last executing test programs: 22.34593759s ago: executing program 1 (id=102): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r5, &(0x7f0000000080)="673d2e3623657cfa81a25a0358e8286f65c2a1e2b11bfda8e5ad6bfdb3e957e631b329ddaad360499cf9bff28c9c91095ed1aef2d03a4093dec6ed44b06629e55ac567baed8617f189a5d54520c521aff5cbd94fd4d8a6e8d7a114de0724405b11950130a994627138a8", 0x6a) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r9, &(0x7f0000000640), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r9, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r8, 0xb701, 0x0) r10 = dup(r7) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$BTRFS_IOC_RM_DEV(r10, 0x5000940b, &(0x7f0000000a80)={{r6}, "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"}) read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 22.073884774s ago: executing program 1 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100), 0x4) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf2549000000080001000600000008000300637d4bd1b837a7c101a50f8f518a0da8fa590df82863d6010000001c036991da04158411df7365c153c94aeca1b5b9c3e2c88c3c5a0c5723f1a57459869403984266708e631865a65a72d8b848", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x0) setpriority(0x0, 0xffffffffffffffff, 0xf6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) accept4$vsock_stream(r5, 0x0, 0x0, 0x80800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xe1, 0x0, 0x1, [@generic="9e1b73d1fa90f57f0c5dfbe64c0cbb59b43d4d13905a9670479f21c67da9eb32a7ac03bf90d9c3f733a58daf7f832f6db521e0f6ba90beb3973c2e335ecb2b37b1f82b2e06"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="0f01390ff2f60f300f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32a2b50280800f38dfec", 0x33}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r10, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r13 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPAN_DISPLAY(r13, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r12, @ANYRES64=r11], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ffffff0000000000000000062635973ac3bf60a655bce1e80000000000", 0x1d}], 0x1}, 0x200048d4) socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 21.79609431s ago: executing program 1 (id=108): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x27a600) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000040)={0x2, [0x5, 0x21, 0x4], [{0x7, 0x5}, {0x7, 0x3, 0x0, 0x1}, {0x4, 0xfffffffc, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x8, 0x0, 0x1, 0x1, 0x1}, {0xc344, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x4, 0x1}, {0xfff, 0x1a, 0x1, 0x1}, {0x58b447a3, 0x33215892, 0x0, 0x1, 0x1, 0x1}, {0x10, 0x9}, {0xc, 0xfff, 0x0, 0x0, 0x1}, {0x1, 0x5, 0x1, 0x1}], 0x10}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000180)={{r1}, "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"}) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000001180), 0x2000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000011c0)={0xd6, [[0x80, 0x328200, 0x3, 0xfffffffc, 0x4, 0xa5, 0x0, 0x3], [0x400, 0x200, 0x1, 0x5, 0x100, 0xfe0, 0x9, 0x7], [0xfffffffd, 0x22277166, 0xad7d, 0x3, 0x6, 0x2, 0xffffff6e, 0x401]], '\x00', [{0x8, 0x7fff, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xfffffff7, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x1e6}, {0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x98, 0x86, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x1, 0x1, 0x1}, {0x5, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x0, 0x0, 0x1}, {0x1, 0x3, 0x1, 0x0, 0x1}, {0x2, 0x3, 0x1, 0x1, 0x1}, {0x7, 0x2, 0x0, 0x1, 0x1, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001440)={{0x1, 0x1, 0x18, r3, {0xe, 0x3}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001480)={0x0, 0xd, 0x0, [0x2, 0x6, 0x7fc000000000000, 0x1, 0xffffffff], [0x7fffffffffffffff, 0x8001, 0xfffffffffffffffa, 0x2, 0x7, 0x8000000000000001, 0x8, 0x80, 0x9c, 0x7, 0x8, 0xa, 0xffffffffffffffff, 0x800, 0xfffffffffffffffc, 0x7fffffff, 0x8, 0x9, 0x4, 0x81, 0x8, 0xc3f, 0x400, 0x3f, 0x4, 0xffffffffffffffff, 0x6, 0x6, 0x0, 0x5, 0x8, 0x59, 0x0, 0x8, 0x4, 0xfc, 0x53a1, 0x0, 0x1, 0x3, 0x5, 0x980, 0x7, 0x9, 0x1, 0x1, 0xe, 0xfffffffffffffffa, 0x74b, 0x8, 0x775, 0x400, 0x93a1, 0x1, 0x2, 0x5, 0x1, 0x10, 0x90000000000000, 0x4, 0x7fffffff, 0x3ff, 0x5, 0x0, 0xffff, 0x2, 0x8, 0x8, 0x4, 0x6, 0xae1e, 0x9, 0x2, 0x4, 0x6, 0x3, 0xa, 0x7, 0xffffffffffffff2a, 0xe69, 0x9, 0x8, 0x3, 0x8, 0x8, 0x5645, 0x6, 0x4, 0x2, 0x0, 0x7086, 0x6, 0x6, 0x5, 0xffffffffffffffff, 0x6, 0x1, 0x100, 0x80000000, 0x1, 0x0, 0xf, 0x0, 0x7fff, 0x100000001, 0x0, 0x9, 0x7, 0xffffffffffffff81, 0x3, 0x6, 0x0, 0x8001, 0x5, 0x0, 0x1000, 0x1, 0x5, 0x6163, 0xc000000000, 0x100000001]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000018c0)={r5, 0x6, 0x0, [0x0, 0xb3ed, 0x5], [0x9, 0x10, 0xffffffffffffff06, 0x8000000000000000, 0x4, 0x7fffffffffffffff, 0x6, 0x13, 0x18c, 0x2, 0xfa76, 0x1, 0x7f, 0x8000000000000000, 0x5, 0x1, 0x2, 0x6c, 0x5, 0x7fffffffffffffff, 0x0, 0x5784, 0x4, 0x4, 0x7fffffff, 0xfffffffffffffed2, 0x8000, 0x5, 0x40, 0x7fff, 0x0, 0x2, 0x9, 0x3, 0x2, 0xd55, 0x9, 0x8, 0x80000001, 0x7f, 0x8, 0x68, 0x9, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x8, 0x80000000, 0x9, 0x9, 0xb13, 0x6, 0x2, 0x4, 0x0, 0x3ff, 0xb81, 0xa3, 0xda4, 0x4, 0x4, 0x5, 0xa, 0x0, 0x81, 0x7ff, 0xe5dc, 0x2, 0x7fffffff, 0x1, 0x7, 0x9, 0x3, 0xfffffffffffffa0e, 0x0, 0x8, 0x8, 0x9, 0x6, 0x4, 0xd5c, 0x0, 0xa, 0x1, 0xfffffffffffffffb, 0x70000000000000, 0x7, 0x7, 0x8, 0x9, 0x1, 0x2, 0x401, 0x9, 0x9, 0x7, 0x100000000, 0x222f4398, 0x200, 0x7, 0x7fffffffffffffff, 0x800, 0x0, 0x7ff, 0x1, 0x6, 0x1, 0x1, 0xf18d, 0x4, 0xfffffffffffffffb, 0x0, 0x1, 0x7, 0x8, 0xd2c, 0xa2d6, 0x7, 0xfffffffffffffffd, 0x8737, 0x2dd, 0x8]}) r6 = syz_usbip_server_init(0x5) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000001d40)) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000001d80)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000001dc0)={0x6, 0xc, 0x1, 'queue1\x00', 0x3}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000001e80)) ioctl$BLKSSZGET(r7, 0x1268, &(0x7f0000001ec0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x54, r8, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5a}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}]}, 0x54}}, 0x8880) open_by_handle_at(r6, &(0x7f00000020c0)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x8}}, 0x412002) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r7) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x20, r10, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x10, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000002240)={0x8, "60bfb44c274e6ce6a8366dc658c4c8f38af3f9ea2fb0a632355cd67437f2e14f"}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000002280)={0x101, 0x2, 0x1, 0x0, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000022c0)={r7, 0x6, 0x2c0, 0x10000}) lseek(r11, 0xc, 0x1) r12 = accept4$rose(r11, 0x0, &(0x7f0000002300), 0x80000) r13 = openat$audio1(0xffffffffffffff9c, &(0x7f0000002340), 0x400000, 0x0) poll(&(0x7f0000002380)=[{r12, 0x221}, {r1, 0x40}, {r13, 0x80}], 0x3, 0xffffff9f) 21.265857079s ago: executing program 1 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000000)="b673422400000000"}, 0xfffffffffffffd7f) (async) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 32) r4 = syz_open_procfs(0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) (async) setpgid(0x0, r5) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000480)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf984}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0xc, 0x1, 0x10, 0xfffffffffffffffc}], &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x1b, &(0x7f00000002c0)=""/27, 0x41100, 0x0, '\x00', 0x0, 0x17, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x5, 0x1, 0x9}, 0x10, 0x25dad, r4, 0x5, &(0x7f00000003c0)=[0x1], &(0x7f0000000500)=[{0x2, 0x5, 0x9, 0xb}, {0x0, 0x3, 0xa, 0x8}, {0x1, 0x1, 0xc, 0x9}, {0x2, 0x2, 0xe, 0x9}, {0x3, 0x3, 0x9, 0x1}], 0x10, 0xdb95}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000240), &(0x7f0000000640)=r6}, 0x20) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000040)="390800001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003000137256400000000ffffffff744dc48f577e56ec00003155885f79c77fb634b8fe8ae81dc6ed5a665a41ac2b57849548a88bf3fc09de602b6c386f1d00"/111, 0x6f}], 0x1) 21.205723922s ago: executing program 1 (id=115): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}, 0x0, 0x7, [{{0xa, 0x4e20, 0xfffffff7, @remote, 0x1}}, {{0xa, 0x4e22, 0x4, @loopback, 0x7fffffff}}, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x6}}, {{0xa, 0x4e21, 0x6, @mcast1, 0x4}}, {{0xa, 0x4e24, 0x5d835cca, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5d}}, {{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}]}, 0x410) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000440)='net/kcm\x00') sched_setattr(r1, &(0x7f0000000480)={0x38, 0x0, 0x79, 0x47, 0x7, 0x4, 0x8, 0xa, 0xab3b, 0xce5}, 0x0) sched_getattr(r1, &(0x7f00000004c0)={0x38}, 0x38, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x180, 0x3f, 0x400, 0x70bd26, 0x25dfdbfe, {0x19}, [@generic="4c066f94b33a52a2b79a0434590339285d46df4e76e9f8c0248d51c740f51163b7c3f948de50fba38b0fd12a019e35bcd560d925b0fb3c2eeb1be359cca9e4020e8880c141a46c05c08bbb1a03666a8d6bc617fc929c2b0ee6b7d13542b1faa91392c70222d13984be1846c8b8507b4848c82db2e3b678b7b2cd92eda92c77196532ac91f759dd96a683475142589fd6f1e947ac4a1c644a6f5dcc449e0b214a981b797d9c47c5534c1a1b22cc77008829ce1218af04f166b7653a0832f9087a7385dc3adaca42ad7eb198c3106a0e07337849bf84b5e74341b5ee3e8e2ff44782e2d4fdc3", @generic="46a846ee4d21ca9e302069b72854a976dd095de94c0043fa954b52561cf6e4be594a1bc9bc347fb6a90fb326619918bdcb5392573fce19b9247c61160289145d3207e0ba1133cb711441370b9c96790b4a077510e164e7f955154933460197df116ca5fce067a788a8e9ebf4c711a92bc3bfb4196a3daa535f921f2908e15532423d4269c85e"]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x54) (async, rerun: 32) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000780)={0xffffffff, {{0xa, 0x4e23, 0xffffff72, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c7}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}, 0x108) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xff\xff'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sched_getattr(r1, &(0x7f0000000a00)={0x38}, 0x38, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000a40)={0x101, {{0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x252da3af, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}}, 0x108) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000c80)={'gre0\x00', 0x0, 0x7, 0x8, 0x3, 0xffffffff, {{0x1a, 0x4, 0x1, 0x8, 0x68, 0x64, 0x0, 0xc0, 0x29, 0x0, @remote, @loopback, {[@generic={0x88, 0xc, "1f451723dd6b030be9b1"}, @end, @noop, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x4, [{@empty, 0xffff}, {@broadcast, 0x9}, {@broadcast, 0x1}]}, @rr={0x7, 0xb, 0x56, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @lsrr={0x83, 0x1b, 0xe9, [@multicast2, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @empty]}, @end]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000e80)={'erspan0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x800, 0x10001, {{0x2e, 0x4, 0x0, 0x27, 0xb8, 0x5, 0x2553, 0x7f, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0xc, 0x30, 0x1, 0x5, [{@loopback}]}, @rr={0x7, 0x1f, 0x4c, [@multicast1, @multicast2, @broadcast, @empty, @private=0xa010100, @remote, @remote]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xea, 0x3, 0x9, [{@private=0xa010100, 0xfff}, {@remote, 0x10}]}, @timestamp_prespec={0x44, 0x24, 0x1d, 0x3, 0x0, [{@multicast2, 0x200}, {@local, 0x61d}, {@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x2a8ea84b}]}, @timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x2, [{@empty, 0xffffffff}, {@broadcast, 0x7fffffff}, {@multicast1, 0xce23}, {@local, 0xffff}, {@rand_addr=0x64010102, 0x5}, {@empty, 0x3ff}]}]}}}}}) (rerun: 64) getsockname$packet(r2, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) (async) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000f80)={@loopback, @initdev, 0x0}, &(0x7f0000000fc0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001080)={'sit0\x00', &(0x7f0000001000)={'tunl0\x00', 0x0, 0x7, 0x708, 0x4, 0x649, {{0x9, 0x4, 0x1, 0x17, 0x24, 0x64, 0x0, 0xba, 0x2f, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4}, @noop, @generic={0x44, 0xa, "cdf0ee3fbe9af556"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001140)={'sit0\x00', &(0x7f00000010c0)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x7, 0x2, {{0x18, 0x4, 0x2, 0xe, 0x60, 0x65, 0x0, 0xff, 0x29, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x17, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x34, 0x81, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6fc}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x8}, {@private=0xa010102, 0x6}, {@broadcast, 0x80}, {@broadcast, 0x80000000}, {@private=0xa010100, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000013c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001180)={0x1d4, r7, 0x800, 0x910d, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001480)={'gretap0\x00', &(0x7f0000001400)={'sit0\x00', r15, 0x7, 0x7, 0x46, 0x9, {{0xd, 0x4, 0x1, 0x21, 0x34, 0x3, 0x0, 0x2, 0x4, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x1b, 0x9b, [@local, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x25}]}, @generic={0x44, 0x5, "d1503c"}]}}}}}) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001540)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x40, r16, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x88d) 20.925137676s ago: executing program 1 (id=121): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7c3d, r0, 0x4}, 0x38) r2 = socket$kcm(0xa, 0x5, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x5, 0x800}, {0x4, 0x6}, {0x0, 0x0, 0x800}], 0x1f4, 0x0) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) 20.871765275s ago: executing program 32 (id=121): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7c3d, r0, 0x4}, 0x38) r2 = socket$kcm(0xa, 0x5, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x5, 0x800}, {0x4, 0x6}, {0x0, 0x0, 0x800}], 0x1f4, 0x0) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) 14.686004443s ago: executing program 2 (id=225): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r5, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000000f40)}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c034ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 13.81554544s ago: executing program 2 (id=236): r0 = syz_io_uring_complete(0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @private}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000100)) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) flistxattr(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031402002dbd7000000000000900020073796500140033006261746164765f736cb5b0b8b15002783678dd03c2886176655f3100"/69], 0x38}, 0x1, 0x0, 0x0, 0xd4d75d91079dfb53}, 0x0) syz_io_uring_complete(0x0) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @private}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000100)) (async) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4) (async) socket$netlink(0x10, 0x3, 0x14) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) (async) flistxattr(r3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031402002dbd7000000000000900020073796500140033006261746164765f736cb5b0b8b15002783678dd03c2886176655f3100"/69], 0x38}, 0x1, 0x0, 0x0, 0xd4d75d91079dfb53}, 0x0) (async) 13.814504655s ago: executing program 2 (id=237): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x101080, 0x2) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000100)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12.934513739s ago: executing program 2 (id=245): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'dvmrp0\x00', 0x200}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x8805) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x5a57]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x68}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x48}}, 0x40090) r5 = syz_open_dev$usbmon(&(0x7f0000000380), 0x9, 0x20a103) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@getqdisc={0x48, 0x26, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6}, {0x7, 0x1}, {0x1, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x800) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000600)=0x5, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000021c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000000700)=@newchain={0x1a60, 0x64, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x7, 0xc}, {0xf, 0x3}, {0x10, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @filter_kind_options=@f_fw={{0x7}, {0x1a1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bond0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'nicvf0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xfff7}}, @TCA_FW_ACT={0x19e0, 0x4, [@m_police={0x11c4, 0xb, 0x0, 0x0, {{0xb}, {0x10ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0xf85, 0x9d, 0xffffff96, 0x80, 0x8, 0x1000, 0x8001, 0x2, 0x1, 0x5, 0x9, 0xc09, 0x5, 0x2, 0x4, 0x0, 0x788, 0x8, 0x10001, 0x1, 0x8, 0x7, 0x0, 0x0, 0x40, 0x4, 0x0, 0x8, 0x0, 0xfffffff9, 0xf88, 0x2, 0x9, 0x0, 0xb3a, 0x8001, 0x4, 0x2, 0x80000001, 0x400, 0x8, 0x3, 0x8001, 0xa, 0xfe2, 0x80000000, 0x7, 0x1, 0x7, 0xf2e4, 0x3, 0x672, 0x7fff, 0x5, 0x5, 0x0, 0x1, 0xe942, 0xb, 0x0, 0x0, 0x50000, 0x7, 0x8, 0x3, 0x3, 0x7, 0x1000, 0x300, 0x7, 0x3, 0xb, 0x5, 0x10, 0x81, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x4, 0x9d, 0x2, 0x101, 0x72, 0x5, 0x0, 0x8, 0xcc, 0xe000000, 0x2, 0x0, 0x5, 0x2, 0x5, 0x81, 0xa5, 0x828b, 0x1, 0x6ce, 0x2, 0xe1, 0xfffffffc, 0x1, 0x0, 0xc, 0xad, 0x1, 0x5, 0x5, 0xfffffffd, 0x8, 0x4, 0x4, 0x80000001, 0x7, 0x1, 0x1, 0x6, 0x324, 0x6, 0x48, 0x8001, 0xe8c, 0x7a057d00, 0x3, 0x1ff, 0x4, 0x5, 0xc, 0x4, 0xf1, 0x7, 0x3d, 0x7f, 0x5, 0x4, 0x1, 0x81, 0xffffffff, 0x3, 0x2000000, 0x9, 0x5, 0x512, 0x4, 0x6, 0x9, 0xffffffff, 0xb0, 0xe, 0x2a, 0x4, 0x8, 0xffffffff, 0x3, 0x10001, 0x6, 0xd, 0xb9, 0x1, 0x2, 0x2, 0xc, 0xa5, 0x8, 0x5, 0x10000, 0x9, 0x8, 0x7, 0xa2, 0xfffffff9, 0x3, 0x4, 0xffffff82, 0xa7, 0x800, 0x3, 0x2000000, 0x6, 0x2450, 0x2, 0xff, 0x5, 0x2, 0x4, 0x8, 0x8, 0x7f, 0x3a1, 0x2, 0x2, 0x7, 0x7, 0x7f, 0x1, 0x9, 0x1, 0x9, 0xfff, 0x99ac34, 0x1a, 0x7, 0x69, 0x10001, 0x6, 0x8, 0x3, 0x4, 0x4, 0x62a, 0x5, 0x2, 0xfffff000, 0x40, 0xff, 0x8, 0xffffffff, 0xb, 0x5, 0x5, 0x8, 0x7, 0x4, 0x35, 0x1, 0xffff, 0x40, 0xfffffffc, 0x1, 0x10, 0x1, 0x8, 0x6, 0x401, 0x5, 0x1, 0x7f, 0x4, 0x1, 0x2, 0x3, 0x2f, 0x200, 0x5, 0x8f1d, 0x140000, 0x8000, 0x6, 0x3, 0x10000, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x72fe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x417d, 0x0, 0x30000, 0x0, 0x7, 0xfffffff7, 0x3, 0x101, 0x40, 0x1, 0x7fff, 0x80000000, 0x71d, 0x5, 0xd, 0xf62, 0x6c5, 0x2, 0x2, 0xf809, 0x2, 0x3, 0x0, 0x6, 0xfffffffc, 0x4, 0x7f, 0x3, 0x2, 0x98, 0x9, 0x200, 0x1, 0x4939, 0x0, 0x1ff, 0x3, 0x88f, 0x2, 0x9, 0x1, 0x449, 0x7, 0x80, 0xd40, 0xe, 0x9, 0x7fffffff, 0x0, 0x2, 0x8, 0x9, 0x7, 0x7, 0xa, 0xffffffff, 0x200, 0xe2bb, 0x81, 0xfffffffa, 0x2, 0xaac1, 0xe, 0xe, 0xb96, 0x7, 0x7, 0x7, 0xf, 0x9, 0xfffffff9, 0x4, 0x7, 0x7, 0x7000, 0x0, 0x3, 0x8000, 0xfffffffd, 0x1000, 0x9, 0x8, 0x7, 0x101, 0x5, 0x7fff, 0x5e9, 0x7f, 0x6, 0x1, 0x1, 0xc406, 0x5, 0x3, 0x5, 0x2, 0xf, 0x3, 0x94c, 0xffff, 0x3ff, 0x8001, 0x0, 0x8, 0xa, 0x9, 0x285, 0xffffffc0, 0x1, 0x8, 0xffffffff, 0xfffffffe, 0x207, 0x0, 0x0, 0x36ea, 0x6, 0x3, 0x9, 0x0, 0xc56, 0xffff0e5a, 0x1, 0x3bf, 0x3, 0x401, 0x200, 0x0, 0x3ff, 0x4, 0x5, 0x1, 0x7c2c, 0x4, 0x1, 0x8, 0xffffffff, 0xbd, 0x81, 0x5, 0x9, 0x6, 0x5, 0x3, 0xb, 0x9, 0x6, 0x2, 0x2, 0x9, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xc, 0x8000, 0x9, 0x8, 0x7, 0x6, 0x1d0, 0x3b6, 0x0, 0x0, 0x9, 0x400, 0x6e6, 0x8, 0x5, 0x1, 0x8, 0x9, 0x8, 0x8, 0x7709, 0x80000001, 0x80000001, 0x50e, 0x9, 0x5bb, 0x6, 0x8, 0x3, 0x2, 0x0, 0x3757f2ba, 0x23, 0xa, 0x85, 0x7fff, 0x81, 0x2, 0x5, 0x2, 0x7fff, 0x8, 0x8, 0x7f, 0x1c44, 0x22e7, 0x8e, 0x6142, 0x9483, 0x81, 0x6, 0x10, 0x8, 0x5, 0x3, 0xaaa1, 0x3ac, 0x9, 0xd, 0x7, 0x9, 0x1, 0x0, 0x5, 0xb4b, 0x25, 0xffff, 0x3, 0x7, 0x3ff, 0x68523502, 0x0, 0x9, 0x7, 0x4, 0x7, 0x8, 0x3, 0x4, 0xffffffff, 0x6850, 0x6, 0x7, 0x8001, 0x5, 0xfffffff9, 0x6983, 0x0, 0xfffffff7, 0x9, 0x2, 0x1ff, 0x0, 0x1, 0x800, 0x7, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x800, 0x1, 0x800, {0x5, 0x1, 0xa686, 0x7, 0x7, 0x8}, {0xe5, 0x3, 0x39, 0x7fff, 0x6f5, 0x10000}, 0x3, 0xf}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x9106e9df, 0x1, 0x4, 0x2, 0x12c2, 0x1, 0xffffff65, 0x7, 0x2, 0x4, 0x2, 0x4da8, 0x4013, 0x5, 0x6, 0x2, 0xee, 0x7, 0x10001, 0x101, 0x9452, 0x1, 0x20080, 0x8, 0x5, 0x8, 0xfbcd, 0x2, 0x8001, 0x1ff, 0x9, 0xe, 0x7f, 0x4, 0xa, 0x1, 0x26, 0xa1ec, 0x7, 0x7, 0x0, 0xfffffffe, 0x20, 0x96, 0x5, 0x4, 0x1, 0xffffffa5, 0x5, 0x8, 0x6, 0x1, 0x1, 0x4, 0x8, 0xf3, 0x101, 0x6, 0xfffffffb, 0x6, 0xef, 0x8, 0x7f, 0x0, 0x8, 0x0, 0x3b, 0xb2, 0x8, 0x7, 0x100, 0x4, 0x528, 0xfffffff8, 0x7, 0x6, 0x4, 0x7, 0xd, 0xffff, 0x3d6, 0x1, 0x800, 0x5, 0xb62c, 0xd, 0x9, 0xfffff801, 0x4, 0x401, 0x2, 0x80000001, 0x6992, 0x5, 0xff, 0x1, 0x6, 0x80, 0x40, 0x81, 0x6, 0x3, 0x8, 0x8, 0x0, 0x2, 0x8, 0xf, 0x80, 0x4, 0x3, 0x2, 0x73478b4f, 0x1000, 0x2, 0x81, 0x4, 0x6, 0x8001, 0x9, 0x8, 0x8, 0x4, 0x783, 0x4, 0x9, 0x5, 0xe, 0x4, 0xfa18, 0x9, 0xffff, 0x8, 0x7fffffff, 0x8001, 0x7, 0x744, 0x8, 0x2019, 0x5, 0x1000, 0x4, 0x4b7f, 0x6, 0xa82, 0x0, 0x3, 0x9, 0x1, 0x0, 0x3, 0x1d23, 0xdf5, 0x7, 0x9, 0x4, 0x0, 0x7, 0x7, 0xffffffff, 0x6, 0x1, 0xc79, 0x7, 0x1, 0x1800, 0xb000, 0x0, 0x0, 0x100, 0x800, 0x7fffffff, 0x1, 0x6, 0x62a, 0x9, 0x2, 0x1f, 0x401, 0x80000000, 0x7ff, 0x7, 0x1, 0x9, 0xfffffffa, 0x6fd6, 0x9, 0x28000000, 0x80000000, 0x1ff, 0xc, 0x6, 0xfffffffe, 0x7, 0x0, 0x1, 0x0, 0x1155, 0x1, 0xe, 0x9, 0xb, 0x2, 0x10000, 0x8, 0xfffffffa, 0x11f3b6e, 0x9a21, 0x1, 0x0, 0x7ff, 0x4, 0x8, 0x8, 0xf4, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x6, 0x9, 0x2, 0xfffffff8, 0x7bde, 0x72ea5908, 0x9, 0x4, 0x10, 0x179, 0x8, 0xfffffff9, 0x9, 0x80000000, 0x4, 0x3, 0x9, 0x2, 0x1, 0x0, 0x2, 0x2, 0x6, 0x4, 0x89a, 0x9e9d, 0x0, 0x6, 0xe, 0x5d5, 0x5, 0x7c21, 0x9, 0x7fff, 0x8, 0x2, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x9, 0x472, 0x3ff, {0xdb, 0x9883b452f8cba79d, 0x9, 0x71, 0x4, 0x1}, {0x2, 0x1, 0x0, 0x2, 0x4, 0x2}, 0x9, 0x6, 0xa1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x9, 0x1b, 0x0, 0x2, 0x0, 0x7, 0xbc3, 0xb, 0x1, 0x200, 0xffffffff, 0x0, 0x1fffc000, 0x7f, 0x4, 0x65, 0x4, 0x80000001, 0xfffffbff, 0x1004000, 0xffff, 0xff, 0x6, 0x6, 0x8, 0x6, 0x6, 0x4, 0x8, 0x1ff, 0x8, 0x4, 0xd, 0x8, 0xdb, 0x8d8, 0xfffffc01, 0x3, 0xffffff80, 0x1, 0x0, 0x60000000, 0x3, 0x5, 0x6, 0x1, 0xf, 0x0, 0x3, 0x10, 0x800000, 0x7, 0x9, 0xb7, 0x3ff80000, 0x7, 0x7ff, 0xad, 0x8, 0x9, 0x7f, 0x7c4b, 0x8ba440a0, 0x3, 0x2, 0x0, 0x8, 0x8, 0x0, 0x2, 0x8, 0x2, 0xa, 0x0, 0x7, 0x6, 0x80000000, 0x0, 0xfffffffb, 0x10, 0x7, 0x3, 0x100, 0xe, 0x3c, 0x3, 0x50b, 0x5, 0x9, 0x1, 0x2, 0x0, 0x9, 0x8, 0x7, 0x5, 0xc633, 0x8, 0x4, 0x6, 0x7, 0x1, 0x1, 0x800, 0xa, 0x7fffffff, 0x8, 0xfffffffa, 0x6, 0xae4, 0x5, 0x3, 0x1000, 0x9, 0x0, 0x10000, 0x0, 0x0, 0x10000, 0x8, 0x5, 0xf, 0x8000, 0x5, 0xfffffc00, 0x6, 0x4, 0x400, 0xff, 0x1, 0x4, 0x8, 0x5, 0x30, 0x8000, 0x0, 0xa, 0x7ccb, 0x7, 0x7, 0x91c, 0x9, 0xffff, 0x0, 0x6, 0xb2, 0x0, 0x10000, 0xffffffe1, 0x5d7, 0x9, 0x6, 0x10001, 0x9, 0x7, 0x1, 0x6, 0x4, 0x6, 0x8, 0x64f469f9, 0x7, 0xfffffbff, 0x5, 0x3, 0x1, 0xe, 0x8, 0x1, 0x3, 0x0, 0x39, 0x1, 0x1, 0x7ff, 0x10001, 0x8c, 0x7, 0xfffffffe, 0x7fff, 0xded, 0xc8d, 0x6, 0x0, 0x3, 0x8, 0x9, 0x8, 0x4, 0x8, 0x4, 0x7, 0xfffff001, 0xfffffff7, 0x13c2, 0x0, 0xfffffff9, 0x7fffffff, 0xab, 0x5, 0x7fffffff, 0x9, 0x8, 0x5, 0x0, 0x5, 0x2, 0x6, 0x114f, 0x3, 0x2, 0x6, 0x3, 0x1, 0x4, 0xcb7, 0xff, 0x400, 0x9, 0x2, 0x5, 0x1, 0x2, 0xdd, 0x5, 0x9, 0x7, 0x4fa8, 0x10001, 0x8, 0x6, 0x843, 0x6b, 0xfffffff7, 0x3c, 0xffff, 0x3, 0x5, 0x9, 0xf, 0x8, 0x10, 0x80000000, 0x800, 0xd, 0x7fffffff, 0x800, 0x1, 0x2, 0x3, 0x2, 0x7, 0x0, 0x901d]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0xad, 0x6, "236f5579401d2bd3873b1f134cb05a4c5708ed1e9281d00c2a8deab89b24fae1324c948aef210b82af6c2d2351304093c00572a44e14ce0e3a10e75bae378e154db219a9f358856e4e79c0bff8a340c1cba2d7adfc35abc2dd869a65f57698dc3562956d3ed608e2aadafe66c0f874019fe98b52b422bce6c06db0316e4327a7f6e7fe4ef5605ce7fdc7b9fc392a1c27cfef7b54acffa085dcc92c1c9a9765c7758b1f48f69112a735"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xac, 0x1c, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0xb}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xd6}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4f, 0x6, "8e5788cdee808bba121379a35d1c4b3d552f390578fb598b7d8acc0a76d4ee0184ac735bc2c21fc2b3c47846053a55a32d9529321d6e0347229a65699d865c81737dd6fbfedd6ce1f18945"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x114, 0x1f, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x29, 0x6, 0x6, 0x101}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x455}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xaf, 0x6, "0cbd928659ce36cde7685f196509823dd9d6630a7b8d0fb62ffecf32ddfc188d36fe0cb22cb70165b767d59106a347ac9eae3efee66b112bd2d32412ad7a3ee7f4d728d98b66449c31daf9729bee55f2c40dfb1c81f7b31dc1b1ba9d32b3b9d508ac16fafecf84c4e160e65147b026412aafe7804f5af5ce4367301effb41f431380e9511c46a9ccd7edbdf327d264a80004d5f58b4526558662847dffec97ec54cc0232028cd4a83229d1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x140, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0xfa, 0x6, "bca2809e26483b145fbaeae54c6af670fb7042039bd577f46044853271df05f5fab94240a386e69b00029cb6fe6beb6f4cd59fbe1e9bd13e822c2311853b7da906c65bde3346f4bbcf46983982a8c7bd39006833c726358fd68ae5c4018ac849aaf1f8bd099265a63a2f273b804922d0497cb2462c67ece28d4c29f89ab8d30a5a715c92382360baac74b28d76bc7aa83311d7837c85c068fd795877147720d67807f08e5955a584945415bae3a97ced234919f6c92921fd11969bd79a3ac01d4361433f5d6195e1a9ae592baf6499d406fdd2f1fc05a6f7f7a9c6dec041ca2346eb93ceab1a4c4ab835fcabbba989301b979776a4e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x190, 0xc, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xea9a, 0x4, 0x81, 0x8}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0xda, 0xffffffffffffffff, 0xff, 0x3}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0xffffffffffffffff, 0xc6, 0x8001}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x7ff, 0x10000000, 0xfff}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x6, 0x7fffffff, 0x1}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x3, 0x0, 0xff}, 0x36}}]}, {0xb9, 0x6, "ae1fd1e56226fc81588d5e3adce7c9b68b85caf5df7d6555e16876ba2624de25685da1d5574821cdf6a9d2a125f88af41a1eba9ed01522fb771edc43e17e3325398ba58473237101b005c70cbe144009c907427ccaabf4dbba57adf205155100f69235b8a195e35b0c67f84995763ec59ed4f75773ab79ea3e0e2bb419104c691be774f09fe93fb8ceec19eed44b4d1842f197925d8d1b7abc17e87f7534b8490a380cce059547d5607627f380fba10764db79eec4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x7c, 0x4, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbd9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x189}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xfffffffa, 0x0, 0x8, 0xffff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbd1}]}, {0x9, 0x6, "7b08b58af1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x100, 0x1, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8, 0x7f, 0x9, 0x2}, {0x2, 0xa, 0x3, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x365, 0xc2, 0x3, 0xf}, {0xd, 0x3, 0x4, 0x4}, {0x7ff, 0x27, 0x4, 0x4}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x8f, 0x6, "e217d81bbc490228106fca1ccc7626039186e90141cb4ebeb7c6703578d84b296b9200a53099c55f8490e04903541643950049f22963bb6bfed6d68fdf39d072ef4dfcb237f880a9566643c99fe4aaa9ce4344ad97dfd4aebd4e57b111bce21091036883b8056b152c11435b6c1802a38a513bb0c289c6cc7e13acd840378fc76581bfefb88edaa4f344ef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x110, 0x2, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7fff, 0x401, 0x0, 0x1, 0xfffffffc}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x6, 0x1, 0x7, 0x9f}, {0xc56, 0xf8, 0x40, 0x8}, {0x8, 0x80, 0x7, 0x3}, {0x65, 0x4, 0x3, 0x6}, {0x10, 0x2, 0x9, 0x921}, {0x8, 0x3, 0x8, 0x3}, {0x7, 0x9, 0x9, 0x7}, {0xe59, 0x5, 0x2, 0x6}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xec64, 0x20000002, 0x6, 0x8}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfff, 0x6, 0x10000000, 0x8, 0x3}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa, 0x11, 0x5, 0x2}, {0x5, 0x33, 0x7, 0xe}]}]}, {0x1c, 0x6, "56cbc5884136e88264aa0ce7988e4ce6af681ae678343d6d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xfc, 0x1a, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0}}]}, {0xc7, 0x6, "3e9743ff5516d85009ea08a4600da221ad950fb10ad8917b6a42ff70d7b929b105a889fb9a33a4c8dac81f6e1f9f2b459c10b7e3c64740891e130272ac4e0ab69ab75f311ff8ec8d85f880f3b96858c860ae0a1a9e43124c8a46b610c4a5089a8d5a23713beb83c6e9e30a9d28055122b1c9054d08929d0a4396a04de54da9dc9fed12833c131326698bc4a2cf725356c103d1e0a91891646ae4dcc70d425940d63898807ae8c19e76a1cf8b5e8cd2a109393e909d492aaabde1137ff3ceb27b072ad1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1a60}}, 0x8000) lstat(&(0x7f0000002280)='./file1\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getuid() mount$9p_fd(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x18a2, &(0x7f0000002340)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r11}}, {@directio}, {@noxattr}, {@nodevmap}, {@access_any}, {@version_9p2000}], [{@dont_hash}, {@dont_appraise}, {@uid_lt={'uid<', r12}}]}}) getsockopt$inet6_int(r10, 0x29, 0x3c, &(0x7f0000002400), &(0x7f0000002440)=0x4) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r9, 0x4008af75, &(0x7f0000002480)={0x3, 0x8}) r13 = ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) r14 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000024c0), 0x48002, 0x0) fcntl$dupfd(r13, 0x406, r14) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x28, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_io_uring_setup(0x5cf3, &(0x7f0000002600)={0x0, 0x6ab, 0x80, 0x2, 0x68, 0x0, r14}, &(0x7f0000002680), &(0x7f00000026c0)) ioctl$KVM_RUN(r10, 0xae80, 0x0) 12.933418071s ago: executing program 2 (id=248): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fanotify_init(0x1, 0x2) r3 = dup(r0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'dummy0\x00', {0x3}, 0x5b}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}}, 0x802) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x11, r6, 0x8cbab000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x400, 0x7ff, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x66, 0x0, 0xf9, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r7, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$TIOCSRS485(r4, 0x5437, 0x0) fanotify_mark(r2, 0x1, 0x48001059, r3, 0x0) readv(r0, 0x0, 0x0) 12.845011836s ago: executing program 2 (id=250): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000c, 0x4008031, r0, 0x1c5ed000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x3, 0x2, @scatter={0x5, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000380)=""/34, 0x22}]}, &(0x7f0000000440)="7769be", &(0x7f0000000480)=""/196, 0x1, 0x1, 0x2, &(0x7f0000000580)}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="db6c1426713b490125140000000000000000b5030000"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000080)={0x18, r3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$FUSE(r6, &(0x7f0000001480)={0x2020}, 0x2020) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x8, 0x2, 0x1001, 0x4, 0xa6, 0xfffffffffc000000, 0x100000001, 0xffffffffff7ffffd, 0x2}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r7, 0x4100}], 0x1, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) 424.447464ms ago: executing program 3 (id=444): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call], &(0x7f0000000100)='GPL\x00', 0x1, 0x3e, &(0x7f0000000140)=""/62, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x80, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x3, 0x5, 0xf, 0x3}], 0x10, 0x7}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x5, 0x7, 0x4000000000000e51, 0x1ff, 0x5479, 0x1040, 0x200000000006, 0x4, 0x32a, 0xffffffff80000001, 0xfc000000, 0x13, 0x40000000009, 0x0, 0x1], 0x2000, 0x10002}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) fstat(r0, &(0x7f0000000300)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x24, 0x1, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) syz_io_uring_setup(0x74d1, &(0x7f0000000500)={0x0, 0x40d1, 0x20, 0x0, 0x202, 0x0, r4}, &(0x7f0000000580), &(0x7f00000005c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x10000000) (async) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r11, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r12, 0x0, 0x0, r13], [0x2b8]}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{&(0x7f0000000640)="8da7fc36e684c64b46f89cc40ea7974886b3a21cc2d369b4f3c8061f97041c0da132bb3702810c993d0448", 0x2b}, {&(0x7f0000000680)="9f3ccefbdd54a510e6dd8a24bd0d13017afb332ef5503ad2904893418a2258c40821992e9261854bf9cf68e207422a9b2367113b248f5cf9676e685c16de246354de65c5744fe7d2ab10feae14dd31f4e4560c7a6482a9b27ee30c19e7db1c59e4a51fd1f17c4aa88f63ae0c01e324fa18058721685e72952733685c770b3eec5f8b875f5438f4da17b0", 0x8a}]}, 0x2, 0x1}, 0x1) (async) r14 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r14, 0x5522, 0x0) 424.353297ms ago: executing program 4 (id=445): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x114, 0x28, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x4, 0x18}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000003c0)=[0x800]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x10001}, {0x1, 0x9}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 424.219193ms ago: executing program 4 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 423.731707ms ago: executing program 3 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000200)=""/158, 0x9e}], 0x3, &(0x7f0000000300)=""/120, 0x78}, 0x40010000) 423.586163ms ago: executing program 0 (id=448): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) prlimit64(0x0, 0x9, &(0x7f0000000080)={0x6, 0xde}, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003) 421.331824ms ago: executing program 3 (id=449): r0 = socket(0x10, 0x80004, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) 419.923929ms ago: executing program 0 (id=450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x800, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x22d2, 0x20, 0x0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_io_uring_setup(0x455d, &(0x7f0000000500)={0x0, 0x7155, 0x4000, 0x1, 0x39c, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000340)) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000f70000000000000000000064ace2d506442f01fe8800"/35], 0x7a) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4048b}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000280)={0x0, 0x72, 0x1}) sendmmsg(r1, &(0x7f0000009140), 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 345.601817ms ago: executing program 3 (id=451): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x6, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0xfffffffffffffced, 0x1}}, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x23, 0x14}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x23, 0x14}, 0x20) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f00000001c0)=""/99}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) r2 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102, 0x0, 0xe}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r2, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) 206.157346ms ago: executing program 4 (id=452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 205.951039ms ago: executing program 0 (id=453): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, r2, 0x6, 0xe478, 0x9, 0x797, 0x280000, 0x0, 0x10, 0x1, 0x1}) 205.407361ms ago: executing program 3 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20000091, &(0x7f0000000140)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000140)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000001380)={r8}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) r11 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x16}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2010}, 0x0) syz_kvm_setup_cpu$x86(r6, r10, &(0x7f000049f000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_RUN(r10, 0xae80, 0x0) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r14, 0x8010aebc, &(0x7f0000000140)={0x10000, 0xc000}) 204.963244ms ago: executing program 0 (id=455): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x60, 0x80008, "3a9562bf357b0aa551d9ae71b1d927843a0dd0dea89f2770", {0x6, 0x5}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 204.735012ms ago: executing program 0 (id=456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000500)="e1", 0x1, 0x40000, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x230, 0x2, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x66, 0x0, 0x84, 0x4, 0x0, @local, @local, {[@rr={0x7, 0xf, 0xda, [@remote, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xda, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x14}, {@broadcast}, {@empty, 0x1}]}, @timestamp={0x44, 0xdc, 0xf0, 0x0, 0x0, [0x7, 0x3, 0x3, 0x3, 0x4, 0x5c1a, 0xf, 0x2ccb7310]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x3, 0x9, {{0x14, 0x4, 0x0, 0x2, 0x50, 0x67, 0x0, 0xfe, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1b, 0x24, [@multicast1, @rand_addr=0x64010102, @private=0xa010102, @broadcast, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x3, 0x11, "ba0c5f6ade60bb53a2165cdd87d43a"}]}, @generic={0x88, 0xa, "3247300b8f2ce94b"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000700)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x0, 0x5, {{0x8, 0x4, 0x3, 0x8, 0x20, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x86, 0x3, 'm'}, @noop, @generic={0x88, 0x7, "a4594c6cc3"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r13, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005e40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r16, {}, {0xe, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8814) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe0, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 204.173747ms ago: executing program 4 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000007c0)={'dvmrp1\x00'}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delnexthop={0x28, 0x69, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008874}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000007c0)={'dvmrp1\x00'}) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delnexthop={0x28, 0x69, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008874}, 0x800) (async) 134.680804ms ago: executing program 0 (id=458): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={[0x90000000, 0x40, 0x9a38, 0x8a1, 0x1, 0x7, 0x4, 0x80000000, 0x7, 0x8, 0x10001, 0x0, 0x3, 0x1000, 0x7, 0x715, 0xfffffffa, 0x69, 0x3ff, 0x5b9, 0x10001, 0xa, 0x3, 0x1, 0x41ef439d, 0x9, 0x16b4, 0xbd, 0x7fffffff, 0x7e, 0x7, 0x3, 0x2, 0xffffffff, 0x5, 0x4000, 0x7, 0x7, 0x1, 0x5, 0x5, 0x401, 0x1c, 0x2, 0x0, 0x43, 0xb, 0x56b, 0xce, 0x9, 0x7, 0x9b82, 0x5, 0x5, 0x101, 0xb79, 0x4d1, 0x8000, 0xbb, 0x80000000, 0xfff, 0x7, 0x7f, 0xa, 0x9, 0x3, 0x9, 0x6f8, 0xbf94, 0x4fb, 0x9, 0x1, 0x7, 0x1, 0x3, 0x80, 0x3, 0x1, 0x30, 0x800, 0x800, 0x400, 0x1c, 0xfffffffb, 0x4, 0xe1d9, 0x3, 0x6, 0x8001, 0x401, 0xda40, 0x9, 0x6, 0x81, 0x0, 0x3, 0x2, 0x2, 0xfff, 0x4e94, 0x8, 0xffffffbe, 0xfffffff7, 0xe7, 0xffff, 0x7, 0x80000000, 0x39, 0x3, 0x4, 0x9, 0x10001, 0x8, 0x1, 0xf2b8, 0x7, 0x1000, 0x8, 0x5, 0xa, 0xfe, 0x14000, 0x3, 0x7, 0x10001, 0x6, 0x2, 0x10000, 0x10000, 0x2, 0x2, 0x7, 0x2, 0x54, 0x1, 0x7, 0xfffffffa, 0x6, 0x5, 0x101, 0x4, 0x60000000, 0x8, 0x3, 0x7, 0xb3ac, 0x7, 0x17e8, 0xfffffffc, 0xd, 0xbe, 0x9640ba26, 0x0, 0x2, 0x5, 0x0, 0x9, 0x7f, 0x9e, 0xfa28, 0x5, 0x6, 0x7, 0xfffffe01, 0x80, 0x81, 0x4, 0x3, 0xfffffffb, 0x1, 0x40000000, 0x5, 0x9, 0x4, 0x2, 0x200, 0x1, 0x7, 0x8a8, 0x0, 0x7f, 0x2, 0x8, 0x7d, 0x4, 0x8, 0x1, 0x3ff, 0x617, 0x10000, 0x1, 0x9, 0xc, 0x1, 0x74, 0x8, 0x8, 0x101, 0x7fffffff, 0x7, 0x8d, 0x80000000, 0x6, 0x1, 0x2f, 0x4, 0xbe81, 0x0, 0x0, 0xfffffff2, 0x0, 0x4bf, 0x7, 0x1, 0x7, 0x4, 0x3, 0x9, 0x3, 0x4, 0xba0, 0x2, 0xfffffff9, 0x5, 0xffff, 0x3, 0x800, 0x1ff, 0x47e, 0x6, 0x7, 0x949, 0x4, 0x8, 0x2, 0x2, 0xffffff6c, 0x1, 0xf, 0x3, 0xb, 0xf0, 0x6, 0x4, 0xd01, 0x100, 0xe3b, 0x80000001, 0x3, 0x2, 0x4, 0xffffffff, 0xfffffeb0, 0x78d, 0x9b, 0x79, 0x1, 0x80000000, 0xf0, 0x8, 0x377, 0xff, 0x8, 0x7, 0x10, 0xfffffff7, 0x8, 0x6, 0x7fffffff, 0x1, 0x5, 0x2, 0xb1c, 0x3ff, 0x4, 0x6, 0x0, 0x0, 0x5, 0x664, 0x34000000, 0x8, 0xfffffffb, 0x7ce, 0x3, 0x0, 0x5, 0x10000, 0x8, 0x1, 0x5, 0x6, 0x0, 0x8, 0xb3, 0x6, 0x80, 0x39, 0x80, 0x9, 0x4, 0x9, 0x38c, 0x40000000, 0xc24, 0xe92, 0x1000, 0x9, 0xec1, 0x9, 0x9c74, 0x401, 0x1ffe, 0xd, 0x8, 0x8, 0x8, 0x7, 0x7f, 0x3, 0x8, 0x1, 0x7, 0x7, 0x4, 0x3, 0x3, 0x89d4, 0x4, 0x40, 0x6be, 0xa3, 0x1, 0x3ff, 0x1, 0x0, 0x3, 0x0, 0xffffffaf, 0x8, 0x10001, 0x1, 0x1, 0x8001, 0x101, 0x4, 0x10001, 0x9, 0x9, 0x2, 0x8, 0x14f, 0x91a, 0x5, 0x7, 0x6, 0xf, 0xf, 0x4, 0x1, 0x5, 0xeb84, 0x3, 0x4, 0x2, 0x0, 0xb08, 0x1, 0x98, 0x5, 0x1, 0x2, 0x4, 0x2, 0x8, 0xffffffff, 0x647e, 0x1, 0xfffffff1, 0x0, 0x400, 0x3, 0x9, 0xfffffc00, 0x1ff, 0x1ff, 0x7fff, 0x4, 0x1000, 0x6, 0x5, 0xbc, 0x10, 0x2, 0x4, 0x8, 0x4, 0x4, 0x6, 0x3, 0x4c, 0xf7, 0xfffffffb, 0xf, 0x1ff, 0x76, 0x2, 0x9, 0x42, 0x9, 0x1, 0x2, 0xf, 0x1a3, 0x400, 0x9, 0x7ff, 0x401, 0x8, 0x6, 0x8, 0x3ff, 0xfffffff8, 0x1, 0x9, 0x5, 0xffff8ea8, 0x4, 0x0, 0x1, 0x80a6, 0x1, 0x8000, 0x5, 0x5, 0xc6, 0x5, 0x0, 0x4, 0x6, 0x0, 0x2, 0x5, 0xffffffff, 0xfffffff8, 0x7cb, 0x1, 0x5, 0x3, 0x100, 0x7, 0xfb, 0x78, 0x5, 0xf, 0x7, 0x1, 0xe, 0x6, 0x602, 0x7fffffff, 0x5, 0x7, 0x1, 0x5, 0x3, 0x1, 0x4, 0x3, 0x8, 0x6, 0x26a06f65, 0xfffffffe, 0x8000, 0x3, 0xfffff000, 0x2, 0x8, 0x9, 0x6, 0x7fffffff, 0x839a, 0xfffffff9, 0x401, 0x3, 0x4, 0xfffffff7, 0x7f, 0x4, 0x0, 0x3, 0xfffffffa, 0x4, 0x4, 0x6, 0x3ff, 0x7, 0x7, 0x7, 0x7, 0x9, 0x7, 0x7b3, 0x10000, 0x80000001, 0x2, 0x3, 0x0, 0x10001, 0x81, 0xf3, 0x1000, 0x72, 0x9, 0x1, 0x8, 0x3, 0xfffffff1, 0x6b6, 0x4, 0x69, 0x100, 0x1, 0x5, 0xfffffff7, 0x7, 0x3, 0x2, 0xffffff83, 0xff, 0x0, 0x0, 0x1, 0x7, 0x6, 0x9, 0xef62, 0xffff0001, 0x8, 0x3, 0x9, 0x2, 0x8000, 0x100, 0x1, 0x2, 0xfffffff7, 0x8, 0xffffffc0, 0x9, 0xfff, 0x10, 0x6, 0xf69, 0xfffffff4, 0x2f6b, 0xbd98, 0x8, 0x7, 0x1000, 0xc000, 0x8, 0x1, 0x2, 0x7, 0x0, 0x1, 0x2, 0x81, 0x29, 0x7, 0x9, 0x80, 0x4, 0x8, 0x5, 0xfffffffb, 0x6, 0x0, 0x1c5d, 0xdca6, 0x3c661f0a, 0x4, 0x0, 0x6, 0x6, 0x9, 0x7fffffff, 0x101, 0x4, 0x80000001, 0xc, 0x5, 0xfffffffb, 0x7, 0x5, 0xf7, 0x40000000, 0x0, 0x2f, 0xfffeffff, 0x4, 0x1, 0x0, 0x1, 0x80000001, 0x7f, 0x5, 0x7ff, 0x7, 0xffffff81, 0xfffffff8, 0xe, 0x9, 0x7ff, 0xf, 0x8, 0x47d5212d, 0x692f, 0x80, 0x7, 0x6, 0x5, 0x1ff, 0x1, 0x0, 0x4, 0x401, 0x4, 0x18000, 0x2, 0x7fff, 0x6, 0x5, 0x7180, 0x6, 0xff, 0x7, 0x0, 0x9, 0x54, 0x8, 0x5, 0x80, 0x7fff, 0xc, 0x9, 0x2, 0xfffffe00, 0x0, 0x99, 0xa1, 0x8, 0x7, 0x5, 0x5, 0x8, 0x9, 0xfffffff1, 0x0, 0x80000000, 0x6, 0x1c3, 0x9, 0x5, 0xfffffffc, 0x2, 0x7fffffff, 0x3, 0x1, 0x9, 0x7fffffff, 0x5, 0x1000, 0x7, 0xb47, 0x6, 0x3f, 0x80000001, 0x8, 0x3, 0x101, 0x9, 0xadf, 0x8, 0xfffffffd, 0x3fc000, 0x7, 0x42, 0x5, 0x6, 0x7f, 0x6ab, 0x8, 0x8, 0x887, 0x1, 0x1, 0x3, 0xffff80a7, 0x3, 0x3, 0x3, 0xfff, 0x8, 0x4ca5, 0xa, 0x0, 0x8000000, 0x4, 0x5, 0x8, 0x1, 0x7, 0xffffffff, 0x7, 0x6, 0xd607, 0xffffffff, 0x1, 0x401, 0x5, 0xb, 0x7, 0x7, 0xfffffff7, 0xa7c, 0x5, 0x5, 0xeb33, 0x10, 0x2, 0x401, 0x3f80000, 0x5, 0x9, 0x8, 0x8, 0x1000, 0x3, 0x6, 0x4, 0x2, 0x4, 0x101, 0xffffb616, 0x21, 0x8, 0x10, 0xfc, 0x6, 0x4, 0x0, 0x3, 0x1, 0x8, 0x13, 0x2, 0x8001, 0x8, 0x8, 0x4, 0x9, 0x7, 0x1ff, 0x6, 0xdd, 0x9, 0x10, 0xfffffffb, 0x7, 0x400, 0xf, 0x400, 0x4, 0x6, 0x7, 0x101, 0x6, 0xc, 0x8, 0x3, 0x6, 0x9, 0x5, 0x6, 0xb003e4d2, 0x6, 0x0, 0x0, 0x5, 0x8, 0x8, 0x8, 0x44d, 0xb, 0x2, 0x8000, 0x8, 0x2, 0x401, 0x49a5, 0x4, 0xc852, 0x9ad, 0x0, 0x3949998d, 0x20, 0x5, 0x30, 0x2, 0x9, 0x377, 0x1a1, 0xbe6, 0x7, 0xa2, 0x8, 0x5e0, 0xfffffff9, 0x0, 0x4, 0x200, 0x3, 0x4, 0x7, 0x21779471, 0x40, 0x9, 0x800, 0x8, 0x1, 0xfffffffe, 0x1ff, 0x1ff, 0xdef4553, 0x7, 0x8, 0x2, 0x0, 0x4, 0x4, 0x5, 0xffffffff, 0x3, 0x3, 0x5, 0x0, 0xfffffff8, 0x6, 0x6, 0xfffffffc, 0x7, 0x9, 0x4, 0x6, 0x3, 0x9, 0xfffffff7, 0x9, 0x1, 0x7, 0x7ff, 0x3, 0x3, 0x5, 0x2, 0x401, 0x2, 0xfffffff8, 0x5, 0xeb, 0xfffffffb, 0x5, 0x6df, 0xbdc6, 0x7, 0x2, 0x6, 0x5, 0x2, 0x5, 0x8000, 0x9, 0xa, 0x8, 0x8, 0x0, 0x7, 0x34, 0x71, 0x7, 0xa4, 0x7f, 0x8, 0xa5, 0xbdde, 0x9, 0x9, 0xd31, 0x101, 0x80000001, 0x89a8, 0x8, 0xd1c, 0x7, 0xfffffffe, 0xf, 0x8, 0x9, 0x8, 0x4, 0x9, 0x10, 0x8000, 0x1, 0x400, 0x2, 0x8, 0x3, 0x85e, 0xbe3f, 0x3, 0x1, 0xfffffff8, 0xf318, 0x8, 0x0, 0x8, 0x100, 0x3ee, 0x9e99, 0xa176, 0x4, 0x1, 0x8, 0x7f, 0x10001, 0x5, 0x3, 0x0, 0x7, 0x8, 0x9, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x8, 0x9, 0x2, 0x6, 0x7, 0x8, 0xa27, 0x7fffffff, 0xb, 0x100, 0x1, 0x9, 0x40, 0xa50, 0x2, 0x4, 0x1, 0x4, 0x0, 0x9, 0x6, 0xd, 0x1000, 0x5, 0x7f, 0x2, 0x7fffffff, 0x7, 0x5, 0x91, 0xff, 0x1, 0x1, 0x2, 0x5, 0x2c, 0x1, 0x0, 0x1, 0x4, 0xcfe3, 0xffffffff, 0x68, 0x0, 0x55, 0x5, 0xa, 0x8000, 0x1, 0x5, 0x42c, 0x3, 0x6, 0x0, 0x5, 0x20000000, 0xfffffff7, 0x0, 0x1, 0x7f, 0x3387526, 0xf, 0xfffffff9, 0xf, 0x2, 0x9, 0x8, 0x4, 0x4, 0x901f, 0x4, 0x1000, 0x7fff, 0xffffff44, 0x200]}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x5, 0x70bd27, 0x2040000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}]}]}, 0x30}}, 0x4000010) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="740000001000090400000000df00000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000054001280110001006272696467655f736c617665000000003c000580050009000000000005001c00010000000500190002000000060002000800000005001d00000000000500080000000000080003"], 0x74}}, 0x0) (rerun: 64) 134.304005ms ago: executing program 4 (id=459): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200000000000000000000000008003100ac1414aa"], 0x28}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000028c0)={0xe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "7a20178e70c502"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000038c0)={{r5, 0xb, 0x8000000000000001, 0x8, 0x5, 0x9, 0x9, 0x100, 0x9, 0x1, 0x8, 0x5, 0x5, 0x6, 0x7b}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r6, 0x410, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000890}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 526.047µs ago: executing program 3 (id=460): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c1400000011000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) dup3(r4, r3, 0x80000) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) (rerun: 64) sendfile(r5, r5, 0x0, 0x7a68001f) 0s ago: executing program 4 (id=461): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01011000000009c5010000fd03010009cd8d1f00021e20"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x4c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000040)={r11, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) listen(r4, 0x9) syz_usb_disconnect(r2) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x60000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x97d}}, @map_fd={0x18, 0x5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0x0, 0x6}, 0x10, 0x1ef36, r0, 0x9, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x2, 0x5, 0x8, 0x5}, {0x2, 0x3, 0x5, 0x7}, {0x2, 0x2, 0xa, 0x2}, {0x5, 0x1, 0xe, 0x6}, {0x5, 0x2, 0x0, 0x3}, {0x4, 0x1, 0x9, 0x7}, {0x1, 0x5}, {0x3, 0x3, 0xa}, {0x3, 0x3, 0x8, 0x2}], 0x10, 0x3}, 0x94) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r12, r13}, 0xc) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) kernel console output (not intermixed with test programs): [ 38.146536][ T40] audit: type=1400 audit(1757429547.495:60): avc: denied { rlimitinh } for pid=5877 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.153578][ T40] audit: type=1400 audit(1757429547.495:61): avc: denied { siginh } for pid=5877 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:32132' (ED25519) to the list of known hosts. [ 39.239457][ T40] audit: type=1400 audit(1757429548.605:62): avc: denied { name_bind } for pid=5884 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.254184][ T40] audit: type=1400 audit(1757429548.625:63): avc: denied { write } for pid=5885 comm="sh" path="pipe:[6493]" dev="pipefs" ino=6493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.271142][ T40] audit: type=1400 audit(1757429548.635:64): avc: denied { execute } for pid=5885 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.279151][ T40] audit: type=1400 audit(1757429548.635:65): avc: denied { execute_no_trans } for pid=5885 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.320040][ T40] audit: type=1400 audit(1757429550.685:66): avc: denied { mounton } for pid=5885 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.322573][ T5885] cgroup: Unknown subsys name 'net' [ 41.478731][ T5885] cgroup: Unknown subsys name 'cpuset' [ 41.483084][ T5885] cgroup: Unknown subsys name 'rlimit' [ 41.706076][ T5920] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.412694][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.280142][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.280153][ T40] audit: type=1400 audit(1757429554.645:80): avc: denied { execmem } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.483420][ T40] audit: type=1400 audit(1757429554.845:81): avc: denied { create } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.497268][ T40] audit: type=1400 audit(1757429554.845:82): avc: denied { read write } for pid=5969 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.505030][ T40] audit: type=1400 audit(1757429554.865:83): avc: denied { open } for pid=5969 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.512366][ T40] audit: type=1400 audit(1757429554.865:84): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="socket:[2036]" dev="sockfs" ino=2036 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.523873][ T5974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.525527][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.527442][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.528702][ T5976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.533768][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.536487][ T5976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.537174][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.539119][ T5976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.542102][ T5979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.544102][ T5976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.546296][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.548956][ T5976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.550692][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.552510][ T5976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.562170][ T5984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.562350][ T40] audit: type=1400 audit(1757429554.925:85): avc: denied { read } for pid=5969 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.565187][ T5985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.573401][ T40] audit: type=1400 audit(1757429554.925:86): avc: denied { open } for pid=5969 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.573923][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.575758][ T5985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.585060][ T40] audit: type=1400 audit(1757429554.925:87): avc: denied { mounton } for pid=5969 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.589067][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.594713][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.730526][ T40] audit: type=1400 audit(1757429555.095:88): avc: denied { module_request } for pid=5969 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.770395][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 45.847427][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 45.868091][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 45.971210][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.974121][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.976484][ T5969] bridge_slave_0: entered allmulticast mode [ 45.979102][ T5969] bridge_slave_0: entered promiscuous mode [ 46.015905][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.018142][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.020397][ T5969] bridge_slave_1: entered allmulticast mode [ 46.023100][ T5969] bridge_slave_1: entered promiscuous mode [ 46.025910][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 46.047595][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.049752][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.051968][ T5970] bridge_slave_0: entered allmulticast mode [ 46.054716][ T5970] bridge_slave_0: entered promiscuous mode [ 46.088854][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.091143][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.093379][ T5970] bridge_slave_1: entered allmulticast mode [ 46.096241][ T5970] bridge_slave_1: entered promiscuous mode [ 46.098641][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.100885][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.103165][ T5982] bridge_slave_0: entered allmulticast mode [ 46.105803][ T5982] bridge_slave_0: entered promiscuous mode [ 46.109623][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.111849][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.114489][ T5982] bridge_slave_1: entered allmulticast mode [ 46.117046][ T5982] bridge_slave_1: entered promiscuous mode [ 46.202435][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.206810][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.229626][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.233857][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.238682][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.299910][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.316862][ T5969] team0: Port device team_slave_0 added [ 46.319768][ T5970] team0: Port device team_slave_0 added [ 46.363510][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.366568][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.368825][ T5978] bridge_slave_0: entered allmulticast mode [ 46.371416][ T5978] bridge_slave_0: entered promiscuous mode [ 46.376016][ T5969] team0: Port device team_slave_1 added [ 46.379317][ T5970] team0: Port device team_slave_1 added [ 46.382133][ T5982] team0: Port device team_slave_0 added [ 46.384340][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.386605][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.388853][ T5978] bridge_slave_1: entered allmulticast mode [ 46.391428][ T5978] bridge_slave_1: entered promiscuous mode [ 46.445753][ T5982] team0: Port device team_slave_1 added [ 46.488117][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.490296][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.498409][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.504362][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.507554][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.510324][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.518815][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.536174][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.538378][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.546390][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.551856][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.555255][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.557426][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.565902][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.569852][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.572034][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.580211][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.587220][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.589398][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.597647][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.632542][ T5978] team0: Port device team_slave_0 added [ 46.638592][ T5978] team0: Port device team_slave_1 added [ 46.671151][ T5970] hsr_slave_0: entered promiscuous mode [ 46.673453][ T5970] hsr_slave_1: entered promiscuous mode [ 46.704636][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.706829][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.715086][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.719332][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.721492][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.729439][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.845588][ T5969] hsr_slave_0: entered promiscuous mode [ 46.847759][ T5969] hsr_slave_1: entered promiscuous mode [ 46.849803][ T5969] debugfs: 'hsr0' already exists in 'hsr' [ 46.851640][ T5969] Cannot create hsr debugfs directory [ 46.855847][ T5982] hsr_slave_0: entered promiscuous mode [ 46.858073][ T5982] hsr_slave_1: entered promiscuous mode [ 46.860132][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 46.861921][ T5982] Cannot create hsr debugfs directory [ 46.941649][ T5978] hsr_slave_0: entered promiscuous mode [ 46.943902][ T5978] hsr_slave_1: entered promiscuous mode [ 46.946313][ T5978] debugfs: 'hsr0' already exists in 'hsr' [ 46.948129][ T5978] Cannot create hsr debugfs directory [ 47.190267][ T5969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.196591][ T5969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.200953][ T5969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.209988][ T5969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.236677][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.244830][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.250088][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.255788][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.291062][ T5978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.297803][ T5978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.302437][ T5978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.310632][ T5978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.366739][ T5982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.370783][ T5982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.375758][ T5982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.380279][ T5982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.385875][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.422411][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.428620][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.443851][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.446775][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.451468][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.466629][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.469450][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.477825][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.486136][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.488944][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.503738][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.512642][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.515686][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.528490][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.530744][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.547199][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.549476][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.588607][ T40] audit: type=1400 audit(1757429556.955:89): avc: denied { sys_module } for pid=5969 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.595429][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.617534][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.625002][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.627205][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.635385][ T63] Bluetooth: hci3: command tx timeout [ 47.637856][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.638106][ T63] Bluetooth: hci2: command tx timeout [ 47.640078][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.642120][ T5977] Bluetooth: hci0: command tx timeout [ 47.642233][ T5333] Bluetooth: hci1: command tx timeout [ 47.687459][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.717393][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.723482][ T5969] veth0_vlan: entered promiscuous mode [ 47.740304][ T5969] veth1_vlan: entered promiscuous mode [ 47.746083][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.765494][ T5970] veth0_vlan: entered promiscuous mode [ 47.781905][ T5970] veth1_vlan: entered promiscuous mode [ 47.787730][ T5969] veth0_macvtap: entered promiscuous mode [ 47.797252][ T5969] veth1_macvtap: entered promiscuous mode [ 47.803278][ T5978] veth0_vlan: entered promiscuous mode [ 47.820289][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.823202][ T5970] veth0_macvtap: entered promiscuous mode [ 47.830701][ T5970] veth1_macvtap: entered promiscuous mode [ 47.834237][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.839040][ T5978] veth1_vlan: entered promiscuous mode [ 47.847298][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.859176][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.863871][ T1150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.875055][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.880751][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.886390][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.896038][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.916568][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.919420][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.935417][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.938171][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.941674][ T5982] veth0_vlan: entered promiscuous mode [ 47.949795][ T5978] veth0_macvtap: entered promiscuous mode [ 47.955356][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.957848][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.959185][ T5978] veth1_macvtap: entered promiscuous mode [ 47.983761][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.984842][ T5982] veth1_vlan: entered promiscuous mode [ 47.986455][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.005733][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.009720][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.010564][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.012172][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.025363][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.038046][ T5969] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.042751][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.046364][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.055148][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.067241][ T5982] veth0_macvtap: entered promiscuous mode [ 48.071616][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.079757][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.085033][ T5982] veth1_macvtap: entered promiscuous mode [ 48.107540][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.124538][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.131440][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.135248][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.156710][ T6059] ip6tnl1: entered promiscuous mode [ 48.158699][ T6059] ip6tnl1: entered allmulticast mode [ 48.169483][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.172783][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.176066][ T93] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.179143][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.180731][ T93] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.181673][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.201397][ T6062] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.203972][ T6062] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 48.207248][ T6062] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.209686][ T6062] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 48.260259][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.262699][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.284917][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.289689][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.292258][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.359855][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 48.450473][ T6104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16'. [ 48.463154][ T6104] binder: binder_mmap: 6103 200000ffc000-200001000000 bad vm_flags failed -1 [ 48.487089][ T6104] 9pnet: Could not find request transport: dma [ 48.607601][ T6115] kvm: user requested TSC rate below hardware speed [ 48.642286][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 48.656445][ T6140] tipc: MTU too low for tipc bearer [ 48.697265][ T6150] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 48.697384][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 48.705901][ T6150] netlink: 'syz.0.30': attribute type 29 has an invalid length. [ 48.712005][ T6150] binder_alloc: 6149: binder_alloc_buf, no vma [ 48.752512][ T6152] team0 (unregistering): Port device team_slave_0 removed [ 48.757782][ T6152] team0 (unregistering): Port device team_slave_1 removed [ 48.769716][ T6158] netlink: 'syz.0.30': attribute type 29 has an invalid length. [ 48.773753][ T6158] netlink: 500 bytes leftover after parsing attributes in process `syz.0.30'. [ 49.674175][ T6037] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 49.714174][ T5985] Bluetooth: hci3: command tx timeout [ 49.714785][ T63] Bluetooth: hci0: command tx timeout [ 49.724150][ T63] Bluetooth: hci1: command tx timeout [ 49.826577][ T6037] usb 8-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 49.831170][ T6037] usb 8-1: config 1 interface 0 altsetting 108 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.836584][ T6037] usb 8-1: config 1 interface 0 has no altsetting 0 [ 49.841586][ T6037] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 49.845505][ T6037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.848836][ T6037] usb 8-1: Product: syz [ 49.850603][ T6037] usb 8-1: Manufacturer: syz [ 49.852276][ T6037] usb 8-1: SerialNumber: syz [ 49.856755][ T6160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.063527][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33'. [ 50.177602][ T6037] usbhid 8-1:1.0: can't add hid device: -71 [ 50.179592][ T6037] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 50.186174][ T6037] usb 8-1: USB disconnect, device number 2 [ 50.319710][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 50.331693][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 50.332931][ T93] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.337414][ T93] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.340354][ T93] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.340384][ T6208] Zero length message leads to an empty skb [ 50.343108][ T93] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.377678][ T6218] netlink: 'syz.2.48': attribute type 14 has an invalid length. [ 50.452159][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 50.452170][ T40] audit: type=1400 audit(1757429559.815:214): avc: denied { read } for pid=6224 comm="syz.1.50" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.461463][ T40] audit: type=1400 audit(1757429559.815:215): avc: denied { open } for pid=6224 comm="syz.1.50" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.471253][ T63] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 50.493963][ T6228] warning: `syz.1.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.501092][ T40] audit: type=1400 audit(1757429559.865:216): avc: denied { append } for pid=6227 comm="syz.1.51" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.508450][ T40] audit: type=1400 audit(1757429559.865:217): avc: denied { create } for pid=6227 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.514508][ T40] audit: type=1400 audit(1757429559.875:218): avc: denied { setopt } for pid=6227 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.531305][ T40] audit: type=1400 audit(1757429559.895:219): avc: denied { bind } for pid=6229 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.646521][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.56'. [ 50.656055][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.659069][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.679178][ T6011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.682207][ T40] audit: type=1400 audit(1757429560.045:220): avc: denied { mounton } for pid=6245 comm="syz.1.57" path="/15/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.705096][ T40] audit: type=1400 audit(1757429560.075:221): avc: denied { watch watch_reads } for pid=6247 comm="syz.3.58" path="/13" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.769632][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 50.774494][ T6011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.775226][ T6251] overlayfs: failed to resolve './file1': -2 [ 50.802363][ T40] audit: type=1400 audit(1757429560.165:222): avc: denied { read write } for pid=6254 comm="syz.1.61" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.810348][ T40] audit: type=1400 audit(1757429560.165:223): avc: denied { open } for pid=6254 comm="syz.1.61" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.897619][ T6263] SELinux: Context #! ./file1 is not valid (left unmapped). [ 50.903475][ T6263] overlay: Unknown parameter 'pcr' [ 50.947280][ T6266] wg1: entered promiscuous mode [ 50.948863][ T6266] wg1: entered allmulticast mode [ 51.087060][ T6278] ata1.00: invalid multi_count 1 ignored [ 51.125415][ T6280] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET) [ 51.128398][ T6280] syzkaller1: entered promiscuous mode [ 51.130231][ T6280] syzkaller1: entered allmulticast mode [ 51.206171][ T6289] netlink: 'syz.0.71': attribute type 11 has an invalid length. [ 51.394118][ T1461] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.554157][ T63] Bluetooth: hci2: command tx timeout [ 51.804941][ T63] Bluetooth: hci1: command tx timeout [ 51.804962][ T5985] Bluetooth: hci0: command tx timeout [ 51.893074][ T6318] ip6gretap0: entered promiscuous mode [ 51.895875][ T6318] batadv_slave_1: entered promiscuous mode [ 52.017788][ T837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.031624][ T6326] bridge_slave_0: left allmulticast mode [ 52.033511][ T6326] bridge_slave_0: left promiscuous mode [ 52.036539][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.041804][ T6326] bridge_slave_1: left allmulticast mode [ 52.043603][ T6326] bridge_slave_1: left promiscuous mode [ 52.046465][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.051444][ T6326] bond0: (slave bond_slave_0): Releasing backup interface [ 52.056256][ T6326] bond0: (slave bond_slave_1): Releasing backup interface [ 52.062590][ T6326] team0: Port device team_slave_0 removed [ 52.068741][ T6326] team0: Port device team_slave_1 removed [ 52.070897][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.073189][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.076609][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.078940][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.090716][ T6327] team0: Mode changed to "activebackup" [ 52.096333][ T6326] vlan0: entered promiscuous mode [ 52.101738][ T6326] team0: Port device vlan0 added [ 52.105036][ T6326] tipc: Started in network mode [ 52.106633][ T6326] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 52.108938][ T6326] tipc: Enabled bearer , priority 0 [ 52.126521][ T6326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.154233][ T837] usb 7-1: device descriptor read/64, error -71 [ 52.194506][ T6326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.264593][ T6326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.357557][ T6326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.394515][ T837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.398780][ T6331] netlink: 'syz.0.84': attribute type 39 has an invalid length. [ 52.446181][ T1142] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.459752][ T1142] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.468375][ T1142] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.478406][ T1142] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.524115][ T837] usb 7-1: device descriptor read/64, error -71 [ 52.634949][ T837] usb usb7-port1: attempt power cycle [ 52.636669][ T6345] binder: 6344:6345 ioctl c0306201 200000000080 returned -14 [ 52.640327][ T6347] binder_alloc: binder_alloc_mmap_handler: 6344 200000ffd000-200001000000 already mapped failed -16 [ 52.645994][ T6345] binder: BINDER_SET_CONTEXT_MGR already set [ 52.648744][ T6345] binder: 6344:6345 ioctl 4018620d 200000000040 returned -16 [ 52.795572][ T6350] netlink: 'syz.0.91': attribute type 30 has an invalid length. [ 52.798307][ T6350] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 52.801249][ T6350] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 52.844180][ T5985] Bluetooth: hci3: command tx timeout [ 52.942307][ T6359] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 52.945401][ T6359] NCSI netlink: No device for ifindex 0 [ 52.947415][ T6360] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 52.950011][ T6360] NCSI netlink: No device for ifindex 0 [ 52.974100][ T837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 52.996383][ T837] usb 7-1: device descriptor read/8, error -71 [ 53.013254][ T6364] BIDI support in bsg has been removed. [ 53.180978][ T6378] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.185125][ T6378] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 53.224540][ T6319] tipc: Node number set to 11578026 [ 53.234513][ T837] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 53.254555][ T837] usb 7-1: device descriptor read/8, error -71 [ 53.350721][ T6385] binder: 6384:6385 ioctl c0306201 200000000080 returned -14 [ 53.359098][ T6385] Bluetooth: MGMT ver 1.23 [ 53.364314][ T837] usb usb7-port1: unable to enumerate USB device [ 53.511806][ T6393] __nla_validate_parse: 9 callbacks suppressed [ 53.511820][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 53.567588][ T6394] SELinux: policydb magic number 0x362e3d67 does not match expected magic number 0xf97cff8c [ 53.571373][ T6394] SELinux: failed to load policy [ 53.583609][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 53.635243][ T5985] Bluetooth: hci2: command tx timeout [ 53.874190][ T5985] Bluetooth: hci1: command tx timeout [ 53.874282][ T63] Bluetooth: hci0: command tx timeout [ 53.963936][ T6410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 53.966275][ T6410] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.969543][ T6410] vhci_hcd vhci_hcd.0: Device attached [ 53.975159][ T6411] vhci_hcd: connection closed [ 53.975929][ T1143] vhci_hcd: stop threads [ 53.979294][ T1143] vhci_hcd: release socket [ 53.980777][ T1143] vhci_hcd: disconnect device [ 54.051928][ T6381] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 54.193630][ T6423] veth0: entered promiscuous mode [ 54.199827][ T6422] veth0: left promiscuous mode [ 54.362745][ T6427] ptrace attach of "/syz-executor exec"[6428] was attempted by "/syz-executor exec"[6427] [ 54.797972][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6450 comm=syz.0.118 [ 54.802189][ T6450] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 54.815369][ T6450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.831661][ T6450] bond1: (slave geneve2): making interface the new active one [ 54.835585][ T6450] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.994142][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 55.035239][ T6469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.067200][ T5985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.071372][ T5985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.074622][ T5985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.078876][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.081704][ T5985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.138770][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 55.216405][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 55.329236][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.331420][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.333581][ T6470] bridge_slave_0: entered allmulticast mode [ 55.337199][ T6470] bridge_slave_0: entered promiscuous mode [ 55.341676][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.345825][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.348736][ T6470] bridge_slave_1: entered allmulticast mode [ 55.352537][ T6470] bridge_slave_1: entered promiscuous mode [ 55.417795][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.424483][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.485367][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 55.509777][ T6470] team0: Port device team_slave_0 added [ 55.515237][ T6470] team0: Port device team_slave_1 added [ 55.538909][ T6511] tls_set_device_offload_rx: netdev not found [ 55.552463][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.554952][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.556245][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 55.563305][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.570665][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.573082][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.576096][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.578835][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.590590][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.593244][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.601166][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.656449][ T6470] hsr_slave_0: entered promiscuous mode [ 55.658813][ T6470] hsr_slave_1: entered promiscuous mode [ 55.660851][ T6470] debugfs: 'hsr0' already exists in 'hsr' [ 55.662633][ T6470] Cannot create hsr debugfs directory [ 55.666744][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.680830][ T1150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.688741][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.704909][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.712758][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.768821][ T1150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.795020][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 55.795030][ T40] audit: type=1400 audit(1757429565.165:304): avc: denied { mount } for pid=6523 comm="syz.0.139" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.825146][ T6531] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 55.840878][ T6531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.854063][ T40] audit: type=1400 audit(1757429565.215:305): avc: denied { create } for pid=6533 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.860467][ T40] audit: type=1400 audit(1757429565.225:306): avc: denied { write } for pid=6533 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.862692][ T1150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.899980][ T40] audit: type=1400 audit(1757429565.265:307): avc: denied { write } for pid=6538 comm="syz.0.143" name="unix" dev="proc" ino=4026533041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 55.908054][ T6531] veth3: entered promiscuous mode [ 55.910074][ T40] audit: type=1400 audit(1757429565.265:308): avc: denied { write } for pid=6538 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.911485][ T6531] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.939640][ T6540] vlan2: entered allmulticast mode [ 55.941414][ T6540] bond1: entered allmulticast mode [ 55.943722][ T6540] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 55.946226][ T40] audit: type=1400 audit(1757429565.315:309): avc: denied { write } for pid=6541 comm="syz.0.144" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 55.964189][ T5985] Bluetooth: hci0: command 0x0c20 tx timeout [ 55.979781][ T1150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.984715][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 56.012964][ T6470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.016841][ T6549] xt_l2tp: unknown flags: 51 [ 56.019555][ T6470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.025454][ T6470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.029609][ T6470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.042407][ T40] audit: type=1400 audit(1757429565.405:310): avc: denied { write } for pid=6558 comm="syz.0.148" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.051496][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.054600][ T6470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.058161][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.061253][ T6470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.108077][ T6567] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 56.111390][ T40] audit: type=1804 audit(1757429565.475:311): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.151" name="/newroot/34/file0" dev="tmpfs" ino=201 res=1 errno=0 [ 56.112325][ T6567] ref_ctr increment failed for inode: 0xc9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880355a0ac0 [ 56.114282][ T6564] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6564 comm=syz.0.150 [ 56.142128][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.156430][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.161363][ T40] audit: type=1400 audit(1757429565.525:312): avc: denied { create } for pid=6568 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.162868][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.175625][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.183703][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 56.195741][ T40] audit: type=1400 audit(1757429565.565:313): avc: denied { getopt } for pid=6572 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.214465][ T1150] bridge_slave_1: left allmulticast mode [ 56.216308][ T1150] bridge_slave_1: left promiscuous mode [ 56.217691][ T6576] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20003 [ 56.219019][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.227993][ T1150] bridge_slave_0: left allmulticast mode [ 56.229767][ T1150] bridge_slave_0: left promiscuous mode [ 56.232064][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.244734][ T6590] process 'syz.3.158' launched './file0' with NULL argv: empty string added [ 56.380796][ T6608] capability: warning: `syz.0.162' uses deprecated v2 capabilities in a way that may be insecure [ 56.477343][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.481836][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.485703][ T1150] bond0 (unregistering): Released all slaves [ 56.487463][ T6608] SELinux: policydb version 1557 does not match my version range 15-35 [ 56.490185][ T6608] SELinux: failed to load policy [ 56.506185][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.508462][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.511674][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.513920][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.546375][ T6470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.661421][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.809997][ T1150] hsr_slave_0: left promiscuous mode [ 56.816692][ T1150] hsr_slave_1: left promiscuous mode [ 56.819418][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.828829][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.835371][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.837966][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.866907][ T1150] veth1_vlan: left promiscuous mode [ 56.868987][ T1150] veth0_vlan: left promiscuous mode [ 57.165538][ T5985] Bluetooth: hci3: command tx timeout [ 57.252410][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 57.305288][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 57.665583][ T6470] veth0_vlan: entered promiscuous mode [ 57.670587][ T6470] veth1_vlan: entered promiscuous mode [ 57.689028][ T6470] veth0_macvtap: entered promiscuous mode [ 57.693111][ T6470] veth1_macvtap: entered promiscuous mode [ 57.701960][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.719109][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.733722][ T93] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.748973][ T93] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.758050][ T93] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.760779][ T93] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.782991][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.797817][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.823322][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.825878][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.877796][ T6728] xt_time: unknown flags 0xf4 [ 57.953537][ T6740] hfsplus: Unknown parameter 'barriers: 16 kB [ 57.953537][ T6740] Pss: 16 kB [ 57.953537][ T6740] Pss_Dirty: 16 kB [ 57.953537][ T6740] Shared_Clean: 0 kB [ 57.953537][ T6740] Shared_Dirty: 0 kB [ 57.953537][ T6740] Private_Clean: 0 kB [ 57.953537][ T6740] Private_Dirty: 16 kB [ 57.953537][ T6740] Referenced: 16 kB [ 57.953537][ T6740] Anonymous: 16 kB [ 57.953537][ T6740] KSM: 0 kB [ 57.953537][ T6740] LazyFree: 0 kB [ 57.953537][ T6740] AnonHugePages: 0 kB [ 57.953537][ T6740] ShmemPmdMapped: 0 kB [ 57.953537][ T6740] FilePmdMapped: ´' [ 58.222612][ T6772] block nbd2: not configured, cannot reconfigure [ 58.225147][ T6773] block nbd2: not configured, cannot reconfigure [ 58.323175][ T6786] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 58.444112][ T6791] 9pnet_fd: Insufficient options for proto=fd [ 58.827259][ T6806] __nla_validate_parse: 6 callbacks suppressed [ 58.827273][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 59.235566][ T63] Bluetooth: hci3: command tx timeout [ 59.473010][ T6825] tmpfs: Bad value for 'mpol' [ 59.478409][ T6825] vxlan0: entered promiscuous mode [ 59.480128][ T6825] vxlan0: entered allmulticast mode [ 59.482350][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.486602][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.490334][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.493785][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.546905][ T6828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.550036][ T6829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.555418][ T6831] block nbd4: NBD_DISCONNECT [ 59.557721][ T6831] block nbd4: Send disconnect failed -89 [ 59.561182][ T6830] block nbd4: Disconnected due to user request. [ 59.564322][ T6830] block nbd4: shutting down sockets [ 59.590001][ T6835] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 59.592043][ T6837] netlink: 48 bytes leftover after parsing attributes in process `syz.0.199'. [ 59.636204][ T6842] dlm: non-version read from control device 0 [ 59.640563][ T6842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6842 comm=syz.0.201 [ 59.671615][ T6844] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 59.934635][ T6037] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.084177][ T6037] usb 5-1: Using ep0 maxpacket: 32 [ 60.087473][ T6037] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.091491][ T6037] usb 5-1: config 1 interface 0 has no altsetting 0 [ 60.095615][ T6037] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.40 [ 60.098462][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.100868][ T6037] usb 5-1: Product: syz [ 60.102274][ T6037] usb 5-1: Manufacturer: ✢ࢽä¶å‰¶ê¥šáƒˆï»Ÿï¯‡åˆ±å—žì†â‘¢ïšæ±±é ‹í‹‰èµ‚鑋ä¦à¾…狗潚룦é„糿跼憅é®ã»´ï²…붊䷱ꬓᲡ夑埉첻莬⿶魷긄ꫪ怹á©êŸ¾ä˜æ¸‚嗖㲲è®ï¼‚޹桫晧륲䛦éŠê­ƒë¹žî¼™çƒ›å£­à¤¯ê¬Œå™°æ¶«ë±¿Ô¢ã¬™á±ˆáŒ”냭é¶Â“⦈ﵙë¾î‡Ÿî°®é¬€ì‘´ë‚¦ç´’ꗸì©çž¹â­·â¿«ä¦°â†ºÚ‘á²ê’’浳斔皤濾ëšì•¦í”¤á˜“ꪔ₼꾗è‚쾒ሀ꫊ [ 60.112904][ T6037] usb 5-1: SerialNumber: syz [ 60.327069][ T6037] usbhid 5-1:1.0: can't add hid device: -71 [ 60.329057][ T6037] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 60.333765][ T6037] usb 5-1: USB disconnect, device number 2 [ 60.594663][ T5985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 60.594803][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 60.620500][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 60.741927][ T6881] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 60.746682][ T6881] netlink: 236 bytes leftover after parsing attributes in process `syz.4.212'. [ 60.749643][ T6882] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 60.752053][ T6882] netlink: 236 bytes leftover after parsing attributes in process `syz.4.212'. [ 60.795744][ T6887] tipc: Enabling of bearer rejected, failed to enable media [ 60.832939][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 60.832949][ T40] audit: type=1400 audit(1757429570.195:360): avc: denied { read } for pid=6893 comm="syz.4.215" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.843099][ T40] audit: type=1400 audit(1757429570.195:361): avc: denied { open } for pid=6893 comm="syz.4.215" path="/dev/input/event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.880589][ T6896] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 60.935973][ T40] audit: type=1400 audit(1757429570.305:362): avc: denied { unmount } for pid=5970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.028753][ T40] audit: type=1400 audit(1757429570.395:363): avc: denied { getopt } for pid=6915 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.035211][ T6916] netlink: 120 bytes leftover after parsing attributes in process `syz.0.222'. [ 61.044951][ T6918] netlink: 'syz.2.223': attribute type 7 has an invalid length. [ 61.055419][ T6918] : entered promiscuous mode [ 61.062914][ T40] audit: type=1400 audit(1757429570.425:364): avc: denied { create } for pid=6919 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.069023][ T40] audit: type=1400 audit(1757429570.425:365): avc: denied { connect } for pid=6919 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.116330][ T40] audit: type=1400 audit(1757429570.485:366): avc: denied { listen } for pid=6919 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.174286][ T6037] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 61.308688][ T6930] fuse: Unknown parameter '' [ 61.312434][ T40] audit: type=1400 audit(1757429570.675:367): avc: denied { bind } for pid=6929 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.318395][ T63] Bluetooth: hci3: command tx timeout [ 61.320181][ T40] audit: type=1400 audit(1757429570.675:368): avc: denied { getopt } for pid=6929 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.334214][ T1461] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.335033][ T6037] usb 9-1: Using ep0 maxpacket: 8 [ 61.339554][ T6037] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 61.342148][ T6037] usb 9-1: config 179 has no interface number 0 [ 61.344196][ T6037] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 61.347627][ T6037] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 61.351191][ T6037] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.354802][ T6037] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 61.357946][ T6037] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 61.362017][ T6037] usb 9-1: config 179 interface 65 has no altsetting 0 [ 61.364380][ T6037] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 61.367268][ T6037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.381195][ T6037] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input5 [ 61.390273][ T40] audit: type=1400 audit(1757429570.755:369): avc: denied { read } for pid=5367 comm="acpid" name="js0" dev="devtmpfs" ino=2989 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.484283][ T1461] usb 8-1: Using ep0 maxpacket: 8 [ 61.488045][ T1461] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 61.490457][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.493964][ T1461] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.497608][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.500975][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.506383][ T1461] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 61.508680][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.511960][ T1461] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.515626][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.519030][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.524163][ T1461] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 61.526498][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.529930][ T1461] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.533496][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.537443][ T1461] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.543316][ T1461] usb 8-1: string descriptor 0 read error: -22 [ 61.545482][ T1461] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 61.548313][ T1461] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.562578][ T1461] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 61.577343][ T838] usb 9-1: USB disconnect, device number 2 [ 61.579298][ C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 61.815007][ T837] usb 8-1: USB disconnect, device number 3 [ 61.850689][ T6954] vfat: Unknown parameter 'nfó' [ 61.859280][ T6954] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 61.864682][ T6954] CIFS: iocharset name too long [ 61.919183][ T6962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.232'. [ 61.970451][ T6970] binder: 6968:6970 ioctl 4018620d 0 returned -22 [ 62.105552][ T6985] fuse: Bad value for 'fd' [ 62.114144][ T6985] Illegal XDP return value 4294967274 on prog (id 23) dev syz_tun, expect packet loss! [ 62.374256][ T1461] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 62.525627][ T1461] usb 9-1: Using ep0 maxpacket: 8 [ 62.529403][ T1461] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 62.532588][ T1461] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 62.535952][ T1461] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 62.539538][ T1461] usb 9-1: config 250 has no interface number 0 [ 62.541899][ T1461] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 62.546215][ T1461] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 62.549954][ T1461] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 62.553808][ T1461] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 62.558438][ T1461] usb 9-1: config 250 interface 228 has no altsetting 0 [ 62.561797][ T1461] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 62.564691][ T1461] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 62.567341][ T1461] usb 9-1: Product: syz [ 62.569070][ T1461] usb 9-1: SerialNumber: syz [ 62.578241][ T1461] hub 9-1:250.228: bad descriptor, ignoring hub [ 62.580245][ T1461] hub 9-1:250.228: probe with driver hub failed with error -5 [ 62.776251][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.779836][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.785398][ T1461] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 62.876833][ T6999] trusted_key: syz.3.247 sent an empty control message without MSG_MORE. [ 62.886604][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 62.940945][ T7009] program syz.2.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.017633][ T7009] netfs: Couldn't get user pages (rc=-14) [ 63.019634][ T7009] netfs: Zero-sized read [R=1] [ 63.039242][ T63] Bluetooth: Wrong link type (-71) [ 63.041784][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.243'. [ 63.067541][ C1] usblp0: nonzero read bulk status received: -71 [ 63.070495][ T6988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.095552][ T6037] usb 9-1: USB disconnect, device number 3 [ 63.100448][ T6037] usblp0: removed [ 63.394125][ T63] Bluetooth: hci3: command tx timeout [ 63.788670][ T7031] ubi31: attaching mtd0 [ 63.790160][ T7031] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 63.795903][ T7031] netlink: 'syz.4.258': attribute type 10 has an invalid length. [ 63.806859][ T7031] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 63.828857][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.281654][ T7050] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 64.289884][ T7050] loop6: detected capacity change from 0 to 63 [ 64.297335][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.301126][ T7050] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.305845][ T7050] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.309921][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.312719][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.316054][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.319272][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.608306][ T7065] Bluetooth: MGMT ver 1.23 [ 64.630526][ T7065] netlink: 232 bytes leftover after parsing attributes in process `syz.0.268'. [ 64.692877][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 64.702611][ T7068] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 64.705173][ T7068] netlink: 232 bytes leftover after parsing attributes in process `syz.4.269'. [ 64.708003][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 64.712510][ T7067] delete_channel: no stack [ 65.052454][ T7085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7085 comm=syz.3.275 [ 65.124098][ T837] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 65.274084][ T837] usb 9-1: Using ep0 maxpacket: 8 [ 65.278670][ T837] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.282802][ T837] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.287005][ T837] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 65.291837][ T837] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 65.296432][ T837] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.301869][ T837] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.305716][ T837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.460591][ T7089] kvm: pic: non byte read [ 65.516720][ T837] usb 9-1: GET_CAPABILITIES returned 0 [ 65.518527][ T837] usbtmc 9-1:16.0: can't read capabilities [ 65.725775][ T1218] usb 9-1: USB disconnect, device number 4 [ 65.957219][ T40] kauditd_printk_skb: 1018 callbacks suppressed [ 65.957234][ T40] audit: type=1400 audit(1757429575.325:1388): avc: denied { read } for pid=7097 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.144788][ T40] audit: type=1400 audit(1757429575.515:1389): avc: denied { read } for pid=7108 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.256270][ T7112] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 66.258973][ T7112] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 66.293865][ T40] audit: type=1400 audit(1757429575.655:1390): avc: denied { mount } for pid=7111 comm="syz.4.284" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.385713][ T40] audit: type=1400 audit(1757429575.755:1391): avc: denied { unmount } for pid=6470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.432175][ T7116] netlink: 80 bytes leftover after parsing attributes in process `syz.4.285'. [ 66.511943][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 66.515377][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 66.518183][ T7118] netlink: 'syz.0.286': attribute type 12 has an invalid length. [ 66.964979][ T40] audit: type=1400 audit(1757429576.335:1392): avc: denied { connect } for pid=7141 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.999534][ T7144] random: crng reseeded on system resumption [ 67.001452][ T40] audit: type=1400 audit(1757429576.365:1393): avc: denied { write } for pid=7143 comm="syz.3.294" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.009409][ T40] audit: type=1400 audit(1757429576.365:1394): avc: denied { open } for pid=7143 comm="syz.3.294" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.017914][ T40] audit: type=1400 audit(1757429576.375:1395): avc: denied { ioctl } for pid=7143 comm="syz.3.294" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.020190][ T7145] 9pnet_virtio: no channels available for device syz [ 67.026594][ T40] audit: type=1400 audit(1757429576.385:1396): avc: denied { write } for pid=7141 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.034767][ T40] audit: type=1400 audit(1757429576.385:1397): avc: denied { ioctl } for pid=7141 comm="syz.4.293" path="socket:[17459]" dev="sockfs" ino=17459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.054176][ T838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.132763][ T7155] syz_tun: entered allmulticast mode [ 67.140658][ T7154] syz_tun: left allmulticast mode [ 67.204744][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 67.208925][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 67.217769][ T838] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 67.221342][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.223831][ T838] usb 5-1: Product: syz [ 67.225365][ T838] usb 5-1: Manufacturer: syz [ 67.226808][ T838] usb 5-1: SerialNumber: syz [ 67.229496][ T838] usb 5-1: config 0 descriptor?? [ 67.235694][ T838] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 67.238516][ T838] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 67.443140][ T7177] netlink: zone id is out of range [ 67.444869][ T7177] netlink: zone id is out of range [ 67.446614][ T7177] netlink: zone id is out of range [ 67.448232][ T7177] netlink: zone id is out of range [ 67.450310][ T7177] netlink: del zone limit has 4 unknown bytes [ 67.479581][ T7189] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.307'. [ 67.516293][ T7193] bridge0: entered promiscuous mode [ 67.518171][ T7193] macsec1: entered promiscuous mode [ 67.520874][ T7193] bridge0: port 3(macsec1) entered blocking state [ 67.522991][ T7193] bridge0: port 3(macsec1) entered disabled state [ 67.525641][ T7193] macsec1: entered allmulticast mode [ 67.527382][ T7193] bridge0: entered allmulticast mode [ 67.530137][ T7193] macsec1: left allmulticast mode [ 67.531841][ T7193] bridge0: left allmulticast mode [ 67.534958][ T7193] bridge0: left promiscuous mode [ 67.622374][ T7204] netlink: 'syz.3.311': attribute type 30 has an invalid length. [ 67.625797][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 67.834456][ T838] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 67.847872][ T7226] sch_fq: defrate 0 ignored. [ 67.936169][ T7230] erspan0: entered promiscuous mode [ 68.091675][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 68.154188][ T7243] nbd0: detected capacity change from 0 to 127 [ 68.158525][ T63] block nbd0: Receive control failed (result -32) [ 68.160275][ T6871] block nbd0: Send control failed (result -32) [ 68.165286][ T6871] block nbd0: Request send failed, requeueing [ 68.171491][ T67] block nbd0: Dead connection, failed to find a fallback [ 68.174379][ T67] block nbd0: shutting down sockets [ 68.174548][ T6871] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.176555][ T67] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.176601][ T67] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.188769][ T6871] Buffer I/O error on dev nbd0, logical block 1, async page read [ 68.192091][ T6871] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.196320][ T6871] Buffer I/O error on dev nbd0, logical block 2, async page read [ 68.199519][ T6871] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.203281][ T6871] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.208437][ T6871] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.211542][ T6871] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.215292][ T6871] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.218640][ T6871] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.221902][ T6871] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.230154][ T6871] ldm_validate_partition_table(): Disk read failed. [ 68.233594][ T6871] Dev nbd0: unable to read RDB block 0 [ 68.239185][ T6871] nbd0: unable to read partition table [ 68.247914][ T6871] ldm_validate_partition_table(): Disk read failed. [ 68.250886][ T6871] Dev nbd0: unable to read RDB block 0 [ 68.253672][ T6871] nbd0: unable to read partition table [ 68.271076][ T838] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 68.274270][ T838] em28xx 5-1:0.0: board has no eeprom [ 68.334265][ T838] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 68.336947][ T838] em28xx 5-1:0.0: dvb set to bulk mode. [ 68.341417][ T24] em28xx 5-1:0.0: Binding DVB extension [ 68.345600][ T838] usb 5-1: USB disconnect, device number 3 [ 68.353826][ T838] em28xx 5-1:0.0: Disconnecting em28xx [ 68.368890][ T24] em28xx 5-1:0.0: Registering input extension [ 68.374225][ T838] em28xx 5-1:0.0: Closing input extension [ 68.389214][ T7261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7261 comm=syz.3.324 [ 68.391231][ T7253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7253 comm=syz.3.324 [ 68.398257][ T838] em28xx 5-1:0.0: Freeing device [ 68.595542][ T7266] netlink: 'syz.4.325': attribute type 28 has an invalid length. [ 68.598841][ T7266] netlink: 'syz.4.325': attribute type 3 has an invalid length. [ 68.800238][ T7279] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 69.204397][ T7275] syz.4.326 (7275): drop_caches: 2 [ 69.207617][ T7275] syz.4.326 (7275): drop_caches: 2 [ 69.276189][ T7290] overlay: Unknown parameter 'obj_user' [ 69.286275][ T7286] dummy0: entered promiscuous mode [ 69.291016][ T7286] dummy0: left promiscuous mode [ 69.793554][ T7332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.067664][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 3109 [ 70.434769][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 70.437580][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 70.440311][ T63] Bluetooth: hci3: hardware error 0x00 [ 70.749867][ T7339] ======================================================= [ 70.749867][ T7339] WARNING: The mand mount option has been deprecated and [ 70.749867][ T7339] and is ignored by this kernel. Remove the mand [ 70.749867][ T7339] option from the mount to silence this warning. [ 70.749867][ T7339] ======================================================= [ 70.813771][ T7344] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 70.816519][ T7344] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 70.821222][ T7344] vhci_hcd vhci_hcd.0: Device attached [ 70.827528][ T7344] vhci_hcd vhci_hcd.0: port 0 already used [ 70.871730][ T7345] vhci_hcd: connection closed [ 70.873575][ T93] vhci_hcd: stop threads [ 70.879149][ T93] vhci_hcd: release socket [ 70.881034][ T93] vhci_hcd: disconnect device [ 71.025692][ T7354] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 71.029780][ T7354] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 71.066290][ T7357] 9pnet_virtio: no channels available for device syz [ 71.159274][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.374144][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 71.510208][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 71.510223][ T40] audit: type=1400 audit(1757429580.875:1416): avc: denied { read write } for pid=7361 comm="syz.3.349" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.520022][ T6319] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 71.521123][ T40] audit: type=1400 audit(1757429580.875:1417): avc: denied { open } for pid=7361 comm="syz.3.349" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.524395][ T6319] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 71.534150][ T6319] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 71.535489][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 71.540659][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.542080][ T6319] hid-generic 0000:0004:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 71.544575][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.551288][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.555552][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.558485][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.563038][ T24] usb 9-1: config 0 descriptor?? [ 71.584769][ T40] audit: type=1400 audit(1757429580.955:1418): avc: denied { ioctl } for pid=7361 comm="syz.3.349" path="socket:[19529]" dev="sockfs" ino=19529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.585437][ T7363] fido_id[7363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.620781][ T40] audit: type=1400 audit(1757429580.985:1419): avc: denied { module_request } for pid=7365 comm="syz.3.350" kmod="crypto-seqiv(rfc4106(gcm(aes)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.738256][ T40] audit: type=1800 audit(1757429581.105:1420): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.351" name="bus" dev="overlay" ino=554 res=0 errno=0 [ 71.786360][ T7371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.897103][ T7374] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 71.908680][ T7374] cramfs: wrong magic [ 71.922327][ T40] audit: type=1400 audit(1757429581.285:1421): avc: denied { append } for pid=7375 comm="syz.3.353" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.965779][ T40] audit: type=1400 audit(1757429581.335:1422): avc: denied { bind } for pid=7378 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.967181][ T7379] __nla_validate_parse: 5 callbacks suppressed [ 71.967194][ T7379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.354'. [ 71.975703][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 71.986788][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0003/input/input7 [ 71.998827][ T24] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 72.012033][ T40] audit: type=1400 audit(1757429581.375:1423): avc: denied { mount } for pid=7380 comm="syz.3.355" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.031426][ T40] audit: type=1400 audit(1757429581.395:1424): avc: denied { unmount } for pid=5970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.038449][ T40] audit: type=1400 audit(1757429581.405:1425): avc: denied { setopt } for pid=7383 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.052026][ T7386] mmap: syz.3.357 (7386) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.115245][ T7392] trusted_key: encrypted_key: master key parameter 'trd:‘8s‰X' is invalid [ 72.175914][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.179583][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.181846][ T7404] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 72.193953][ T1218] usb 9-1: USB disconnect, device number 5 [ 72.215405][ T7404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.255682][ T7404] veth7: entered promiscuous mode [ 72.260614][ T7404] bond3: (slave veth7): Enslaving as an active interface with a down link [ 72.299345][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 72.302201][ T7417] openvswitch: netlink: Flow actions attr not present in new flow. [ 72.396397][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 72.399647][ T7423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.370'. [ 72.409262][ T7427] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 72.493425][ T5985] Bluetooth: hci0: Malformed LE Event: 0x0b [ 72.524232][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 72.732549][ T7444] overlayfs: failed to resolve './file1': -2 [ 72.814734][ T7450] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 72.818429][ T7450] bond0: (slave lo): Error: Device can not be enslaved while up [ 72.909663][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.384'. [ 72.935998][ T7460] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.938644][ T7460] overlayfs: failed to set xattr on upper [ 72.940735][ T7460] overlayfs: ...falling back to redirect_dir=nofollow. [ 72.943282][ T7460] overlayfs: ...falling back to index=off. [ 72.946740][ T7460] overlayfs: ...falling back to uuid=null. [ 72.948568][ T7460] overlayfs: ...falling back to xino=off. [ 72.993220][ T7462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.386'. [ 73.116567][ T7475] 9pnet_virtio: no channels available for device syz [ 73.207614][ C2] ata1: illegal qc_active transition (00000000->00000080) [ 73.293547][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 73.297053][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 73.301743][ T7510] kAFS: No cell specified [ 73.306256][ T7508] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.310583][ T7508] block device autoloading is deprecated and will be removed. [ 73.315690][ T7498] md: md2 stopped. [ 73.333798][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 73.338049][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.353278][ T7507] cgroup: Unknown subsys name 'subj_type' [ 73.393639][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'. [ 73.420161][ T7519] macvlan2: entered promiscuous mode [ 73.421885][ T7519] macvlan2: entered allmulticast mode [ 73.423916][ T7519] bond4: entered promiscuous mode [ 73.427057][ T7519] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.432678][ T7519] bond4: left promiscuous mode [ 73.531783][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 73.546091][ T7530] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 73.546129][ T1112] ata1.00: configured for UDMA/100 [ 73.683293][ T7548] binder: 7547:7548 ioctl c0306201 2000000001c0 returned -14 [ 73.836320][ T7548] binder: 7547:7548 ioctl 5423 200000000040 returned -22 [ 73.952271][ T7574] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 74.039828][ T7580] mkiss: ax0: crc mode is auto. [ 74.820822][ T7616] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 74.923796][ T7625] block nbd3: Attempted send on invalid socket [ 74.926749][ T7625] blk_print_req_error: 138 callbacks suppressed [ 74.926762][ T7625] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 74.935686][ T7625] gfs2: error -5 reading superblock [ 74.964288][ T7628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.991267][ T7630] SELinux: Context Ü is not valid (left unmapped). [ 75.260469][ T7662] overlayfs: missing 'lowerdir' [ 75.307800][ T7664] vlan0: entered allmulticast mode [ 75.309406][ T7664] bond1: entered allmulticast mode [ 75.469763][ T7677] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 75.794397][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.800369][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.807013][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.812467][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.818389][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.818573][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.818775][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.818955][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.819135][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.819319][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7720 comm=syz.3.460 [ 75.828566][ T7725] ================================================================== [ 75.828575][ T7725] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 75.828620][ T7725] Write of size 8 at addr ffffc90005121000 by task syz.4.461/7725 [ 75.828630][ T7725] [ 75.828636][ T7725] CPU: 2 UID: 0 PID: 7725 Comm: syz.4.461 Not tainted syzkaller #0 PREEMPT(full) [ 75.828648][ T7725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.828655][ T7725] Call Trace: [ 75.828659][ T7725] [ 75.828662][ T7725] dump_stack_lvl+0x116/0x1f0 [ 75.828682][ T7725] print_report+0xcd/0x630 [ 75.828695][ T7725] ? __virt_addr_valid+0x81/0x610 [ 75.828711][ T7725] ? sys_imageblit+0x1a6f/0x1e60 [ 75.828727][ T7725] kasan_report+0xe0/0x110 [ 75.828738][ T7725] ? sys_imageblit+0x1a6f/0x1e60 [ 75.828753][ T7725] sys_imageblit+0x1a6f/0x1e60 [ 75.828769][ T7725] ? __pfx_sys_imageblit+0x10/0x10 [ 75.828785][ T7725] ? lock_acquire+0x179/0x350 [ 75.828800][ T7725] ? __page_table_check_ptes_set+0x1ae/0x420 [ 75.828810][ T7725] ? find_held_lock+0x2b/0x80 [ 75.828822][ T7725] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 75.828832][ T7725] ? pfn_valid+0x26a/0x4d0 [ 75.828844][ T7725] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 75.828857][ T7725] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 75.828870][ T7725] bit_putcs+0x90f/0xde0 [ 75.828885][ T7725] ? __pfx_bit_putcs+0x10/0x10 [ 75.828896][ T7725] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 75.828910][ T7725] ? fb_get_color_depth+0x120/0x250 [ 75.828921][ T7725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.828933][ T7725] ? __pfx_bit_putcs+0x10/0x10 [ 75.828944][ T7725] fbcon_putcs+0x384/0x4a0 [ 75.828956][ T7725] do_update_region+0x2e6/0x3f0 [ 75.828974][ T7725] invert_screen+0x1e4/0x590 [ 75.828985][ T7725] ? __pfx_invert_screen+0x10/0x10 [ 75.829003][ T7725] ? __pfx_complement_pos+0x10/0x10 [ 75.829015][ T7725] ? vc_do_resize+0x24d/0x10e0 [ 75.829026][ T7725] ? __vmalloc_node_noprof+0xad/0xf0 [ 75.829042][ T7725] clear_selection+0x59/0x70 [ 75.829052][ T7725] vc_do_resize+0xd9b/0x10e0 [ 75.829066][ T7725] ? __pfx_vc_do_resize+0x10/0x10 [ 75.829080][ T7725] fbcon_set_disp+0x7ad/0xe50 [ 75.829092][ T7725] set_con2fb_map+0x703/0x1080 [ 75.829105][ T7725] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 75.829118][ T7725] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 75.829131][ T7725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.829142][ T7725] do_fb_ioctl+0x328/0x7e0 [ 75.829156][ T7725] ? __pfx_do_fb_ioctl+0x10/0x10 [ 75.829171][ T7725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.829187][ T7725] ? selinux_file_ioctl+0x180/0x270 [ 75.829202][ T7725] fb_ioctl+0xe5/0x150 [ 75.829214][ T7725] ? __pfx_fb_ioctl+0x10/0x10 [ 75.829227][ T7725] __x64_sys_ioctl+0x18b/0x210 [ 75.829241][ T7725] do_syscall_64+0xcd/0x4c0 [ 75.829261][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.829271][ T7725] RIP: 0033:0x7fac35d8ebe9 [ 75.829280][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.829292][ T7725] RSP: 002b:00007fac36b5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.829303][ T7725] RAX: ffffffffffffffda RBX: 00007fac35fc5fa0 RCX: 00007fac35d8ebe9 [ 75.829309][ T7725] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 75.829316][ T7725] RBP: 00007fac35e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.829322][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.829329][ T7725] R13: 00007fac35fc6038 R14: 00007fac35fc5fa0 R15: 00007ffdb6bf9f98 [ 75.829339][ T7725] [ 75.829342][ T7725] [ 75.829345][ T7725] The buggy address belongs to a vmalloc virtual mapping [ 75.829353][ T7725] Memory state around the buggy address: [ 75.829359][ T7725] ffffc90005120f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 75.829366][ T7725] ffffc90005120f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 75.829372][ T7725] >ffffc90005121000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 75.829378][ T7725] ^ [ 75.829382][ T7725] ffffc90005121080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 75.829389][ T7725] ffffc90005121100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 75.829394][ T7725] ================================================================== [ 75.829400][ T7725] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.829407][ T7725] CPU: 2 UID: 0 PID: 7725 Comm: syz.4.461 Not tainted syzkaller #0 PREEMPT(full) [ 75.829419][ T7725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.829426][ T7725] Call Trace: [ 75.829430][ T7725] [ 75.829434][ T7725] dump_stack_lvl+0x3d/0x1f0 [ 75.829446][ T7725] vpanic+0x6e8/0x7a0 [ 75.829461][ T7725] ? __pfx_vpanic+0x10/0x10 [ 75.829476][ T7725] ? __pfx_vprintk_emit+0x10/0x10 [ 75.829490][ T7725] ? sys_imageblit+0x1a6f/0x1e60 [ 75.829503][ T7725] panic+0xca/0xd0 [ 75.829517][ T7725] ? __pfx_panic+0x10/0x10 [ 75.829534][ T7725] check_panic_on_warn+0xab/0xb0 [ 75.829544][ T7725] end_report+0x107/0x170 [ 75.829555][ T7725] kasan_report+0xee/0x110 [ 75.829566][ T7725] ? sys_imageblit+0x1a6f/0x1e60 [ 75.829582][ T7725] sys_imageblit+0x1a6f/0x1e60 [ 75.829598][ T7725] ? __pfx_sys_imageblit+0x10/0x10 [ 75.829612][ T7725] ? lock_acquire+0x179/0x350 [ 75.829627][ T7725] ? __page_table_check_ptes_set+0x1ae/0x420 [ 75.829638][ T7725] ? find_held_lock+0x2b/0x80 [ 75.829650][ T7725] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 75.829660][ T7725] ? pfn_valid+0x26a/0x4d0 [ 75.829672][ T7725] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 75.829685][ T7725] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 75.829698][ T7725] bit_putcs+0x90f/0xde0 [ 75.829712][ T7725] ? __pfx_bit_putcs+0x10/0x10 [ 75.829723][ T7725] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 75.829738][ T7725] ? fb_get_color_depth+0x120/0x250 [ 75.829748][ T7725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.829760][ T7725] ? __pfx_bit_putcs+0x10/0x10 [ 75.829771][ T7725] fbcon_putcs+0x384/0x4a0 [ 75.829782][ T7725] do_update_region+0x2e6/0x3f0 [ 75.829797][ T7725] invert_screen+0x1e4/0x590 [ 75.829809][ T7725] ? __pfx_invert_screen+0x10/0x10 [ 75.829820][ T7725] ? __pfx_complement_pos+0x10/0x10 [ 75.829831][ T7725] ? vc_do_resize+0x24d/0x10e0 [ 75.829841][ T7725] ? __vmalloc_node_noprof+0xad/0xf0 [ 75.829855][ T7725] clear_selection+0x59/0x70 [ 75.829865][ T7725] vc_do_resize+0xd9b/0x10e0 [ 75.829877][ T7725] ? __pfx_vc_do_resize+0x10/0x10 [ 75.829890][ T7725] fbcon_set_disp+0x7ad/0xe50 [ 75.829901][ T7725] set_con2fb_map+0x703/0x1080 [ 75.829913][ T7725] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 75.829925][ T7725] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 75.829938][ T7725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.829950][ T7725] do_fb_ioctl+0x328/0x7e0 [ 75.829963][ T7725] ? __pfx_do_fb_ioctl+0x10/0x10 [ 75.829978][ T7725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.830001][ T7725] ? selinux_file_ioctl+0x180/0x270 [ 75.830016][ T7725] fb_ioctl+0xe5/0x150 [ 75.830030][ T7725] ? __pfx_fb_ioctl+0x10/0x10 [ 75.830044][ T7725] __x64_sys_ioctl+0x18b/0x210 [ 75.830060][ T7725] do_syscall_64+0xcd/0x4c0 [ 75.830074][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.830085][ T7725] RIP: 0033:0x7fac35d8ebe9 [ 75.830092][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.830101][ T7725] RSP: 002b:00007fac36b5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.830111][ T7725] RAX: ffffffffffffffda RBX: 00007fac35fc5fa0 RCX: 00007fac35d8ebe9 [ 75.830117][ T7725] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 75.830123][ T7725] RBP: 00007fac35e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.830128][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.830134][ T7725] R13: 00007fac35fc6038 R14: 00007fac35fc5fa0 R15: 00007ffdb6bf9f98 [ 75.830143][ T7725] [ 75.830848][ T7725] Kernel Offset: disabled VM DIAGNOSIS: 14:53:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888055940000 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc78da83c80 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc78dc384d0 CR3=000000002a939000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002b002b002b002c 002b000000004554 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004554 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc78ddeeb20 00007fc78ddef050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e29a440 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c28c2ad CR3=0000000030561000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000019 Opmask01=0000000000000001 Opmask02=0000000000030000 Opmask03=0000000000000000 Opmask04=00000000fffeffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04a5532b 00007ffc04a5532b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04a55830 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04a55830 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313a3539332e3138 3539323437353731 2874696475612030 30343100002e6600 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130353333243132 3533323437353731 2274636475612030 3034310000246600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6320303237373d 6469702074656b63 6f735f6574756f72 5f6b6e696c74656e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3036342e332e7a79 733d6d6d6f632030 3237373d64697020 74656b636f735f65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74756f725f6b6e69 6c74656e3d737361 6c63732039363532 3d657079745f6773 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6c6e20303d6c6f 636f746f7270203a 6567617373656d20 6b6e696c74656e20 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64657a696e676f63 65726e75203a7875 6e694c4553205d30 32373754205b5d37 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637320393336 3d6f6e6920227366 706d74766564223d 7665642022326472 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90005eb6f30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fac36b5e6c0 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc78dc116d0 CR3=000000003299d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc78db59150 00007fc78ddee5f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc78db59150 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f4342494c470035 2e322e325f434249 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e322e325f434249 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002e8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc78ddeeb20 00007fc78ddef050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e2b0000 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000009b40 CR3=0000000030561000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000001 Opmask02=0000000000030000 Opmask03=0000000000000000 Opmask04=00000000fffeffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04a5532b 00007ffc04a5532b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04a55830 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04a55830 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3330333934332e30 322020205b3e363c 00313d7365722078 756e696c65733d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3330333334332430 3220202051343636 0031377365722072 7564636665733700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6320303237373d 6469702074656b63 6f735f6574756f72 5f6b6e696c74656e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3036342e332e7a79 733d6d6d6f632030 3237373d64697020 74656b636f735f65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74756f725f6b6e69 6c74656e3d737361 6c63732039363532 3d657079745f6773 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6c6e20303d6c6f 636f746f7270203a 6567617373656d20 6b6e696c74656e20 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64657a696e676f63 65726e75203a7875 6e694c4553205d30 32373754205b5d39 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637320393336 3d6f6e6920227366 706d74766564223d 7665642022326472 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000