last executing test programs: 2.351397328s ago: executing program 0 (id=193): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x13, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x0, 0x4, 0xb, 0x0, 0x2, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x98000000}]}, &(0x7f0000000300)='GPL\x00', 0x507, 0xe9, &(0x7f0000000ac0)=""/233, 0x1e00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000bc0)=[{0x0, 0x1, 0x0, 0xb}, {0x2, 0x4, 0xb, 0xa}, {0x5, 0x4, 0x6, 0x1}, {0x2, 0x1, 0xd, 0x2}, {0x3, 0x2, 0xa, 0x579bdb567298482d}, {0x4, 0x1, 0x1, 0x4}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000200), 0x0, 0x2a7, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000003e70400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20009eff}, 0x84) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r5, r5, 0x0, 0x30) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x47, &(0x7f0000000040)=""/71}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) close(r8) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f00000002c0)=r8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @generic={0x7, 0x9, 0x9, 0x5, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x939}], &(0x7f0000000140)='GPL\x00', 0x80000001, 0x2a, &(0x7f0000000180)=""/42, 0x41000, 0x22, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000740)=[r6, r7, r11], &(0x7f0000000780)=[{0x3, 0x4, 0xd, 0x3}, {0x4, 0x1, 0x8, 0x8}, {0x4, 0x2, 0x5}, {0x1, 0x2, 0xe, 0xb}, {0x2, 0x4, 0x4}, {0x1, 0x1, 0xf}, {0x0, 0x2, 0xf, 0x6}, {0x2, 0x1, 0x4, 0xf}], 0x10, 0xfffffff8, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r0, &(0x7f0000000680)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r12}, 0x80) 2.134852982s ago: executing program 0 (id=195): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x1, 0x5}, 0x80, 0x23b, 0x0, 0x1, 0x8, 0x40, 0x7, 0x66a}) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)=0x20) r2 = syz_usbip_server_init(0x3) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000100)={0x8, 0xb8}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x70401, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x5, 0x0, {{0x23, 0x4, 0x1, 0x0, 0x8c, 0x68, 0x0, 0x7f, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0xd8, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x1f, 0x4c, [@remote, @loopback, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @empty]}, @timestamp={0x44, 0x28, 0xd9, 0x0, 0xf, [0x5, 0x401, 0x6, 0x5, 0x10001, 0x8, 0x6, 0x100, 0x2]}, @lsrr={0x83, 0x1f, 0xf1, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @private=0xa010101, @loopback]}, @generic={0x50, 0x8, "2a19db77b204"}]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x6, 0xedd, 0x3, 0x4, r6, 0xd095, '\x00', r7, r8, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$KIOCSOUND(r4, 0x4b2f, 0x8000) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000880)={&(0x7f0000000440)={{@local, 0x8}, {@any, 0xa}, 0x400, "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"}, 0x418, 0x7}) ioctl$SIOCAX25DELFWD(r6, 0x89eb, &(0x7f00000008c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000900)=0xff) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000940)) r10 = dup(r9) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000980)={0x5, [0x4, 0x5, 0x2, 0x6, 0x7]}, &(0x7f00000009c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000a40)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r11, 0x40089416, &(0x7f0000000a80)=r12) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b00)={'ipvs\x00'}, &(0x7f0000000b40)=0x1e) 1.550304729s ago: executing program 0 (id=207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) 1.47522823s ago: executing program 0 (id=211): prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x4}, {0x3, 0x1, 0x0, 0x1}}], 0x8) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x42) shutdown(r6, 0x2) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x5a, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) mount$afs(&(0x7f0000000140)=@cell={0x25, 'syz1:', 'syz1'}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000500)={[{@flock_local}, {@flock_strict}, {@flock_openafs}, {}, {@flock_local}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'dctcp\x00'}}, {@dont_appraise}, {@flag='async'}, {@fsname={'fsname', 0x3d, 'smaps\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x63, 0x64, 0x62, 0x65, 0x64, 0x38, 0x36], 0x2d, [0x65, 0x65, 0x36, 0x65], 0x2d, [0x5, 0x61, 0x65, 0x35], 0x2d, [0x57, 0x35, 0x39, 0x33], 0x2d, [0x35, 0x36, 0x37, 0x0, 0x61, 0x32, 0x33, 0x33]}}}, {@fsname={'fsname', 0x3d, '/dev/btrfs-control\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/video36\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/video36\x00'}}]}) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r7, r8, 0x2, 0x0, @val=@perf_event={0x100}}, 0x18) 1.409389092s ago: executing program 1 (id=214): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0xa200, 0x1]}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x0, 0x7, 0x4, 0x0, 0x400001, {}, {0x3, 0x8, 0x9, 0x1, 0xf9, 0x6, "17699cfd"}, 0x9, 0x4, {0x0}, 0x4}) 1.059762472s ago: executing program 1 (id=222): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002140)=ANY=[@ANYBLOB="100000000000000005ee80886d46369f"], 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x7ffffffd, 0x348, 0x0, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000002100)=0x800, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) tee(r3, r5, 0x4, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x1800086, &(0x7f0000000900)='trans=tcp,') r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000200)=0x2000000000000008, 0x6, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0xfe35, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRESOCT=r7, @ANYBLOB="01002dbd7000ffdbdf250200ff1516a53ef7290b00bc"], 0x1c}}, 0x20000004) 990.717042ms ago: executing program 1 (id=226): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = socket(0x1, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) (async) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) 940.892164ms ago: executing program 1 (id=228): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffa151029500800008000300", @ANYRES32=r3, @ANYBLOB="10005080"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r4 = msgget$private(0x0, 0x80) msgctl$MSG_INFO(r4, 0xc, 0x0) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000005740)=""/66) (async) r5 = dup(0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="32fe753cab000000009a0000cc000001"], 0x10) 932.131369ms ago: executing program 1 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000029c0)={0xa, {"a2e3ad214fc752f91b2809094bf70e0dd038e7ff7fc6e5539b3266078b089b3b083867090890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b34390d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x6, 0x0, 'queue1\x00', 0x200}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000340)) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) read$FUSE(r7, 0x0, 0x2160) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0xf0, 0x5}, 0xff}, 0x18) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000280)={'\x00', 0x2, 0x2, 0x4}) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) close(r10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r9, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x7fffffffffffffff, 0x9, 0x7, 0x1}) 932.03361ms ago: executing program 3 (id=230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 850.149535ms ago: executing program 3 (id=231): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101500) ioctl(r0, 0x6, &(0x7f0000000040)="02f98cc2f074194fc517810285ab21cbb5b40b10ae935723babc56366b8b9a9074237b5623ef5ee0170d4bf1771562048fcaacdd315a5de9bf98ad98ca694592d5379ef151c2d0c2d13edc87685180df46886a920f50856ac7b54fa1b231d36d9be73cf595f756a7c58ab55cb2ce806e684bb2cc5dfd51dd7c82951cfc9a367c906f820d6e62f852803fcc4895ecaf4780809bf0c24280c465df4513e1fabfe0a411f2f288628f152cc32cb0ace100e0c69408a06a0e65f742c1d7890d1fd202e267dedf") (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x5) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x1917, 0x181000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x48080) (async) recvfrom$ax25(r1, &(0x7f00000002c0)=""/53, 0x35, 0x10100, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default]}, 0x48) (async) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000380)={0xe, [0x0, 0x80000001], 0x101}, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2d}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x20000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4004011) (async) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000580)="8d52d415739012107d4a466b9a1586c4321086baac6ac513db6c979366461738bad203df38424f9d1bdfa3a070770a1a1c9268c2cf6101853c33c830d013aa02bc0df93360b20b1be555a1c3875ccc8bc43e02bf32cc9283091d940b2dd3da3af26609ebf50dc4ea1fe9222a8b4f775848e29ec2a33168e8c35818043499fbb8c0696525325623d6588809701dc5832cafbaeb446d98eaa534cfa11015446314ce", 0xa1}, {&(0x7f0000000640)="10d52553293ecca3b2769c8eba6ae7486f5130efc2f4847665ef31735f64744a0088f541ce92a22a71587335b79a124901520e4762f9aa521336c4d4de4b308a85bdd9d0a5a470d2e6f8be7228d6344d6d8580216cee5e99b4900eb38d43a453c4a852d6488e98a0ab146ea3fc476a3d", 0x70}, {&(0x7f00000006c0)="5b1aaf6b87831bfcc26e894577c0994c0bd590eb42f4dad08b7f9c1514b70f6df5cd49bb28b653c116a439ee8df3029903ec7e75b58a90da68ce31167ce079ed948ac7e1967749ac76339fe835d18077c5ab3ca78c067c8fb3e9022452150abb259548a4cb300d38f4e29e7c12a33db78c4ed4b368248922c2d8f910b96b3b144fbfe76f90829b2b162e54382fd69e39f0a9e070336a21a3ae167f8524d77524efcbf7260daebc645868bd77944dd8775e7bf12bf55866e482c3f9f4477d16d533847d851db4bf2d99fa8608c2e0da1a769536c2536e1fe182935c1007", 0xdd}, {&(0x7f00000007c0)="31e0e96ec36650bc2d5cff3483098d6f75a08cede9eefad13878938dc222d013e275fe141f7de6a977380acedea3e90ea626bafd8963d119736e9bece9cbbfd8ae91648e00d90695da80616f1a6710abfe7b438b78a68b16af342149d214b54bfdc77e716382e43168bba247890df3896bdfd0327cabfe0edf86ba5994a09793523142cf0dd21eb54986ede15c9465a7d60439e915423b2755", 0x99}, {&(0x7f0000000880)="4c74a5c3f4bf1705847bcf8bdfd0d22c716b7757faa460aaf7ed4e27f05431136bfc6922420d3eeb9e06445c9514206b7a329b5f43d8ee22b25c2615ad3b07801bc6b6c13bb793f55f8e541fa4ec281f279da0ec2dbb8deea2e238ecdc53e5cb76", 0x61}, {&(0x7f0000000900)="4e453647d897d233af420ccd21dcd1cbc270ac8c213903df76974448a4d5397d326a250353d9206d319decde8e4b1711e27418288678f01b60124b54d031b231719fd00c11bf27a6f7bf9f2572a6a48f7e52013675f99878bdb1b4aedc9fe83217ecd9dc4008b53ea3f2d9750d7b668b948b5f1f1d77f0872eaf25df9e5bea", 0x7f}, {&(0x7f0000000980)="4b58b697a8c17d68cc321a2deda369e31d85c4e8a2a934e69b01", 0x1a}], 0x7) (async) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000a40)={'\x00', 0x9, 0x0, 0xffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000b40)=0x2) (async) preadv2(r0, &(0x7f0000002000)=[{&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000c80)=""/150, 0x96}, {&(0x7f0000000d40)=""/151, 0x97}, {&(0x7f0000000e00)=""/128, 0x80}, {&(0x7f0000000e80)=""/192, 0xc0}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/191, 0xbf}], 0x7, 0x4, 0x3, 0xa) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000002080)={0x0, 0xb6, "6ab1f93a804a2ec830a49601c197b996b93bde9e5c47340ed9957c4d98f824951a5cbabda2312a92345ba4204a9660fa36dd46a58a15e71b0d34aa4b28c7a861237a30a0aa3954d0a6d2ea3fd67067c1c59dc5b5c5d5bde538b86a0f5dd2a4d9c2cb3adaeeb637809b97de8e480092a07f9c032168bf387e0483886a90745e18d4bb88b11c2f1855b6fed9069b35cd721e5eca7d7d299655b569a81600d6b8ac38082b7fb386edd748ec0a9a0b6f2ee4984f7446bdf3"}, &(0x7f0000002140)=0xbe) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000002180)={r3}, &(0x7f00000021c0)=0x8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002240), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000051) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002340)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000023c0)={{0x1, 0x1, 0x3e0, 0x2, '\x00', 0x477}, 0x1, 0x20, 0x8, r5, 0x8, 0xc5, 'syz0\x00', &(0x7f0000002380)=['/dev/nbd#\x00', '$*]\x00', '/dev/input/mouse#\x00', '\x00', '\x00', '/dev/nbd#\x00', '\x00', '\\\x00'], 0x2f}) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000002500)={0x3, 0x7fff}) connect$inet(r1, &(0x7f0000002540)={0x2, 0x4e21, @empty}, 0x10) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000025c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000026c0)={0x1, 0x0, [{0x72f75156f3bbcc0d, 0x0, 0xe}]}) (async) accept4$packet(r1, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002740)=0x14, 0xa1afced7a488d4b4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000028c0)={&(0x7f00000027c0)={0xf4, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x38, 0xa8, @random="8d69feab7610b29c79d9ecaffca1aeccbc18f71416fd9c65afadd3c6725f271bac215a26fbfac3529b96c0384eeb0531a8bbacec"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x51}, 0x4000010) 789.816842ms ago: executing program 3 (id=234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xfc, 0x0, 0x7fffffff, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa, 0x3}}]}}}]}, 0x58}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @val={@val, {0x8100, 0x7, 0x0, 0x2}}, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "06242dc061660d48d18df1a418e459b8ef3e72e2e89d74c0991fb4ae9e91208b09dce0177fb9bdc9576d77cbff908d911e8d90c3008258de7aec92586ca96345"}}}}, &(0x7f0000000000)={0x0, 0x4, [0x1f4, 0xd8e, 0x810, 0xbc4]}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xfc, 0x0, 0x7fffffff, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa, 0x3}}]}}}]}, 0x58}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @local, @val={@val, {0x8100, 0x7, 0x0, 0x2}}, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "06242dc061660d48d18df1a418e459b8ef3e72e2e89d74c0991fb4ae9e91208b09dce0177fb9bdc9576d77cbff908d911e8d90c3008258de7aec92586ca96345"}}}}, &(0x7f0000000000)={0x0, 0x4, [0x1f4, 0xd8e, 0x810, 0xbc4]}) (async) 788.663182ms ago: executing program 1 (id=236): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000400)=""/186}, 0x20) socket(0x2, 0x5, 0xffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') socket$packet(0x11, 0x3, 0x300) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000001080)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x98ed243b72964cbe, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x7e) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) getdents64(r6, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r6, 0x0, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000280)={0x81, {0xfffffffc, 0x6, 0x10001, 0x10, 0x9}}) ioctl$TIOCSLCKTRMIOS(r6, 0x80047456, &(0x7f00000010c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 718.411789ms ago: executing program 3 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x8001, 0x81, 0x8, 0x2}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x8, 0x3, 0x14a8, 0x1410, 0x11, 0x148, 0x0, 0x0, 0x1410, 0x2a8, 0x2a8, 0x1410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x12d0, 0x1318, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x7ff, {0x4}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x7]}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1508) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200", @ANYRES16=r0, @ANYBLOB="6bc94adb0c2b6aea206ee4af53ab5e8b85ae19f21e182015c5e0cb8950ad8ec83e4f63f325afba4f5b2aaa9f64e3ba67f6660e8635e24d6bdb985035906d9b243355574626a2dc1016fa33148327c6f1d1b58a0319fa556e08927426268639427ace25f0"], 0x44}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200", @ANYRES16=r0, @ANYBLOB="6bc94adb0c2b6aea206ee4af53ab5e8b85ae19f21e182015c5e0cb8950ad8ec83e4f63f325afba4f5b2aaa9f64e3ba67f6660e8635e24d6bdb985035906d9b243355574626a2dc1016fa33148327c6f1d1b58a0319fa556e08927426268639427ace25f0"], 0x44}, 0x1, 0x2}, 0x0) 651.315781ms ago: executing program 2 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="4423b570afca304e93cdde6eb2ac0bb9fe7a8e3486f508ae265dee2701029451465e07ffab74fe387fb7098e3fed9af7481279c6f0579e17afc657e8a1afcfffe1de69a8f6b1f24658a39d3f4e60ce083346f67ac48848860075bcc42297906b3f5b8028630ea304439c1f9c7bb5915c96b4db8e0aa2b5c16d8024689c6f0266d2aeaacb0a3fd6d1de", @ANYRES32=r1], 0x80}}, 0x0) 650.521902ms ago: executing program 2 (id=242): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000580)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x4, 'syz0\x00', @null, 0x4792, 0x6, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250300000004000780400001800d0001007564703a73797a30000000002c0004001400010002004e200000000000000000000000001400020002004e20ffffffff0000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) 569.662108ms ago: executing program 2 (id=243): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000200)=""/4096}, &(0x7f00000025c0)="85c8800bfad6", 0x0, 0x8, 0x10011, 0x3, 0x0}) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r1], 0x24}], 0x1, 0x0, 0x0, 0x40040d0}, 0x20020001) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x5dc5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 566.924617ms ago: executing program 3 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1b4a}, {0xa, 0x4e23, 0x7, @loopback, 0x3}, 0xffffffffffffffff, {[0x5, 0xf58a, 0x4, 0x8, 0x0, 0x7fff, 0xe, 0x7]}}, 0x5c) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001580), 0x40, 0x0) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x3) 564.414657ms ago: executing program 2 (id=245): modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003404000100e140010"], 0x80}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x401, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) 501.452583ms ago: executing program 2 (id=246): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000000)=[r1], &(0x7f0000000080)=[0xfff, 0x7, 0x8000000000000000, 0x10001], 0x9608, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 500.637831ms ago: executing program 3 (id=247): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000140)={0x1a0003, 0x0, [0x400007, 0x9, 0x7, 0x8, 0x9, 0x3, 0x7, 0x4]}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x1, 0x1000, &(0x7f0000000380)="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"}) read$char_usb(r0, 0x0, 0x0) 496.607673ms ago: executing program 2 (id=248): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x48}}, 0x40800) 81.56032ms ago: executing program 0 (id=249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x6c}}, 0x0) syz_emit_ethernet(0x27, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000019000000000084907800000000ffffffffdd9dec7921ec7f43a0f102e74a41b619492d1649d39a2474507a0232e999685af2331d2aedeeb5bc97d82bd46330f04931e00237bd403c7827323eaf828b13d6a92e53e6780e1ac94e8574133543302bfa429d5a177dd347f5b4c069417449fe29f81f712b60f13c3c291be34eb39eb3b7e2dc0abd33236b93577876d750fd31bd95"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x4, 0xffff7017}, {0x6, 0x0, 0x0, 0xfffffffa}]}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getqdisc={0xffffffffffffffd5, 0x26, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x4}, {0x7, 0x4}, {0x8, 0xc}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, r0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "40000f0e00000000000000000000000000100000004000008000", [0x0, 0x1fffffffffffd]}}) 0s ago: executing program 0 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x8, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x80000, [0x4, 0xfffffde]}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x4, 0x4, 0x0, 0x2}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xaf6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7fff, 0x3, 0xffffffff, 0x1002, r3, 0x8, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x8, @void, @value, @void, @value}, 0x50) r6 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 0s ago: executing program 0 (id=251): open$dir(&(0x7f0000000100)='./file0\x00', 0x101002, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f634b1667bb444b3ae7da"], 0xc) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() (async) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) (async) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x2, 0x0, 0x203c, "f7000000000041942f7500", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) (async) r3 = socket$inet(0x2, 0x2, 0x1) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)=@caif, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)="a37f31dad99837ea32c87ac854fd2bade3c94382c9211d7932bb881439a842ba5b4cf6d7", 0x24}, {&(0x7f00000005c0)="3b7fe1f0a2e86100af4550a941ed78783b6801ad40ced318d2739748020bbc4636a9938acd7c7c08bdedbbdf7187f5732f3b4051b9d6872e7b54e05bb4ef5c88d88fe18abe3f29c5d6429f6889d26d", 0x4f}, {&(0x7f0000000640)="fc41fde13bfe5370a65d171272f71a8c9638899d50ba5558d8f4d6e3d50017f0e80a771884ecc48cdd46fce49c607cd79679b28c8d2cf313d6eb8f7fb6691b0d03f45352db1e1414ddf086c645aec7e18bed94c33ef14fc73d913d086c0cd9ba378a537b4b3e8992855a04c2b4cf323d5e6f87616e49c0e64750d1babe0217b57035e5904243ce71d72c3778590b96ac8693b609698fcf6c1371", 0x9a}], 0x3, &(0x7f0000000740)=[{0xa8, 0x107, 0x1af, "b2f73923e015e3f5465c47962fea896de096a52ccfb8e13ab490ea0dd7b5ab5ec1d98acfd18461ae2ed781089884c1b1e110c335736a2a3977cb644f53bf56aac0623ecb35a46aa20ef939c3674265cfb404ad65fc312cf064fd9153bdf1298b16e8ade4f96f8ae526d7259657941d4bed61b1fbf009f616bf99ec8e53d8bf84ae70f70a03116d2e4b4dcdce91fef676747b2dea1a91e2"}], 0xa8}, 0x24000080) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x64}}, 0x40) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000300)="000000070020ac", 0x7}], 0x2}, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000054000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00'}) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78) (async) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x32) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f00000000c0)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20080' (ED25519) to the list of known hosts. [ 45.026369][ T40] audit: type=1400 audit(1750113623.173:62): avc: denied { name_bind } for pid=5880 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.052023][ T40] audit: type=1400 audit(1750113623.203:63): avc: denied { write } for pid=5881 comm="sh" path="pipe:[1808]" dev="pipefs" ino=1808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.072737][ T40] audit: type=1400 audit(1750113623.223:64): avc: denied { execute } for pid=5881 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.082485][ T40] audit: type=1400 audit(1750113623.223:65): avc: denied { execute_no_trans } for pid=5881 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.023366][ T40] audit: type=1400 audit(1750113625.173:66): avc: denied { mounton } for pid=5881 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.026783][ T5881] cgroup: Unknown subsys name 'net' [ 47.259858][ T5881] cgroup: Unknown subsys name 'cpuset' [ 47.263956][ T5881] cgroup: Unknown subsys name 'rlimit' [ 47.479706][ T5924] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.217259][ T5881] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.384736][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.384753][ T40] audit: type=1400 audit(1750113629.533:80): avc: denied { execmem } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.651372][ T40] audit: type=1400 audit(1750113629.803:81): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.657772][ T40] audit: type=1400 audit(1750113629.803:82): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.666042][ T40] audit: type=1400 audit(1750113629.803:83): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.673442][ T40] audit: type=1400 audit(1750113629.803:84): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.682531][ T40] audit: type=1400 audit(1750113629.803:85): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[1842]" dev="sockfs" ino=1842 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.699727][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.703207][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.706654][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.710249][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.713665][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.716534][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.718296][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.719658][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.722250][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.726241][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.729279][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.731519][ T40] audit: type=1400 audit(1750113629.883:86): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.738484][ T40] audit: type=1400 audit(1750113629.883:87): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.745762][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.746501][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.748299][ T40] audit: type=1400 audit(1750113629.883:88): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.755253][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.759578][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.761493][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.763081][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.766452][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.768363][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.770044][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.857875][ T40] audit: type=1400 audit(1750113630.013:89): avc: denied { module_request } for pid=5935 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.907294][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 52.033211][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.035970][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.038574][ T5935] bridge_slave_0: entered allmulticast mode [ 52.041446][ T5935] bridge_slave_0: entered promiscuous mode [ 52.077954][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.080595][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.083360][ T5935] bridge_slave_1: entered allmulticast mode [ 52.087249][ T5935] bridge_slave_1: entered promiscuous mode [ 52.167824][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.179555][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.193020][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 52.250863][ T5935] team0: Port device team_slave_0 added [ 52.257534][ T5935] team0: Port device team_slave_1 added [ 52.268587][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 52.331395][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 52.344746][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.348047][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.358347][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.366576][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.369096][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.378206][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.498345][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.500794][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.503166][ T5934] bridge_slave_0: entered allmulticast mode [ 52.505736][ T5934] bridge_slave_0: entered promiscuous mode [ 52.569510][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.571814][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.574009][ T5934] bridge_slave_1: entered allmulticast mode [ 52.576734][ T5934] bridge_slave_1: entered promiscuous mode [ 52.603584][ T5935] hsr_slave_0: entered promiscuous mode [ 52.605973][ T5935] hsr_slave_1: entered promiscuous mode [ 52.630474][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.632813][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.635118][ T5945] bridge_slave_0: entered allmulticast mode [ 52.638209][ T5945] bridge_slave_0: entered promiscuous mode [ 52.641216][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.643745][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.646150][ T5940] bridge_slave_0: entered allmulticast mode [ 52.649396][ T5940] bridge_slave_0: entered promiscuous mode [ 52.687502][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.689800][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.692024][ T5945] bridge_slave_1: entered allmulticast mode [ 52.694600][ T5945] bridge_slave_1: entered promiscuous mode [ 52.696888][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.699217][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.701431][ T5940] bridge_slave_1: entered allmulticast mode [ 52.704748][ T5940] bridge_slave_1: entered promiscuous mode [ 52.727770][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.737369][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.783834][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.850343][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.882613][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.926647][ T5934] team0: Port device team_slave_0 added [ 52.930328][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.945127][ T5940] team0: Port device team_slave_0 added [ 52.951343][ T5934] team0: Port device team_slave_1 added [ 52.988968][ T5940] team0: Port device team_slave_1 added [ 53.028060][ T5945] team0: Port device team_slave_0 added [ 53.063795][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.065999][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.074759][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.080971][ T5945] team0: Port device team_slave_1 added [ 53.101597][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.103877][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.111888][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.131238][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.133451][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.142437][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.149635][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.151833][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.159924][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.184235][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.186532][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.195114][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.202518][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.204758][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.213446][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.285859][ T5934] hsr_slave_0: entered promiscuous mode [ 53.288885][ T5934] hsr_slave_1: entered promiscuous mode [ 53.290990][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.293492][ T5934] Cannot create hsr debugfs directory [ 53.333189][ T5940] hsr_slave_0: entered promiscuous mode [ 53.335908][ T5940] hsr_slave_1: entered promiscuous mode [ 53.339291][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.342273][ T5940] Cannot create hsr debugfs directory [ 53.395888][ T5945] hsr_slave_0: entered promiscuous mode [ 53.399304][ T5945] hsr_slave_1: entered promiscuous mode [ 53.402136][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.405317][ T5945] Cannot create hsr debugfs directory [ 53.449159][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.505031][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.511974][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.558525][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.712429][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.718509][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.723691][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.727631][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.777780][ T5950] Bluetooth: hci0: command tx timeout [ 53.778260][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.780166][ T5950] Bluetooth: hci1: command tx timeout [ 53.789946][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.795603][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.823479][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.837503][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.847621][ T5950] Bluetooth: hci2: command tx timeout [ 53.849122][ T5947] Bluetooth: hci3: command tx timeout [ 53.868006][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.872699][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.888246][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.891621][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.902503][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.926668][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.929893][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.941029][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.961465][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.963808][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.983759][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.999121][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.001385][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.005088][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.007386][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.086405][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.103273][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.110722][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.119797][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.122128][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.131022][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.133294][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.138226][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.143335][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.145651][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.158637][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.160913][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.224822][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.236061][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.265119][ T5934] veth0_vlan: entered promiscuous mode [ 54.281869][ T5935] veth0_vlan: entered promiscuous mode [ 54.284159][ T5934] veth1_vlan: entered promiscuous mode [ 54.301272][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.304075][ T5935] veth1_vlan: entered promiscuous mode [ 54.316256][ T5934] veth0_macvtap: entered promiscuous mode [ 54.334581][ T5934] veth1_macvtap: entered promiscuous mode [ 54.351099][ T5935] veth0_macvtap: entered promiscuous mode [ 54.360469][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.367955][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.370688][ T5935] veth1_macvtap: entered promiscuous mode [ 54.376363][ T5945] veth0_vlan: entered promiscuous mode [ 54.382508][ T5945] veth1_vlan: entered promiscuous mode [ 54.391005][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.403784][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.406629][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.410075][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.412873][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.419542][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.424523][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.440464][ T5935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.443268][ T5935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.446123][ T5935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.449218][ T5935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.470737][ T5945] veth0_macvtap: entered promiscuous mode [ 54.484885][ T5945] veth1_macvtap: entered promiscuous mode [ 54.495095][ T5940] veth0_vlan: entered promiscuous mode [ 54.519593][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.522677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.523999][ T5940] veth1_vlan: entered promiscuous mode [ 54.540631][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.555924][ T5940] veth0_macvtap: entered promiscuous mode [ 54.564767][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.571510][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.574139][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.576130][ T5940] veth1_macvtap: entered promiscuous mode [ 54.582341][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.585165][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.589249][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.592145][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.603971][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.607648][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.616433][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.617521][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.619196][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.634690][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.645080][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.648885][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.651774][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.654715][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.681631][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.698337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.701112][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.747359][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.750187][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.776789][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.781319][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.794739][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.801388][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.878391][ T6041] xt_hashlimit: max too large, truncated to 1048576 [ 54.882142][ T6041] xt_bpf: check failed: parse error [ 54.891752][ T6040] ip6t_srh: unknown srh match flags B153 [ 54.950674][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 54.999568][ T6046] Zero length message leads to an empty skb [ 55.081173][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.084615][ T6064] warning: `syz.3.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.178541][ T6075] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17'. [ 55.179600][ T6062] capability: warning: `syz.0.13' uses 32-bit capabilities (legacy support in use) [ 55.181281][ T6075] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 55.197369][ T6068] process 'syz.0.13' launched './file0' with NULL argv: empty string added [ 55.237655][ T6021] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.405419][ T6021] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 55.417160][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 55.419778][ T6021] usb 6-1: Product: syz [ 55.421178][ T6021] usb 6-1: Manufacturer: syz [ 55.422802][ T6021] usb 6-1: SerialNumber: syz [ 55.426784][ T6021] usb 6-1: config 0 descriptor?? [ 55.434635][ T6021] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 55.437481][ T6021] dvb-usb: bulk message failed: -22 (2/0) [ 55.446146][ T6021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 55.450593][ T6021] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 55.453137][ T6021] usb 6-1: media controller created [ 55.464423][ T6021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 55.591829][ T6116] binder: BC_ATTEMPT_ACQUIRE not supported [ 55.594431][ T6116] binder: 6114:6116 ioctl c0306201 200000000a80 returned -22 [ 55.633880][ T6053] dvb-usb: bulk message failed: -22 (4/0) [ 55.636133][ T6053] cxusb: i2c read failed [ 55.641459][ T6021] cxusb: set interface failed [ 55.643014][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 55.666814][ T6021] DVB: Unable to find symbol mt352_attach() [ 55.670070][ T6021] dvb-usb: bulk message failed: -22 (5/0) [ 55.672119][ T6021] zl10353_read_register: readreg error (reg=127, ret==-121) [ 55.674488][ T6021] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 55.683962][ T6126] netlink: 'syz.2.31': attribute type 9 has an invalid length. [ 55.686857][ T6126] netlink: 'syz.2.31': attribute type 7 has an invalid length. [ 55.692064][ T6126] netlink: 'syz.2.31': attribute type 8 has an invalid length. [ 55.737147][ T6021] rc_core: IR keymap rc-dvico-mce not found [ 55.739146][ T6021] Registered IR keymap rc-empty [ 55.742213][ T6021] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 55.746823][ T6021] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 55.753501][ T6124] ALSA: mixer_oss: invalid OSS volume '' [ 55.755032][ T6021] dvb-usb: schedule remote query interval to 100 msecs. [ 55.757677][ T6021] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 55.762522][ T6021] usb 6-1: USB disconnect, device number 2 [ 55.799945][ T6021] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 55.847766][ T5947] Bluetooth: hci1: command tx timeout [ 55.848586][ T5950] Bluetooth: hci0: command tx timeout [ 55.861800][ T5950] block nbd2: Receive control failed (result -107) [ 55.927239][ T5950] Bluetooth: hci3: command tx timeout [ 55.937622][ T5950] Bluetooth: hci2: command tx timeout [ 55.957927][ T6130] nbd2: detected capacity change from 0 to 67108884 [ 55.962125][ T5939] block nbd2: Dead connection, failed to find a fallback [ 55.964684][ T5939] block nbd2: shutting down sockets [ 55.966667][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.970703][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 55.973395][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.976267][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 55.979011][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.981806][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 55.984613][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.988731][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 55.992061][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.995735][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 55.999413][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.002309][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 56.005104][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.009863][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 56.013278][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.017705][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 56.021105][ T5939] ldm_validate_partition_table(): Disk read failed. [ 56.024088][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.028292][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 56.031678][ T5939] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.035411][ T5939] Buffer I/O error on dev nbd2, logical block 0, async page read [ 56.039682][ T5939] Dev nbd2: unable to read RDB block 0 [ 56.042528][ T5939] nbd2: unable to read partition table [ 56.049675][ T6129] ldm_validate_partition_table(): Disk read failed. [ 56.052793][ T6129] Dev nbd2: unable to read RDB block 0 [ 56.055995][ T6129] nbd2: unable to read partition table [ 56.062738][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 56.070508][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 56.071729][ T5939] ldm_validate_partition_table(): Disk read failed. [ 56.075070][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 56.079090][ T5939] Dev nbd2: unable to read RDB block 0 [ 56.082279][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 56.085413][ T5939] nbd2: unable to read partition table [ 56.090067][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 56.095474][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 56.099853][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 56.104773][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 56.109876][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 56.114112][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 56.120444][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 56.125062][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 56.131476][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 56.131559][ T6142] program syz.0.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.135718][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 56.143885][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 56.150398][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 56.154644][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 56.158491][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 56.161818][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 56.165591][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 56.169616][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 56.176085][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 56.179609][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 56.183024][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 56.186756][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 56.190054][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 56.193373][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 56.196682][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 56.200417][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 56.203744][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 56.207632][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 56.211262][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 56.214631][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 56.217994][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 56.221330][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 56.224556][ T6129] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 56.227755][ T6129] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 56.292358][ T6147] i2c i2c-1: Invalid block write size 34 [ 56.350668][ T6164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.354844][ T6168] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.399249][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 56.399260][ T40] audit: type=1400 audit(1750113634.553:200): avc: denied { create } for pid=6170 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.405827][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 56.409799][ T40] audit: type=1400 audit(1750113634.553:201): avc: denied { create } for pid=6170 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.409825][ T40] audit: type=1400 audit(1750113634.553:202): avc: denied { read } for pid=6170 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.409846][ T40] audit: type=1400 audit(1750113634.553:203): avc: denied { ioctl } for pid=6170 comm="syz.3.43" path="socket:[8655]" dev="sockfs" ino=8655 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.409868][ T40] audit: type=1400 audit(1750113634.553:204): avc: denied { write } for pid=6170 comm="syz.3.43" path="socket:[8655]" dev="sockfs" ino=8655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.663134][ T40] audit: type=1400 audit(1750113634.813:205): avc: denied { execute } for pid=6174 comm="syz.3.45" path="/14/cpu.stat" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.676842][ T40] audit: type=1400 audit(1750113634.823:206): avc: denied { ioctl } for pid=6174 comm="syz.3.45" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9462 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.693502][ T40] audit: type=1400 audit(1750113634.843:207): avc: denied { create } for pid=6177 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.737661][ T40] audit: type=1400 audit(1750113634.893:208): avc: denied { read } for pid=6182 comm="syz.2.47" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.746892][ T40] audit: type=1400 audit(1750113634.893:209): avc: denied { open } for pid=6182 comm="syz.2.47" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.790934][ T6186] xt_hashlimit: size too large, truncated to 1048576 [ 56.843064][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 56.961604][ T6196] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.965240][ T6196] overlayfs: failed to set xattr on upper [ 56.968825][ T6196] overlayfs: ...falling back to redirect_dir=nofollow. [ 56.971729][ T6196] overlayfs: ...falling back to index=off. [ 56.974240][ T6196] overlayfs: ...falling back to uuid=null. [ 56.983092][ T6196] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 57.571879][ T6183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.574867][ T6183] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.579989][ T6183] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.583310][ T6183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.585413][ T6183] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.588334][ T6183] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.590959][ T6183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.592994][ T6183] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.596636][ T6183] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.599747][ T6183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.602192][ T6183] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.606327][ T6183] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.724360][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.58'. [ 57.886452][ T6222] orangefs: client-core tried to read wrong size [ 57.888639][ T5983] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.932365][ T6218] overlay: ./file0 is not a directory [ 57.935444][ T6218] ======================================================= [ 57.935444][ T6218] WARNING: The mand mount option has been deprecated and [ 57.935444][ T6218] and is ignored by this kernel. Remove the mand [ 57.935444][ T6218] option from the mount to silence this warning. [ 57.935444][ T6218] ======================================================= [ 58.001295][ T6220] capability: warning: `syz.1.57' uses deprecated v2 capabilities in a way that may be insecure [ 58.041828][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.046526][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.050713][ T5983] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.056173][ T5983] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.060748][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.066435][ T5983] usb 8-1: config 0 descriptor?? [ 58.200461][ T6230] netlink: 'syz.1.61': attribute type 7 has an invalid length. [ 58.481765][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.484808][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.489477][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.491947][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.494255][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.497338][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.499597][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.501836][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.504246][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.506553][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.509041][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.511380][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.513709][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.516328][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.518859][ T5983] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 58.528251][ T5983] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 58.528975][ T838] cfg80211: failed to load regulatory.db [ 58.552133][ T5983] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 58.604413][ T6242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.747392][ T24] usb 8-1: USB disconnect, device number 2 [ 58.805495][ T6248] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 58.817371][ T5950] Bluetooth: hci0: command 0x0419 tx timeout [ 58.948199][ T5812] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.107143][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 59.118416][ T5812] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 59.121881][ T5812] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 59.125226][ T5812] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.128396][ T5812] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.132850][ T5812] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.135867][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.349278][ T5812] usb 7-1: GET_CAPABILITIES returned 0 [ 59.351221][ T5812] usbtmc 7-1:16.0: can't read capabilities [ 59.429444][ T6266] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 59.442554][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.73'. [ 59.555486][ T5984] usb 7-1: USB disconnect, device number 2 [ 59.607906][ T5950] Bluetooth: hci1: command 0x0419 tx timeout [ 59.607968][ T5947] Bluetooth: hci2: command 0x0419 tx timeout [ 59.608087][ T6280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.609780][ T5950] Bluetooth: hci3: command 0x0419 tx timeout [ 59.727190][ T5983] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 59.842084][ T6299] loop6: detected capacity change from 0 to 63 [ 59.881296][ T5983] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 59.885503][ T5983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.890042][ T5983] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.894034][ T5983] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 59.900636][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.915573][ T5983] hub 6-1:1.0: bad descriptor, ignoring hub [ 59.918779][ T5983] hub 6-1:1.0: probe with driver hub failed with error -5 [ 59.921214][ T5983] cdc_wdm 6-1:1.0: skipping garbage [ 59.922980][ T5983] cdc_wdm 6-1:1.0: skipping garbage [ 59.925072][ T5983] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 59.967168][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.973505][ T6306] syz.0.86: attempt to access beyond end of device [ 59.973505][ T6306] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 59.980154][ T6306] exFAT-fs (nbd0): unable to read boot sector [ 59.982203][ T6306] exFAT-fs (nbd0): failed to read boot sector [ 59.984215][ T6306] exFAT-fs (nbd0): failed to recognize exfat type [ 60.106854][ T6317] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.108992][ T6312] IPVS: stopping master sync thread 6317 ... [ 60.113905][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.118270][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.127898][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 60.131448][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 60.134449][ T24] usb 8-1: config 0 has no interface number 0 [ 60.136381][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.140258][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 60.143804][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.147352][ T24] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.151326][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 60.154120][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.161806][ T6319] netlink: 'syz.0.90': attribute type 15 has an invalid length. [ 60.164726][ T24] usb 8-1: config 0 descriptor?? [ 60.165270][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.90'. [ 60.171813][ T24] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 60.226630][ T6327] evm: overlay not supported [ 60.353293][ T6340] snd_aloop snd_aloop.0: control 0:0:0:syz0:7 is already present [ 60.370480][ T24] usb 8-1: USB disconnect, device number 3 [ 60.370490][ C3] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 60.379530][ T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 60.437329][ T5983] usb 6-1: USB disconnect, device number 3 [ 60.781061][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 60.784035][ T6357] netlink: 244 bytes leftover after parsing attributes in process `syz.0.102'. [ 60.819902][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 60.887831][ T5950] Bluetooth: hci0: command 0x0419 tx timeout [ 60.902291][ T6361] tmpfs: Group quota inode hardlimit too large. [ 60.905711][ T6361] syz.3.104 uses obsolete (PF_INET,SOCK_PACKET) [ 60.986590][ T6368] netfs: Couldn't get user pages (rc=-14) [ 61.301465][ T6395] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 61.327253][ T5983] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.448434][ T6409] cgroup: Name too long [ 61.490834][ T6414] 9pnet_fd: p9_fd_create_tcp (6414): problem connecting socket to 127.0.0.1 [ 61.498754][ T5983] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 61.502380][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.505119][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.508984][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.511785][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.514591][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.518143][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.520914][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.523699][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.528169][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.530979][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.533746][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.537192][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.540187][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.543033][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.546358][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.549606][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.552481][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.555895][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.558808][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.561538][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.564897][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.568259][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.571016][ T5983] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.574342][ T5983] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.577957][ T5983] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 61.580744][ T5983] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 61.583307][ T5983] usb 8-1: Product: syz [ 61.584622][ T5983] usb 8-1: Manufacturer: syz [ 61.586090][ T5983] usb 8-1: SerialNumber: syz [ 61.588872][ T5983] usb 8-1: config 0 descriptor?? [ 61.592953][ T5983] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 61.687167][ T5950] Bluetooth: hci3: command 0x0419 tx timeout [ 61.697132][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 61.697159][ T5936] Bluetooth: hci1: command 0x0419 tx timeout [ 61.794625][ T59] usb 8-1: USB disconnect, device number 4 [ 61.800398][ T59] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 62.010569][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 62.010586][ T40] audit: type=1400 audit(1750113640.163:327): avc: denied { ioctl } for pid=6372 comm="syz.3.107" path="socket:[9090]" dev="sockfs" ino=9090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.034046][ T40] audit: type=1400 audit(1750113640.183:328): avc: denied { sys_module } for pid=6372 comm="syz.3.107" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.050812][ T40] audit: type=1400 audit(1750113640.203:329): avc: denied { bind } for pid=6372 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.058881][ T40] audit: type=1400 audit(1750113640.203:330): avc: denied { setopt } for pid=6372 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.066869][ T40] audit: type=1400 audit(1750113640.203:331): avc: denied { execute } for pid=6424 comm="syz.1.118" name="file1" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.076034][ T40] audit: type=1400 audit(1750113640.203:332): avc: denied { execute_no_trans } for pid=6424 comm="syz.1.118" path="/18/file1" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.086845][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.119'. [ 62.307824][ T6434] netlink: 68 bytes leftover after parsing attributes in process `syz.1.123'. [ 62.318039][ T6434] QAT: Invalid ioctl -2144835806 [ 62.345103][ T40] audit: type=1400 audit(1750113640.493:333): avc: denied { map } for pid=6437 comm="syz.0.124" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.497123][ T40] audit: type=1400 audit(1750113640.643:334): avc: denied { accept } for pid=6453 comm="syz.0.128" lport=36049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.591155][ T5936] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 62.596829][ T40] audit: type=1400 audit(1750113640.743:335): avc: denied { bind } for pid=6458 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.605529][ T40] audit: type=1400 audit(1750113640.763:336): avc: denied { mount } for pid=6453 comm="syz.0.128" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.630587][ T6464] tmpfs: Bad value for 'mpol' [ 62.634262][ T6463] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 62.677590][ T838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.827341][ T838] usb 7-1: Using ep0 maxpacket: 32 [ 62.830239][ T838] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.832678][ T838] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.835318][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.838700][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.841557][ T838] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.844454][ T838] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.849415][ T838] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.852365][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.854919][ T6502] netlink: 'syz.3.142': attribute type 4 has an invalid length. [ 62.856253][ T838] usb 7-1: config 0 descriptor?? [ 63.064679][ T838] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.069732][ T838] usb 7-1: USB disconnect, device number 3 [ 63.083253][ T838] usblp0: removed [ 63.114292][ T6514] syz.3.146: attempt to access beyond end of device [ 63.114292][ T6514] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 63.119099][ T6514] syz.3.146: attempt to access beyond end of device [ 63.119099][ T6514] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 63.364736][ T6521] nfs4: Unknown parameter 'k}\${LIXijh6 lѬչbFINS [ 63.364736][ T6521] Ydm00000000000000000003u' [ 63.497098][ T5812] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.647175][ T5812] usb 7-1: Using ep0 maxpacket: 32 [ 63.650110][ T5812] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.652764][ T5812] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.655523][ T5812] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.658480][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.661549][ T5812] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.664683][ T5812] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.668926][ T5812] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.672331][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.679203][ T5812] usb 7-1: config 0 descriptor?? [ 63.689449][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 63.692256][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 63.695908][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 63.699067][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 63.767184][ T5936] Bluetooth: hci2: command 0x0419 tx timeout [ 63.769860][ T5936] Bluetooth: hci3: command 0x0419 tx timeout [ 63.772413][ T5936] Bluetooth: hci1: command 0x0419 tx timeout [ 63.845705][ T6559] syz_tun: entered allmulticast mode [ 63.872045][ T6559] syz_tun: left allmulticast mode [ 63.933781][ T5936] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 64.160330][ T5812] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.175431][ T5812] usb 7-1: USB disconnect, device number 4 [ 64.183571][ T5812] usblp0: removed [ 64.205521][ T6593] loop0: detected capacity change from 0 to 7 [ 64.214011][ T6593] Dev loop0: unable to read RDB block 7 [ 64.218142][ T6593] loop0: unable to read partition table [ 64.219990][ T6593] loop0: partition table beyond EOD, truncated [ 64.221993][ T6593] loop_reread_partitions: partition scan of loop0 (被x ) failed (rc=-5) [ 64.234644][ T6597] tmpfs: Bad value for 'huge' [ 64.346852][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.416291][ T6622] binder: BINDER_SET_CONTEXT_MGR already set [ 64.419189][ T6622] binder: 6621:6622 ioctl 4018620d 2000000000c0 returned -16 [ 64.468802][ T6633] fuse: Bad value for 'user_id' [ 64.470363][ T6633] fuse: Bad value for 'user_id' [ 64.503818][ T6641] program syz.2.179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.506806][ T6641] ata1.00: non-matching transfer count (32/0) [ 64.580019][ T6651] program syz.0.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.743537][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.973703][ T6690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.097914][ T6694] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.341689][ T6702] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 65.344010][ T6702] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.348424][ T6702] vhci_hcd vhci_hcd.0: Device attached [ 65.379424][ T6703] vhci_hcd: connection closed [ 65.381275][ T66] vhci_hcd: stop threads [ 65.384979][ T66] vhci_hcd: release socket [ 65.386509][ T66] vhci_hcd: disconnect device [ 65.470523][ T6710] "syz.2.197" (6710) uses obsolete ecb(arc4) skcipher [ 65.473172][ T6710] __nla_validate_parse: 3 callbacks suppressed [ 65.473181][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'. [ 65.607357][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 65.857201][ T5950] Bluetooth: hci3: command 0x0419 tx timeout [ 65.859871][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 65.862640][ T5936] Bluetooth: hci1: command 0x0419 tx timeout [ 65.910188][ T6737] 9pnet_virtio: no channels available for device syz [ 65.929431][ T6730] syzkaller1: entered promiscuous mode [ 65.931282][ T6730] syzkaller1: entered allmulticast mode [ 65.935199][ T6730] netlink: 'syz.2.201': attribute type 4 has an invalid length. [ 65.979814][ T6744] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 66.064774][ T6764] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.070280][ T6764] batadv_slave_1: entered promiscuous mode [ 66.080514][ T6761] XFS (nullb0): Invalid superblock magic number [ 66.137724][ T6771] cgroup: Unknown subsys name 'obj_role' [ 66.192446][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 66.195478][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 66.247125][ T59] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.266288][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 66.272566][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 66.280407][ T6784] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.284370][ T6784] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.288654][ T6784] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.292311][ T6784] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.306880][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 66.311866][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 66.331431][ T6763] batadv_slave_1: left promiscuous mode [ 66.366810][ T6789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6789 comm=syz.2.220 [ 66.379494][ T6791] netlink: 'syz.3.219': attribute type 10 has an invalid length. [ 66.382667][ T6791] macvlan0: entered promiscuous mode [ 66.384358][ T6791] macvlan0: entered allmulticast mode [ 66.391565][ T6791] veth1_vlan: entered allmulticast mode [ 66.395422][ T6791] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 66.413149][ T6793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6793 comm=syz.2.221 [ 66.417170][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 66.418468][ T59] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 66.422262][ T59] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 66.425333][ T59] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.428597][ T59] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.432471][ T59] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.435119][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.496401][ T6804] netlink: 666 bytes leftover after parsing attributes in process `syz.1.226'. [ 66.589227][ T6822] binder: 6820:6822 ioctl 40046205 0 returned -22 [ 66.610819][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 66.617443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 66.637763][ T6829] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 66.644441][ T59] usb 5-1: GET_CAPABILITIES returned 0 [ 66.646257][ T59] usbtmc 5-1:16.0: can't read capabilities [ 66.649923][ T5936] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 66.653256][ T5936] Bluetooth: hci0: Injecting HCI hardware error event [ 66.656607][ T5950] Bluetooth: hci0: hardware error 0x00 [ 66.784298][ T6845] xt_cgroup: path and classid specified [ 66.792138][ T6848] syz_tun: entered allmulticast mode [ 66.801519][ T6848] syz_tun: left allmulticast mode [ 66.853931][ T6753] use of bytesused == 0 is deprecated and will be removed in the future, [ 66.857714][ T6753] use the actual size instead. [ 66.863811][ T5983] usb 5-1: USB disconnect, device number 2 [ 66.870224][ T6852] tipc: Started in network mode [ 66.871835][ T6852] tipc: Node identity , cluster identity 4711 [ 66.873760][ T6852] tipc: Failed to set node id, please configure manually [ 66.876000][ T6852] tipc: Enabling of bearer rejected, failed to enable media [ 66.976275][ T6863] sctp: [Deprecated]: syz.2.246 (pid 6863) Use of int in maxseg socket option. [ 66.976275][ T6863] Use struct sctp_assoc_value instead [ 67.008855][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 67.011702][ T1112] ata1: failed to read log page 10h (errno=-5) [ 67.014359][ T1112] ata1.00: exception Emask 0x1 SAct 0x400000 SErr 0x0 action 0x0 [ 67.017644][ T1112] ata1.00: irq_stat 0x40000000 [ 67.019158][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 67.021033][ T1112] ata1.00: cmd 61/10:b0:36:f1:07/00:00:00:00:00/40 tag 22 ncq dma 8192 out [ 67.021033][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 67.026265][ T1112] ata1.00: status: { DRDY } [ 67.031876][ T1112] ata1.00: configured for UDMA/100 [ 67.033784][ T1112] ata1: EH complete [ 67.042421][ T6867] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.046303][ T6867] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.049579][ T6867] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.053017][ T6867] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.056653][ T6867] geneve2: entered promiscuous mode [ 67.059142][ T6867] geneve2: entered allmulticast mode [ 67.405329][ T6869] loop2: detected capacity change from 0 to 7 [ 67.409948][ T5939] Dev loop2: unable to read RDB block 7 [ 67.411775][ T5939] loop2: AHDI p1 p2 p3 [ 67.413218][ T5939] loop2: partition table partially beyond EOD, truncated [ 67.415774][ T5939] loop2: p1 start 1601398130 is beyond EOD, truncated [ 67.418287][ T5939] loop2: p2 start 1702059890 is beyond EOD, truncated [ 67.429797][ T6869] Dev loop2: unable to read RDB block 7 [ 67.431737][ T6869] loop2: AHDI p1 p2 p3 [ 67.433261][ T6869] loop2: partition table partially beyond EOD, truncated [ 67.436547][ T6869] loop2: p1 start 1601398130 is beyond EOD, truncated [ 67.439927][ T6869] loop2: p2 start 1702059890 is beyond EOD, truncated [ 67.499073][ T40] kauditd_printk_skb: 215 callbacks suppressed [ 67.499083][ T40] audit: type=1400 audit(1750113645.653:552): avc: denied { sqpoll } for pid=6870 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.534475][ T6875] ================================================================== [ 67.536822][ T40] audit: type=1400 audit(1750113645.683:553): avc: denied { write } for pid=6873 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.537540][ T6875] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 67.537569][ T6875] Read of size 1 at addr ffff8880336d2460 by task syz.0.251/6875 [ 67.537584][ T6875] [ 67.537593][ T6875] CPU: 2 UID: 0 PID: 6875 Comm: syz.0.251 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 67.537634][ T6875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.537645][ T6875] Call Trace: [ 67.537652][ T6875] [ 67.537659][ T6875] dump_stack_lvl+0x116/0x1f0 [ 67.537685][ T6875] print_report+0xcd/0x680 [ 67.537709][ T6875] ? __virt_addr_valid+0x81/0x610 [ 67.537727][ T6875] ? __phys_addr+0xe8/0x180 [ 67.537746][ T6875] ? _raw_spin_lock+0x2e/0x40 [ 67.537765][ T6875] kasan_report+0xe0/0x110 [ 67.537789][ T6875] ? _raw_spin_lock+0x2e/0x40 [ 67.537811][ T6875] ? _raw_spin_lock+0x2e/0x40 [ 67.537830][ T6875] __kasan_check_byte+0x36/0x50 [ 67.537853][ T6875] lock_acquire+0xfc/0x350 [ 67.537878][ T6875] ? __pfx___mutex_lock+0x10/0x10 [ 67.537906][ T6875] _raw_spin_lock+0x2e/0x40 [ 67.537926][ T6875] ? __futex_pivot_hash+0x1dd/0x540 [ 67.537948][ T6875] __futex_pivot_hash+0x1dd/0x540 [ 67.537974][ T6875] futex_hash_allocate+0xad1/0xf00 [ 67.537997][ T6875] ? __pfx_futex_hash_allocate+0x10/0x10 [ 67.538020][ T6875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.538041][ T6875] ? cap_task_prctl+0x2af/0xa80 [ 67.538062][ T6875] ? static_key_count+0x5a/0x70 [ 67.538087][ T6875] futex_hash_prctl+0x1f4/0x650 [ 67.538110][ T6875] __do_sys_prctl+0x171f/0x24c0 [ 67.538131][ T6875] ? __pfx___do_sys_prctl+0x10/0x10 [ 67.538149][ T6875] do_syscall_64+0xcd/0x4c0 [ 67.538166][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.538177][ T6875] RIP: 0033:0x7fddb7b8e929 [ 67.538185][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.538196][ T6875] RSP: 002b:00007fddb89d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 67.538206][ T6875] RAX: ffffffffffffffda RBX: 00007fddb7db6080 RCX: 00007fddb7b8e929 [ 67.538213][ T6875] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 67.538219][ T6875] RBP: 00007fddb7c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 67.538225][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.538231][ T6875] R13: 0000000000000001 R14: 00007fddb7db6080 R15: 00007ffc53769bb8 [ 67.538241][ T6875] [ 67.538245][ T6875] [ 67.538247][ T6875] Allocated by task 6874: [ 67.538253][ T6875] kasan_save_stack+0x33/0x60 [ 67.538266][ T6875] kasan_save_track+0x14/0x30 [ 67.538278][ T6875] __kasan_kmalloc+0xaa/0xb0 [ 67.538289][ T6875] __kvmalloc_node_noprof+0x27b/0x620 [ 67.538301][ T6875] futex_hash_allocate+0x49d/0xf00 [ 67.538314][ T6875] futex_hash_prctl+0x1f4/0x650 [ 67.538328][ T6875] __do_sys_prctl+0x171f/0x24c0 [ 67.538338][ T6875] do_syscall_64+0xcd/0x4c0 [ 67.538352][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.538362][ T6875] [ 67.538364][ T6875] The buggy address belongs to the object at ffff8880336d2400 [ 67.538364][ T6875] which belongs to the cache kmalloc-cg-64 of size 64 [ 67.538373][ T6875] The buggy address is located 32 bytes to the right of [ 67.538373][ T6875] allocated 64-byte region [ffff8880336d2400, ffff8880336d2440) [ 67.538383][ T6875] [ 67.538385][ T6875] The buggy address belongs to the physical page: [ 67.538390][ T6875] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880336d2080 pfn:0x336d2 [ 67.538399][ T6875] memcg:ffff8880474fbe01 [ 67.538403][ T6875] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 67.538412][ T6875] page_type: f5(slab) [ 67.538421][ T6875] raw: 00fff00000000000 ffff88801b849a40 dead000000000122 0000000000000000 [ 67.538430][ T6875] raw: ffff8880336d2080 000000008020001e 00000000f5000000 ffff8880474fbe01 [ 67.538436][ T6875] page dumped because: kasan: bad access detected [ 67.538441][ T6875] page_owner tracks the page as allocated [ 67.538444][ T6875] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6804, tgid 6802 (syz.1.226), ts 66500600953, free_ts 66447678365 [ 67.538462][ T6875] post_alloc_hook+0x1c0/0x230 [ 67.538473][ T6875] get_page_from_freelist+0x1321/0x3890 [ 67.538485][ T6875] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 67.538498][ T6875] alloc_pages_mpol+0x1fb/0x550 [ 67.538512][ T6875] new_slab+0x23b/0x330 [ 67.538521][ T6875] ___slab_alloc+0xd9c/0x1940 [ 67.538531][ T6875] __slab_alloc.constprop.0+0x56/0xb0 [ 67.538541][ T6875] __kvmalloc_node_noprof+0x3b1/0x620 [ 67.538553][ T6875] alloc_netdev_mqs+0xfbe/0x1570 [ 67.538568][ T6875] rtnl_create_link+0xc08/0xf90 [ 67.538583][ T6875] rtnl_newlink+0xb69/0x2000 [ 67.538603][ T6875] rtnetlink_rcv_msg+0x95b/0xe90 [ 67.538619][ T6875] netlink_rcv_skb+0x155/0x420 [ 67.538634][ T6875] netlink_unicast+0x53d/0x7f0 [ 67.538648][ T6875] netlink_sendmsg+0x8d1/0xdd0 [ 67.538662][ T6875] ____sys_sendmsg+0xa95/0xc70 [ 67.545226][ T40] audit: type=1400 audit(1750113645.683:554): avc: denied { bind } for pid=6873 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.547621][ T6875] page last free pid 5983 tgid 5983 stack trace: [ 67.547633][ T6875] __free_frozen_pages+0x7fe/0x1180 [ 67.547654][ T6875] tlb_remove_table_rcu+0x116/0x1a0 [ 67.547673][ T6875] rcu_core+0x799/0x14e0 [ 67.547689][ T6875] handle_softirqs+0x216/0x8e0 [ 67.547709][ T6875] __irq_exit_rcu+0x109/0x170 [ 67.547726][ T6875] irq_exit_rcu+0x9/0x30 [ 67.547743][ T6875] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 67.547765][ T6875] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.556433][ T40] audit: type=1400 audit(1750113645.703:555): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.559503][ T6875] [ 67.559511][ T6875] Memory state around the buggy address: [ 67.559522][ T6875] ffff8880336d2300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.559534][ T6875] ffff8880336d2380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 67.559547][ T6875] >ffff8880336d2400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 67.559556][ T6875] ^ [ 67.563848][ T40] audit: type=1400 audit(1750113645.713:556): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.564303][ T6875] ffff8880336d2480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.565961][ T40] audit: type=1400 audit(1750113645.713:557): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.567394][ T6875] ffff8880336d2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.567405][ T6875] ================================================================== [ 67.567621][ T6875] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.567634][ T6875] CPU: 2 UID: 0 PID: 6875 Comm: syz.0.251 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 67.567655][ T6875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.567666][ T6875] Call Trace: [ 67.567672][ T6875] [ 67.567678][ T6875] dump_stack_lvl+0x3d/0x1f0 [ 67.567707][ T6875] panic+0x71c/0x800 [ 67.567732][ T6875] ? __pfx_panic+0x10/0x10 [ 67.567755][ T6875] ? irqentry_exit+0x3b/0x90 [ 67.567779][ T6875] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.567803][ T6875] ? _raw_spin_lock+0x2e/0x40 [ 67.567826][ T6875] ? check_panic_on_warn+0x1f/0xb0 [ 67.567852][ T6875] ? _raw_spin_lock+0x2e/0x40 [ 67.567871][ T6875] check_panic_on_warn+0xab/0xb0 [ 67.567897][ T6875] end_report+0x107/0x170 [ 67.567920][ T6875] kasan_report+0xee/0x110 [ 67.567944][ T6875] ? _raw_spin_lock+0x2e/0x40 [ 67.567966][ T6875] ? _raw_spin_lock+0x2e/0x40 [ 67.567986][ T6875] __kasan_check_byte+0x36/0x50 [ 67.568011][ T6875] lock_acquire+0xfc/0x350 [ 67.568037][ T6875] ? __pfx___mutex_lock+0x10/0x10 [ 67.568067][ T6875] _raw_spin_lock+0x2e/0x40 [ 67.568092][ T6875] ? __futex_pivot_hash+0x1dd/0x540 [ 67.568115][ T6875] __futex_pivot_hash+0x1dd/0x540 [ 67.568140][ T6875] futex_hash_allocate+0xad1/0xf00 [ 67.568163][ T6875] ? __pfx_futex_hash_allocate+0x10/0x10 [ 67.568186][ T6875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.568206][ T6875] ? cap_task_prctl+0x2af/0xa80 [ 67.568227][ T6875] ? static_key_count+0x5a/0x70 [ 67.568245][ T6875] futex_hash_prctl+0x1f4/0x650 [ 67.568269][ T6875] __do_sys_prctl+0x171f/0x24c0 [ 67.568287][ T6875] ? __pfx___do_sys_prctl+0x10/0x10 [ 67.568308][ T6875] do_syscall_64+0xcd/0x4c0 [ 67.568333][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.568350][ T6875] RIP: 0033:0x7fddb7b8e929 [ 67.568365][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.568381][ T6875] RSP: 002b:00007fddb89d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 67.568398][ T6875] RAX: ffffffffffffffda RBX: 00007fddb7db6080 RCX: 00007fddb7b8e929 [ 67.568410][ T6875] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 67.568420][ T6875] RBP: 00007fddb7c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 67.568431][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.568441][ T6875] R13: 0000000000000001 R14: 00007fddb7db6080 R15: 00007ffc53769bb8 [ 67.568459][ T6875] [ 67.569406][ T6875] Kernel Offset: disabled VM DIAGNOSIS: 22:40:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a6417e0 RCX=ffffffff81b0005d RDX=ffff888029878000 RSI=ffffffff81b00039 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000568f808 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c82fd R15=ffff88806a43cf40 RIP=ffffffff81b0003b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555568a6f500 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc53768f58 CR3=0000000051b09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c04baa3cb7b3955 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 333bebdfd0a6a21d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d56411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d56411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d56411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d56411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d56411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d56411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000218 RBX=0000000000000003 RCX=000000004fa8330a RDX=0000000000000000 RSI=000000006a24a3f2 RDI=ffff888032418b40 RBP=ffff888032418000 RSP=ffffc9000459f570 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888032418af0 R13=ffff888032418b68 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff81980a23 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555680e7500 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c25a028 CR3=000000005058c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff43c68480 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb374011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb374011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb374011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb374011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb374011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb374011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000002a RCX=ffffffff819b8272 RDX=ffff88802bef4880 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000566f8c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=53414b203a475542 R12=1ffff92000acdf1b R13=0000000000000000 R14=ffff88801c35c880 R15=ffffc9000566f990 RIP=ffffffff81bc16d0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fddb89d46c0 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fddb89d3f98 CR3=0000000051b09000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000009b DR2=00040000ffffffff DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7d84488 00007fddb7d84480 00007fddb7d84478 00007fddb7d84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb88ed100 00007fddb7d84440 00007fddb7d84458 00007fddb7d844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7d84498 00007fddb7d84490 00007fddb7d84488 00007fddb7d84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba255 RDI=ffffffff9b0893a0 RBP=ffffffff9b089360 RSP=ffffc9000078f880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b089360 R15=ffffffff855ba1f0 RIP=ffffffff855ba27f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000c2c0 CR3=0000000051b09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddb7c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 6365632f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 4046400c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000