last executing test programs: 1m2.424235228s ago: executing program 1 (id=2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000240)='./file0\x00', r1, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m2.341615508s ago: executing program 1 (id=7): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000000)=""/101, &(0x7f0000000080)=0x65) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x161082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c"]) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000180)={'netdevsim0\x00', @ifru_ivalue=0x50000000}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 1m2.028789277s ago: executing program 1 (id=13): mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat(r0, &(0x7f0000000080)='./bus\x00', r0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x90) (async) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (async) renameat(r0, &(0x7f0000000080)='./bus\x00', r0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) 1m1.938852359s ago: executing program 1 (id=16): socket(0xa, 0x2, 0x0) (async) r0 = socket(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffeffff, 0x401, 0x2, 0x7, 0x61, 0x6, 0x1}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x78, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0xe84}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000100)=0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000840)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x0, 0xff, 0x1}, 0x1, 0x1}, {0x3, 0x2, {0x0, 0x1, 0x1}, {0x2}, 0xff, 0xfe}], 0x40) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000900030400000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007550700010012800b0001006201000000650000100002800a0014000180c20000030000"], 0x40}}, 0x20008010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000900030400000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007550700010012800b0001006201000000650000100002800a0014000180c20000030000"], 0x40}}, 0x20008010) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) (async) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) (async) r10 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) timerfd_create(0x8, 0x0) (async) r11 = timerfd_create(0x8, 0x0) mmap$xdp(&(0x7f0000d4e000/0x4000)=nil, 0x4000, 0x8, 0x20010, r9, 0x80000000) clock_gettime(0x4, &(0x7f00000000c0)) (async) clock_gettime(0x4, &(0x7f00000000c0)={0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=@migrate={0x154, 0x21, 0x4, 0x70bd2c, 0x25dfdbfd, {{@in=@multicast1, @in=@loopback, 0x4e20, 0xd7b, 0x4e23, 0x3, 0xa, 0xe0, 0x80, 0x3c, r7, r13}, 0x6e6bba, 0x2}, [@algo_crypt={0xc9, 0x2, {{'xts-serpent-sse2\x00'}, 0x408, "7340792af20f82047f7e64b41653951a5df3a9dabe6472494582b496d0ecaf98ae6930046f4244512fde54adbeb0da67b9cb0c95dabd0084eb1eb4446cd09b4f83d44972ce2e18fc5bf1da57d2ddf64acf07bf1533941b5a6fe92678ebc500b4b391737a25266b27060aafe99dc353ffe9ba7dd292c3b9f11164dfc85c960d6a36"}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2d, 0x70bd26, 0x70bd28, 0x70bd27, 0x9, [0x1ff, 0x5, 0x6, 0x3, 0x7, 0x1, 0x101]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) timerfd_settime(r11, 0x0, &(0x7f0000000180)={{}, {r12}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1) 1m0.489128501s ago: executing program 1 (id=55): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x0, 0x3, 0x7468a867, 0x1, 0x9}, 0x0, 0x0, 0xa2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x1, 0x0, 0x200}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) 1m0.422044149s ago: executing program 32 (id=55): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x0, 0x3, 0x7468a867, 0x1, 0x9}, 0x0, 0x0, 0xa2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x1, 0x0, 0x200}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) 18.721619964s ago: executing program 2 (id=745): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}, {@nfs_export_on}]}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvfrom(r0, &(0x7f0000000080)=""/194, 0xc2, 0x2161, &(0x7f0000000200)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x6a, 0x0}, 0x4}, 0x80) 18.657272255s ago: executing program 2 (id=746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b52, &(0x7f0000000000)) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) 15.961409179s ago: executing program 2 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) close(r2) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) io_setup(0xffff7fff, &(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000300)=0x1, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) 15.960249182s ago: executing program 2 (id=796): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x1, {0x2, 0x1, 0x7fffffff, 0x2, 0x0, 0x80000, {0x5, 0x6, 0x2, 0x0, 0x7fffffff, 0x7fffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x4000, 0x8, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000440)='./file0/../file0/file0/file0\x00', 0x0, 0x201491, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4000, 0x10001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) mount$tmpfs(0x0, &(0x7f0000000180)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000773b55025c81ad3f8cec8ec73c6c847ef8ab515bd8931abd678e81caf36e360348bde54fd52371b13250b94cef7f89b58a286b7010ec1c8f8952e84be06fdfa70be6c36aaf33a9711a6671199c55309c221ed80a46fb32e2617bb376e527a3a5d1710ba8484d03e73c1545d9f40be0be9201007e95900806afa170abd2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='./file0/file0/file0\x00', r3}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f00000000c0)=""/102}, 0x20) getpid() r5 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000000c0)='1', 0x1}, {&(0x7f00000001c0)='\v', 0x1}], 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000400)='syscall\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601040000000000000000070000000c00078005000300000000000500010006000000050005000500000005000400000000000900020073797a31000000000d000300686173683a6e657300000000"], 0x54}}, 0x0) 14.63999374s ago: executing program 2 (id=823): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r0, 0x77}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x6c2102, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, 0x0, &(0x7f0000001540)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc4ec}}, 0xb, 0x4000}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={r6, 0x48, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x8, @local, 0x3}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}]}, &(0x7f0000000440)=0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000080)={&(0x7f0000000180)="dad6265513b751d0187aec2de7de4a3de6469b645531b3c0a6d9df8de892f6664456d6e940fd12745a06a3fbdf5fa7d7027c52d651d0c4c563a6e97dcfaa7dd6487c8e4170a4d163d633862e0e3851da6a3aa05b16977810562dde7b9105ab37f5f48d6fc5fd5fc7e644acebfebf3e7a538dcec8c10250c59a84a649fc33fa2a", 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x40800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) 14.229027575s ago: executing program 2 (id=832): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) umount2(&(0x7f0000000040)='./cgroup\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x8a}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x3, 0x0, 0x0, 0x0}) 14.183895513s ago: executing program 33 (id=832): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) umount2(&(0x7f0000000040)='./cgroup\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x8a}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x3, 0x0, 0x0, 0x0}) 7.611025599s ago: executing program 0 (id=934): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = socket$inet6(0xa, 0x800, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x2, 0x401, 0x6, 0x6, 0x28, 0x9, 0x5, 0x5, 0x8, 0x81, 0x8, 0x8539, 0xe8e6, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000140)={{r1, 0x81, 0x8, 0x0, 0x0, 0x8000000000000000, 0x8, 0x8, 0x7, 0x8, 0x9, 0x5, 0x7, 0xc51, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000001380)=[0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000001400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0xe0, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) pipe(&(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)=@generic={&(0x7f0000001680)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @generic={0x8, 0x4, 0x3, 0x0, 0x9}, @alu={0x7, 0x1, 0x3, 0x1, 0x6625ac4fbff24938, 0xc, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x4, 0x6, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffc}]}, &(0x7f00000011c0)='GPL\x00', 0x4, 0x9d, &(0x7f0000001200)=""/157, 0x40f00, 0x57, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0x10, 0x0, 0x4}, 0x10, r2, r3, 0x6, &(0x7f0000001700)=[r4, r5], &(0x7f0000001740)=[{0x4, 0x2, 0x8, 0x3}, {0x4, 0x4, 0x3, 0x5}, {0x3, 0x1, 0xe, 0x9}, {0x1, 0x2, 0xc, 0x9}, {0x2, 0x1, 0x10, 0xa}, {0x1, 0x1, 0x3, 0x6}], 0x10, 0xa92, @void, @value}, 0x94) 7.519594142s ago: executing program 0 (id=935): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffc17, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0xfffffffffffffeac}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x104, 0x4, 0x3f0, 0x220, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="cab170e97230", @multicast1, @remote, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 0x0, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r6], 0x44}}, 0x0) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x84, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) (async) ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, &(0x7f00000000c0)={0x0, 0xbf, ""/191}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', r6, 0x7800, 0x40, 0x5, 0x3, {{0x2a, 0x4, 0x0, 0x17, 0xa8, 0x67, 0x0, 0xff, 0x0, 0x0, @empty, @multicast2, {[@rr={0x7, 0xb, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xa1, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}, @ssrr={0x89, 0x13, 0xfd, [@multicast2, @multicast2, @loopback, @private=0xa010102]}, @rr={0x7, 0x7, 0xfc, [@multicast2]}, @generic={0x89, 0x8, "f923a646f302"}, @ssrr={0x89, 0xf, 0xe0, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0x4a, 0x0, 0x4, [0x2, 0x7f, 0x39c0, 0x40, 0x4]}, @generic={0x94, 0x10, "9b6db6ed82d062762129ef01dffc"}, @generic={0x92, 0x12, "dfa6290e3cf55cf43e09ebcabbfd060b"}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, r10}, 0x14) 7.391317197s ago: executing program 0 (id=936): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000006c0)={0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7acb}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}]}}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xc0, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x61, 0xa9, @random="317d47c7f54208737e98a634388087e3fdd2301c631ccef18304c7d90b7a55b454ab6ab16293cd5c292a8c446630e60c81c45154dc55129342abf4294bd5d5a266007c39b53e31cbd621ac32b88fd128fcf596c01ebf239c98137c9e51"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20044054}, 0x4008011) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x9, 0xc}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000000200)='W', 0x1, 0x17a}) 7.390148213s ago: executing program 0 (id=937): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (async) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x1, [0x6, 0x1, 0x1, 0x451, 0x4, 0x80000000, 0xffffffff, 0xe]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11e, 0x1, &(0x7f00000001c0)=@gcm_256={{0x282}, '\x00', "9bcfa2696eb0288490edef897b0348d78114845f84298bd59d9b655db1ac9aba", '\x00', "c245411efc9da029"}, 0x38) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x11e, 0x1, &(0x7f00000001c0)=@gcm_256={{0x282}, '\x00', "9bcfa2696eb0288490edef897b0348d78114845f84298bd59d9b655db1ac9aba", '\x00', "c245411efc9da029"}, 0x38) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) (async) unshare(0x2c020400) msgget$private(0x0, 0x240) (async) msgget$private(0x0, 0x240) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000002900)=ANY=[@ANYBLOB="000008000105060083009e0006"], 0x11b) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f00000016c0)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f00000016c0)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r5, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x47}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0xffffffffffffffe1, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x60}, 0x1, 0x0, 0x0, 0x80000}, 0x48080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 6.371133475s ago: executing program 0 (id=946): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x3c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d01fa394b387808fd17079cf39"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44151}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@null, @null, @rose, @null, @rose, @bcast]}, &(0x7f0000000040)=0x40, 0x800) 5.999366605s ago: executing program 0 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/135) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 5.920327521s ago: executing program 34 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/135) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 4.761653381s ago: executing program 5 (id=966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r2 = getpgid(0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000000, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) 4.606417324s ago: executing program 5 (id=971): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @mcast2, 0xd}, 0x1c) 4.605292249s ago: executing program 5 (id=973): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) 3.668410029s ago: executing program 5 (id=976): r0 = inotify_init1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x88}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4810) accept4(r1, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@link_local, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "e723a6ca62bc9878"}}}}, 0x0) inotify_init1(0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) listen(r1, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x88}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4810) (async) accept4(r1, 0x0, 0x0, 0x800) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f0000000040)={@link_local, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "e723a6ca62bc9878"}}}}, 0x0) (async) 3.579493826s ago: executing program 5 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000001001baa92d0837b63e92c5f55cb63551453508ce24548c5b30c3d65e820c262e163692341619bf01e28268f5495f944", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25140000000c0007800800020000800000"], 0x20}, 0x1, 0x0, 0x0, 0xa000}, 0x8004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0xbffffffc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a, 0x8000000000003}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0xffffffa4, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0xc, {0x2, 0x4e22, @empty}, 'lo\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="14000000380001002cbd7000ffdbdf2501000080"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r8 = dup3(r5, r4, 0x80000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0xfffffe42, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000200), 0x10) sendmmsg$inet(r10, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x80844) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800cd8d000000e5ff000000020000000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) 3.09138541s ago: executing program 5 (id=982): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}, &(0x7f0000000200)=""/166, 0xa6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5, 0x1}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x7, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0x4, 0x6, 0x1}) 1.071466947s ago: executing program 4 (id=1018): mkdir(&(0x7f0000000180)='./file0\x00', 0x334) unshare(0x20000400) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) getdents64(r0, 0x0, 0x11) 991.003873ms ago: executing program 4 (id=1020): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x7cf0, &(0x7f0000000440)={0x0, 0x15d2, 0x30101, 0x0, 0x188}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0xc}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x8023, 0x0, 0x0, "3a8e00000034b52ba75066c07891ca55e21f0000000000b2b678d200", 0x32344d59}) 931.226993ms ago: executing program 4 (id=1021): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x100, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742b00400001802c0004"], 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='\x00'/10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0xa, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000100000006f907c45e2853a889ad200b2d720001819f611", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000069000000b7000000000000009500000000000000"], &(0x7f0000001880)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80800) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f00000000c0), 0x10) tee(r4, r5, 0x1, 0x1) 930.980851ms ago: executing program 4 (id=1022): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) socket$netlink(0x10, 0x3, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 740.758995ms ago: executing program 3 (id=1024): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) write$vga_arbiter(r0, &(0x7f0000000340)=@target={'target ', {'PCI:', '1c', ':', '1d', ':', '7', '.', 'd'}}, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x40002, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES32=r0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r1}, 0x18) pipe2$9p(0x0, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x0, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) chdir(&(0x7f0000000280)='./file0\x00') truncate(0x0, 0x8fff5) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080) r3 = socket$kcm(0x2d, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x11d, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x120) 681.133022ms ago: executing program 3 (id=1025): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000200)=0x200000000000000a, 0x5, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600080600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000097000/0x4000)=nil}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) 511.220048ms ago: executing program 3 (id=1026): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r4, 0x734cf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f000024e000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r5 = memfd_secret(0x80000) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="666421d4747696bfc0a44bc28f43c5f03d", @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f76653d303030303030303030303030303030303030343030ff0f2c757365725f69643d", @ANYBLOB="6d851b8fee6cd38d9bcc0e", @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, r9, {0x7, 0x29, 0xfffffffe, 0xffffffff85000014, 0x1, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r8, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r10, &(0x7f0000000700)=""/90, 0x5a) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)="07009c78dc56", 0x6}], 0x1) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000280)=@e={0xff, 0xa, 0x3, 0x0, @SEQ_CONTROLLER=0xfe, 0x0, 0x4}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000e, 0x13, r5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r11 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r11, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x107203, 0x0) 510.377617ms ago: executing program 6 (id=1027): r0 = socket$kcm(0x10, 0x2, 0x0) io_setup(0xa, &(0x7f0000000240)=0x0) io_getevents(r1, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000000)={0x0, 0x3938700}) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000110003462b81dde81051d000000fcdbdf", @ANYRES16, @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4042}, 0x40) 507.229843ms ago: executing program 3 (id=1028): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4603240093028000000000000003003e00ecff07ff940200000000000006bbbf21ae6ddcaac01ff35fd46688bc00000000000038000100fdff7f000800030000000400000005000000000000000a000000000000000101000000000000064712fb666aeb5532000000000000007fffffffffffffff0e2df8d84ad69709d48689082f0c4b048732b8ac96ec5717d88dce3fd216375db076f2219ce66b9156908052556401b6b295387a7de49634d6cab71418faa21cbc121d297cca6eb9144568"], 0x78) close(r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000100)) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000000000002004e23e00000020000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca0311a461494d4022e7999a67d817c100"/128], 0x90) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x8000) r5 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000140)=""/129, 0x81, 0x10120, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) r7 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r6) add_key(&(0x7f00000003c0)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="20007f04", 0x4, r7) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x357b, &(0x7f0000000140)={0x0, 0x3108, 0x11022, 0x2, 0x35a}) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) readv(r8, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61) ioctl$EVIOCGABS20(r8, 0x40044591, 0x0) 340.788666ms ago: executing program 4 (id=1029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r3, 0x408, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x6a040000) socket$inet6_icmp(0xa, 0x2, 0x3a) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r2, r1, 0x0) 340.219625ms ago: executing program 3 (id=1030): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r1, @ANYBLOB="28d50000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="b87ecc1aa7e0e30ea007f144d36519db1a6d0766ca763941c56110337dbe679daa0b21b7c918d79493f671fe3baf0153e4b5049d24127ec0267c579d845931ba03b49484a29158a654d8d19744bcdf"], 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 270.28115ms ago: executing program 6 (id=1031): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065cc}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 269.214138ms ago: executing program 4 (id=1032): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x181180, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r4, r2, r3, r1, r1, r4, 0x0, r5], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) ftruncate(r6, 0x3) (async) ftruncate(r6, 0x3) syz_usb_connect(0x3, 0x6c2, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x11, 0x98, 0x6c, 0x20, 0x2040, 0x5500, 0xa6fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b0, 0x3, 0x4, 0x8, 0x30, 0x6, [{{0x9, 0x4, 0x13, 0x3, 0x1, 0x2f, 0xd1, 0xb0, 0x7, [@hid_hid={0x9, 0x21, 0xfff5, 0x8, 0x1, {0x22, 0x597}}], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x81, 0xa}}]}}, {{0x9, 0x4, 0xea, 0x8, 0xa, 0x4a, 0x6e, 0x74, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x2}]}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x401, 0x9, 0x0, "051e8cfa58ff"}]}], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0x8, 0x1, 0x0, [@generic={0x7c, 0x9, "fd1ee4b531a12f8ab2c1fa3430d46c13d0d19fb91dbfc171afe467f652842087b853e9885bb2e6ce293bd297ed560eb82bb73cff0f04f1141d70c833f6db0e442b0bdf530ff3419ac63c063493321b333cb25c963096ce6cbbefbbc249b4e64800f402729fc446d9a047a7ee1b8fa38953b7e229d8ff319797d6"}, @generic={0x29, 0x22, "9c077ae2bbe9a1326fc5b7fbee6a7565c4d63ab869c63cc3cdd06d7266895982fae98e545e1baf"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x7, 0x1, 0x0, [@generic={0xe0, 0xa, "5e4ee9f577110106f97f83e330d82f3fb441cf8ff5873a28d618b643e41eb83af0504a1825be5dc2c712fbf93ff09c0d48a188218cae9d6d57d5d19f5f99358affdb6e5054cb8a3f13a17693f498e493362d85a00c2e9a5af14f62b86cb022747e0c5b299c939b7045fbf6a090b768e24b5e29aaf378f830ea37765b14bbc89a769d5a3bda5df903ff07e576ba9e25ee74731d75b0c7b8313da59bc869cc43f295b5e64c722fac3b51e61c153ab98ece194f1d0bc1b567a74fac72f7be0935aba06168ebb670374240d80336c8cbb5e9498a4a97904a3c1c30b9cb6bfc71"}]}}, {{0x9, 0x5, 0x3, 0x3d177f213556b599, 0x20, 0xc0, 0x4, 0x7}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x61, 0x0, 0x7}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x4, 0xf, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x6e, 0x4, 0x1, [@generic={0x27, 0x4, "d129836e83e34dbdc65ee0be5be65c9e9925f66eefb3c4b0817defeb6478862bc0c67778e9"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x7, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x95, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0x7, 0x6, [@generic={0x6e, 0x7, "ec7c9ba25ad453b2ea3427a20e17834ca0bc87c6e001431f2856fe65dc7fe6c859505d6dea97b5fa2d53ddf044d7f4ce0f5c9192f41ec16fdc5272fc598aa112d517c8f8318f0c26efdd9498526950ad679f5b138d72082e70b3e3208475b2db3a530d6bffa0d2c7081123d6"}, @generic={0x16, 0xe, "51b8a043b9360aa8d21ba3fe3762c8905f281ab9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x6, 0xfb, [@generic={0x75, 0xd, "ccfe04e4d745fdb9ef9bd94ed2fbc2bc2d9fae229cd44b3122b3c8e0ea80f0ef9ac34e1bf82e6998bd74bd39da6e4d031f1e124ec790539fabc93e096382d0c28d4bb181afa2fedf9b88708db2cca3a534ab8559a8caf485c01e79f50cdd1b0f1dde7a95d9b447518ca45e9d4a7b7e64bf3ed1"}, @generic={0x22, 0x22, "e34078de2a052f0e8ad27ed0624dee1a5081d685ddd8c24b4847d31e6f94dbf7"}]}}]}}, {{0x9, 0x4, 0x2f, 0x6, 0xd, 0x18, 0x9f, 0xa2, 0xa3, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2e, 0x4, 0x5, 0x5, '^', "1879"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b396"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x18cd, 0x7376, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x4, 0xfd, 0xec, 0x1000, 0xb}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xdc}]}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xab, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0x0, 0x1, 0x240, 0xe, 0x9, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x74, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xfff}, @generic={0xde, 0x22, "a7faff10702389e781e38ef8278ff026653a5ba940825398b60ba340b4faa513538fa6f569cf665ffbc3f3bbd7eb38ff05d7e34760497ad043a2d0750085895ac3115ed17c6bfc06d411dbfab86261ebd65af48786742f2daaa4e750d6474c228b3a9e5b2da851ce55e733a9b4db2558edeeb9b48433a22e586e141987089d8b27fd0c5c283d2ae759b369e34e2c4670c8d5d742036842fe64d4ad9443a858d6f65d55d93faa86cf605aabc5bb9feb340e82749832f7f8cb02871b344274e47927b7a179f20ea2a56f591ccae541bc58e1e48b7197887ee3c1048729"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x5e96cb58c9a36a3c, 0x6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2d}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0xe3, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0xfb, 0xa9}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x4, 0x4, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0xf, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x1, 0x71, 0x6}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x2, 0x33, 0x2, [@generic={0x100, 0x2b, "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"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x2, 0x4, 0x9e, [@generic={0x7d, 0x4, "bbefbb9298bd1a0762e2cee565b33500ba7835670794b5fbe0b8f0b3324d79009d366ee83e471840c418fe7dcd59d721c2feedf3445ec199c1d61e685c2963a3d934ffd64ba11653f1e414d537719df5f2beb0bd7b1a08c7d882fa6199c61a202b04f7286ab5a2cd4afe23febdd71c28ae85418d302d37140aa231"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x0, 0xf, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x50, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xdd76}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x6}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x9, 0x0, 0x3, 0xff, 0xe}, 0x10, &(0x7f0000000940)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x7f, 0x1, 0x1000, 0x20}]}, 0xa, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x446}}, {0xf2, &(0x7f00000009c0)=@string={0xf2, 0x3, "be1cc374e6faf5ae1fe22cc2f8aadd805170bada0f64f486288594bc7cd812481c4d9f5dc418f2d740d9b929d766857d5031600d466de5629c9bea807721977808a779430eab82285cb0dc9ac76e4be9e44d4e4b976058aa4d5e6e54f760900c7bf0de1818faa17a2bb6d5f10b08e8a6153e11b9e9bd8bca7bd101744604524d24bcf1a2b57257525b55365cfeccb6fd513eda645b91d47947339524c4700656c54b12c0976cf7708301130c311c1340892b89ea1c0cdad9b4a4d27a9ae9bc611691b4cf0a27ab089beae5787332ce7f7d9ec2efbc06f4e723d29d76a413b445803c58ff0275e633bddb3fbc9897b0ff"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x843}}, {0x66, &(0x7f0000000b80)=@string={0x66, 0x3, "3c7012a7be9bff0067f1add7550ca414fd1002b11227acdfdd3bcaa622e1a31af066e07648eec95112e552bb879c0b30339b58d737f6303ea7404e1f5352a42e7e2473ba53dda1853b523ca7508eb0c1d51a41c5b2d2390c40dba2fd0bc7b1691f82cf58"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42a}}, {0xe5, &(0x7f0000000c40)=@string={0xe5, 0x3, "9c6ec42adad3afe32511549a809ee917f4a0d51d03806d6d01adf048b9e85c4a400bb1e353f32b0ec05775e9af7c3e1f3c9e1e8ea0f5aec70f1cb52fb1819cc3e3e75b1eedd28957ec7bfbbd0051535262ef8b921e10abc5a73bb99f6d6418b036d6c8db3ae016815f3ebaf0f50bcef7318f604f4617ab3280c5552ad7d1817a2bde94d7edd729c769611257b861a12ea942dbb1e46646b818114c00d78ff0cff9345fac592faaca01a515a2dd27532fc65db8281cbb3489ac43af2a754fd307ef884b1ab7244e50941d914733dc52700caa6f41eee202591138530353e007a9a0f61d"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x80c}}, {0x82, &(0x7f0000000d80)=@string={0x82, 0x3, "4a845fe0b84703be5cafba5db0967c0c6fbc3791a5168cd5a7000697fed7ddab1f75a5dd487e53b23a35617542b4a8c70bcf79913cbf9e7aa205e60955698cc894de729dbb8d7e1b6177f8a4a4c43547dd97ca8afc8de397563ed38a0c9347ca7c3d3d0e9e3010f9da71fe01ba0d76ea0edf1dddc08c076514fe13ccf8ab4223"}}]}) (async) r7 = syz_usb_connect(0x3, 0x6c2, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x11, 0x98, 0x6c, 0x20, 0x2040, 0x5500, 0xa6fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b0, 0x3, 0x4, 0x8, 0x30, 0x6, [{{0x9, 0x4, 0x13, 0x3, 0x1, 0x2f, 0xd1, 0xb0, 0x7, [@hid_hid={0x9, 0x21, 0xfff5, 0x8, 0x1, {0x22, 0x597}}], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x81, 0xa}}]}}, {{0x9, 0x4, 0xea, 0x8, 0xa, 0x4a, 0x6e, 0x74, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x2}]}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x401, 0x9, 0x0, "051e8cfa58ff"}]}], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0x8, 0x1, 0x0, [@generic={0x7c, 0x9, "fd1ee4b531a12f8ab2c1fa3430d46c13d0d19fb91dbfc171afe467f652842087b853e9885bb2e6ce293bd297ed560eb82bb73cff0f04f1141d70c833f6db0e442b0bdf530ff3419ac63c063493321b333cb25c963096ce6cbbefbbc249b4e64800f402729fc446d9a047a7ee1b8fa38953b7e229d8ff319797d6"}, @generic={0x29, 0x22, "9c077ae2bbe9a1326fc5b7fbee6a7565c4d63ab869c63cc3cdd06d7266895982fae98e545e1baf"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x7, 0x1, 0x0, [@generic={0xe0, 0xa, "5e4ee9f577110106f97f83e330d82f3fb441cf8ff5873a28d618b643e41eb83af0504a1825be5dc2c712fbf93ff09c0d48a188218cae9d6d57d5d19f5f99358affdb6e5054cb8a3f13a17693f498e493362d85a00c2e9a5af14f62b86cb022747e0c5b299c939b7045fbf6a090b768e24b5e29aaf378f830ea37765b14bbc89a769d5a3bda5df903ff07e576ba9e25ee74731d75b0c7b8313da59bc869cc43f295b5e64c722fac3b51e61c153ab98ece194f1d0bc1b567a74fac72f7be0935aba06168ebb670374240d80336c8cbb5e9498a4a97904a3c1c30b9cb6bfc71"}]}}, {{0x9, 0x5, 0x3, 0x3d177f213556b599, 0x20, 0xc0, 0x4, 0x7}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x61, 0x0, 0x7}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x4, 0xf, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x6e, 0x4, 0x1, [@generic={0x27, 0x4, "d129836e83e34dbdc65ee0be5be65c9e9925f66eefb3c4b0817defeb6478862bc0c67778e9"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x7, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x95, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0x7, 0x6, [@generic={0x6e, 0x7, "ec7c9ba25ad453b2ea3427a20e17834ca0bc87c6e001431f2856fe65dc7fe6c859505d6dea97b5fa2d53ddf044d7f4ce0f5c9192f41ec16fdc5272fc598aa112d517c8f8318f0c26efdd9498526950ad679f5b138d72082e70b3e3208475b2db3a530d6bffa0d2c7081123d6"}, @generic={0x16, 0xe, "51b8a043b9360aa8d21ba3fe3762c8905f281ab9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x6, 0xfb, [@generic={0x75, 0xd, "ccfe04e4d745fdb9ef9bd94ed2fbc2bc2d9fae229cd44b3122b3c8e0ea80f0ef9ac34e1bf82e6998bd74bd39da6e4d031f1e124ec790539fabc93e096382d0c28d4bb181afa2fedf9b88708db2cca3a534ab8559a8caf485c01e79f50cdd1b0f1dde7a95d9b447518ca45e9d4a7b7e64bf3ed1"}, @generic={0x22, 0x22, "e34078de2a052f0e8ad27ed0624dee1a5081d685ddd8c24b4847d31e6f94dbf7"}]}}]}}, {{0x9, 0x4, 0x2f, 0x6, 0xd, 0x18, 0x9f, 0xa2, 0xa3, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2e, 0x4, 0x5, 0x5, '^', "1879"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b396"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x18cd, 0x7376, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x4, 0xfd, 0xec, 0x1000, 0xb}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xdc}]}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xab, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0x0, 0x1, 0x240, 0xe, 0x9, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x74, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xfff}, @generic={0xde, 0x22, "a7faff10702389e781e38ef8278ff026653a5ba940825398b60ba340b4faa513538fa6f569cf665ffbc3f3bbd7eb38ff05d7e34760497ad043a2d0750085895ac3115ed17c6bfc06d411dbfab86261ebd65af48786742f2daaa4e750d6474c228b3a9e5b2da851ce55e733a9b4db2558edeeb9b48433a22e586e141987089d8b27fd0c5c283d2ae759b369e34e2c4670c8d5d742036842fe64d4ad9443a858d6f65d55d93faa86cf605aabc5bb9feb340e82749832f7f8cb02871b344274e47927b7a179f20ea2a56f591ccae541bc58e1e48b7197887ee3c1048729"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x5e96cb58c9a36a3c, 0x6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2d}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0xe3, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0xfb, 0xa9}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x4, 0x4, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0xf, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x1, 0x71, 0x6}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x2, 0x33, 0x2, [@generic={0x100, 0x2b, "87228a0006d2c1119d07054a4070999b0d5a78e93fe723aa0c098f3bdee3d4a60eb37ac81c5fa7786c1fbebc3982777882012c7459cdf088229e0b6f2ab368c8a63408b18805dfb5356586dfdd45a29f510b4cd61f11b4c8948efc7d13c9b17bd8f1acd5b326be7ee5a194c90d8a010509dcda7faeb38cc44eb3c6e9561f496c8044d7568414f5229424bc4f96ccc62122663d9919dac30eac4d2a761caed118ee24ce9ff10448f43e1b991df850f6d2c8573a0315fbf276f8cd09b3f21f83a710b77a76ee9c3068d26a365d90ece539e5fef212a0321daa8aa5f4c23b2cabe2507bf8143d8cb6f6c4028ae15e890992e480d8861057cc350d716de408c1"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x2, 0x4, 0x9e, [@generic={0x7d, 0x4, "bbefbb9298bd1a0762e2cee565b33500ba7835670794b5fbe0b8f0b3324d79009d366ee83e471840c418fe7dcd59d721c2feedf3445ec199c1d61e685c2963a3d934ffd64ba11653f1e414d537719df5f2beb0bd7b1a08c7d882fa6199c61a202b04f7286ab5a2cd4afe23febdd71c28ae85418d302d37140aa231"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x0, 0xf, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x50, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xdd76}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x6}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x9, 0x0, 0x3, 0xff, 0xe}, 0x10, &(0x7f0000000940)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x7f, 0x1, 0x1000, 0x20}]}, 0xa, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x446}}, {0xf2, &(0x7f00000009c0)=@string={0xf2, 0x3, "be1cc374e6faf5ae1fe22cc2f8aadd805170bada0f64f486288594bc7cd812481c4d9f5dc418f2d740d9b929d766857d5031600d466de5629c9bea807721977808a779430eab82285cb0dc9ac76e4be9e44d4e4b976058aa4d5e6e54f760900c7bf0de1818faa17a2bb6d5f10b08e8a6153e11b9e9bd8bca7bd101744604524d24bcf1a2b57257525b55365cfeccb6fd513eda645b91d47947339524c4700656c54b12c0976cf7708301130c311c1340892b89ea1c0cdad9b4a4d27a9ae9bc611691b4cf0a27ab089beae5787332ce7f7d9ec2efbc06f4e723d29d76a413b445803c58ff0275e633bddb3fbc9897b0ff"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x843}}, {0x66, &(0x7f0000000b80)=@string={0x66, 0x3, "3c7012a7be9bff0067f1add7550ca414fd1002b11227acdfdd3bcaa622e1a31af066e07648eec95112e552bb879c0b30339b58d737f6303ea7404e1f5352a42e7e2473ba53dda1853b523ca7508eb0c1d51a41c5b2d2390c40dba2fd0bc7b1691f82cf58"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42a}}, {0xe5, &(0x7f0000000c40)=@string={0xe5, 0x3, "9c6ec42adad3afe32511549a809ee917f4a0d51d03806d6d01adf048b9e85c4a400bb1e353f32b0ec05775e9af7c3e1f3c9e1e8ea0f5aec70f1cb52fb1819cc3e3e75b1eedd28957ec7bfbbd0051535262ef8b921e10abc5a73bb99f6d6418b036d6c8db3ae016815f3ebaf0f50bcef7318f604f4617ab3280c5552ad7d1817a2bde94d7edd729c769611257b861a12ea942dbb1e46646b818114c00d78ff0cff9345fac592faaca01a515a2dd27532fc65db8281cbb3489ac43af2a754fd307ef884b1ab7244e50941d914733dc52700caa6f41eee202591138530353e007a9a0f61d"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x80c}}, {0x82, &(0x7f0000000d80)=@string={0x82, 0x3, "4a845fe0b84703be5cafba5db0967c0c6fbc3791a5168cd5a7000697fed7ddab1f75a5dd487e53b23a35617542b4a8c70bcf79913cbf9e7aa205e60955698cc894de729dbb8d7e1b6177f8a4a4c43547dd97ca8afc8de397563ed38a0c9347ca7c3d3d0e9e3010f9da71fe01ba0d76ea0edf1dddc08c076514fe13ccf8ab4223"}}]}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f40), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000010) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000010) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000001080)={r4, 0x0, r5, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001100)={&(0x7f00000010c0)=[r9], 0x1, 0x0, 0x0, 0xffffffffffffffff}) syz_usb_disconnect(r7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000001140)={r10, 0x1, 0x1000, 0xfffff000}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x27, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xff, 0xa, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x250, 0x80, 0x1, 0x9, 0x8, 0xc8}, 0x7c, &(0x7f0000001200)={0x5, 0xf, 0x7c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x0, 0x10}, @generic={0x70, 0x10, 0xa, "fb516cce56bfedf9bd3a99ff258db3177f3d209da68c659f13f8b82940adcb3317a4341d95b1eac3fa18822402b8a3f4b12fa518410fa40c306cce8f406851f36b984ef78a049fd8366cd4e13f9cff10cb6869c4ae3fb930d75d63e62a04d15c68ede2e79eb93f3df6f5818b2b"}]}, 0x1, [{0xc1, &(0x7f0000001280)=@string={0xc1, 0x3, "4401b72f7b94bcb29a3eaf79b81e006da17a287ce0b53642f39b55db3f12c9b8cf74ef2a3b643d1deafa4160a521dad2bd8d66c56f2ffd76dec754df73e171102677fc7445ac2c20f86cd3d557c5377e11343d57957f9d9fa892d20ace71349ac48b800302d89a6dac81f4fd7c96c08d43c51724dc9f7976676f563e1f18ecfe89e4e59490435161af45894ffd2a2852b3f21e7e4c739a89e23056103aca3f29fe67830805e3ed9038c0f4768244ff454b166c47a04b77839079fdad1b236e"}}]}) (async) r11 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x27, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xff, 0xa, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x250, 0x80, 0x1, 0x9, 0x8, 0xc8}, 0x7c, &(0x7f0000001200)={0x5, 0xf, 0x7c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x0, 0x10}, @generic={0x70, 0x10, 0xa, "fb516cce56bfedf9bd3a99ff258db3177f3d209da68c659f13f8b82940adcb3317a4341d95b1eac3fa18822402b8a3f4b12fa518410fa40c306cce8f406851f36b984ef78a049fd8366cd4e13f9cff10cb6869c4ae3fb930d75d63e62a04d15c68ede2e79eb93f3df6f5818b2b"}]}, 0x1, [{0xc1, &(0x7f0000001280)=@string={0xc1, 0x3, "4401b72f7b94bcb29a3eaf79b81e006da17a287ce0b53642f39b55db3f12c9b8cf74ef2a3b643d1deafa4160a521dad2bd8d66c56f2ffd76dec754df73e171102677fc7445ac2c20f86cd3d557c5377e11343d57957f9d9fa892d20ace71349ac48b800302d89a6dac81f4fd7c96c08d43c51724dc9f7976676f563e1f18ecfe89e4e59490435161af45894ffd2a2852b3f21e7e4c739a89e23056103aca3f29fe67830805e3ed9038c0f4768244ff454b166c47a04b77839079fdad1b236e"}}]}) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001400)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@multicast1}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001500)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001400)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001500)=0xe8) chown(&(0x7f00000013c0)='./file0\x00', r12, 0xffffffffffffffff) (async) chown(&(0x7f00000013c0)='./file0\x00', r12, 0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0xd4, &(0x7f0000001540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x8, 0x60, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffab, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x6, 0x2, [0x1, 0xb], 0x8}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x2, 0xc7, "402fc2"}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0x8, 0x6, 0x9, 0x5], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x80, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xed, 0x3, 0x46, 0xb, "7d33c3", "7319"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa, 0x1, 0x0, 0x7, '*', "b7215b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x24, 0xd0, {0x7, 0x25, 0x1, 0x3, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4, 0xf9, "0d3feba4bd7e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0xe, 0x7f, "94b1ea412edde7f707"}]}, {{0x9, 0x5, 0x82, 0x9, 0x28, 0xc, 0x54, 0x2, {0x7, 0x25, 0x1, 0x81, 0x8, 0xf}}}}}}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x310, 0x8, 0x0, 0x5, 0xff, 0x95}, 0x14a, &(0x7f0000001680)={0x5, 0xf, 0x14a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x1, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "786a59bcce7d66e09ef7082792a182a8"}, @generic={0xf7, 0x10, 0xb, "4853e118edb71d4820824327e80ecc0caedfeb88a1fd1c21d9540a1e108d746e975d1ba4dd7ceaf40b9e1afa1245917d15cc737082a0f7d00783b99e407891ec6d57b9ad06877c72f5cee6d475c130b0e0a47c2ac9af7268c0034dde021c66320f2d63af5788b4a2e96c7ef13857b85eef9ebf102ca8ab7a2bad6504a844d264c07c142a8749ab7fa9d973fb51355e03dacff713ebb398161f9514f0746be88889081c739b02dbde3c21af63bb0f4ac66581ab1f9860c25810965d875602e8a58f9b794397387e4cece568acab136f9f066aa2d70c1d71c5d4027468146ecc58b62decf451702fb1030514020b7099ec6b5b5f09"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xad, 0xb, 0x9, 0xf8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c50f80c8800e5bd5decf19944e799b43"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "50a2d334c93875b5fcb2d8f7e56f2c43"}]}, 0x1, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x2c09}}]}) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x1, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xfffffffd}}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000001980)={0xaa, 0x2e}) pause() socket$inet_mptcp(0x2, 0x1, 0x106) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) move_mount(r6, &(0x7f00000019c0)='./file0\x00', r10, &(0x7f0000001a00)='./file0\x00', 0x320) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000001a40)=0x6) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000001a40)=0x6) syz_usb_ep_read(r11, 0x9, 0x0, &(0x7f0000001a80)) unlink(&(0x7f0000001ac0)='./file0\x00') bind$bt_hci(r10, &(0x7f0000001b00)={0x1f, 0x4, 0x1}, 0x6) fanotify_mark(r6, 0x2, 0x40001033, r10, &(0x7f0000001b40)='./file0\x00') (async) fanotify_mark(r6, 0x2, 0x40001033, r10, &(0x7f0000001b40)='./file0\x00') setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, &(0x7f0000001b80)='batadv\x00', 0x7) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) getpeername(r10, &(0x7f0000001bc0)=@sco={0x1f, @none}, &(0x7f0000001c40)=0x80) write(r13, &(0x7f0000001c80)="87822d788b8d17db575218905b6baaf2a5cc2fdcd6259b96d5565b71743f051799aa96d15b9b30ec8f4ae3d8eb300aefbf650eab9f832e660ea10918558f84c60bf0e1e85e5b834f34aeb04b93b6720c54d90b6d201d88d7def2b7380667423014b68510f7a44e5093abc56c71067e1f7feeffaad5b894a0e27995b7236987165e4799914761eb2f1edecfd9b977d9dfd24e94d36dcb654503d1785cdeb5835e34c7d8247a857b596e7c12d0fa1c549abb3fca417753", 0xb6) 268.493954ms ago: executing program 6 (id=1033): socket$netlink(0x10, 0x3, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = getpgid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08050000", @ANYRES16=r4, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x4000843}, 0x0) (async) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x0, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026cb8500ffb9df25db0100000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0xc7}, 0x20000040) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002abd7000ffdbdf25270000000a0001007770616e3100000006000600000000000c0005000203aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x100008d1) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000100)={0x30}, 0x30) (async) close_range(r0, r0, 0x0) (async) fcntl$setown(r0, 0x8, r1) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) mmap(&(0x7f0000a2d000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800b79188f2000002000000000000000100000500"/54], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@limit={{0x48}, {0x48000000, 0x180}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00'}) 190.862409ms ago: executing program 6 (id=1034): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x80000000}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1004, 0x0, 0x5e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x52, @empty, @mcast1, 0x0, 0x8000, 0x101}}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000400)={r7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x86, 0xfff, 0x802}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) 190.323863ms ago: executing program 6 (id=1035): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x7, 0x4, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @loopback, 0x10, 0x1, 0x5, 0x10000}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x840) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r8}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2fd60012002890"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x4000855) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0xa7, 0x8, 0x6, 0x780, {{0x14, 0x4, 0x2, 0x38, 0x50, 0x67, 0x0, 0xf, 0x29, 0x0, @loopback, @loopback, {[@generic={0x82, 0x3, 'x'}, @lsrr={0x83, 0x27, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x10, "c2061d0b856afa0ddc0ef8e4940e"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x2d, 0x9, 0x7, 0xe1, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x1, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x90, 0x700, 0x0, 0x4, {{0x1f, 0x4, 0x1, 0x5, 0x7c, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0xf, 0x11, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x8, 0xdf, 0x0, 0x2, [0xfff]}, @end, @timestamp_prespec={0x44, 0x3c, 0x47, 0x3, 0x1, [{@broadcast, 0x200}, {@multicast2, 0x1ae}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x4}, {@rand_addr=0x64010100, 0x4}, {@empty, 0x2}, {@broadcast}]}, @timestamp_prespec={0x44, 0x14, 0xc3, 0x3, 0x7, [{@rand_addr=0x64010100, 0xe21}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x10000}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@initdev, 0x0}, &(0x7f0000000600)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x6, 0xc, 0xff, 0x4, 0xf, @remote, @private0, 0x40, 0x40, 0x800, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x2, 0x7f, 0x37, @remote, @local, 0x8, 0x7800, 0x4, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4101000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1cc, 0x0, 0xb1a, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xb, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r18 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r18, 0x28, 0x6, 0x0, &(0x7f0000000000)) r19 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r19, 0x541b, &(0x7f0000000300)) 111.313336ms ago: executing program 3 (id=1036): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x4b46, &(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000140)=0x1c, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32=r4, @ANYBLOB="00400000e09e01001c00128009000100626f6e64000000000c000280080003"], 0x3c}, 0x1, 0x0, 0x0, 0x64088800}, 0x24000044) 44.116215ms ago: executing program 35 (id=1036): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x4b46, &(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000140)=0x1c, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32=r4, @ANYBLOB="00400000e09e01001c00128009000100626f6e64000000000c000280080003"], 0x3c}, 0x1, 0x0, 0x0, 0x64088800}, 0x24000044) 0s ago: executing program 6 (id=1038): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4008010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x934a000, 0x4) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000dc0)=""/265, 0x109}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000380)=""/11}, {&(0x7f0000000500)=""/48}, {&(0x7f0000000540)=""/30}, {&(0x7f0000000600)=""/186}, {&(0x7f0000000700)=""/219}], 0x2}, 0x40001}], 0x40000d0, 0x20, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000080)) accept4(r0, 0x0, 0x0, 0x80800) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socket$kcm(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 0s ago: executing program 5 (id=1039): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000010480)=""/4084, 0xff4}], 0x1, 0xe, 0xfffffffc) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x8000, @none, 0x7}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000140)=0x2, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x3, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d00"/20, @ANYRES32=r1, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 46964206.188:289): avc: denied { create } for pid=6486 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.237879][ T40] audit: type=1400 audit(1746964206.198:290): avc: denied { getopt } for pid=6486 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.386380][ T40] audit: type=1400 audit(1746964206.348:291): avc: denied { map } for pid=6491 comm="syz.0.114" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.426074][ T58] usb 8-1: USB disconnect, device number 2 [ 56.480298][ T40] audit: type=1400 audit(1746964206.438:292): avc: denied { mount } for pid=6498 comm="syz.4.116" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 56.584488][ T6522] warning: `syz.3.121' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.630764][ T6530] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 56.634161][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.637341][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.643634][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.646114][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.648616][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.650799][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.657436][ T6530] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 56.793020][ T6553] ptrace attach of "/syz-executor exec"[5930] was attempted by "/syz-executor exec"[6553] [ 57.032145][ T6575] __nla_validate_parse: 7 callbacks suppressed [ 57.032155][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.137'. [ 57.053320][ T6584] xt_l2tp: v2 doesn't support IP mode [ 57.190169][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 57.344330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.356173][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 57.507894][ T6617] sg_write: process 108 (syz.2.148) changed security contexts after opening file descriptor, this is not allowed. [ 57.514133][ T68] Bluetooth: hci2: command tx timeout [ 57.754401][ T5991] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.884133][ T5991] usb 5-1: device descriptor read/64, error -71 [ 58.014705][ T5973] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.073270][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 58.134100][ T5991] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.194108][ T5973] usb 7-1: Using ep0 maxpacket: 8 [ 58.197210][ T5973] usb 7-1: config 2 interface 0 has no altsetting 0 [ 58.201079][ T5973] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 58.203982][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.206765][ T5973] usb 7-1: Product: syz [ 58.208059][ T5973] usb 7-1: Manufacturer: syz [ 58.209566][ T5973] usb 7-1: SerialNumber: syz [ 58.274145][ T5991] usb 5-1: device descriptor read/64, error -71 [ 58.384228][ T5991] usb usb5-port1: attempt power cycle [ 58.432534][ T5973] usb 7-1: USB disconnect, device number 3 [ 58.744144][ T5991] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.775780][ T5991] usb 5-1: device descriptor read/8, error -71 [ 58.925918][ T6701] syz.4.172: attempt to access beyond end of device [ 58.925918][ T6701] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 58.930979][ T6701] EXT4-fs (nbd4): unable to read superblock [ 58.953597][ T6710] xt_hashlimit: size too large, truncated to 1048576 [ 58.955801][ T1148] Bluetooth: hci4: Frame reassembly failed (-84) [ 59.014115][ T5991] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.034675][ T5991] usb 5-1: device descriptor read/8, error -71 [ 59.145176][ T5991] usb usb5-port1: unable to enumerate USB device [ 59.419704][ T6733] xt_hashlimit: size too large, truncated to 1048576 [ 59.594257][ T5944] Bluetooth: hci2: command tx timeout [ 59.650581][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 59.653378][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 59.769247][ T6748] netlink: 'syz.2.187': attribute type 4 has an invalid length. [ 59.779398][ T6750] netlink: 'syz.4.188': attribute type 10 has an invalid length. [ 59.782206][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.784701][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.791926][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.794229][ T6750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.795349][ T6752] netlink: 596 bytes leftover after parsing attributes in process `syz.2.189'. [ 59.796636][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.796699][ T6750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.798383][ T6750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 59.845763][ T6760] overlayfs: failed to resolve './bus': -2 [ 59.968416][ T6773] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 60.047752][ T6776] netlink: 'syz.2.195': attribute type 16 has an invalid length. [ 60.050943][ T6776] netlink: 'syz.2.195': attribute type 17 has an invalid length. [ 60.060643][ T6776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.598100][ T6785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6785 comm=syz.0.198 [ 60.881972][ T6795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6795 comm=syz.0.200 [ 60.954123][ T68] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.027327][ T6803] mac80211_hwsim hwsim7 `4,rootmode=: renamed from wlan1 (while UP) [ 61.071450][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 61.071460][ T40] audit: type=1400 audit(1746964211.028:389): avc: denied { read } for pid=5329 comm="acpid" name="event5" dev="devtmpfs" ino=2863 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 61.080441][ T40] audit: type=1400 audit(1746964211.028:390): avc: denied { open } for pid=5329 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2863 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 61.098305][ T40] audit: type=1400 audit(1746964211.028:391): avc: denied { ioctl } for pid=5329 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2863 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 61.106440][ T6813] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 61.108705][ T6813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.111232][ T40] audit: type=1400 audit(1746964211.058:392): avc: denied { create } for pid=6812 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.112751][ T6813] vhci_hcd vhci_hcd.0: Device attached [ 61.120572][ T40] audit: type=1400 audit(1746964211.058:393): avc: denied { ioctl } for pid=6812 comm="syz.4.207" path="socket:[12114]" dev="sockfs" ino=12114 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.125378][ T6814] vhci_hcd: cannot find the pending unlink 4096 [ 61.130431][ T6814] vhci_hcd: connection closed [ 61.131951][ T1148] vhci_hcd: stop threads [ 61.137674][ T1148] vhci_hcd: release socket [ 61.141688][ T1148] vhci_hcd: disconnect device [ 61.262403][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 61.316541][ T6826] hsr_slave_1 (unregistering): left promiscuous mode [ 61.393014][ T6828] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 61.393014][ T6828] program syz.0.212 not setting count and/or reply_len properly [ 61.399966][ T6828] xt_hashlimit: overflow, try lower: 0/0 [ 61.423295][ T6830] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.430048][ T40] audit: type=1400 audit(1746964211.388:394): avc: denied { write } for pid=6829 comm="syz.0.213" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.440138][ T40] audit: type=1400 audit(1746964211.388:395): avc: denied { getopt } for pid=6829 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.449802][ T40] audit: type=1400 audit(1746964211.388:396): avc: denied { create } for pid=6829 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.457843][ T40] audit: type=1400 audit(1746964211.388:397): avc: denied { setopt } for pid=6829 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.740506][ T40] audit: type=1400 audit(1746964211.698:398): avc: denied { create } for pid=6853 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.781993][ T6865] process 'syz.0.222' launched './file2' with NULL argv: empty string added [ 61.802063][ T6803] orangefs_mount: mount request failed with -4 [ 61.926638][ T6877] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 62.160240][ T6911] capability: warning: `syz.0.236' uses deprecated v2 capabilities in a way that may be insecure [ 62.242796][ T6919] netlink: 'syz.2.240': attribute type 21 has an invalid length. [ 62.246271][ T6919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.240'. [ 62.357394][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 62.436848][ T6933] team0 (unregistering): Port device team_slave_0 removed [ 62.443105][ T6933] team0 (unregistering): Port device team_slave_1 removed [ 62.497155][ T6950] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.499804][ T6950] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 62.502359][ T6950] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.505212][ T6950] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 62.544126][ T66] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.695148][ T66] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 62.699221][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.701125][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 62.702055][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.702070][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.712308][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.717075][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.718565][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 62.720567][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.728164][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.732102][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.735710][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.738670][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.741534][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.745220][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.748321][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.751166][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.754691][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.757597][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.760441][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.763962][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.767948][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.770831][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.781746][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.786626][ T66] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.789769][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.793128][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.798926][ T66] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 62.801802][ T66] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 62.804498][ T66] usb 7-1: Product: syz [ 62.805787][ T66] usb 7-1: Manufacturer: syz [ 62.807288][ T66] usb 7-1: SerialNumber: syz [ 62.810587][ T66] usb 7-1: config 0 descriptor?? [ 62.817664][ T66] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 63.013770][ T66] usb 7-1: USB disconnect, device number 4 [ 63.017736][ T66] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 63.120828][ T6988] vivid-007: ================= START STATUS ================= [ 63.121128][ T2073] IPVS: starting estimator thread 0... [ 63.123413][ T6988] vivid-007: Enable Output Cropping: true [ 63.123438][ T6988] vivid-007: Enable Output Composing: true [ 63.129746][ T6988] vivid-007: Enable Output Scaler: true [ 63.131516][ T6988] vivid-007: Tx RGB Quantization Range: Automatic [ 63.133536][ T6988] vivid-007: Transmit Mode: HDMI [ 63.136454][ T6988] vivid-007: Hotplug Present: 0x00000000 [ 63.138767][ T6988] vivid-007: RxSense Present: 0x00000000 [ 63.141013][ T6988] vivid-007: EDID Present: 0x00000000 [ 63.143170][ T6988] vivid-007: ================== END STATUS ================== [ 63.188195][ T58] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 63.223476][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 63.226549][ T6990] IPVS: using max 46 ests per chain, 110400 per kthread [ 63.346538][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.349852][ T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.352726][ T58] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 63.356189][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.360125][ T58] usb 5-1: config 0 descriptor?? [ 63.364642][ T58] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 63.367378][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 63.374546][ T58] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 63.379290][ T58] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 63.379676][ T6998] Unsupported ieee802154 address type: 0 [ 63.382136][ T58] usb 5-1: media controller created [ 63.385529][ T6998] netlink: zone id is out of range [ 63.387714][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 63.395688][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 63.400561][ T58] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 63.406630][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input5 [ 63.420755][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 63.423406][ T58] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 63.567245][ T6100] usb 5-1: USB disconnect, device number 6 [ 63.642857][ T6100] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 63.704731][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 63.751781][ T7021] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 63.762426][ T7021] veth0_vlan: left promiscuous mode [ 63.769749][ T7021] veth0_vlan: entered promiscuous mode [ 63.774189][ T7021] team0: Device veth0_vlan failed to register rx_handler [ 64.053448][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 64.236228][ T7064] netlink: 11 bytes leftover after parsing attributes in process `syz.2.278'. [ 64.241858][ T7064] tmpfs: Unknown parameter 'm' [ 64.275443][ T7068] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 64.459929][ T7072] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !fIZE,= [ 64.539650][ T7080] [U] zͻi[27| [ 64.541620][ T7080] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 64.547246][ T7080] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 64.552923][ T7082] raw_sendmsg: syz.2.285 forgot to set AF_INET. Fix it! [ 64.560562][ T7080] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 64.572086][ T7080] [U] 8)X)YvxRĻbmbN@ox;JD, [ 64.577056][ T7080] [U] *Cn3v7KEXgt_3 [ 64.578700][ T7080] [U] D/QazҬEHgE1$_ks=R@ [ 64.580502][ T7080] [U] ϼcEv @ [ 64.581718][ T7080] [U] a% [ 64.582917][ T7080] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 64.588872][ T7085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.286'. [ 64.589288][ T7080] [U] f1p3 [ 64.593885][ T7080] [U] N0[L;a_l&kMC [ 64.595678][ T7080] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 64.605833][ T7080] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 rejected, failed to enable media [ 70.974152][ T5991] usb 44-1: SetAddress Request (2) to port 0 [ 70.976325][ T5991] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.117556][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.120282][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.184115][ T65] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 71.206548][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.208950][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.211667][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.214815][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.334119][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 71.348276][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.354693][ T65] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 71.357220][ T65] usb 5-1: can't read configurations, error -71 [ 71.429490][ T7504] vhci_hcd: connection reset by peer [ 71.434749][ T6370] vhci_hcd: stop threads [ 71.436528][ T6370] vhci_hcd: release socket [ 71.439376][ T6370] vhci_hcd: disconnect device [ 71.974584][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 71.974595][ T40] audit: type=1400 audit(1746964221.928:500): avc: denied { getattr } for pid=7538 comm="syz.3.419" name="/" dev="9p" ino=35913826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.980027][ T7539] overlayfs: statfs failed on './file0' [ 72.095681][ T40] audit: type=1400 audit(1746964222.058:501): avc: denied { read } for pid=7549 comm="syz.4.423" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.919905][ T7552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.923987][ T7552] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.931554][ T7552] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.936544][ T7552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.938538][ T7552] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.941598][ T7552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.943553][ T7552] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.946814][ T7552] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.949709][ T7552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.951634][ T7552] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.954749][ T7552] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.988060][ T7569] tmpfs: Cannot change global quota limit on remount [ 72.990307][ T40] audit: type=1400 audit(1746964222.948:502): avc: denied { remount } for pid=7567 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.027774][ T7577] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 73.029912][ T7577] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.033159][ T7577] vhci_hcd vhci_hcd.0: Device attached [ 73.124144][ T40] audit: type=1400 audit(1746964223.068:503): avc: denied { read write } for pid=7592 comm="syz.4.437" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.137999][ T40] audit: type=1400 audit(1746964223.068:504): avc: denied { open } for pid=7592 comm="syz.4.437" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.231690][ T7597] ip_vti0: entered promiscuous mode [ 73.234589][ T7597] __nla_validate_parse: 9 callbacks suppressed [ 73.234598][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 73.274094][ T65] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 73.276601][ T6100] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.385583][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.439'. [ 73.393066][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.439'. [ 73.432615][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 73.435241][ T6100] usb 5-1: config 0 has no interfaces? [ 73.437053][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 73.437343][ T6100] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 73.443244][ T6100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.449766][ T6100] usb 5-1: config 0 descriptor?? [ 73.486998][ T7612] vxfs: WRONG superblock magic 00000000 at 1 [ 73.489937][ T7612] vxfs: WRONG superblock magic 00000000 at 8 [ 73.491917][ T7612] vxfs: can't find superblock. [ 73.497774][ T7612] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 73.505264][ T7612] nullb0: AHDI p1 [ 73.507660][ T7614] binder: BINDER_SET_CONTEXT_MGR already set [ 73.509677][ T7614] binder: 7613:7614 ioctl 4018620d 200000000040 returned -16 [ 73.541310][ T7617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.445'. [ 73.549841][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 73.552651][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'. [ 73.586474][ T40] audit: type=1400 audit(1746964223.548:505): avc: denied { mounton } for pid=7622 comm="syz.4.446" path="/bus" dev="ramfs" ino=17050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 73.586529][ T7623] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 73.596734][ T7623] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.600324][ T7623] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 73.677421][ T7580] vhci_hcd: connection closed [ 73.678642][ T6377] vhci_hcd: stop threads [ 73.682312][ T6377] vhci_hcd: release socket [ 73.687039][ T834] usb 5-1: USB disconnect, device number 10 [ 73.689463][ T6377] vhci_hcd: disconnect device [ 73.744226][ T65] vhci_hcd: vhci_device speed not set [ 73.894282][ T1466] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 73.997226][ T40] audit: type=1400 audit(1746964223.958:506): avc: denied { name_bind } for pid=7640 comm="syz.3.453" src=28192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 74.046147][ T1466] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.049263][ T1466] usb 7-1: config 0 has no interface number 0 [ 74.051735][ T1466] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 74.055965][ T7643] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 74.060743][ T1466] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.064612][ T1466] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.068091][ T1466] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.072430][ T1466] usb 7-1: config 0 descriptor?? [ 74.089061][ T1466] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 74.091542][ T7645] xt_socket: unknown flags 0x50 [ 74.197670][ T40] audit: type=1326 audit(1746964224.158:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.3.456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5917b8e969 code=0x7fc00000 [ 74.206003][ T40] audit: type=1326 audit(1746964224.158:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.3.456" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f5917b8e969 code=0x7fc00000 [ 74.212982][ T40] audit: type=1326 audit(1746964224.158:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.3.456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5917b8e969 code=0x7fc00000 [ 74.234140][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.246896][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 74.322100][ T7669] netlink: 64 bytes leftover after parsing attributes in process `syz.4.462'. [ 74.327305][ T7669] program syz.4.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.392128][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.396156][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.554413][ T834] usb 7-1: USB disconnect, device number 7 [ 74.742065][ T7714] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 74.868740][ T7714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=7714 comm=syz.0.472 [ 74.884148][ T65] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.954478][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.964673][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.964735][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.994346][ T7717] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.996496][ T7717] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.998603][ T7717] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.000634][ T7717] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.056222][ T65] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.060679][ T65] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.067452][ T65] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.071498][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.077251][ T65] usb 8-1: config 0 descriptor?? [ 75.081986][ T65] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 75.166850][ T7732] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29723 sclass=netlink_xfrm_socket pid=7732 comm=syz.2.477 [ 75.446266][ T7744] dlm: no locking on control device [ 75.481851][ T7747] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 75.481927][ T7746] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 75.586480][ T7747] /dev/sr0: Can't open blockdev [ 75.704946][ T7746] /dev/sr0: Can't open blockdev [ 75.710728][ T7754] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20000 [ 75.713676][ T5971] IPVS: starting estimator thread 0... [ 75.756248][ T7758] netlink: 'syz.4.485': attribute type 29 has an invalid length. [ 75.767616][ T7758] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.485' resets device [ 75.814135][ T7755] IPVS: using max 45 ests per chain, 108000 per kthread [ 75.823875][ T7763] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 75.981655][ T7779] program syz.4.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.039018][ T7785] fuseblk: Bad value for 'rootmode' [ 76.075438][ T5991] usb 44-1: device descriptor read/8, error -110 [ 76.308653][ T7789] binder: 7788:7789 ioctl c018620c 2000000000c0 returned -22 [ 76.442229][ T7800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7800 comm=syz.4.497 [ 76.446905][ T7800] overlay: Unknown parameter 'smackfsroot' [ 76.449385][ T7792] overlayfs: statfs failed on './file0' [ 76.465151][ T5991] usb usb44-port1: attempt power cycle [ 76.529036][ T7807] overlay: Bad value for 'workdir' [ 76.834164][ T6377] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 76.918521][ T5944] Bluetooth: hci0: unexpected event 0x23 length: 0 < 13 [ 77.024494][ T5991] usb usb44-port1: unable to enumerate USB device [ 77.034198][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.035153][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.036922][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.038668][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.358283][ T7854] new mount options do not match the existing superblock, will be ignored [ 77.370262][ T40] kauditd_printk_skb: 3207 callbacks suppressed [ 77.370272][ T40] audit: type=1400 audit(1746964227.328:3711): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 77.386362][ T7857] mkiss: ax0: crc mode is auto. [ 77.418237][ T40] audit: type=1400 audit(1746964227.378:3712): avc: denied { append } for pid=7860 comm="syz.0.519" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.656481][ T58] usb 8-1: USB disconnect, device number 3 [ 77.779425][ T7884] netlink: 'syz.3.523': attribute type 30 has an invalid length. [ 77.785482][ T7884] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.788202][ T7884] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.790902][ T7884] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.793590][ T7884] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.798064][ T7887] netlink: 'syz.3.523': attribute type 4 has an invalid length. [ 77.938179][ T40] audit: type=1400 audit(1746964227.898:3713): avc: denied { unmount } for pid=6198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.991919][ T40] audit: type=1400 audit(1746964227.948:3714): avc: denied { map } for pid=7893 comm="syz.4.527" path="socket:[19565]" dev="sockfs" ino=19565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.000596][ T40] audit: type=1400 audit(1746964227.948:3715): avc: denied { map } for pid=7893 comm="syz.4.527" path="socket:[19565]" dev="sockfs" ino=19565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.008161][ T40] audit: type=1400 audit(1746964227.948:3716): avc: denied { read } for pid=7893 comm="syz.4.527" path="socket:[19565]" dev="sockfs" ino=19565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.154930][ T58] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 78.242021][ T7899] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.245188][ T7899] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.248032][ T7899] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.250879][ T7899] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.253839][ T7899] geneve2: entered promiscuous mode [ 78.255801][ T7899] geneve2: entered allmulticast mode [ 78.279430][ T40] audit: type=1400 audit(1746964228.238:3717): avc: denied { ioctl } for pid=7901 comm="syz.0.529" path="socket:[18627]" dev="sockfs" ino=18627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.306019][ T58] usb 8-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 78.310154][ T58] usb 8-1: config 1 interface 0 has no altsetting 0 [ 78.313954][ T58] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.317632][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.320702][ T58] usb 8-1: Product: syz [ 78.322148][ T58] usb 8-1: Manufacturer: syz [ 78.323829][ T58] usb 8-1: SerialNumber: syz [ 78.329976][ T7887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.534550][ T7887] netlink: 'syz.3.523': attribute type 9 has an invalid length. [ 78.537421][ T7915] __nla_validate_parse: 11 callbacks suppressed [ 78.537435][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'. [ 78.545501][ T40] audit: type=1400 audit(1746964228.508:3718): avc: denied { write } for pid=7913 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.546421][ T7915] rdma_op ffff8880514ff1f0 conn xmit_rdma 0000000000000000 [ 78.580090][ T7917] program syz.2.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.582652][ T7918] xt_ipcomp: unknown flags 12 [ 78.715515][ T7930] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 78.719029][ T7930] netlink: 'syz.0.538': attribute type 2 has an invalid length. [ 78.753009][ T40] audit: type=1400 audit(1746964228.708:3719): avc: denied { connect } for pid=7931 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.766638][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.847448][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.860896][ T7948] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 78.863424][ T7948] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 78.866806][ T7948] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 78.869292][ T7948] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 78.887223][ T7948] support for the xor transformation has been removed. [ 78.890158][ T7948] netlink: 52 bytes leftover after parsing attributes in process `syz.0.544'. [ 78.909040][ T7951] netem: incorrect gi model size [ 78.913458][ T7951] netem: change failed [ 78.917386][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.919811][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.982054][ T40] audit: type=1400 audit(1746964228.938:3720): avc: denied { read } for pid=7960 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 78.983135][ T7961] tmpfs: Cannot change global quota limit on remount [ 79.064808][ T5944] Bluetooth: hci2: unexpected event for opcode 0x0c13 [ 79.114763][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.114799][ T5933] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.173237][ T7983] binder: BINDER_SET_CONTEXT_MGR already set [ 79.176569][ T7983] binder: 7982:7983 ioctl 4018620d 2000000000c0 returned -16 [ 79.182923][ T7983] binder: BINDER_SET_CONTEXT_MGR already set [ 79.185178][ T7983] binder: 7982:7983 ioctl 4018620d 200000000040 returned -16 [ 79.188512][ T7983] binder: 7982:7983 ioctl c0306201 200000001440 returned -11 [ 79.315517][ T7999] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 79.334308][ T7995] binder: 7994:7995 ioctl c0306201 2000000003c0 returned -14 [ 79.372786][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 79.410722][ T8010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.437845][ T8014] 9pnet_fd: Insufficient options for proto=fd [ 79.534725][ T8024] netlink: 156 bytes leftover after parsing attributes in process `syz.4.570'. [ 79.540900][ T8024] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 80.016452][ T8052] loop2: detected capacity change from 0 to 7 [ 80.027245][ T8052] Dev loop2: unable to read RDB block 7 [ 80.029079][ T8052] loop2: unable to read partition table [ 80.031128][ T8052] loop2: partition table beyond EOD, truncated [ 80.033213][ T8052] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 80.387555][ T8063] No buffer was provided with the request [ 80.399066][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'. [ 80.402588][ T8063] trusted_key: encrypted_key: insufficient parameters specified [ 80.954132][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.040011][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.586'. [ 81.043059][ T8078] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 81.045572][ T8078] netlink: 'syz.2.586': attribute type 2 has an invalid length. [ 81.048034][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.586'. [ 81.129269][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.589'. [ 81.183847][ T8090] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 81.198612][ T8090] syzkaller0: entered promiscuous mode [ 81.200384][ T8090] syzkaller0: entered allmulticast mode [ 81.365225][ T1343] cfg80211: failed to load regulatory.db [ 82.294737][ T8115] program syz.2.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.352890][ T8120] x_tables: duplicate underflow at hook 2 [ 82.386862][ T8120] ucma_write: process 490 (syz.0.599) changed security contexts after opening file descriptor, this is not allowed. [ 82.393217][ T8120] tipc: Started in network mode [ 82.395735][ T8120] tipc: Node identity 02eacaed20b2, cluster identity 4711 [ 82.398943][ T8120] tipc: Enabled bearer , priority 0 [ 82.450177][ T8134] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.458641][ T8134] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.502319][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 82.502345][ T40] audit: type=1400 audit(1746964232.458:3726): avc: denied { ioctl } for pid=8132 comm="syz.0.604" path="socket:[21610]" dev="sockfs" ino=21610 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.513787][ T40] audit: type=1400 audit(1746964232.468:3727): avc: denied { nlmsg_read } for pid=8132 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.542933][ T40] audit: type=1400 audit(1746964232.498:3728): avc: denied { mount } for pid=8141 comm="syz.2.607" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.552102][ T8125] tipc: Disabling bearer [ 82.561914][ T40] audit: type=1400 audit(1746964232.518:3729): avc: denied { mount } for pid=8143 comm="syz.0.608" name="/" dev="configfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.565507][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 82.569160][ T40] audit: type=1400 audit(1746964232.528:3730): avc: denied { search } for pid=8143 comm="syz.0.608" name="/" dev="configfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.578868][ T40] audit: type=1400 audit(1746964232.528:3731): avc: denied { setattr } for pid=8143 comm="syz.0.608" name="/" dev="configfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.590071][ T40] audit: type=1400 audit(1746964232.548:3732): avc: denied { nosuid_transition } for pid=8141 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 82.596812][ T40] audit: type=1400 audit(1746964232.548:3733): avc: denied { transition } for pid=8141 comm="syz.2.607" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 82.606540][ T40] audit: type=1400 audit(1746964232.548:3734): avc: denied { entrypoint } for pid=8141 comm="syz.2.607" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=12 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.615957][ T40] audit: type=1400 audit(1746964232.548:3735): avc: denied { noatsecure } for pid=8141 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 82.674316][ T8146] syz.0.609 (8146) used greatest stack depth: 19912 bytes left [ 82.907754][ T8173] xt_hashlimit: size too large, truncated to 1048576 [ 83.354459][ T8180] syzkaller0: entered promiscuous mode [ 83.356812][ T8180] syzkaller0: entered allmulticast mode [ 83.381122][ T6100] usb 8-1: USB disconnect, device number 4 [ 83.658632][ T8187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'. [ 83.672179][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'. [ 83.745948][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 83.835164][ T8201] fuse: Unknown parameter '0x00000000000000030x000000000000001e' [ 83.845248][ T8203] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 83.858816][ T8199] binder: BINDER_SET_CONTEXT_MGR already set [ 83.860957][ T8199] binder: 8198:8199 ioctl 4018620d 2000000000c0 returned -16 [ 83.864498][ T8199] binder: BINDER_SET_CONTEXT_MGR already set [ 83.866552][ T8199] binder: 8198:8199 ioctl 4018620d 200000000040 returned -16 [ 84.435972][ T29] libceph: mon0 (1)[::]:6789 socket error on write [ 84.441370][ T29] libceph: mon0 (1)[::]:6789 socket error on write [ 84.477937][ T8216] ceph: No mds server is up or the cluster is laggy [ 84.675733][ T8251] ipvlan2: entered allmulticast mode [ 84.678109][ T8251] macvlan0: entered allmulticast mode [ 84.678132][ T8253] netlink: 'syz.3.639': attribute type 64 has an invalid length. [ 84.681189][ T8251] veth1_vlan: entered allmulticast mode [ 84.683908][ T8253] netlink: 'syz.3.639': attribute type 4 has an invalid length. [ 84.688651][ T8253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.639'. [ 84.702778][ T8253] ip6gretap1: entered promiscuous mode [ 84.704809][ T8253] ip6gretap1: entered allmulticast mode [ 84.775738][ T8259] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 84.777885][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.780947][ T8259] vhci_hcd vhci_hcd.0: Device attached [ 84.785561][ T8260] vhci_hcd: connection closed [ 84.786125][ T6369] vhci_hcd: stop threads [ 84.790051][ T6369] vhci_hcd: release socket [ 84.792108][ T6369] vhci_hcd: disconnect device [ 84.841438][ T8213] orangefs_mount: mount request failed with -4 [ 85.294262][ T29] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 85.398753][ T8283] syz_tun: entered allmulticast mode [ 85.401462][ T8283] syz_tun: left allmulticast mode [ 85.434158][ T29] usb 5-1: device descriptor read/64, error -71 [ 85.488732][ T8281] QAT: failed to copy from user. [ 85.694206][ T29] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 85.824090][ T29] usb 5-1: device descriptor read/64, error -71 [ 85.937280][ T29] usb usb5-port1: attempt power cycle [ 86.284401][ T29] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 86.314930][ T29] usb 5-1: device descriptor read/8, error -71 [ 86.544542][ T58] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 86.584476][ T29] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 86.604645][ T29] usb 5-1: device descriptor read/8, error -71 [ 86.704231][ T58] usb 9-1: Using ep0 maxpacket: 32 [ 86.710271][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 86.717227][ T29] usb usb5-port1: unable to enumerate USB device [ 86.719937][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 86.726262][ T58] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.734442][ T58] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 86.738140][ T58] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 86.741467][ T58] usb 9-1: Product: syz [ 86.743387][ T58] usb 9-1: Manufacturer: syz [ 86.746010][ T58] usb 9-1: SerialNumber: syz [ 86.755253][ T58] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input10 [ 86.953829][ T8302] i2c i2c-1: Invalid block write size 34 [ 87.556438][ T8344] tmpfs: User quota block hardlimit too large. [ 87.569454][ T8347] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.667'. [ 87.696430][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 87.696440][ T40] audit: type=1326 audit(1746964237.658:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.706581][ T40] audit: type=1326 audit(1746964237.658:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.713499][ T40] audit: type=1326 audit(1746964237.658:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.720687][ T40] audit: type=1326 audit(1746964237.658:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.728264][ T40] audit: type=1326 audit(1746964237.658:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.736723][ T40] audit: type=1326 audit(1746964237.658:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.743682][ T40] audit: type=1326 audit(1746964237.658:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.751920][ T40] audit: type=1326 audit(1746964237.658:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.759397][ T40] audit: type=1326 audit(1746964237.658:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.770354][ T40] audit: type=1326 audit(1746964237.658:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.2.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847838e969 code=0x7fc00000 [ 87.804692][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 87.883424][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.672'. [ 87.986446][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 87.993521][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.119930][ T8367] bridge_slave_1 (unregistering): left allmulticast mode [ 88.122924][ T8367] bridge_slave_1 (unregistering): left promiscuous mode [ 88.128203][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.260361][ T5933] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 88.260475][ T5933] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 88.393235][ T8399] syz.0.685: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 88.410891][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.0.685 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 88.410907][ T8399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.410913][ T8399] Call Trace: [ 88.410916][ T8399] [ 88.410920][ T8399] dump_stack_lvl+0x16c/0x1f0 [ 88.410952][ T8399] warn_alloc+0x248/0x3a0 [ 88.410969][ T8399] ? __pfx_warn_alloc+0x10/0x10 [ 88.410989][ T8399] ? __get_vm_area_node+0x1dc/0x330 [ 88.411001][ T8399] ? __get_vm_area_node+0x208/0x330 [ 88.411016][ T8399] __vmalloc_node_range_noprof+0x1110/0x1540 [ 88.411034][ T8399] ? xt_alloc_entry_offsets+0x3a/0x60 [ 88.411064][ T8399] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 88.411083][ T8399] __kvmalloc_node_noprof+0x2ff/0x600 [ 88.411098][ T8399] ? xt_alloc_entry_offsets+0x3a/0x60 [ 88.411110][ T8399] ? xt_alloc_entry_offsets+0x3a/0x60 [ 88.411124][ T8399] ? xt_alloc_entry_offsets+0x3a/0x60 [ 88.411136][ T8399] xt_alloc_entry_offsets+0x3a/0x60 [ 88.411147][ T8399] translate_table+0x2b8/0x1c10 [ 88.411158][ T8399] ? find_held_lock+0x2b/0x80 [ 88.411170][ T8399] ? __might_fault+0xe3/0x190 [ 88.411180][ T8399] ? __might_fault+0x13b/0x190 [ 88.411192][ T8399] ? __pfx_translate_table+0x10/0x10 [ 88.411201][ T8399] ? _copy_from_user+0x59/0xd0 [ 88.411219][ T8399] ? copy_from_sockptr_offset+0xed/0x1b0 [ 88.411229][ T8399] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 88.411247][ T8399] do_arpt_set_ctl+0x5a5/0xe30 [ 88.411260][ T8399] ? __pfx___mutex_trylock_common+0x10/0x10 [ 88.411283][ T8399] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 88.411296][ T8399] ? rcu_is_watching+0x12/0xc0 [ 88.411312][ T8399] ? find_held_lock+0x2b/0x80 [ 88.411343][ T8399] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 88.411362][ T8399] ? find_held_lock+0x2b/0x80 [ 88.411380][ T8399] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 88.411401][ T8399] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.411422][ T8399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.411449][ T8399] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 88.411462][ T8399] nf_setsockopt+0x8a/0xf0 [ 88.411474][ T8399] ip_setsockopt+0xcb/0xf0 [ 88.411489][ T8399] udp_setsockopt+0x7d/0xd0 [ 88.411502][ T8399] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 88.411516][ T8399] do_sock_setsockopt+0x221/0x470 [ 88.411531][ T8399] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 88.411569][ T8399] __sys_setsockopt+0x1a0/0x230 [ 88.411588][ T8399] __x64_sys_setsockopt+0xbd/0x160 [ 88.411602][ T8399] ? do_syscall_64+0x91/0x260 [ 88.411619][ T8399] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.411631][ T8399] do_syscall_64+0xcd/0x260 [ 88.411645][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.411655][ T8399] RIP: 0033:0x7f1500b8e969 [ 88.411664][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.411674][ T8399] RSP: 002b:00007f1501a7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.411684][ T8399] RAX: ffffffffffffffda RBX: 00007f1500db6080 RCX: 00007f1500b8e969 [ 88.411690][ T8399] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 88.411695][ T8399] RBP: 00007f1500c10ab1 R08: 0000000000000068 R09: 0000000000000000 [ 88.411701][ T8399] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 88.411706][ T8399] R13: 0000000000000001 R14: 00007f1500db6080 R15: 00007ffd4c7c1598 [ 88.411719][ T8399] [ 88.411935][ T8399] Mem-Info: [ 88.521793][ T8399] active_anon:36313 inactive_anon:0 isolated_anon:0 [ 88.521793][ T8399] active_file:13294 inactive_file:43074 isolated_file:0 [ 88.521793][ T8399] unevictable:2265 dirty:61 writeback:0 [ 88.521793][ T8399] slab_reclaimable:12199 slab_unreclaimable:74685 [ 88.521793][ T8399] mapped:28931 shmem:28591 pagetables:992 [ 88.521793][ T8399] sec_pagetables:305 bounce:0 [ 88.521793][ T8399] kernel_misc_reclaimable:0 [ 88.521793][ T8399] free:419893 free_pcp:9480 free_cma:0 [ 88.535835][ T8399] Node 0 active_anon:137720kB inactive_anon:0kB active_file:53176kB inactive_file:172080kB unevictable:5524kB isolated(anon):0kB isolated(file):0kB mapped:115960kB dirty:224kB writeback:0kB shmem:103480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:12464kB pagetables:3968kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 88.546893][ T8399] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:20kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 88.556932][ T8399] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 88.565402][ T8399] lowmem_reserve[]: 0 1238 1238 1238 1238 [ 88.567236][ T8399] Node 0 DMA32 free:93544kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:132188kB inactive_anon:0kB active_file:53176kB inactive_file:172080kB unevictable:5524kB writepending:224kB present:2080628kB managed:1268560kB mlocked:2048kB bounce:0kB free_pcp:29976kB local_pcp:1552kB free_cma:0kB [ 88.577515][ T8399] lowmem_reserve[]: 0 0 0 0 0 [ 88.579105][ T8399] Node 1 Normal free:1579212kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:3536kB writepending:20kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:12392kB local_pcp:0kB free_cma:0kB [ 88.588065][ T8399] lowmem_reserve[]: 0 0 0 0 0 [ 88.589609][ T8399] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 88.593550][ T8399] Node 0 DMA32: 37*4kB (U) 43*8kB (UME) 7*16kB (UME) 24*32kB (UME) 54*64kB (UME) 24*128kB (UE) 16*256kB (UE) 3*512kB (U) 7*1024kB (UME) 4*2048kB (UME) 14*4096kB (UME) = 86236kB [ 88.599594][ T8399] Node 1 Normal: 5*4kB (UME) 13*8kB (UE) 33*16kB (UME) 128*32kB (UME) 41*64kB (UME) 14*128kB (UE) 3*256kB (U) 3*512kB (UME) 3*1024kB (U) 4*2048kB (UE) 380*4096kB (M) = 1579212kB [ 88.605167][ T8399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.608117][ T8399] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 88.611031][ T8399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.614469][ T8399] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.617264][ T8399] 80589 total pagecache pages [ 88.618711][ T8399] 0 pages in swap cache [ 88.620037][ T8399] Free swap = 124996kB [ 88.621322][ T8399] Total swap = 124996kB [ 88.622653][ T8399] 1048443 pages RAM [ 88.623088][ T8408] netlink: zone id is out of range [ 88.623869][ T8399] 0 pages HighMem/MovableOnly [ 88.623875][ T8399] 281972 pages reserved [ 88.625667][ T8408] netlink: zone id is out of range [ 88.627188][ T8399] 0 pages cma reserved [ 88.628338][ T8408] netlink: zone id is out of range [ 88.632911][ T8408] netlink: zone id is out of range [ 88.634864][ T8408] netlink: zone id is out of range [ 88.636557][ T8408] netlink: zone id is out of range [ 88.638165][ T8408] netlink: zone id is out of range [ 88.639782][ T8408] netlink: zone id is out of range [ 88.641432][ T8408] netlink: zone id is out of range [ 88.643100][ T8408] netlink: zone id is out of range [ 88.705928][ T8409] GUP no longer grows the stack in syz.3.686 (8409): 200000004000-20000000a000 (200000002000) [ 88.709468][ T8409] CPU: 3 UID: 0 PID: 8409 Comm: syz.3.686 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 88.709483][ T8409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.709489][ T8409] Call Trace: [ 88.709493][ T8409] [ 88.709497][ T8409] dump_stack_lvl+0x16c/0x1f0 [ 88.709516][ T8409] gup_vma_lookup+0x1d2/0x220 [ 88.709531][ T8409] __get_user_pages+0x234/0x36f0 [ 88.709567][ T8409] ? __pfx___get_user_pages+0x10/0x10 [ 88.709586][ T8409] get_user_pages_remote+0x258/0xb20 [ 88.709601][ T8409] ? __pfx_mtree_load+0x10/0x10 [ 88.709616][ T8409] ? __pfx_get_user_pages_remote+0x10/0x10 [ 88.709636][ T8409] __access_remote_vm+0x233/0x9d0 [ 88.709651][ T8409] ? __pfx___access_remote_vm+0x10/0x10 [ 88.709667][ T8409] proc_pid_cmdline_read+0x4de/0x900 [ 88.709685][ T8409] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 88.709702][ T8409] ? rw_verify_area+0xcf/0x680 [ 88.709715][ T8409] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 88.709730][ T8409] vfs_readv+0x6bc/0x8a0 [ 88.709747][ T8409] ? __pfx_vfs_readv+0x10/0x10 [ 88.709762][ T8409] ? kmem_cache_free+0x2d4/0x4d0 [ 88.709785][ T8409] ? __fget_files+0x20e/0x3c0 [ 88.709804][ T8409] ? do_preadv+0x1af/0x270 [ 88.709816][ T8409] do_preadv+0x1af/0x270 [ 88.709829][ T8409] ? __pfx_do_preadv+0x10/0x10 [ 88.709842][ T8409] ? rcu_is_watching+0x12/0xc0 [ 88.709858][ T8409] do_syscall_64+0xcd/0x260 [ 88.709873][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.709883][ T8409] RIP: 0033:0x7f5917b8e969 [ 88.709892][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.709902][ T8409] RSP: 002b:00007f591893f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 88.709912][ T8409] RAX: ffffffffffffffda RBX: 00007f5917db6080 RCX: 00007f5917b8e969 [ 88.709918][ T8409] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000b [ 88.709924][ T8409] RBP: 00007f5917c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 88.709929][ T8409] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 88.709935][ T8409] R13: 0000000000000000 R14: 00007f5917db6080 R15: 00007ffef243e5a8 [ 88.709948][ T8409] [ 88.714152][ T5973] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 88.944096][ T5973] usb 7-1: Using ep0 maxpacket: 32 [ 88.951360][ T5973] usb 7-1: config 0 has no interfaces? [ 88.957366][ T5973] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 88.960225][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 88.962832][ T5973] usb 7-1: Product: syz [ 88.964499][ T5973] usb 7-1: Manufacturer: syz [ 88.966011][ T5973] usb 7-1: SerialNumber: syz [ 88.969988][ T5973] usb 7-1: config 0 descriptor?? [ 89.049870][ T8447] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 89.055500][ T8447] netlink: 48 bytes leftover after parsing attributes in process `syz.4.695'. [ 89.069705][ T8447] batadv_slave_1: entered promiscuous mode [ 89.176388][ T5973] usb 7-1: USB disconnect, device number 8 [ 89.674296][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 89.805597][ T8436] batadv_slave_1: left promiscuous mode [ 89.943562][ T8456] netlink: 92 bytes leftover after parsing attributes in process `syz.4.702'. [ 89.949391][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 90.179332][ T5933] block nbd4: Receive control failed (result -107) [ 90.224800][ T5973] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.307146][ T8468] block nbd4: shutting down sockets [ 90.374081][ T5973] usb 8-1: Using ep0 maxpacket: 8 [ 90.377101][ T5973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.380684][ T5973] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.383487][ T5973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.388928][ T5973] usb 8-1: config 0 descriptor?? [ 90.398857][ T8472] 9pnet_fd: Insufficient options for proto=fd [ 90.489957][ T1343] hid (null): unknown global tag 0xd [ 90.491756][ T1343] hid (null): unknown global tag 0xc9 [ 90.493511][ T1343] hid (null): report_id 0 is invalid [ 90.499656][ T1343] hid-generic 0026:0008:0006.0002: unknown main item tag 0x6 [ 90.502221][ T1343] hid-generic 0026:0008:0006.0002: unknown global tag 0xd [ 90.504706][ T1343] hid-generic 0026:0008:0006.0002: item 0 0 1 13 parsing failed [ 90.507657][ T1343] hid-generic 0026:0008:0006.0002: probe with driver hid-generic failed with error -22 [ 90.597181][ T5973] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 90.630874][ T8483] random: crng reseeded on system resumption [ 90.640209][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 90.799690][ T5991] usb 8-1: USB disconnect, device number 5 [ 91.134479][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 91.287825][ T8500] tipc: Started in network mode [ 91.289412][ T8500] tipc: Node identity 4, cluster identity 4711 [ 91.291366][ T8500] tipc: Node number set to 4 [ 91.478478][ T8502] netlink: 'syz.4.720': attribute type 29 has an invalid length. [ 91.574998][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 91.608324][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 91.611431][ T8524] nbd: socks must be embedded in a SOCK_ITEM attr [ 91.728075][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.731742][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.173962][ T8541] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 92.357934][ T8546] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.640137][ T8575] SET target dimension over the limit! [ 92.731547][ T8593] netlink: 68 bytes leftover after parsing attributes in process `syz.2.742'. [ 92.813355][ T8598] syzkaller1: entered promiscuous mode [ 92.815328][ T8598] syzkaller1: entered allmulticast mode [ 92.848819][ T8604] overlayfs: disabling nfs_export due to verity=require [ 92.919400][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 92.919416][ T40] audit: type=1400 audit(1746964242.878:3842): avc: denied { read } for pid=8607 comm="syz.3.747" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.930138][ T40] audit: type=1400 audit(1746964242.888:3843): avc: denied { open } for pid=8607 comm="syz.3.747" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.939820][ T40] audit: type=1400 audit(1746964242.898:3844): avc: denied { ioctl } for pid=8607 comm="syz.3.747" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.039607][ T8614] ptrace attach of "/syz-executor exec"[8615] was attempted by "/syz-executor exec"[8614] [ 93.082495][ T8617] xt_hashlimit: size too large, truncated to 1048576 [ 93.184128][ T66] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 93.238896][ T8624] netlink: 'syz.4.751': attribute type 12 has an invalid length. [ 93.336234][ T66] usb 8-1: config 1 interface 0 altsetting 70 bulk endpoint 0x3 has invalid maxpacket 1024 [ 93.339412][ T66] usb 8-1: config 1 interface 0 has no altsetting 0 [ 93.343686][ T66] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.346974][ T66] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.349502][ T66] usb 8-1: Product: ό박౛ﲥ喺ꎓ㭒䷳ᚢ欮ℓﶵ计ѩ伕⼑킱ຠઔ럊⷇傳큛漘ꛊ궱郀 [ 93.353128][ T66] usb 8-1: Manufacturer: ࠉ [ 93.354857][ T66] usb 8-1: SerialNumber: syz [ 93.359277][ T8608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.738272][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 93.742181][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 93.774825][ T66] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 93.790147][ T66] usb 8-1: USB disconnect, device number 6 [ 93.809106][ T8647] xt_hashlimit: size too large, truncated to 1048576 [ 93.971232][ T40] audit: type=1400 audit(1746964243.928:3845): avc: denied { listen } for pid=8654 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.973593][ T8655] 8021q: VLANs not supported on ip6tnl0 [ 94.189713][ T40] audit: type=1400 audit(1746964244.148:3846): avc: denied { module_load } for pid=8668 comm="syz.4.765" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 94.190422][ T8669] kernel read not supported for file /policy (pid: 8669 comm: syz.4.765) [ 94.388695][ T8683] xt_hashlimit: overflow, rate too high: 0 [ 94.456765][ T8697] __nla_validate_parse: 1 callbacks suppressed [ 94.456786][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 94.462096][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 94.466850][ T8697] netlink: 'syz.4.773': attribute type 18 has an invalid length. [ 94.526421][ T40] audit: type=1400 audit(1746964244.488:3847): avc: denied { write } for pid=8703 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.561171][ T8709] loop6: detected capacity change from 0 to 524287999 [ 94.566272][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.569054][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.571678][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.574528][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.577798][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.581012][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.586595][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.589860][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.592916][ T8709] ldm_validate_partition_table(): Disk read failed. [ 94.595142][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.597831][ T8709] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.600794][ T8709] Dev loop6: unable to read RDB block 0 [ 94.603772][ T8709] loop6: unable to read partition table [ 94.612910][ T8709] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 94.642537][ T40] audit: type=1400 audit(1746964244.598:3848): avc: denied { mount } for pid=8717 comm="syz.4.779" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.652500][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.780'. [ 94.685360][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 94.708925][ T40] audit: type=1400 audit(1746964244.668:3849): avc: denied { mounton } for pid=8717 comm="syz.4.779" path="/209/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.719897][ T40] audit: type=1400 audit(1746964244.678:3850): avc: denied { remount } for pid=8717 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 94.920110][ T40] audit: type=1400 audit(1746964244.878:3851): avc: denied { kexec_image_load } for pid=8730 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 94.954570][ T5933] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 94.954839][ T5944] Bluetooth: hci4: command 0xfc11 tx timeout [ 94.980169][ T8606] sp0: Synchronizing with TNC [ 95.213202][ T8745] 9pnet_virtio: no channels available for device syz [ 95.282000][ T8750] netlink: 80 bytes leftover after parsing attributes in process `syz.0.791'. [ 95.337136][ T8754] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.342459][ T1148] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.707617][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 95.981157][ T8785] omfs: Invalid superblock (0) [ 96.004205][ T5973] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 96.156687][ T5973] usb 7-1: config 0 has no interfaces? [ 96.159008][ T5973] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.164295][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.170535][ T5973] usb 7-1: config 0 descriptor?? [ 96.180779][ T8801] 9pnet_fd: p9_fd_create_tcp (8801): problem connecting socket to 127.0.0.1 [ 96.234461][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.807'. [ 96.270902][ T8810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 96.273007][ T8810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.277862][ T8810] vhci_hcd vhci_hcd.0: Device attached [ 96.288730][ T8811] vhci_hcd: connection closed [ 96.288917][ T1148] vhci_hcd: stop threads [ 96.291861][ T1148] vhci_hcd: release socket [ 96.293427][ T1148] vhci_hcd: disconnect device [ 96.397653][ T6100] usb 7-1: USB disconnect, device number 9 [ 96.474310][ T8827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.812'. [ 96.526761][ T8830] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 96.531502][ T8830] program syz.4.813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.832400][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 96.835623][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.820'. [ 96.900012][ T8854] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 97.308105][ T8880] xt_ipcomp: unknown flags 12 [ 97.354124][ T5933] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 97.354160][ T5944] Bluetooth: hci4: command 0xfc11 tx timeout [ 97.397038][ T6370] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.475417][ T6370] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.526565][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.530172][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.533675][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.538285][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.541973][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.547339][ T6370] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.571096][ T8897] mmap: syz.0.837 (8897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.601911][ T6370] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.690966][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 97.799481][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.807624][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.807759][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.811660][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.849627][ T6370] dummy0: left allmulticast mode [ 97.851489][ T6370] bridge0: port 3(dummy0) entered disabled state [ 97.874164][ T6370] bridge_slave_1: left promiscuous mode [ 97.876108][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.880058][ T6370] bridge_slave_0: left allmulticast mode [ 97.881988][ T6370] bridge_slave_0: left promiscuous mode [ 97.883955][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.925408][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 97.925445][ T40] audit: type=1400 audit(1746964247.888:3867): avc: denied { read write } for pid=8923 comm="syz.0.843" name="file0" dev="9p" ino=35913946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.937420][ T40] audit: type=1400 audit(1746964247.898:3868): avc: denied { open } for pid=8923 comm="syz.0.843" path="/212/file0/file0" dev="9p" ino=35913946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.046363][ T40] audit: type=1400 audit(1746964248.008:3869): avc: denied { read } for pid=8923 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.331087][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.336390][ T6370] bond0 (unregistering): Released all slaves [ 98.344807][ T6370] bond1 (unregistering): Released all slaves [ 98.357038][ T6370] bond2 (unregistering): Released all slaves [ 98.370013][ T6370] bond3 (unregistering): Released all slaves [ 98.381808][ T6370] bond4 (unregistering): Released all slaves [ 98.392986][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.395800][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.398092][ T8890] bridge_slave_0: entered allmulticast mode [ 98.401160][ T8890] bridge_slave_0: entered promiscuous mode [ 98.404800][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.407785][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.410724][ T8890] bridge_slave_1: entered allmulticast mode [ 98.415013][ T8890] bridge_slave_1: entered promiscuous mode [ 98.469791][ T40] audit: type=1326 audit(1746964248.428:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.4.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9638e969 code=0x7ffc0000 [ 98.479615][ T40] audit: type=1326 audit(1746964248.428:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.4.846" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7efd9638e969 code=0x7ffc0000 [ 98.487733][ T40] audit: type=1326 audit(1746964248.428:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.4.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9638e969 code=0x7ffc0000 [ 98.510159][ T40] audit: type=1326 audit(1746964248.428:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.4.846" exe="/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efd9638e969 code=0x7ffc0000 [ 98.518686][ T40] audit: type=1326 audit(1746964248.428:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.4.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9638e969 code=0x7ffc0000 [ 98.526023][ T40] audit: type=1326 audit(1746964248.428:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.4.846" exe="/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7efd9638e969 code=0x7ffc0000 [ 98.533059][ T40] audit: type=1326 audit(1746964248.428:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.4.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9638e969 code=0x7ffc0000 [ 98.608107][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.614914][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.681120][ T8890] team0: Port device team_slave_0 added [ 98.733795][ T8890] team0: Port device team_slave_1 added [ 98.801811][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.804923][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.816309][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.820625][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.822823][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.832818][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.846779][ T6370] hsr_slave_0: left promiscuous mode [ 98.850508][ T6370] hsr_slave_1: left promiscuous mode [ 98.873228][ T6370] veth1_macvtap: left promiscuous mode [ 98.875852][ T6370] veth0_macvtap: left promiscuous mode [ 98.878290][ T6370] veth1_vlan: left promiscuous mode [ 98.942305][ T6370] pimreg3 (unregistering): left allmulticast mode [ 99.065030][ T8968] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 99.070754][ T8968] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 99.392641][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 99.458259][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 99.599276][ T5944] Bluetooth: hci3: command tx timeout [ 99.929149][ T8890] hsr_slave_0: entered promiscuous mode [ 99.931565][ T8890] hsr_slave_1: entered promiscuous mode [ 99.934523][ T8890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.937486][ T8890] Cannot create hsr debugfs directory [ 99.996517][ T8976] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.007998][ T8976] kvm: pic: level sensitive irq not supported [ 100.008689][ T8976] kvm: pic: non byte read [ 100.015243][ T8976] kvm: pic: level sensitive irq not supported [ 100.015955][ T8976] kvm: pic: non byte read [ 100.020599][ T8976] kvm: pic: level sensitive irq not supported [ 100.020869][ T8976] kvm: pic: non byte read [ 100.027584][ T8976] kvm: pic: level sensitive irq not supported [ 100.027983][ T8976] kvm: pic: non byte read [ 100.034203][ T8976] kvm: pic: level sensitive irq not supported [ 100.034617][ T8976] kvm: pic: non byte read [ 100.100914][ T8890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.107534][ T8890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.111554][ T8890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.121655][ T8890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.198810][ T8984] exFAT-fs (nullb0): invalid boot record signature [ 100.201024][ T8984] exFAT-fs (nullb0): failed to read boot sector [ 100.201368][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.203026][ T8984] exFAT-fs (nullb0): failed to recognize exfat type [ 100.224577][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.229844][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.232681][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.266091][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.268347][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.299583][ T6370] IPVS: stop unused estimator thread 0... [ 100.340273][ T8890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.485565][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.495298][ T9007] __nla_validate_parse: 6 callbacks suppressed [ 100.495311][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 100.629837][ T8890] veth0_vlan: entered promiscuous mode [ 100.640258][ T8890] veth1_vlan: entered promiscuous mode [ 100.666462][ T8890] veth0_macvtap: entered promiscuous mode [ 100.675597][ T8890] veth1_macvtap: entered promiscuous mode [ 100.687239][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.690474][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.693470][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.697080][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.701638][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.706288][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.709577][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.712538][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.716446][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.719488][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.722675][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.727544][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.735148][ T8890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.737867][ T8890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.740557][ T8890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.743337][ T8890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.782738][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.789257][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.800604][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.803088][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.989693][ T9028] Cannot find del_set index 4 as target [ 100.991077][ T9030] Invalid source name [ 100.992895][ T9030] UBIFS error (pid: 9030): cannot open "/dev/sg0", error -22 [ 100.994827][ T9031] netlink: 'syz.3.869': attribute type 10 has an invalid length. [ 101.009510][ T9031] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.022065][ T9036] overlayfs: missing 'lowerdir' [ 101.087700][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 101.220131][ T9044] program syz.0.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.250134][ T9057] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 101.250134][ T9057] The task syz.3.877 (9057) triggered the difference, watch for misbehavior. [ 101.546803][ T9085] cgroup2: Unknown parameter 'obj_user' [ 101.549071][ T9085] could not open pipe file descriptor [ 101.586252][ T9085] usb usb8: usbfs: process 9085 (syz.5.886) did not claim interface 0 before use [ 101.665331][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=9089 comm=syz.5.887 [ 101.676283][ T5933] Bluetooth: hci3: command tx timeout [ 101.730083][ T9099] sctp: [Deprecated]: syz.4.891 (pid 9099) Use of int in max_burst socket option. [ 101.730083][ T9099] Use struct sctp_assoc_value instead [ 101.746021][ T9099] veth1_to_batadv: entered promiscuous mode [ 101.748602][ T9099] macsec1: entered promiscuous mode [ 101.845376][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 101.973640][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.976678][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.074217][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.076214][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.254135][ T5973] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 102.397643][ T9139] random: crng reseeded on system resumption [ 102.414080][ T5973] usb 10-1: Using ep0 maxpacket: 32 [ 102.417185][ T5973] usb 10-1: config 0 has no interfaces? [ 102.418965][ T5973] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 102.421755][ T5973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.425734][ T5973] usb 10-1: config 0 descriptor?? [ 102.827043][ T9148] overlayfs: failed to resolve './file1': -2 [ 102.939952][ T9154] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.943396][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.946882][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.981626][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.984518][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.991581][ T9155] xt_cgroup: path and classid specified [ 103.082269][ T9162] tmpfs: Bad value for 'mpol' [ 103.086291][ T9162] sctp: [Deprecated]: syz.3.911 (pid 9162) Use of int in maxseg socket option. [ 103.086291][ T9162] Use struct sctp_assoc_value instead [ 103.093198][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 103.096860][ T9162] IPVS: Unknown mcast interface: vcan0 [ 103.168278][ T9167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.913'. [ 103.231897][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 103.231908][ T40] audit: type=1400 audit(1746964509.185:3929): avc: denied { ioctl } for pid=9172 comm="syz.3.915" path="socket:[25421]" dev="sockfs" ino=25421 ioctlcmd=0x3ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.322813][ T9178] syz.3.916 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.516217][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.921'. [ 103.735729][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 103.738709][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 103.755968][ T5944] Bluetooth: hci3: command tx timeout [ 103.875429][ T40] audit: type=1400 audit(1746964765.843:3930): avc: denied { append } for pid=9227 comm="syz.3.930" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.881604][ T9228] net_ratelimit: 394 callbacks suppressed [ 103.881616][ T9228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.993202][ T9234] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.027186][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 104.030768][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 104.043778][ T9240] ipvlan2: entered allmulticast mode [ 104.046336][ T9242] xt_l2tp: unknown flags: 17 [ 104.046544][ T9240] veth0_vlan: entered allmulticast mode [ 104.263346][ T40] audit: type=1400 audit(1746964766.223:3931): avc: denied { setattr } for pid=9247 comm="syz.3.938" name="cec3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.263792][ T9250] misc userio: The device must be registered before sending interrupts [ 104.619456][ T9257] ip6erspan0: entered promiscuous mode [ 104.973810][ T9271] random: crng reseeded on system resumption [ 105.014093][ T6100] usb 10-1: USB disconnect, device number 2 [ 105.292061][ T9282] netlink: 'syz.4.947': attribute type 10 has an invalid length. [ 105.295577][ T9282] veth1_macvtap: left promiscuous mode [ 105.415843][ T40] audit: type=1400 audit(1746964767.373:3932): avc: denied { append } for pid=9286 comm="syz.3.949" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 105.618893][ T1046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.721792][ T1046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.804396][ T1046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.837599][ T5944] Bluetooth: hci3: command tx timeout [ 105.891782][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.896159][ T1046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.896991][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.903713][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.907703][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.909033][ T9310] bridge: RTM_NEWNEIGH with invalid ether address [ 105.913468][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.950807][ T9316] Option ''MO' to dns_resolver key: bad/missing value [ 106.081844][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.087725][ T1046] bridge_slave_0: left allmulticast mode [ 106.090094][ T1046] bridge_slave_0: left promiscuous mode [ 106.092550][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.165364][ T9327] __nla_validate_parse: 5 callbacks suppressed [ 106.165377][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.961'. [ 106.687974][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.692069][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.696428][ T1046] bond0 (unregistering): Released all slaves [ 106.702471][ T1046] bond1 (unregistering): Released all slaves [ 106.725456][ T9331] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 106.745033][ T9314] chnl_net:caif_netlink_parms(): no params data found [ 106.817570][ T1046] tipc: Left network mode [ 106.851804][ T9348] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 106.954154][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 106.962997][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.969419][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.972804][ T9314] bridge_slave_0: entered allmulticast mode [ 106.974478][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 106.979603][ T9314] bridge_slave_0: entered promiscuous mode [ 106.986915][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.989232][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.991791][ T9314] bridge_slave_1: entered allmulticast mode [ 106.994799][ T9314] bridge_slave_1: entered promiscuous mode [ 107.014222][ T9366] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.046127][ T40] audit: type=1400 audit(1746964769.013:3933): avc: denied { getopt } for pid=9358 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.080027][ T9314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.087087][ T9314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.152451][ T9314] team0: Port device team_slave_0 added [ 107.160502][ T1046] hsr_slave_0: left promiscuous mode [ 107.162988][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.166202][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.169907][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.172802][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.192736][ T1046] veth1_macvtap: left promiscuous mode [ 107.195016][ T1046] veth0_macvtap: left promiscuous mode [ 107.197018][ T1046] veth1_vlan: left promiscuous mode [ 107.199215][ T1046] veth0_vlan: left promiscuous mode [ 107.777461][ T9369] random: crng reseeded on system resumption [ 107.881850][ T40] audit: type=1400 audit(1746964769.843:3934): avc: denied { bind } for pid=9371 comm="syz.5.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.891862][ T40] audit: type=1400 audit(1746964769.853:3935): avc: denied { accept } for pid=9371 comm="syz.5.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.926988][ T40] audit: type=1400 audit(1746964769.893:3936): avc: denied { ioctl } for pid=9368 comm="syz.3.974" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 107.989406][ T9385] binder: 9384:9385 ioctl c0306201 200000000080 returned -14 [ 107.993620][ T9385] binder: BINDER_SET_CONTEXT_MGR already set [ 107.994301][ T5944] Bluetooth: hci0: command tx timeout [ 108.001090][ T9385] binder: 9384:9385 ioctl 4018620d 200000000040 returned -16 [ 108.085780][ T40] audit: type=1400 audit(1746964770.043:3937): avc: denied { connect } for pid=9386 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.393372][ T9314] team0: Port device team_slave_1 added [ 108.396586][ T5992] infiniband syz1: ib_query_port failed (-19) [ 108.406613][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 108.410832][ T9392] gre0: entered promiscuous mode [ 108.431452][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 108.485663][ T9399] ./file0: Can't lookup blockdev [ 108.536908][ T9398] mkiss: ax0: crc mode is auto. [ 108.544223][ T9398] netlink: 'syz.4.984': attribute type 2 has an invalid length. [ 108.544627][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.548971][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.557971][ T9314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.573484][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.575870][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.583854][ T9314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.628090][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 108.629889][ T9314] hsr_slave_0: entered promiscuous mode [ 108.633085][ T9314] hsr_slave_1: entered promiscuous mode [ 108.693497][ T9409] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 108.808420][ T40] audit: type=1400 audit(1746964770.773:3938): avc: denied { lock } for pid=9413 comm="syz.4.988" path="socket:[26356]" dev="sockfs" ino=26356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 108.867296][ T40] audit: type=1400 audit(1746964770.833:3939): avc: denied { create } for pid=9416 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 108.876188][ T1046] IPVS: stop unused estimator thread 0... [ 108.878946][ T40] audit: type=1400 audit(1746964770.843:3940): avc: denied { sys_admin } for pid=9416 comm="syz.4.989" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 108.942060][ T9314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.948655][ T9314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.960842][ T9314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.965751][ T9314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.982332][ T5944] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 109.013107][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.043097][ T9314] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.049415][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.052492][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.061973][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.065071][ T6384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.156185][ T9431] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 109.179556][ T9431] bond3: entered promiscuous mode [ 109.181150][ T9431] bond3: entered allmulticast mode [ 109.190877][ T9431] bond3: (slave ip6gretap1): making interface the new active one [ 109.193447][ T9431] ip6gretap1: entered promiscuous mode [ 109.196976][ T9431] ip6gretap1: entered allmulticast mode [ 109.200141][ T9431] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 109.251436][ T9314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.364655][ T9441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.367584][ T9441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.430234][ T9314] veth0_vlan: entered promiscuous mode [ 109.441810][ T9314] veth1_vlan: entered promiscuous mode [ 109.466134][ T9314] veth0_macvtap: entered promiscuous mode [ 109.471747][ T9314] veth1_macvtap: entered promiscuous mode [ 109.484368][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.488698][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.492689][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.497408][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.502873][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.508474][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.512019][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.516105][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.519312][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.522403][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.526180][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.530448][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.538436][ T9314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.542235][ T9314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.545890][ T9314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.549368][ T9314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.612115][ T6384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.615033][ T6384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.628258][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.630813][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.970676][ T9476] bond0: (slave bridge0): Releasing backup interface [ 109.974433][ T9478] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 109.974799][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.977275][ T9478] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 109.987981][ T9476] bridge_slave_0: left allmulticast mode [ 109.989862][ T9476] bridge_slave_0: left promiscuous mode [ 109.991860][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.001810][ T9476] bond0: (slave bond_slave_0): Releasing backup interface [ 110.010437][ T9476] bond0: (slave bond_slave_1): Releasing backup interface [ 110.031764][ T9476] team0: Port device team_slave_0 removed [ 110.043677][ T9476] team0: Port device team_slave_1 removed [ 110.046246][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.049705][ T9476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.052843][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.055361][ T9476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.061517][ T9476] bond0: (slave netdevsim0): Releasing backup interface [ 110.074188][ T5944] Bluetooth: hci0: command tx timeout [ 110.083771][ T9478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.088286][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1003'. [ 110.109080][ T9480] bond4: (slave gretap1): making interface the new active one [ 110.109795][ T9483] blkio.reset_stats is deprecated [ 110.112160][ T9480] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 110.162509][ T40] audit: type=1400 audit(1746964772.123:3941): avc: denied { connect } for pid=9487 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.239649][ T835] hid-generic 0005:10CF:0009.0003: unknown main item tag 0x0 [ 110.249095][ T835] hid-generic 0005:10CF:0009.0003: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 110.281960][ T9501] netlink: 'syz.4.1010': attribute type 2 has an invalid length. [ 110.332376][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.337603][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.340069][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.342510][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.345105][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.347495][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.349844][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.352270][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.354909][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.357286][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.359661][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.362016][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.364444][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.366823][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.369190][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.371608][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.373943][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.376385][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.378776][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.381131][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.383988][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.386473][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.388921][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.391341][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.393721][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.396410][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.400140][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.402556][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.405181][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.407604][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.409954][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.412403][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.415299][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.417715][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.420110][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.422609][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.425310][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.426922][ T9519] syz.4.1017: attempt to access beyond end of device [ 110.426922][ T9519] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 110.432630][ T9519] gfs2: error -5 reading superblock [ 110.432654][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.436775][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.439144][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.441500][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.443914][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.446431][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.448905][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.451404][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.453825][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.456624][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.459053][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.461416][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.463807][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.466363][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.468740][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.471188][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.473570][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.476137][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.478512][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.478968][ T40] audit: type=1400 audit(1746964772.443:3942): avc: denied { mount } for pid=9520 comm="syz.4.1018" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.480860][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.489428][ T40] audit: type=1400 audit(1746964772.443:3943): avc: denied { mounton } for pid=9520 comm="syz.4.1018" path="/285/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 110.491090][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.501273][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.503644][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.506147][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.508505][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.511119][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.513489][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x0 [ 110.516903][ T1466] hid-generic 0008:0005:0081.0004: unknown main item tag 0x6 [ 110.519281][ T1466] hid-generic 0008:0005:0081.0004: unexpected long global item [ 110.522004][ T1466] hid-generic 0008:0005:0081.0004: probe with driver hid-generic failed with error -22 [ 110.543510][ T40] audit: type=1400 audit(1746964772.503:3944): avc: denied { unmount } for pid=6198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.571428][ T40] audit: type=1400 audit(1746964772.533:3945): avc: denied { remount } for pid=9522 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 110.609504][ T9529] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1021'. [ 110.612488][ T9529] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 110.620708][ T9529] CIFS mount error: No usable UNC path provided in device string! [ 110.620708][ T9529] [ 110.624528][ T9529] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.627486][ T9523] kvm: pic: non byte write [ 110.633718][ T40] audit: type=1400 audit(1746964772.593:3946): avc: denied { setopt } for pid=9527 comm="syz.4.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.821017][ T40] audit: type=1400 audit(1746964772.783:3947): avc: denied { write } for pid=9536 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.906005][ T9539] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 111.027835][ T9541] binder: binder_mmap: 9540 200000ffd000-200001000000 bad vm_flags failed -1 [ 111.032399][ T9541] fuse: Unknown parameter 'fd!tvKC' [ 111.054857][ T9545] netlink: 'syz.6.1027': attribute type 10 has an invalid length. [ 111.062451][ T9545] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.068952][ T9545] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.072045][ T9545] netlink: 'syz.6.1027': attribute type 10 has an invalid length. [ 111.077557][ T9545] netlink: 'syz.6.1027': attribute type 10 has an invalid length. [ 111.080380][ T9545] netlink: 'syz.6.1027': attribute type 10 has an invalid length. [ 111.083215][ T9545] netlink: 'syz.6.1027': attribute type 10 has an invalid length. [ 111.259942][ T9553] tipc: Failed to remove unknown binding: 66,1,1/4:2318218499/2318218501 [ 111.263610][ T9553] tipc: Failed to remove unknown binding: 66,1,1/4:2318218499/2318218501 [ 111.281075][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1031'. [ 111.392000][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1035'. [ 111.677704][ T9577] ================================================================== [ 111.680714][ T9577] BUG: KASAN: global-out-of-bounds in fib6_ifup+0x257/0x2a0 [ 111.683804][ T9577] Read of size 8 at addr ffffffff9af98570 by task syz.5.1039/9577 [ 111.687979][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.688526][ T9577] [ 111.688538][ T9577] CPU: 3 UID: 0 PID: 9577 Comm: syz.5.1039 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 111.688568][ T9577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.688579][ T9577] Call Trace: [ 111.688585][ T9577] [ 111.688592][ T9577] dump_stack_lvl+0x116/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.688622][ T9577] print_report+0xc3/0x670 [ 111.688642][ T9577] ? __virt_addr_valid+0x5e/0x590 [ 111.688668][ T9577] ? __phys_addr+0xc6/0x150 [ 111.688691][ T9577] ? fib6_ifup+0x257/0x2a0 [ 111.688708][ T9577] kasan_report+0xe0/0x110 [ 111.688725][ T9577] ? fib6_ifup+0x257/0x2a0 [ 111.688744][ T9577] fib6_ifup+0x257/0x2a0 [ 111.688760][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.688778][ T9577] fib6_clean_node+0x2a4/0x5b0 [ 111.688799][ T9577] ? __pfx_fib6_clean_node+0x10/0x10 [ 111.688818][ T9577] ? fib6_walk_continue+0xe7/0x8d0 [ 111.688844][ T9577] fib6_walk_continue+0x44f/0x8d0 [ 111.688872][ T9577] fib6_walk+0x182/0x370 [ 111.688899][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.688915][ T9577] fib6_clean_tree+0xd4/0x110 [ 111.688940][ T9577] ? __pfx_fib6_clean_tree+0x10/0x10 [ 111.688966][ T9577] ? mod_delayed_work_on+0x1a7/0x1c0 [ 111.688987][ T9577] ? __pfx_fib6_clean_node+0x10/0x10 [ 111.689005][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.689025][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.689042][ T9577] __fib6_clean_all+0x107/0x2d0 [ 111.689059][ T9577] rt6_sync_up+0xc9/0x170 [ 111.689083][ T9577] ? __pfx_rt6_sync_up+0x10/0x10 [ 111.689108][ T9577] addrconf_notify+0x1709/0x19e0 [ 111.689129][ T9577] ? ip6mr_device_event+0x1bc/0x230 [ 111.689151][ T9577] notifier_call_chain+0xb9/0x410 [ 111.689176][ T9577] ? __pfx_addrconf_notify+0x10/0x10 [ 111.689199][ T9577] call_netdevice_notifiers_info+0xbe/0x140 [ 111.689223][ T9577] netif_state_change+0x165/0x3b0 [ 111.689246][ T9577] ? __pfx_netif_state_change+0x10/0x10 [ 111.689269][ T9577] ? netif_change_flags+0x10d/0x160 [ 111.689288][ T9577] do_setlink.constprop.0+0x3632/0x44b0 [ 111.689310][ T9577] ? __lock_acquire+0xaa4/0x1ba0 [ 111.689334][ T9577] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 111.689356][ T9577] ? irqentry_exit+0x3b/0x90 [ 111.689378][ T9577] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.689399][ T9577] ? br_switchdev_set_port_flag+0x134/0x380 [ 111.689421][ T9577] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 111.689446][ T9577] ? br_port_flags_change+0x6b/0x1d0 [ 111.689473][ T9577] ? br_setport+0x1180/0x17d0 [ 111.689493][ T9577] ? __pfx_br_setport+0x10/0x10 [ 111.689513][ T9577] ? do_raw_spin_lock+0x12c/0x2b0 [ 111.689532][ T9577] ? __local_bh_enable_ip+0xa4/0x120 [ 111.689552][ T9577] ? br_port_slave_changelink+0xd9/0x190 [ 111.689581][ T9577] ? __local_bh_enable_ip+0xa4/0x120 [ 111.689604][ T9577] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 111.689629][ T9577] rtnl_newlink+0x1446/0x2000 [ 111.689652][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.689669][ T9577] ? find_held_lock+0x2b/0x80 [ 111.689688][ T9577] ? avc_has_perm_noaudit+0x117/0x3b0 [ 111.689716][ T9577] ? avc_has_perm_noaudit+0x149/0x3b0 [ 111.689743][ T9577] ? find_held_lock+0x2b/0x80 [ 111.689763][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.689783][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.689801][ T9577] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 111.689821][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.689841][ T9577] rtnetlink_rcv_msg+0x95b/0xe90 [ 111.689861][ T9577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.689886][ T9577] netlink_rcv_skb+0x16a/0x440 [ 111.689907][ T9577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.689926][ T9577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.689952][ T9577] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.689974][ T9577] netlink_unicast+0x53a/0x7f0 [ 111.689995][ T9577] ? __pfx_netlink_unicast+0x10/0x10 [ 111.690018][ T9577] netlink_sendmsg+0x8d1/0xdd0 [ 111.690040][ T9577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.690093][ T9577] ____sys_sendmsg+0xa95/0xc70 [ 111.690118][ T9577] ? copy_msghdr_from_user+0x10a/0x160 [ 111.690137][ T9577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.690159][ T9577] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 111.690178][ T9577] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.690199][ T9577] ? try_to_wake_up+0x157/0x1680 [ 111.690221][ T9577] ___sys_sendmsg+0x134/0x1d0 [ 111.690239][ T9577] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.690268][ T9577] __sys_sendmsg+0x16d/0x220 [ 111.690286][ T9577] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.690302][ T9577] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.690330][ T9577] do_syscall_64+0xcd/0x260 [ 111.690355][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.690371][ T9577] RIP: 0033:0x7f1248b8e969 [ 111.690385][ T9577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.690401][ T9577] RSP: 002b:00007f1249a72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.690418][ T9577] RAX: ffffffffffffffda RBX: 00007f1248db5fa0 RCX: 00007f1248b8e969 [ 111.690431][ T9577] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000007 [ 111.690442][ T9577] RBP: 00007f1248c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 111.690453][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.690463][ T9577] R13: 0000000000000000 R14: 00007f1248db5fa0 R15: 00007fff9a320d08 [ 111.690480][ T9577] [ 111.690485][ T9577] [ 111.692858][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.697035][ T9577] The buggy address belongs to the variable: [ 111.697044][ T9577] __key.0+0x30/0x40 [ 111.697073][ T9577] [ 111.697077][ T9577] The buggy address belongs to the physical page: [ 111.697084][ T9577] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af98 [ 111.697099][ T9577] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 111.697124][ T9577] raw: 00fff00000002000 ffffea00006be608 ffffea00006be608 0000000000000000 [ 111.697140][ T9577] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 111.697150][ T9577] page dumped because: kasan: bad access detected [ 111.697158][ T9577] page_owner info is not present (never set?) [ 111.702431][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.703209][ T9577] [ 111.703216][ T9577] Memory state around the buggy address: [ 111.706880][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.707166][ T9577] ffffffff9af98400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 111.707177][ T9577] ffffffff9af98480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 111.707184][ T9577] >ffffffff9af98500: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 111.707191][ T9577] ^ [ 111.707197][ T9577] ffffffff9af98580: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 111.707205][ T9577] ffffffff9af98600: 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 [ 111.707211][ T9577] ================================================================== [ 111.707301][ T9577] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.707311][ T9577] CPU: 3 UID: 0 PID: 9577 Comm: syz.5.1039 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 111.707325][ T9577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.707333][ T9577] Call Trace: [ 111.707337][ T9577] [ 111.707341][ T9577] dump_stack_lvl+0x3d/0x1f0 [ 111.707374][ T9577] panic+0x71c/0x800 [ 111.707392][ T9577] ? __pfx_panic+0x10/0x10 [ 111.707408][ T9577] ? irqentry_exit+0x3b/0x90 [ 111.707423][ T9577] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.707437][ T9577] ? fib6_ifup+0x257/0x2a0 [ 111.707450][ T9577] ? fib6_ifup+0x257/0x2a0 [ 111.707459][ T9577] check_panic_on_warn+0xab/0xb0 [ 111.707475][ T9577] end_report+0x107/0x170 [ 111.707485][ T9577] kasan_report+0xee/0x110 [ 111.707495][ T9577] ? fib6_ifup+0x257/0x2a0 [ 111.707506][ T9577] fib6_ifup+0x257/0x2a0 [ 111.707515][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.707525][ T9577] fib6_clean_node+0x2a4/0x5b0 [ 111.707536][ T9577] ? __pfx_fib6_clean_node+0x10/0x10 [ 111.707547][ T9577] ? fib6_walk_continue+0xe7/0x8d0 [ 111.707567][ T9577] fib6_walk_continue+0x44f/0x8d0 [ 111.707583][ T9577] fib6_walk+0x182/0x370 [ 111.707598][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.707609][ T9577] fib6_clean_tree+0xd4/0x110 [ 111.707625][ T9577] ? __pfx_fib6_clean_tree+0x10/0x10 [ 111.707641][ T9577] ? mod_delayed_work_on+0x1a7/0x1c0 [ 111.707656][ T9577] ? __pfx_fib6_clean_node+0x10/0x10 [ 111.707667][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.707679][ T9577] ? __pfx_fib6_ifup+0x10/0x10 [ 111.707690][ T9577] __fib6_clean_all+0x107/0x2d0 [ 111.707701][ T9577] rt6_sync_up+0xc9/0x170 [ 111.707714][ T9577] ? __pfx_rt6_sync_up+0x10/0x10 [ 111.707729][ T9577] addrconf_notify+0x1709/0x19e0 [ 111.707741][ T9577] ? ip6mr_device_event+0x1bc/0x230 [ 111.707755][ T9577] notifier_call_chain+0xb9/0x410 [ 111.707769][ T9577] ? __pfx_addrconf_notify+0x10/0x10 [ 111.707782][ T9577] call_netdevice_notifiers_info+0xbe/0x140 [ 111.707797][ T9577] netif_state_change+0x165/0x3b0 [ 111.707809][ T9577] ? __pfx_netif_state_change+0x10/0x10 [ 111.707823][ T9577] ? netif_change_flags+0x10d/0x160 [ 111.707833][ T9577] do_setlink.constprop.0+0x3632/0x44b0 [ 111.707845][ T9577] ? __lock_acquire+0xaa4/0x1ba0 [ 111.707860][ T9577] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 111.707872][ T9577] ? irqentry_exit+0x3b/0x90 [ 111.707883][ T9577] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.707895][ T9577] ? br_switchdev_set_port_flag+0x134/0x380 [ 111.707908][ T9577] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 111.707922][ T9577] ? br_port_flags_change+0x6b/0x1d0 [ 111.707939][ T9577] ? br_setport+0x1180/0x17d0 [ 111.707951][ T9577] ? __pfx_br_setport+0x10/0x10 [ 111.707963][ T9577] ? do_raw_spin_lock+0x12c/0x2b0 [ 111.707974][ T9577] ? __local_bh_enable_ip+0xa4/0x120 [ 111.707986][ T9577] ? br_port_slave_changelink+0xd9/0x190 [ 111.707998][ T9577] ? __local_bh_enable_ip+0xa4/0x120 [ 111.708010][ T9577] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 111.708024][ T9577] rtnl_newlink+0x1446/0x2000 [ 111.708036][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.708045][ T9577] ? find_held_lock+0x2b/0x80 [ 111.708056][ T9577] ? avc_has_perm_noaudit+0x117/0x3b0 [ 111.708067][ T9577] ? avc_has_perm_noaudit+0x149/0x3b0 [ 111.708084][ T9577] ? find_held_lock+0x2b/0x80 [ 111.708094][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.708104][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.708114][ T9577] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 111.708124][ T9577] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.708135][ T9577] rtnetlink_rcv_msg+0x95b/0xe90 [ 111.708145][ T9577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.708159][ T9577] netlink_rcv_skb+0x16a/0x440 [ 111.708171][ T9577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.708182][ T9577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.708196][ T9577] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.708208][ T9577] netlink_unicast+0x53a/0x7f0 [ 111.708220][ T9577] ? __pfx_netlink_unicast+0x10/0x10 [ 111.708233][ T9577] netlink_sendmsg+0x8d1/0xdd0 [ 111.708245][ T9577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.708258][ T9577] ____sys_sendmsg+0xa95/0xc70 [ 111.708271][ T9577] ? copy_msghdr_from_user+0x10a/0x160 [ 111.708281][ T9577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.708293][ T9577] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 111.708304][ T9577] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.708316][ T9577] ? try_to_wake_up+0x157/0x1680 [ 111.708328][ T9577] ___sys_sendmsg+0x134/0x1d0 [ 111.708338][ T9577] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.708355][ T9577] __sys_sendmsg+0x16d/0x220 [ 111.708364][ T9577] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.708374][ T9577] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.708390][ T9577] do_syscall_64+0xcd/0x260 [ 111.708404][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.708414][ T9577] RIP: 0033:0x7f1248b8e969 [ 111.708423][ T9577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.708433][ T9577] RSP: 002b:00007f1249a72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.708443][ T9577] RAX: ffffffffffffffda RBX: 00007f1248db5fa0 RCX: 00007f1248b8e969 [ 111.708449][ T9577] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000007 [ 111.708455][ T9577] RBP: 00007f1248c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 111.708461][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.708467][ T9577] R13: 0000000000000000 R14: 00007f1248db5fa0 R15: 00007fff9a320d08 [ 111.708475][ T9577] [ 111.709858][ T9577] Kernel Offset: disabled VM DIAGNOSIS: 11:51:01 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff973b91e8 RBX=0000000000000059 RCX=000000000000005a RDX=0000000000000110 RSI=000000000000005a RDI=ffffffff973a6088 RBP=0000000000000030 RSP=ffffc9000368f740 R8 =ffffffff95af8e10 R9 =0000000000000002 R10=ffffc9000368f8e0 R11=0000000000000000 R12=ffffffff81978870 R13=ffffc9000368f7e0 R14=ffffffff81979380 R15=ffffffff973a6088 RIP=ffffffff8197a90a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff7dedb408 CR3=000000004ca9a000 CR4=00352ef0 DR0=00000000c83a3905 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98edec30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1516c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1516c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1516c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1516c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1516c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1516c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000016c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 000000000000016c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000012b651 RBX=0000000000000001 RCX=ffffffff8b6cd419 RDX=0000000000000000 RSI=ffffffff8dbe1547 RDI=ffffffff8bf483a0 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff9084f610 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ba1dc31b0 CR3=0000000047687000 CR4=00352ef0 DR0=00000000c83a3905 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9a321090 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1248c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1248c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1248c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1248c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1248c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1248c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000178 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000178 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000113333 RBX=0000000000000002 RCX=ffffffff8b6cd419 RDX=0000000000000000 RSI=ffffffff8dbe1547 RDI=ffffffff8bf483a0 RBP=ffffed1003ad0910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d684880 R14=ffffffff9084f610 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ba03f6d00 CR3=0000000039afc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ba1d8502a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ba1f83488 00007f0ba1f83480 00007f0ba1f83478 00007f0ba1f83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ba2aed100 00007f0ba1f83440 00007f0ba1f83458 00007f0ba1f834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ba1f83498 00007f0ba1f83490 00007f0ba1f83488 00007f0ba1f83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f5335 RDI=ffffffff9adf7520 RBP=ffffffff9adf74e0 RSP=ffffc90004d06628 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9adf74e0 R15=ffffffff854f52d0 RIP=ffffffff854f535f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1249a726c0 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3cb31d7008 CR3=000000004b908000 CR4=00352ef0 DR0=00000000c83a3905 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd96411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd96411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd96411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd96411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd96411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd96411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6848f551809a10e 662e839fab0e65bf ef0a30ebd8e34a8f ec309b5bd196aa99 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3042670638b7f2de d7881d206d0bd954 0c72b6934bb0ae34 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 16876923b79579e2 a094b8d5aaffee7f 1f7e06716cc5ab93 504ea4f71085b614 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 537741ca3fbb9a54 1cfad0127c6e597b 857a24d8c7345e83 b5de5c78d1034565 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb6dd3944ed2dfd9 77b9d9cfde1e2feb 61479199475e1687 6923b79579e2a094 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8d5aaffee7f1f7e 06716cc5ab93504e a4f71085b6143042 670638b7f2ded788 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d206d0bd9540c72 b6934bb0ae344f83 5b5ee8e1f00bc684 8f551809a10e662e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000