x15a9/0x3c40 [ 77.547329][ T7849] ___sys_sendmsg+0x135/0x1e0 [ 77.548619][ T7849] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.549981][ T7849] ? __pfx___lock_acquire+0x10/0x10 [ 77.551394][ T7849] ? __pfx___might_resched+0x10/0x10 [ 77.552824][ T7849] ? __might_fault+0xe3/0x190 [ 77.554071][ T7849] __sys_sendmmsg+0x201/0x420 [ 77.555404][ T7849] ? __pfx___sys_sendmmsg+0x10/0x10 [ 77.556891][ T7849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.558447][ T7849] ? fput+0x67/0x440 [ 77.559478][ T7849] ? ksys_write+0x1ba/0x250 [ 77.560686][ T7849] ? __pfx_ksys_write+0x10/0x10 [ 77.562038][ T7849] __x64_sys_sendmmsg+0x9c/0x100 [ 77.563402][ T7849] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.564819][ T7849] do_syscall_64+0xcd/0x250 [ 77.566012][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.567561][ T7849] RIP: 0033:0x7f0822b85d19 [ 77.568754][ T7849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.573725][ T7849] RSP: 002b:00007f08238d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 77.575908][ T7849] RAX: ffffffffffffffda RBX: 00007f0822d75fa0 RCX: 00007f0822b85d19 [ 77.577995][ T7849] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 77.580067][ T7849] RBP: 00007f08238d7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.582127][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.584151][ T7849] R13: 0000000000000000 R14: 00007f0822d75fa0 R15: 00007ffd2eb5dae8 [ 77.586247][ T7849] [ 77.659471][ T7844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.670957][ T7844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.680540][ T7844] bond0 (unregistering): Released all slaves [ 78.004836][ T74] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 78.170032][ T74] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 78.172798][ T74] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.175046][ T74] usb 7-1: Product: syz [ 78.176238][ T74] usb 7-1: Manufacturer: syz [ 78.177582][ T74] usb 7-1: SerialNumber: syz [ 78.182368][ T74] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.207494][ T74] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.817756][ T6000] usb 7-1: USB disconnect, device number 10 [ 78.872043][ T7883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.028991][ T7913] infiniband syz2: set down [ 79.030389][ T7913] infiniband syz2: added ipvlan1 [ 79.047519][ T7913] RDS/IB: syz2: added [ 79.048797][ T7913] smc: adding ib device syz2 with port count 1 [ 79.051279][ T7913] smc: ib device syz2 port 1 has pnetid [ 79.054501][ T7921] ALSA: mixer_oss: invalid OSS volume '' [ 79.264954][ T74] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 79.267101][ T74] ath9k_htc: Failed to initialize the device [ 79.270578][ T6000] usb 7-1: ath9k_htc: USB layer deinitialized [ 79.290821][ T7934] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.293529][ T7934] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.296205][ T7934] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.298121][ T7934] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.382862][ T1258] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 79.526030][ T1258] usb 10-1: device descriptor read/64, error -71 [ 79.727857][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 79.727868][ T39] audit: type=1400 audit(1734225853.494:497): avc: denied { execute } for pid=7979 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.735500][ T39] audit: type=1400 audit(1734225853.494:498): avc: denied { execute_no_trans } for pid=7979 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.738217][ T7981] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 79.744253][ T7981] geneve0: entered promiscuous mode [ 79.748633][ T7981] rose0: (slave geneve0): Enslaving as an active interface with an up link [ 79.754878][ T12] rose0: (slave geneve0): interface is now down [ 79.756757][ T12] rose0: now running without any active interface! [ 79.766381][ T1258] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 79.796551][ T7986] input: syz0 as /devices/virtual/input/input14 [ 79.876662][ T39] audit: type=1400 audit(1734225853.644:499): avc: denied { getopt } for pid=7994 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.905017][ T1258] usb 10-1: device descriptor read/64, error -71 [ 79.967854][ T39] audit: type=1400 audit(1734225853.734:500): avc: denied { connect } for pid=8008 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.017746][ T1258] usb usb10-port1: attempt power cycle [ 80.064844][ T5291] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.067319][ T6361] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 80.069001][ T6361] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 80.221764][ T8038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8038 comm=syz.2.496 [ 80.354854][ T1258] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 80.374053][ T39] audit: type=1400 audit(1734225854.134:501): avc: denied { module_request } for pid=8052 comm="syz.2.499" kmod="netdev-lo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.385237][ T1258] usb 10-1: device descriptor read/8, error -71 [ 80.429898][ T39] audit: type=1400 audit(1734225854.194:502): avc: denied { write } for pid=8059 comm="syz.2.500" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.494199][ T8061] 9pnet: Could not find request transport: vIrtio [ 80.499869][ T8061] netlink: 72 bytes leftover after parsing attributes in process `syz.2.500'. [ 80.634844][ T1258] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 80.655493][ T1258] usb 10-1: device descriptor read/8, error -71 [ 80.766471][ T1258] usb usb10-port1: unable to enumerate USB device [ 80.778008][ T8065] Bluetooth: MGMT ver 1.23 [ 81.260050][ T8060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.298955][ T39] audit: type=1400 audit(1734225855.064:503): avc: denied { mount } for pid=8066 comm="syz.2.502" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.313907][ T39] audit: type=1400 audit(1734225855.074:504): avc: denied { write } for pid=8071 comm="syz.4.503" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.320168][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 81.425942][ T39] audit: type=1400 audit(1734225855.194:505): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.426477][ T8080] bridge_slave_0: left allmulticast mode [ 81.433090][ T8080] bridge_slave_0: left promiscuous mode [ 81.434687][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.455313][ T8080] bridge_slave_1: left allmulticast mode [ 81.456823][ T8080] bridge_slave_1: left promiscuous mode [ 81.458345][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.477771][ T8080] bond0: (slave bond_slave_0): Releasing backup interface [ 81.490930][ T39] audit: type=1400 audit(1734225855.244:506): avc: denied { associate } for pid=8079 comm="syz.4.506" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.494172][ T8080] bond0: (slave bond_slave_1): Releasing backup interface [ 81.509720][ T8080] team0: Port device team_slave_0 removed [ 81.515445][ T8080] team0: Port device team_slave_1 removed [ 81.518121][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.520070][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.523330][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.525588][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.541142][ T70] tipc: Resetting bearer [ 81.543425][ T8089] FAULT_INJECTION: forcing a failure. [ 81.543425][ T8089] name failslab, interval 1, probability 0, space 0, times 0 [ 81.547778][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.2.508 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 81.550588][ T8089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.553424][ T8089] Call Trace: [ 81.554345][ T8089] [ 81.555276][ T8089] dump_stack_lvl+0x16c/0x1f0 [ 81.557063][ T8089] should_fail_ex+0x497/0x5b0 [ 81.558530][ T8089] ? fs_reclaim_acquire+0xae/0x150 [ 81.559917][ T8089] should_failslab+0xc2/0x120 [ 81.561177][ T8089] __kmalloc_noprof+0xcb/0x510 [ 81.562452][ T8089] fib6_info_alloc+0x40/0x160 [ 81.563725][ T8089] ip6_route_info_create+0x337/0x1910 [ 81.565280][ T8089] ? __pfx_ip6_route_info_create+0x10/0x10 [ 81.566925][ T8089] ? __pfx_lock_release+0x10/0x10 [ 81.568281][ T8089] ? trace_lock_acquire+0x14e/0x1f0 [ 81.569666][ T8089] ip6_route_add+0x26/0x1c0 [ 81.570875][ T8089] addrconf_prefix_route+0x2fe/0x510 [ 81.572297][ T8089] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 81.573838][ T8089] ? nlmsg_notify+0xac/0x220 [ 81.575207][ T8089] ? mark_held_locks+0x9f/0xe0 [ 81.576631][ T8089] inet6_rtm_newaddr+0xfea/0x1ad0 [ 81.577965][ T8089] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 81.579401][ T8089] ? __mutex_lock+0x1cc/0xa60 [ 81.580686][ T8089] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 81.582329][ T8089] ? __pfx___mutex_lock+0x10/0x10 [ 81.583681][ T8089] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 81.585122][ T8089] rtnetlink_rcv_msg+0x3c7/0xea0 [ 81.586437][ T8089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.587896][ T8089] netlink_rcv_skb+0x16b/0x440 [ 81.589170][ T8089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.590613][ T8089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.592032][ T8089] ? netlink_deliver_tap+0x1ae/0xd30 [ 81.593429][ T8089] netlink_unicast+0x53c/0x7f0 [ 81.594714][ T8089] ? __pfx_netlink_unicast+0x10/0x10 [ 81.596136][ T8089] netlink_sendmsg+0x8b8/0xd70 [ 81.597407][ T8089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.598812][ T8089] ____sys_sendmsg+0xaaf/0xc90 [ 81.600103][ T8089] ? copy_msghdr_from_user+0x10b/0x160 [ 81.601547][ T8089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.602949][ T8089] ? __lock_acquire+0xcc5/0x3c40 [ 81.604294][ T8089] ? hlock_class+0x4e/0x130 [ 81.605510][ T8089] ? __lock_acquire+0x15a9/0x3c40 [ 81.606850][ T8089] ___sys_sendmsg+0x135/0x1e0 [ 81.608132][ T8089] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.609535][ T8089] ? __pfx___lock_acquire+0x10/0x10 [ 81.610931][ T8089] ? __pfx___might_resched+0x10/0x10 [ 81.612344][ T8089] ? __might_fault+0xe3/0x190 [ 81.613605][ T8089] __sys_sendmmsg+0x201/0x420 [ 81.614873][ T8089] ? __pfx___sys_sendmmsg+0x10/0x10 [ 81.616260][ T8089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.617853][ T8089] ? fput+0x67/0x440 [ 81.618894][ T8089] ? ksys_write+0x1ba/0x250 [ 81.620147][ T8089] ? __pfx_ksys_write+0x10/0x10 [ 81.621439][ T8089] __x64_sys_sendmmsg+0x9c/0x100 [ 81.622745][ T8089] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.624106][ T8089] do_syscall_64+0xcd/0x250 [ 81.625304][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.626865][ T8089] RIP: 0033:0x7f0822b85d19 [ 81.628062][ T8089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.633034][ T8089] RSP: 002b:00007f08238d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.635178][ T8089] RAX: ffffffffffffffda RBX: 00007f0822d75fa0 RCX: 00007f0822b85d19 [ 81.637212][ T8089] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 81.639243][ T8089] RBP: 00007f08238d7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.641336][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.643370][ T8089] R13: 0000000000000000 R14: 00007f0822d75fa0 R15: 00007ffd2eb5dae8 [ 81.645430][ T8089] [ 81.646318][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.737098][ T8093] batadv_slave_1: entered promiscuous mode [ 82.110744][ T8105] pim6reg1: entered promiscuous mode [ 82.112568][ T8105] pim6reg1: entered allmulticast mode [ 82.137664][ T8107] gtp0: entered promiscuous mode [ 82.139015][ T8107] gtp0: entered allmulticast mode [ 82.235194][ T5291] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.236923][ T6361] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 82.238536][ T6361] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 82.239553][ T8113] binder: 8108:8113 ioctl c0306201 20000080 returned -14 [ 82.244431][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 82.251892][ T8113] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 82.254846][ T8113] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 82.257136][ T8113] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 82.508808][ T8091] batadv_slave_1: left promiscuous mode [ 82.538329][ T8115] FAULT_INJECTION: forcing a failure. [ 82.538329][ T8115] name failslab, interval 1, probability 0, space 0, times 0 [ 82.541800][ T8115] CPU: 0 UID: 0 PID: 8115 Comm: syz.2.517 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 82.544559][ T8115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.545332][ T5291] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.547358][ T8115] Call Trace: [ 82.547365][ T8115] [ 82.547370][ T8115] dump_stack_lvl+0x16c/0x1f0 [ 82.552579][ T8115] should_fail_ex+0x497/0x5b0 [ 82.553968][ T8115] ? fs_reclaim_acquire+0xae/0x150 [ 82.555359][ T8115] should_failslab+0xc2/0x120 [ 82.556719][ T8115] __kmalloc_noprof+0xcb/0x510 [ 82.558008][ T8115] fib6_info_alloc+0x40/0x160 [ 82.559284][ T8115] ip6_route_info_create+0x337/0x1910 [ 82.560771][ T8115] ? __pfx_ip6_route_info_create+0x10/0x10 [ 82.562363][ T8115] ? __pfx_lock_release+0x10/0x10 [ 82.563740][ T8115] ? trace_lock_acquire+0x14e/0x1f0 [ 82.565142][ T8115] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 82.566844][ T8115] ip6_route_add+0x26/0x1c0 [ 82.568080][ T8115] addrconf_prefix_route+0x2fe/0x510 [ 82.569604][ T8115] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 82.571166][ T8115] ? nlmsg_notify+0xac/0x220 [ 82.572452][ T8115] ? mark_held_locks+0x9f/0xe0 [ 82.573768][ T8115] inet6_rtm_newaddr+0xea8/0x1ad0 [ 82.575126][ T8115] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 82.576687][ T8115] ? __mutex_lock+0x1cc/0xa60 [ 82.577949][ T8115] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 82.579602][ T8115] ? __pfx___mutex_lock+0x10/0x10 [ 82.581000][ T8115] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 82.582447][ T8115] rtnetlink_rcv_msg+0x3c7/0xea0 [ 82.583788][ T8115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.585379][ T8115] netlink_rcv_skb+0x16b/0x440 [ 82.586689][ T8115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.588144][ T8115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.589593][ T8115] ? netlink_deliver_tap+0x1ae/0xd30 [ 82.590997][ T8115] netlink_unicast+0x53c/0x7f0 [ 82.592304][ T8115] ? __pfx_netlink_unicast+0x10/0x10 [ 82.593697][ T8115] netlink_sendmsg+0x8b8/0xd70 [ 82.594959][ T8115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.596428][ T8115] ____sys_sendmsg+0xaaf/0xc90 [ 82.597851][ T8115] ? copy_msghdr_from_user+0x10b/0x160 [ 82.599292][ T8115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.600837][ T8115] ? __lock_acquire+0xcc5/0x3c40 [ 82.602120][ T8115] ? hlock_class+0x4e/0x130 [ 82.603312][ T8115] ? __lock_acquire+0x15a9/0x3c40 [ 82.604676][ T8115] ___sys_sendmsg+0x135/0x1e0 [ 82.606053][ T8115] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.607393][ T8115] ? __pfx___lock_acquire+0x10/0x10 [ 82.608823][ T8115] ? __pfx___might_resched+0x10/0x10 [ 82.610251][ T8115] ? __might_fault+0xe3/0x190 [ 82.611487][ T8115] __sys_sendmmsg+0x201/0x420 [ 82.612746][ T8115] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.614136][ T8115] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.615751][ T8115] ? fput+0x67/0x440 [ 82.616818][ T8115] ? ksys_write+0x1ba/0x250 [ 82.618037][ T8115] ? __pfx_ksys_write+0x10/0x10 [ 82.619358][ T8115] __x64_sys_sendmmsg+0x9c/0x100 [ 82.620726][ T8115] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.622112][ T8115] do_syscall_64+0xcd/0x250 [ 82.623345][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.624959][ T8115] RIP: 0033:0x7f0822b85d19 [ 82.626143][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.631147][ T8115] RSP: 002b:00007f08238d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.633325][ T8115] RAX: ffffffffffffffda RBX: 00007f0822d75fa0 RCX: 00007f0822b85d19 [ 82.635396][ T8115] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 82.637454][ T8115] RBP: 00007f08238d7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.639527][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.641599][ T8115] R13: 0000000000000000 R14: 00007f0822d75fa0 R15: 00007ffd2eb5dae8 [ 82.643677][ T8115] [ 82.644556][ T6361] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 82.644609][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.646261][ T6361] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 82.672750][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.681574][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.687571][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.691035][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.694242][ T5949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.696877][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.697209][ T8118] syzkaller0: entered promiscuous mode [ 82.700813][ T8118] syzkaller0: entered allmulticast mode [ 82.713777][ T5291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.716374][ T5291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.719102][ T5291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.721992][ T5291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.725189][ T5291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.727158][ T5291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.918363][ T7991] vcan0 speed is unknown, defaulting to 1000 [ 84.074599][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 84.146677][ T7991] chnl_net:caif_netlink_parms(): no params data found [ 84.235903][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.238312][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.240716][ T7991] bridge_slave_0: entered allmulticast mode [ 84.251811][ T7991] bridge_slave_0: entered promiscuous mode [ 84.254198][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.256448][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.258327][ T7991] bridge_slave_1: entered allmulticast mode [ 84.260362][ T7991] bridge_slave_1: entered promiscuous mode [ 84.292175][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.296489][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.339837][ T7991] team0: Port device team_slave_0 added [ 84.344022][ T8160] geneve2: entered promiscuous mode [ 84.347395][ T8160] geneve2: entered allmulticast mode [ 84.374175][ T7991] team0: Port device team_slave_1 added [ 84.411145][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.413103][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.424100][ T7991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.430101][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.432506][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.441721][ T7991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.482729][ T7991] hsr_slave_0: entered promiscuous mode [ 84.486175][ T8165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 84.488793][ T7991] hsr_slave_1: entered promiscuous mode [ 84.491302][ T7991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.493761][ T7991] Cannot create hsr debugfs directory [ 84.530517][ T8171] netlink: 'syz.5.535': attribute type 10 has an invalid length. [ 84.553627][ T8177] FAULT_INJECTION: forcing a failure. [ 84.553627][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 84.559129][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.2.536 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 84.561935][ T8177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.564653][ T8177] Call Trace: [ 84.565508][ T8177] [ 84.566266][ T8177] dump_stack_lvl+0x16c/0x1f0 [ 84.567464][ T8177] should_fail_ex+0x497/0x5b0 [ 84.568692][ T8177] should_failslab+0xc2/0x120 [ 84.569913][ T8177] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 84.571301][ T8177] ? skb_clone+0x190/0x3f0 [ 84.572474][ T8177] skb_clone+0x190/0x3f0 [ 84.573626][ T8177] netlink_deliver_tap+0xabd/0xd30 [ 84.574973][ T8177] netlink_unicast+0x6b4/0x7f0 [ 84.576233][ T8177] ? __pfx_netlink_unicast+0x10/0x10 [ 84.577598][ T8177] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 84.578910][ T8177] netlink_ack+0x6ac/0xb80 [ 84.580131][ T8177] netlink_rcv_skb+0x348/0x440 [ 84.581386][ T8177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.582803][ T8177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.584173][ T8177] ? netlink_deliver_tap+0x1ae/0xd30 [ 84.585511][ T8177] netlink_unicast+0x53c/0x7f0 [ 84.586716][ T8177] ? __pfx_netlink_unicast+0x10/0x10 [ 84.588085][ T8177] netlink_sendmsg+0x8b8/0xd70 [ 84.589357][ T8177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.590738][ T8177] ____sys_sendmsg+0xaaf/0xc90 [ 84.591993][ T8177] ? copy_msghdr_from_user+0x10b/0x160 [ 84.593402][ T8177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.594775][ T8177] ? __lock_acquire+0xcc5/0x3c40 [ 84.596067][ T8177] ? hlock_class+0x4e/0x130 [ 84.597255][ T8177] ? __lock_acquire+0x15a9/0x3c40 [ 84.598560][ T8177] ___sys_sendmsg+0x135/0x1e0 [ 84.599812][ T8177] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.601153][ T8177] ? __pfx___lock_acquire+0x10/0x10 [ 84.602509][ T8177] ? __pfx___might_resched+0x10/0x10 [ 84.603883][ T8177] ? __might_fault+0xe3/0x190 [ 84.605106][ T8177] __sys_sendmmsg+0x201/0x420 [ 84.606329][ T8177] ? __pfx___sys_sendmmsg+0x10/0x10 [ 84.607679][ T8177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.609236][ T8177] ? fput+0x67/0x440 [ 84.610257][ T8177] ? ksys_write+0x1ba/0x250 [ 84.611438][ T8177] ? __pfx_ksys_write+0x10/0x10 [ 84.612715][ T8177] __x64_sys_sendmmsg+0x9c/0x100 [ 84.613991][ T8177] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.615346][ T8177] do_syscall_64+0xcd/0x250 [ 84.616535][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.618054][ T8177] RIP: 0033:0x7f0822b85d19 [ 84.619210][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.624138][ T8177] RSP: 002b:00007f08238d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.626276][ T8177] RAX: ffffffffffffffda RBX: 00007f0822d75fa0 RCX: 00007f0822b85d19 [ 84.628308][ T8177] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 84.630330][ T8177] RBP: 00007f08238d7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.632366][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.634397][ T8177] R13: 0000000000000000 R14: 00007f0822d75fa0 R15: 00007ffd2eb5dae8 [ 84.636427][ T8177] [ 84.671385][ T8179] smc: net device veth1_virt_wifi applied user defined pnetid SYZ1 [ 84.694467][ T7991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.698787][ T7991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.734843][ T39] kauditd_printk_skb: 65320 callbacks suppressed [ 84.734854][ T39] audit: type=1326 audit(1734225858.494:65825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.742471][ T39] audit: type=1326 audit(1734225858.504:65826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.754850][ T39] audit: type=1326 audit(1734225858.504:65827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.760809][ T39] audit: type=1326 audit(1734225858.504:65828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.767128][ T39] audit: type=1326 audit(1734225858.504:65829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.774833][ T39] audit: type=1326 audit(1734225858.504:65830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.781255][ T39] audit: type=1326 audit(1734225858.504:65831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.784227][ T8187] netfs: Couldn't get user pages (rc=-14) [ 84.787519][ T5291] Bluetooth: hci2: command tx timeout [ 84.789593][ T39] audit: type=1326 audit(1734225858.504:65832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.797148][ T39] audit: type=1326 audit(1734225858.504:65833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.803098][ T39] audit: type=1326 audit(1734225858.504:65834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394e9847cf code=0x50000 [ 84.810519][ T7991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.813349][ T7991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.884741][ T7991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.888367][ T7991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.988977][ T7991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.991903][ T7991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.108331][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.173094][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.176242][ T8222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.182318][ T7991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.196999][ T7991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.200209][ T7991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.203675][ T7991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.232786][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.240953][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.245862][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.248339][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.258654][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.260622][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.339131][ T8236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.547'. [ 85.345604][ T8240] kAFS: unable to lookup cell '/,cL' [ 85.362853][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.393345][ T7991] veth0_vlan: entered promiscuous mode [ 85.402731][ T7991] veth1_vlan: entered promiscuous mode [ 85.421600][ T7991] veth0_macvtap: entered promiscuous mode [ 85.424276][ T7991] veth1_macvtap: entered promiscuous mode [ 85.432496][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.432515][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.432524][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.432537][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.432547][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.432559][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.433587][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.436654][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.436666][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.436671][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.436678][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.436684][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.436691][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.437074][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.438612][ T7991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.438632][ T7991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.438647][ T7991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.438662][ T7991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.480964][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.511333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.522397][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.526975][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.534527][ T8248] devtmpfs: Cannot enable quota on remount [ 85.728166][ T8258] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 86.080217][ T8266] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 86.090778][ T8266] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.093977][ T8266] rose0: (slave team0): Enslaving as an active interface with an up link [ 86.102795][ T8266] program syz.2.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.105510][ T1142] rose0: (slave team0): interface is now down [ 86.105810][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'. [ 86.109628][ T1142] rose0: now running without any active interface! [ 86.191760][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 86.292652][ T8272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.294708][ T8272] IPv6: NLM_F_CREATE should be set when creating new route [ 86.296668][ T8272] IPv6: NLM_F_CREATE should be set when creating new route [ 86.312069][ T8272] sit0: entered promiscuous mode [ 86.318681][ T8272] netlink: 'syz.5.558': attribute type 1 has an invalid length. [ 86.327813][ T8272] netlink: 1 bytes leftover after parsing attributes in process `syz.5.558'. [ 86.604901][ T6004] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 86.754869][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 86.757976][ T6004] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.760531][ T6004] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.763185][ T6004] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.766122][ T6004] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.770335][ T6004] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.772720][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 86.774952][ T6004] usb 7-1: Product: syz [ 86.980722][ T6004] usb 7-1: GET_CAPABILITIES returned 0 [ 86.982306][ T6004] usbtmc 7-1:16.0: can't read capabilities [ 87.067581][ T8321] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 87.202049][ T8284] netlink: 'syz.2.561': attribute type 27 has an invalid length. [ 87.251512][ T8284] bridge0: port 3(syz_tun) entered disabled state [ 87.253644][ T8332] netlink: 'syz.2.561': attribute type 5 has an invalid length. [ 87.266930][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.270027][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.276278][ T8284] infiniband syz1: set down [ 87.289968][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 87.293291][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 87.296718][ T8333] netlink: 'syz.4.572': attribute type 20 has an invalid length. [ 87.355237][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.365209][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.437493][ T8284] geneve0: left promiscuous mode [ 87.440074][ T8284] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.442426][ T8284] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.444894][ T8284] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.447340][ T8284] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.480113][ T6000] vcan0 speed is unknown, defaulting to 1000 [ 87.501787][ T1142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.509473][ T6000] vcan0 speed is unknown, defaulting to 1000 [ 87.526137][ T6000] usb 7-1: USB disconnect, device number 11 [ 87.641219][ T5950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.646097][ T5950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.649458][ T5950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.652817][ T5950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.657874][ T5950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.660027][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.680349][ T8339] vcan0 speed is unknown, defaulting to 1000 [ 87.726346][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 87.800371][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 87.870720][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.872657][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.874547][ T8339] bridge_slave_0: entered allmulticast mode [ 87.877421][ T8339] bridge_slave_0: entered promiscuous mode [ 87.879867][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.881743][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.883635][ T8339] bridge_slave_1: entered allmulticast mode [ 87.886779][ T8339] bridge_slave_1: entered promiscuous mode [ 87.896848][ T8360] 9p: Unknown uid 00000000004294967295 [ 87.904906][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.908921][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.930176][ T8339] team0: Port device team_slave_0 added [ 87.932928][ T8339] team0: Port device team_slave_1 added [ 87.949738][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.951554][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.959696][ T8339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.963294][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.965277][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.971839][ T8339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.001558][ T8339] hsr_slave_0: entered promiscuous mode [ 88.006288][ T8339] hsr_slave_1: entered promiscuous mode [ 88.008080][ T8339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.010053][ T8339] Cannot create hsr debugfs directory [ 88.066656][ T8364] gtp0: entered promiscuous mode [ 88.464908][ T5949] Bluetooth: hci2: command 0x1003 tx timeout [ 88.464992][ T5291] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 88.538636][ T8388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8388 comm=syz.2.583 [ 88.608519][ T8399] misc userio: No port type given on /dev/userio [ 88.643637][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'. [ 88.687107][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 88.742970][ T8416] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.021237][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.597'. [ 89.115321][ T8444] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 89.457365][ T1142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.546909][ T1142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.625304][ T1142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.665000][ T5291] Bluetooth: hci4: command tx timeout [ 89.720556][ T1142] bridge_slave_1: left allmulticast mode [ 89.722042][ T1142] bridge_slave_1: left promiscuous mode [ 89.724079][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.728401][ T1142] bridge_slave_0: left allmulticast mode [ 89.729811][ T1142] bridge_slave_0: left promiscuous mode [ 89.731245][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.979731][ T8450] nbd: device at index 5 is going down [ 89.982762][ T8450] binder: 8449:8450 ioctl c018620c 20000140 returned -22 [ 90.030504][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.036916][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.040415][ T8451] binder: BINDER_SET_CONTEXT_MGR already set [ 90.042141][ T8451] binder: 8449:8451 ioctl 4018620d 20000100 returned -16 [ 90.045008][ T1142] bond0 (unregistering): Released all slaves [ 90.139833][ T39] kauditd_printk_skb: 8507 callbacks suppressed [ 90.139844][ T39] audit: type=1400 audit(1734225863.904:74341): avc: denied { map } for pid=8459 comm="syz.2.603" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.155991][ T5291] Bluetooth: hci5: command 0x1003 tx timeout [ 90.160599][ T5950] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 90.223362][ T39] audit: type=1400 audit(1734225863.984:74342): avc: denied { nlmsg_read } for pid=8475 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.226188][ T8476] ------------[ cut here ]------------ [ 90.231884][ T8476] WARNING: CPU: 3 PID: 8476 at mm/page_alloc.c:4727 __alloc_pages_noprof+0xeff/0x25b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.232203][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.606'. [ 90.235381][ T8476] Modules linked in: [ 90.235396][ T8476] CPU: 3 UID: 0 PID: 8476 Comm: syz.4.606 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 90.244317][ T8476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.247395][ T8476] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 90.249093][ T8476] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 27 b4 57 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 2f b3 0c 00 8b 14 24 e9 [ 90.254340][ T8476] RSP: 0018:ffffc90005caf898 EFLAGS: 00010246 [ 90.256214][ T8476] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.258450][ T8476] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 90.260613][ T8476] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 90.262739][ T8476] R10: 0000000020000040 R11: 0000000000000000 R12: 0000000000000014 [ 90.264971][ T8476] R13: 0000000000040cc0 R14: 1ffff92000b95f27 R15: ffffffff853ad9f7 [ 90.267156][ T8476] FS: 00007f394f83e6c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 90.269491][ T8476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.271260][ T8476] CR2: 00007f394f81dd58 CR3: 000000001261a000 CR4: 0000000000352ef0 [ 90.273327][ T8476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.275608][ T8476] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.277921][ T8476] Call Trace: [ 90.279111][ T8476] [ 90.280204][ T8476] ? __warn+0xea/0x3c0 [ 90.281710][ T8476] ? __alloc_pages_noprof+0xeff/0x25b0 [ 90.283674][ T8476] ? report_bug+0x3c0/0x580 [ 90.285569][ T8476] ? handle_bug+0x54/0xa0 [ 90.287161][ T8476] ? exc_invalid_op+0x17/0x50 [ 90.288912][ T8476] ? asm_exc_invalid_op+0x1a/0x20 [ 90.290765][ T8476] ? drm_syncobj_array_find+0x37/0x3b0 [ 90.292791][ T8476] ? __alloc_pages_noprof+0xeff/0x25b0 [ 90.295044][ T8476] ? hlock_class+0x4e/0x130 [ 90.297060][ T8476] ? __lock_acquire+0xcc5/0x3c40 [ 90.298877][ T8476] ? hlock_class+0x4e/0x130 [ 90.300581][ T8476] ? mark_lock+0xb5/0xc60 [ 90.302174][ T8476] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 90.304260][ T8476] ? mark_lock+0xb5/0xc60 [ 90.306229][ T8476] ? hlock_class+0x4e/0x130 [ 90.307932][ T8476] ? __pfx_mark_lock+0x10/0x10 [ 90.309668][ T8476] ? find_held_lock+0x2d/0x110 [ 90.311434][ T8476] ? hlock_class+0x4e/0x130 [ 90.313135][ T8476] ? __lock_acquire+0x15a9/0x3c40 [ 90.314855][ T8463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.315339][ T8476] ? drm_syncobj_array_find+0x37/0x3b0 [ 90.319279][ T8476] ___kmalloc_large_node+0x84/0x1b0 [ 90.321202][ T8476] __kmalloc_large_node_noprof+0x1c/0x70 [ 90.323258][ T8476] ? __pfx___lock_acquire+0x10/0x10 [ 90.325415][ T8476] __kmalloc_noprof.cold+0xc/0x61 [ 90.327272][ T8476] drm_syncobj_array_find+0x37/0x3b0 [ 90.329228][ T8476] ? find_held_lock+0x2d/0x110 [ 90.330988][ T8476] drm_syncobj_wait_ioctl+0x23a/0x390 [ 90.332966][ T8476] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 90.335384][ T8476] ? drm_dev_enter+0x4c/0x170 [ 90.336927][ T8476] drm_ioctl_kernel+0x1e6/0x3d0 [ 90.338219][ T8476] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 90.339846][ T8476] ? __might_fault+0xe3/0x190 [ 90.341097][ T8476] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 90.342537][ T8476] ? __might_fault+0xe3/0x190 [ 90.343788][ T8476] drm_ioctl+0x5d6/0xc00 [ 90.345044][ T8476] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 90.346604][ T8476] ? __pfx_drm_ioctl+0x10/0x10 [ 90.347878][ T8476] ? __pfx_lock_release+0x10/0x10 [ 90.349212][ T8476] ? selinux_file_ioctl+0x180/0x270 [ 90.350581][ T8476] ? selinux_file_ioctl+0xb4/0x270 [ 90.352133][ T8476] ? __pfx_drm_ioctl+0x10/0x10 [ 90.353544][ T8476] __x64_sys_ioctl+0x190/0x200 [ 90.354938][ T8476] do_syscall_64+0xcd/0x250 [ 90.356148][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.357697][ T8476] RIP: 0033:0x7f394e985d19 [ 90.358871][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.363894][ T8476] RSP: 002b:00007f394f83e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.366176][ T8476] RAX: ffffffffffffffda RBX: 00007f394eb75fa0 RCX: 00007f394e985d19 [ 90.368252][ T8476] RDX: 0000000020000080 RSI: 00000000c02864c3 RDI: 0000000000000004 [ 90.370408][ T8476] RBP: 00007f394ea01a20 R08: 0000000000000000 R09: 0000000000000000 [ 90.372574][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.374725][ T8476] R13: 0000000000000000 R14: 00007f394eb75fa0 R15: 00007ffea0704f58 [ 90.376948][ T8476] [ 90.377784][ T8476] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.379711][ T8476] CPU: 3 UID: 0 PID: 8476 Comm: syz.4.606 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 90.382557][ T8476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.385314][ T8476] Call Trace: [ 90.386194][ T8476] [ 90.386977][ T8476] dump_stack_lvl+0x3d/0x1f0 [ 90.388199][ T8476] panic+0x71d/0x800 [ 90.389230][ T8476] ? __pfx_panic+0x10/0x10 [ 90.390412][ T8476] ? show_trace_log_lvl+0x29d/0x3d0 [ 90.391799][ T8476] ? check_panic_on_warn+0x1f/0xb0 [ 90.393139][ T8476] ? __alloc_pages_noprof+0xeff/0x25b0 [ 90.394577][ T8476] check_panic_on_warn+0xab/0xb0 [ 90.395964][ T8476] __warn+0xf6/0x3c0 [ 90.396996][ T8476] ? __alloc_pages_noprof+0xeff/0x25b0 [ 90.398424][ T8476] report_bug+0x3c0/0x580 [ 90.399597][ T8476] handle_bug+0x54/0xa0 [ 90.400702][ T8476] exc_invalid_op+0x17/0x50 [ 90.401922][ T8476] asm_exc_invalid_op+0x1a/0x20 [ 90.403204][ T8476] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 90.404799][ T8476] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 27 b4 57 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 2f b3 0c 00 8b 14 24 e9 [ 90.409859][ T8476] RSP: 0018:ffffc90005caf898 EFLAGS: 00010246 [ 90.411461][ T8476] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.413725][ T8476] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 90.415799][ T8476] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 90.417962][ T8476] R10: 0000000020000040 R11: 0000000000000000 R12: 0000000000000014 [ 90.420055][ T8476] R13: 0000000000040cc0 R14: 1ffff92000b95f27 R15: ffffffff853ad9f7 [ 90.422133][ T8476] ? drm_syncobj_array_find+0x37/0x3b0 [ 90.423573][ T8476] ? hlock_class+0x4e/0x130 [ 90.424789][ T8476] ? __lock_acquire+0xcc5/0x3c40 [ 90.426090][ T8476] ? hlock_class+0x4e/0x130 [ 90.427356][ T8476] ? mark_lock+0xb5/0xc60 [ 90.428577][ T8476] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 90.430068][ T8476] ? mark_lock+0xb5/0xc60 [ 90.431214][ T8476] ? hlock_class+0x4e/0x130 [ 90.432441][ T8476] ? __pfx_mark_lock+0x10/0x10 [ 90.433692][ T8476] ? find_held_lock+0x2d/0x110 [ 90.434963][ T8476] ? hlock_class+0x4e/0x130 [ 90.436175][ T8476] ? __lock_acquire+0x15a9/0x3c40 [ 90.437494][ T8476] ? drm_syncobj_array_find+0x37/0x3b0 [ 90.438923][ T8476] ___kmalloc_large_node+0x84/0x1b0 [ 90.440304][ T8476] __kmalloc_large_node_noprof+0x1c/0x70 [ 90.441805][ T8476] ? __pfx___lock_acquire+0x10/0x10 [ 90.443166][ T8476] __kmalloc_noprof.cold+0xc/0x61 [ 90.444510][ T8476] drm_syncobj_array_find+0x37/0x3b0 [ 90.445893][ T8476] ? find_held_lock+0x2d/0x110 [ 90.447154][ T8476] drm_syncobj_wait_ioctl+0x23a/0x390 [ 90.448574][ T8476] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 90.450165][ T8476] ? drm_dev_enter+0x4c/0x170 [ 90.451418][ T8476] drm_ioctl_kernel+0x1e6/0x3d0 [ 90.452815][ T8476] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 90.454371][ T8476] ? __might_fault+0xe3/0x190 [ 90.455697][ T8476] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 90.457101][ T8476] ? __might_fault+0xe3/0x190 [ 90.458465][ T8476] drm_ioctl+0x5d6/0xc00 [ 90.459628][ T8476] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 90.461252][ T8476] ? __pfx_drm_ioctl+0x10/0x10 [ 90.462544][ T8476] ? __pfx_lock_release+0x10/0x10 [ 90.463881][ T8476] ? selinux_file_ioctl+0x180/0x270 [ 90.465216][ T8476] ? selinux_file_ioctl+0xb4/0x270 [ 90.466540][ T8476] ? __pfx_drm_ioctl+0x10/0x10 [ 90.467823][ T8476] __x64_sys_ioctl+0x190/0x200 [ 90.469092][ T8476] do_syscall_64+0xcd/0x250 [ 90.470302][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.471888][ T8476] RIP: 0033:0x7f394e985d19 [ 90.473062][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.478058][ T8476] RSP: 002b:00007f394f83e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.480237][ T8476] RAX: ffffffffffffffda RBX: 00007f394eb75fa0 RCX: 00007f394e985d19 [ 90.482317][ T8476] RDX: 0000000020000080 RSI: 00000000c02864c3 RDI: 0000000000000004 [ 90.484375][ T8476] RBP: 00007f394ea01a20 R08: 0000000000000000 R09: 0000000000000000 [ 90.486439][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.488492][ T8476] R13: 0000000000000000 R14: 00007f394eb75fa0 R15: 00007ffea0704f58 [ 90.490549][ T8476] [ 90.492026][ T8476] Kernel Offset: disabled [ 90.493173][ T8476] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:24:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=1ffff9200071dee4 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888028b3d35c RBP=0000000000000246 RSP=ffffc900038ef718 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f1997 R11=0000000000000002 R12=0000000000000000 R13=ffffffff8e1bb440 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8176b994 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f12e12a7d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12e074b6a3 00007f12e074b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf11d4730 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558435d365 000055558435cf10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555842ea498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584360b0a 0000555584360010 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004ce0330733a74 5f6563697665645f 656c6261766f6d65 723a725f7463656a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101e61000048004 0100001a08060601 66ca0030656c6966 2f2e01ffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffef0805d603 40020005d4030208 a80005ac03400200 05aa033332303163 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e30633a30732d30 733a745f646f6d73 6e693a725f6d6574 7379733a755f6465 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69666e6f636e75 01ffffffffffffff ffa50804d0034002 0004ce0330733a74 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000d35b5 RBX=0000000000000001 RCX=ffffffff8b293679 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1d360 RBP=ffffed10039dd910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801ceec880 R14=ffffffff905f1990 R15=0000000000000000 RIP=ffffffff8b294a5f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcb53eaf38 CR3=000000002446e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=03b425ed03b425ed 03b425ed03b425ed 03b425ed03b425ed 03b425ed03b425ed 03b425ed03b425ed 03b425ed03b425ed 03b425ed03b425ed 03b425ed03b425ed ZMM22=4af6977d4af6977d 4af6977d4af6977d 4af6977d4af6977d 4af6977d4af6977d 4af6977d4af6977d 4af6977d4af6977d 4af6977d4af6977d 4af6977d4af6977d ZMM23=2598a3622598a362 2598a3622598a362 2598a3622598a362 2598a3622598a362 2598a3622598a362 2598a3622598a362 2598a3622598a362 2598a3622598a362 ZMM24=0d218a260d218a26 0d218a260d218a26 0d218a260d218a26 0d218a260d218a26 0d218a260d218a26 0d218a260d218a26 0d218a260d218a26 0d218a260d218a26 ZMM25=23a6c94d23a6c94d 23a6c94d23a6c94d 23a6c94d23a6c94d 23a6c94d23a6c94d 23a6c94d23a6c94d 23a6c94d23a6c94d 23a6c94d23a6c94d 23a6c94d23a6c94d ZMM26=7d4d1d987d4d1d98 7d4d1d987d4d1d98 7d4d1d987d4d1d98 7d4d1d987d4d1d98 7d4d1d987d4d1d98 7d4d1d987d4d1d98 7d4d1d987d4d1d98 7d4d1d987d4d1d98 ZMM27=c102d137c102d137 c102d137c102d137 c102d137c102d137 c102d137c102d137 c102d137c102d137 c102d137c102d137 c102d137c102d137 c102d137c102d137 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9b0300009b030000 9b0300009b030000 9b0300009b030000 9b0300009b030000 9b0300009b030000 9b0300009b030000 9b0300009b030000 9b0300009b030000 info registers vcpu 2 CPU#2 RAX=1ffffffff2e31a41 RBX=ffffffff9718d1d8 RCX=1ffffffff2c3bd4f RDX=00000000000003dd RSI=1ffffffff2c3bf08 RDI=ffffffff9718d208 RBP=ffffffff9700ec58 RSP=ffffc90005c6e6a0 R8 =0000000000000000 R9 =ffffffff96e52950 R10=0000000000000004 R11=00000000000001bc R12=ffffffff8175aeb0 R13=ffffffff9700ec78 R14=dffffc0000000000 R15=ffffffff9700ec48 RIP=ffffffff8175ff41 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f394f81d6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f394e969ae0 CR3=000000001261a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851b8da5 RDI=ffffffff9ab0cc20 RBP=ffffffff9ab0cbe0 RSP=ffffc90005caf1f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=000000000000006f R14=ffffffff851b8d40 R15=0000000000000000 RIP=ffffffff851b8dcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f394f83e6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f394f81dd58 CR3=000000001261a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394ea02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394eb4b488 00007f394eb4b480 00007f394eb4b478 00007f394eb4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394f6ad100 00007f394eb4b440 00007f394eb4b458 00007f394eb4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394eb4b498 00007f394eb4b490 00007f394eb4b488 00007f394eb4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000