last executing test programs: 56.128762403s ago: executing program 0 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) chdir(&(0x7f0000000100)='./file0\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 56.069079157s ago: executing program 0 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) 55.848606121s ago: executing program 0 (id=678): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='efs\x00', 0x2000802, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x38400) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4f, 0xa017, 0x9, 0x3, 0x4, 0x3, 0x7f, 0x24, 0xb, 0x7b, 0xe, 0x7, 0x3, 0x1, 0x1, 0x306eced0, [0x9]}}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x74}}, 0x844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 55.848169596s ago: executing program 0 (id=679): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) readahead(r0, 0x0, 0xffffffffffffff01) chroot(&(0x7f0000000040)='./file1\x00') 55.84289997s ago: executing program 0 (id=680): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000a565f73686cc4680c16638c789875621c5ee1bb39215d9d22f275f5efd237a9421f5f9a4d47f6d7cd4005c"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000180)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r4}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4d, 0x0, 0x413}}}, 0x7) 55.54605991s ago: executing program 0 (id=685): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='spmi_cmd\x00', r2}, 0x18) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getpid() (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 55.480162318s ago: executing program 32 (id=685): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112180000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='spmi_cmd\x00', r2}, 0x18) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getpid() (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 15.768127844s ago: executing program 1 (id=1403): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x8, 0x16, 0x0}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0xeeee8000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x40000, 0x0, 0x0, 0xfc}) (async) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x40000, 0x0, 0x0, 0xfc}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f00000000c0)={0x41, 0x4}) (async) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f00000000c0)={0x41, 0x4}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_NAME(0x53564d41, 0x0) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x1) execveat(r6, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x1000) (async) execveat(r6, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x1000) 15.658673286s ago: executing program 1 (id=1406): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/180, 0xb4}], 0x1) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) 15.418367539s ago: executing program 1 (id=1409): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0x840, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) r2 = open$dir(&(0x7f00000068c0)='./file0\x00', 0x105500, 0x281) getdents64(r2, &(0x7f0000000000)=""/30, 0x1e) 15.417629849s ago: executing program 1 (id=1410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x20044880) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000002c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa8880000000008001f004000000064317b4bd31c5a370a153b7c8a37f2bf336e20c284c3dbc1e14fcbdc415aa4dc4565146606ecd9e960fafda1a456a1203490ee4e7352fc0dff9e21c511e88d2872649629c529a89c0ac39bc0178bb559a96e62cba2cfde8d5b97a42bdc82dd76f3d8a7ac061e0d"], 0x28}}, 0x0) 15.306365959s ago: executing program 1 (id=1412): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xfffffffd, @local, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)="3267978bfc88cd34cceb6eab1a8d6176a89ec74b8c108e7dfec6413f39fba8f0aa98249cdecf36dd90461176018568902bc97320f140bdcf9dd78ddd731cb7ca4ab238d8bf7d61febb4a24a0168cf7108d9bbe7c68db32b7fea8e0e0a519132df2cd0374b5e888f879a151b61c6a92410f37fdd60b94758e99a142", 0x7b}, {&(0x7f0000000540)="cb2165ccd8fb988c8cfbeb3393", 0xd}], 0x2}}], 0x1, 0x4001c00) 15.238278864s ago: executing program 1 (id=1413): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x9, 0xf0e}, {0x3, 0xb, 0x4053e5, 0x20}, 0xa, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x1, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) 10.108305034s ago: executing program 4 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) shutdown(r0, 0x0) (rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x50d, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) (async) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) dup3(r0, r1, 0x80000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) 10.058113266s ago: executing program 4 (id=1510): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0xf0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x885}}, './file0\x00'}) mknodat$loop(r2, &(0x7f0000000140)='./file0\x00', 0xc000, 0x0) r3 = syz_clone3(&(0x7f0000000380)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x1a}, &(0x7f0000000240)=""/174, 0xae, &(0x7f0000000300)=""/2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) migrate_pages(r4, 0x6, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x49) statx(r2, &(0x7f0000000500)='./file1\x00', 0x6000, 0x801, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@ignoreqv}, {@cache_loose}, {@directio}, {@nodevmap}], [{@uid_eq={'uid', 0x3d, r5}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@audit}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0x6, 0x9, 0x6, 0x2}]}) prlimit64(r3, 0x7, &(0x7f0000000780)={0x9, 0xef}, &(0x7f00000007c0)) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000800)) r6 = epoll_create(0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000840)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000008c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x25, r7}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl2\x00', r7, 0x2f, 0x8, 0x6, 0xb6, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, 0x1, 0x1, 0x6, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x2, &(0x7f0000000900)=@raw=[@generic={0xdf, 0x8, 0x8, 0xff3c, 0x2}, @ldst={0x3, 0x1, 0x1, 0x6, 0x3, 0xfffffffffffffff8, 0x1}], &(0x7f0000000940)='syzkaller\x00', 0x2, 0x9a, &(0x7f0000000980)=""/154, 0x40f00, 0x10, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x1, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[r2, r2, r0], &(0x7f0000000bc0)=[{0x0, 0x2, 0x0, 0x2}, {0x3, 0x1, 0xa, 0xe}, {0x1, 0x1, 0x1, 0x2}, {0x0, 0x4, 0x1, 0x7}, {0x1, 0x4, 0x2, 0x6}, {0x5, 0x3, 0xc, 0x9}, {0x4, 0x2, 0x9, 0x9}], 0x10, 0x8, @void, @value}, 0x94) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000d00)={0x7ceb, 0x8000, 0x3, {0x1, @sliced={0x0, [0x2d73, 0x5, 0xfffe, 0x401, 0xad1, 0x800, 0x3, 0x39e3, 0xd, 0x5, 0xdb6f, 0x8, 0xf2, 0x74, 0x40, 0x8, 0x1, 0x1, 0x4, 0x1, 0x5, 0x5, 0x3ff, 0x8000, 0xfff5, 0x400, 0x9, 0xdc, 0x3, 0x3434, 0x7, 0x5, 0x6, 0x6448, 0x2, 0x7f, 0x6, 0x4, 0x1, 0x7, 0x4, 0x10a3, 0x0, 0x3d, 0x7, 0x8001, 0x0, 0x7], 0x5}}, 0x8}) madvise(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x19) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000e40)={0x7, &(0x7f0000000e00)=[{0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000001e80)={r9, &(0x7f0000000e80)=""/4096}) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f80)={&(0x7f0000001f00)={0x1060, 0x0, 0x5, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x1b}, 0x7, 0x7, 0x400, 0xe33, 0x25, 'syz0\x00', "2e7579b9b54926fdbaa7f14726e07fb4bf9a32dc44a065abccbfbcabaad198ef", "79a553a1cab41f88b9ceb9fb109dfb838c026ae3084b123ffe5959e1d01e2a18", [{0x0, 0x8, {0x0, 0x85e2}}, {0x3, 0x4, {0x3, 0x8}}, {0x3, 0x400, {0x0, 0x6}}, {0x7, 0x1, {0x3, 0x7}}, {0xb, 0x9, {0x0, 0xb35}}, {0x7, 0x9, {0x0, 0x9}}, {0x3, 0x6, {0x1, 0xffffffea}}, {0x6, 0x7, {0x0, 0x6}}, {0x6, 0x8000, {0x0, 0x168}}, {0x9, 0x6, {0x1, 0xfffffff8}}, {0x3, 0xfff, {0x2, 0x1}}, {0x3071, 0xfffb, {0x2, 0x8000}}, {0x3, 0x5, {0x3, 0x7}}, {0x7, 0x9aa0, {0x1, 0x1a}}, {0x1, 0x7ff, {0x3, 0xcbca}}, {0x1, 0x81, {0x1, 0x3}}, {0x9, 0x75d, {0x0, 0x8}}, {0x2, 0x8000, {0x0, 0x5}}, {0x0, 0x8, {0x1, 0x91}}, {0x6, 0x3ff, {0x1, 0xfffffff8}}, {0x100, 0x8001, {0x2, 0xd76}}, {0x5, 0xff, {0x1, 0x2}}, {0x8000, 0x4, {0x2, 0x4}}, {0xe, 0xfffc, {0x3, 0x7}}, {0xd6d9, 0x8, {0x3, 0x8}}, {0x5, 0x6b, {0x1, 0x75}}, {0x4335, 0x7, {0x1, 0xe}}, {0xffff, 0x9, {0x0, 0x6}}, {0x8, 0x9, {0x3, 0x2972}}, {0x3, 0x200, {0x0, 0xfffffe01}}, {0x4, 0x3, {0x1, 0x6}}, {0x4, 0x7ff, {0x3, 0x8001}}, {0x8, 0x101, {0x3, 0x2}}, {0x7fff, 0xfe00, {0x3, 0x8}}, {0x6, 0x63e, {0x2, 0x4}}, {0x0, 0xa, {0x3, 0x4}}, {0x3ff, 0x10, {0x1, 0xb}}, {0x1a67, 0xbe, {0x2, 0xfff}}, {0x8, 0x9, {0x2, 0x9}}, {0xe6, 0xb48d, {0x0, 0x10000}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x33, 0x7, 0x101, 0x4, 0x2, 'syz1\x00', "d593b9c7f45706e6297786152ae6f54d13a6f696b3ce81a31e3a806dace51acc", "252d9640d40c93c0e2710b9eff0aa193dac23da3f71c33694de81b60aa286dca", [{0x73, 0xa, {0x1, 0x1}}, {0x8, 0x101, {0x2, 0x1}}, {0xb, 0x14, {0x709c6d490b68f5c9}}, {0x7, 0xfffc, {0x1, 0x8}}, {0x0, 0x7, {0x0, 0x8}}, {0x5, 0xb1, {0x2, 0x6}}, {0x100, 0x9, {0x1, 0x5}}, {0x9, 0x0, {0x3, 0x6}}, {0x3, 0x1000, {0x1, 0x6}}, {0x0, 0x7fff, {0x0, 0x177}}, {0x6, 0xe, {0x0, 0x7}}, {0x6, 0x3, {0x0, 0xffffffff}}, {0x7, 0x1a0, {0x3, 0x1b}}, {0xa8c, 0x1, {0x3, 0x6}}, {0x7, 0x9}, {0x8, 0xf3, {0x1, 0x2}}, {0xc, 0xffff, {0x1, 0x7}}, {0x9, 0x0, {0x8f356ad1e20d3d23, 0xffffceae}}, {0x400, 0x2db2, {0x3, 0x7}}, {0x5, 0x7, {0x1, 0x4}}, {0x5, 0x6d, {0x3, 0xfffffff8}}, {0x4, 0x7}, {0x6ae, 0x7, {0x0, 0x1}}, {0x9, 0x7, {0x1, 0x8}}, {0x0, 0x1, {0x1, 0x6}}, {0x5, 0x4, {0x1, 0x7fff}}, {0xff, 0x4, {0x1, 0x3}}, {0x4, 0x0, {0x3, 0x5}}, {0x0, 0x6, {0x3, 0x4}}, {0x7ff, 0x1000, {0x2, 0x7}}, {0x7, 0x81, {0x3, 0x8}}, {0x7, 0xff09, {0x2, 0xa89f}}, {0x47b, 0x2, {0x2, 0xf}}, {0x3da, 0x1, {0x2, 0x2}}, {0x651c, 0x9, {0x3, 0x3ff}}, {0x8, 0x8}, {0x81, 0xfffd, {0x1, 0x100}}, {0x0, 0x8000, {0x3, 0xaea}}, {0x7c0, 0x100, {0x2, 0x6}}, {0x0, 0x2c8a, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x3c, 0x7, 0x108, 0x3, 0xc, 'syz0\x00', "8a0127fbe3798f254d3de62c9212c3d9029a0368f4768df6cda216d5f7353f2c", "5cde58aa1b522a5dbf03ecb5f0cee13dc7f00e0239bff53f999afd22bb337e7d", [{0x0, 0xc45, {0x2, 0x8000}}, {0xff47, 0x8000, {0x3, 0x5}}, {0x84, 0x3, {0x2, 0xd}}, {0x7, 0x4, {0x1, 0x9}}, {0x2, 0x1}, {0x8, 0xddac, {0x2, 0x6}}, {0x1a, 0x0, {0x3, 0x3}}, {0xd46d, 0x2, {0x0, 0x1}}, {0x0, 0x1, {0x0, 0x809}}, {0x5b, 0x6, {0x1, 0x401}}, {0x2cc, 0x67b, {0x1, 0x538f}}, {0x6, 0x4, {0x1, 0xfffffe14}}, {0x401, 0x9, {0x3, 0x8}}, {0x6, 0x4, {0x3, 0xec41}}, {0x9465, 0x4, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x9}}, {0xc, 0xf, {0x3, 0x8}}, {0x5, 0x2, {0x1, 0x8000}}, {0x1, 0xc82a, {0x2, 0x8}}, {0x6, 0x1, {0x1, 0xffffffff}}, {0x2, 0x8, {0x2, 0x401}}, {0x4, 0x3119, {0x1, 0xa}}, {0xc81, 0x4}, {0x0, 0x2, {0x3, 0xc0000000}}, {0x2, 0x2, {0x3cdcb6057246c1ab, 0x4}}, {0x3ff, 0x713, {0x1, 0x1ff}}, {0xf467, 0x6, {0x2, 0x7}}, {0x2, 0x2, {0x1, 0xa98}}, {0x7, 0x7f, {0x3, 0xa}}, {0x10, 0x6, {0x3, 0x84}}, {0x7fff, 0x8, {0x2, 0x8}}, {0x180, 0x401, {0x3, 0x1000}}, {0xca8, 0xe, {0x0, 0x4}}, {0x4, 0x3ff, {0x0, 0xc3b3}}, {0x3, 0xab9, {0x1, 0x80}}, {0xb, 0x5, {0x0, 0x1}}, {0x8, 0x1000, {0x1, 0x1}}, {0xfffe, 0x9, {0x0, 0xd}}, {0x5, 0x5, {0x3, 0x9}}, {0x5, 0xeba, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xa042}, 0x40, 0xc0, 0xc6, 0x6, 0x27, 'syz0\x00', "35b18397c0ce30e581c3e1bf2545fcb9718cfd3829b915150dd842065276f4e9", "af1b6a8a6c4e078cb0433362084842e2a32434adc6f1f07505dd77c78c1997b0", [{0x6, 0x4097, {0x0, 0x7fffffff}}, {0x11, 0x100, {0x1, 0x9}}, {0x3, 0x9, {0x0, 0xf351}}, {0x9, 0x2e2, {0x2}}, {0x9f, 0x3, {0x2, 0xff}}, {0xfff8, 0x5, {0x2, 0xc}}, {0x7, 0x8, {0x2, 0x5}}, {0x5, 0x3ff, {0x0, 0x80}}, {0x7, 0xfffb, {0x2, 0xff}}, {0x80, 0x1, {0x0, 0x5}}, {0xc, 0x0, {0x1, 0x5}}, {0x6, 0x1000, {0x3, 0x10000}}, {0x0, 0x5, {0x2, 0x7}}, {0x2, 0x0, {0x1, 0x8}}, {0xd, 0x8, {0x3, 0x1000}}, {0x7, 0x0, {0x1, 0x2}}, {0x9, 0x3, {0x2, 0xe}}, {0x7f, 0xcd, {0x2, 0x6}}, {0x3, 0xfff, {0x6, 0x8}}, {0x1, 0x1000, {0x0, 0xc}}, {0x34, 0x7, {0x3, 0x3}}, {0xff, 0x68, {0x1}}, {0x401, 0x5, {0x2, 0xffffffc0}}, {0x2000, 0x0, {0x3, 0x7}}, {0x100, 0x9, {0x3, 0x5}}, {0x4249, 0x0, {0x3, 0x5}}, {0xb, 0x434, {0x1, 0x5}}, {0xfff8, 0x8, {0x1, 0xfffffff0}}, {0x2, 0x5968, {0x2, 0x5}}, {0x8, 0x5, {0x2, 0xfffffffe}}, {0x17b, 0x4, {0x1, 0x8001}}, {0x1, 0x4, {0x3, 0x8}}, {0xd98, 0x0, {0x1, 0x3}}, {0xf1e5, 0x6, {0x3, 0xd}}, {0x8, 0x3, {0x0, 0x1}}, {0x7, 0x2, {0x3, 0xd0}}, {0x7, 0x9, {0x2, 0x6}}, {0x0, 0x7, {0x0, 0x1496}}, {0x4, 0x6, {0x2, 0xc}}, {0x9, 0x1, {0x3, 0xcad2}}]}}}, {{0x254, 0x1, {{0x3, 0x280000}, 0xfa, 0x3, 0xffc, 0x0, 0x1c, 'syz0\x00', "527e0d1768844a2bca52243de3a53ef96584e3feb2edcdf57770db2dc381a1b5", "649816a39a41c3e578869d0c4c24c12eb90da50214c4620bb399923611420946", [{0x2, 0x4, {0x3, 0x956}}, {0xd, 0x4, {0x1, 0x3}}, {0x4, 0x7, {0x3, 0x8}}, {0x677, 0x2, {0x3, 0x8}}, {0x5, 0x8c, {0x0, 0x8000000}}, {0x3, 0x1, {0x0, 0x3ff}}, {0xfff0, 0x10, {0x0, 0x6}}, {0x200, 0x3, {0x3, 0xfffff5f5}}, {0x2, 0x0, {0x2, 0x2}}, {0xfff, 0x81, {0x2, 0xc}}, {0xfff, 0x0, {0x2, 0xb8d}}, {0xc98, 0x8000}, {0xab, 0x80}, {0xfff, 0x40, {0x0, 0x3}}, {0x4, 0xfff9, {0x2, 0x88ba}}, {0x5, 0x7, {0x1, 0x3}}, {0x0, 0x6, {0x0, 0xfff}}, {0x401, 0x0, {0x3, 0x1}}, {0x3ff, 0x4, {0x1, 0x8000}}, {0x553f, 0x2, {0x1, 0x711}}, {0x2, 0x7fff, {0x0, 0xbe6}}, {0x40, 0x100, {0x3, 0x9}}, {0x7, 0x2, {0x2, 0x6895}}, {0x1, 0x8, {0x0, 0xf}}, {0x648, 0x1, {0x2, 0x9}}, {0x3, 0x2, {0x3, 0x8}}, {0x4, 0x800, {0x1, 0x9}}, {0x38d, 0xc, {0x2, 0x6}}, {0x6ff9, 0x4, {0x0, 0x3}}, {0x7, 0x2, {0x0, 0xc}}, {0x7, 0x5660, {0x2, 0x7}}, {0x1, 0x1, {0x0, 0xfffffffa}}, {0x2, 0x0, {0x1, 0x8001}}, {0x97a, 0x0, {0x0, 0x5}}, {0x5, 0xe804, {0x1, 0x717}}, {0x3, 0x4e, {0x2, 0x3}}, {0x7, 0x6, {0x1, 0x81}}, {0x5, 0xb5, {0x1, 0x3}}, {0x1, 0xc, {0x0, 0x3ff}}, {0x9, 0x5, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x0, 0x8, 0xd, 0xae, 0x25, 'syz1\x00', "f2e2786ad869a63c2f3079db717246d4148d5f4c01b72e6db4d733d3b372a2fb", "108794a64372a1355b2be32f8a3067e8bd5300c5cc73c5b9e2b11da58ca1a48b", [{0x6, 0x28d2, {0x0, 0x9}}, {0x300, 0x6, {0x2, 0x7}}, {0x1000, 0x5, {0x2, 0xe0000000}}, {0x6, 0x5, {0x3, 0x8}}, {0x5, 0x9, {0x3, 0x7}}, {0x3, 0x3, {0x2, 0x7}}, {0x7fff, 0x1ff, {0x2, 0xd1b0}}, {0xe, 0xca18, {0x2, 0xd}}, {0xe8b, 0xff, {0x3, 0x3dc}}, {0x8, 0x6, {0x0, 0xfff}}, {0x2, 0x51c, {0x2, 0x45c}}, {0xfffa, 0x0, {0x3, 0x5}}, {0xfff1, 0x3, {0x0, 0x258}}, {0x5, 0x4, {0x1, 0x4}}, {0x200, 0x4, {0x4, 0x800}}, {0x9, 0x3, {0x1, 0x6}}, {0xdc2, 0x0, {0x2, 0x6}}, {0x80, 0xd, {0x3, 0xffffffff}}, {0x7, 0x1ff}, {0x6, 0x4879, {0x2, 0x3}}, {0x8000, 0x400, {0x1, 0x6}}, {0x65b, 0x5, {0x1, 0x2}}, {0x6, 0x0, {0x1, 0x990}}, {0x2, 0x3, {0x1, 0x2}}, {0x101, 0x52ef, {0x1, 0x5}}, {0x9, 0xb, {0x2, 0x9}}, {0x7, 0xfa02, {0x3, 0xd}}, {0xd18, 0x4, {0x0, 0x7}}, {0x0, 0x4, {0x3, 0x6}}, {0x3, 0xf28, {0x1, 0x3}}, {0xace, 0x1, {0x3, 0xffffffff}}, {0x6, 0xf, {0x2, 0x1}}, {0xafc3, 0x200, {0x3, 0xffff}}, {0xadec, 0x5, {0x2, 0x3}}, {0x7f, 0x1, {0x2, 0x7}}, {0x1c, 0xb, {0x3}}, {0xf, 0x0, {0x1, 0x1}}, {0x2, 0xee, {0x3, 0x2}}, {0x6cc, 0x8, {0x0, 0x1}}, {0x0, 0x2, {0x0, 0x3b}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x7, 0xff, 0x0, 0x7, 0x8, 'syz0\x00', "a4fc583efad52d8333673220b810f71652d1a438f52b0206322559c0690d12a2", "de23f43f854d07acc07fe3ab026b9293ba31d722744caa96d509127a8e6d217a", [{0xb, 0xc69, {0x3, 0x402b}}, {0x6, 0x1, {0x1, 0x5}}, {0x3, 0x1000, {0x0, 0xfffffffc}}, {0xe1a, 0xfee, {0x3, 0x8}}, {0x0, 0x1, {0x0, 0x6f9}}, {0x7, 0xff, {0x2, 0x5}}, {0xe64a, 0x4, {0x2, 0x4e53725c}}, {0x6, 0x6, {0x2, 0x9}}, {0xc24, 0x5a, {0x2, 0x80000000}}, {0x1000, 0x3, {0x0, 0x5}}, {0xfc00, 0x2, {0x2, 0x1}}, {0x7, 0x0, {0x2, 0xfffffff9}}, {0x3c2, 0x81, {0x1, 0x2}}, {0x7, 0x8, {0x0, 0x1}}, {0x3, 0xfa59, {0x0, 0x7ff}}, {0x7, 0xb, {0x3, 0x4}}, {0x0, 0xf, {0x2, 0x8000}}, {0xb1f8, 0x4, {0x0, 0x257e3761}}, {0x7f, 0x7fff, {0x1, 0x2}}, {0x10, 0x3ff, {0x2, 0x7}}, {0x6, 0x9, {0x1, 0x8}}, {0x9, 0x5, {0x2, 0x731577c2}}, {0x2, 0x5, {0x2, 0x8000}}, {0x2ca, 0x9, {0x2, 0x5dd}}, {0x9, 0x9, {0x1, 0x3}}, {0x401, 0x2, {0x3, 0x414}}, {0x0, 0x101, {0x2, 0x264}}, {0x81, 0x81, {0x1, 0x3}}, {0xd, 0x8, {0x2, 0x6}}, {0xbada, 0x8, {0x3, 0x1000}}, {0x1, 0x9, {0x0, 0x3}}, {0x3, 0x2, {0x1, 0x101}}, {0x7, 0x5, {0x1, 0x8}}, {0xfff9, 0x9182, {0x0, 0x3c}}, {0x6a9, 0x7, {0x3, 0xbb7b}}, {0x0, 0x7}, {0xc0d8, 0x6, {0x3, 0x8eb}}, {0x51, 0x8, {0x1, 0x2}}, {0x4, 0x400, {0x2, 0x3}}, {0x5, 0x5a, {0x2, 0xfffffffb}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$cgroup_devices(r2, &(0x7f0000003000)={'c', ' *:* ', 'rw\x00'}, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000003080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r10, 0xc01064c7, &(0x7f0000003100)={0x4, 0x0, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000003180)={0x27, 0x0, 0x0, 0x5, 0x7, 0x8, "3e42ea8954c4b0a1a3d5f260eb0ed843bcc8b29a94205b1a310b20cab33d25cf6cb6e60f3b2d689a92147b5f18aaea16d29164c46f5313b3197d0203d79fb9", 0x1f}, 0x60, &(0x7f0000003380)=[{&(0x7f0000003200)="1cbc8bb305b6089ddfb606aea07c4d856a38f80fa8d005947297074b8fe8bc1d1f5755c0e51a1f0e51d1f0e1a73ddeed78110eb24155485ffcbef6f2a1099192bb2d99318c7d79cef526fe96d432c440d5cd2826d737685ecd04c5190eba7172b51d357408ef6859f6c376", 0x6b}, {&(0x7f0000003280)="dd7d9db5ad2b03c92c54734e9eae55b4fecd32b7e1bf18d7c3bfdf2d8374333930591ade91c0ff6871b76a617bb901ae5bf38d7d84d3d22f14f0d1b57a86c37cfd10a8225e39065941ba358a710477eeebaa95bf895b1841e723f2931eea0ed71444c940d6acf5ff10a0ee8fe8383fce980be07f22581b89b5a1f28eb634a3add0a70632f16bc53416438d311a", 0x8d}, {&(0x7f0000003340)="0c8cce375e8de5b2d0", 0x9}], 0x3, &(0x7f00000033c0)={0x88, 0x101, 0x4, "d6672c5b8f4ebdf96dedd29b958103405ec87fe605b7b4b8aa56658d8c0a01ce8b1f34b26218f9c86e4715f70d22068b791aa8cf7bd0bf16c042aff22d97ee4ab607e3aebf13a0db6fdce270bf94b5021dc0981656bc5a7948e2043aaf50d4b2db1bd4296b2cc627ee0b28f087fe23548edcfc9d"}, 0x88, 0x4000081}, 0xc0) 9.182542228s ago: executing program 4 (id=1523): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r2, r2], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, r2, 0x0, r3, r4], 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x1, 0x70bd27, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) 9.182306321s ago: executing program 4 (id=1524): socket(0xa, 0x2, 0x80000) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000001d04"]) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.6482208s ago: executing program 2 (id=1527): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1800000}]}]}}, 0x0, 0x32, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x20) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x0, 0x2000, 0x2000, &(0x7f0000aa9000/0x2000)=nil}) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000b41000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x20052, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x2}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x980902, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000104005799ed830000040010000000000000ff9b7df5c6fe1271ba80ec83bb75e4af54de38ff7aaf0759f12849959d15f906793ff9b8f66a480c477d5fa5a9e3d8accbf0fb1f7225df8f51b25d112eda52a4fd0aaa545636553e6d180b90c1a7a6d06b605af3dc4cbc7a914579d5b1dc0682138feaf89a0717e042f92cf475e78e22c116bbd9957b24cb4eb208e8bd19a14d4739f101244f516481731f2186eeccb9bd2e46db63ad35313b7616971b498f5982bad43975fe129d1d8c06e2d30d65ee1548ce39d161b8300dfdeda4d3ce4ae1849e72572612220287b10d1af28fcce615c0fa179640b5debcc2310b34768b5847511f036f3bef2087e39be833de502e86d20d7c320108b4272edb339500e68e8cfa087122801262e744b91ae6f4e6d705e372ac4cd024d335004ec7e24a5869af40148f2a9a59d7566810bd705dced8e0", @ANYRES32=0x0, @ANYBLOB="2b030000000000002020dfc5986f424b0012800b00010067656e657665000010000280060005004e"], 0x40}}, 0x40040c0) 8.578475155s ago: executing program 2 (id=1528): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r1, 0x540b, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="b494a696b1eebf2a9ff1f164334d496542206b5c5c2a5cc97683e6f80a61c9c95fe697db51f88a2853f82e198dcca6bd778a9e7854c9c78afb2158eea90596af8df8980f38d0a69c671c79b7c796f88205467cc15f0fd4343b7a9d64b451db40450bca02f0e1381c2e692d197e21a6b29363df1e71a4722b8ec5ee14307be880a7f52f56dc3f06e8a17c9952f015bcec039bef94127bd6f3602a98bf6a80b62ef3e0d538271874f43838f005c1ad13102af766769a2c18860e1affd739796fa2510b28505e6b2f9e7fdf2b38babd00a87ed38e4c767a11b697364442f4173e4eeaf0f16dc6c1e1ded0eb96f8cf896c0e1e2d", 0xf2}, {&(0x7f0000000040)="bafa9f4817d188601dd743a17db4da2c769ab249f4ec428b2c67e4d2f6759b71822d", 0x22}, {&(0x7f0000000600)="f5ee8018d37a277151b73947378a26bc17cda59553e5b6a53cefe0e18eeac552fef04fd4cc6fdccd539f1d353510bc99b5d10bd06fcb5512ff5973ae2854056fbbd4794e7fbc397d65bfa4eac94d11cfc1d042438bb75492e789d0f0101548e2e3614dcf6133418e962d1b8d3ac093ac3d598a6935ad12a104ef022088cda1da054f67f02845139eec30198aaa1acc4f0d4fc5ba7986510ac5f8893076cf4f0770a8bfb2015ba1bd18dd47284dad74040a371b3255e6b7972d1dc22b3d80b06790fd325e", 0xc4}, {&(0x7f0000000080)="833a8098acda8d20d812f51b7edfe6097074d6a22ff6a23cb032f8a042a0bb1acc8932748b898dad297b904032faf71270015484a1103e775b27aba88c7866", 0x3f}, {&(0x7f0000000340)="f4318b6c9e53fa5ba023d77d6d734ee203d718c3efb43ea3baa8378f238c450b5963af5c08b50be68741a103645a0f39d6e585be05cfa8cb5c33a5c2245ffca9b14733d8c846f6d3ef21c2b3c1dca4d9c2ea01b33fd0f8c7cc320b0ceb9eeb6e39825a18640d76fc702ef48dd8bddf06ebf6e21735e1ec9ae75e2018c3a5aab03cbfa8bcefea1b91cce65f732e8c8f5f4c40eebee6946ab4c2a1a1fbbe921b0db5d9c14da5387d20eec9656594be81dc8982ba53dc7362183ab204b3fddce6ee095cc813defc", 0xc6}, {&(0x7f0000000440)="13ee4b2cf82f184dfc6e9f3ab7b8977c75d1acd3c6dea89bef16232edb2db5f3a6b352cbb28143245f8c1198a7ac00b509afd44c023bc160c0b33f8f1da293e168a835f73af58e3c6f424104d4983d50b76226685e64bca9c4b9f794da4a3773441446ae505b2f2d135d4fa51f869347a419e4a5e20ee9664d7f3708f9bceb5789", 0x81}], 0x6}}], 0x1, 0x24044010) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_CREATE(r2, 0x5501) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_DO_IT(r5, 0xab03) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0xfffe, 0xfff) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)) 8.577978575s ago: executing program 2 (id=1529): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0x541b, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x850) 8.501456095s ago: executing program 2 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) (async) read$FUSE(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10}]}, 0x34}}, 0x0) (async) 8.501302853s ago: executing program 2 (id=1531): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ipv6_route\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000002c0)='.\x00', 0x600010c) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') lseek(r0, 0x8, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x46, &(0x7f00000005c0), 0x1000000000000048}, 0x24000011) 8.500961098s ago: executing program 4 (id=1532): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0xc965, 0x200) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000200)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffdb9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r2, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x7}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x140, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8821}, [@IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf}]}]}, @IFLA_VF_PORTS={0x78, 0x18, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e75950efb5f752372817413617936412"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "113c91beddc35f64beb164d39d8283f3"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '}B\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xffff}, @IFLA_PORT_PROFILE={0xb, 0x2, '}@{*#+\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bedb19eb1d196c8a9d033be097d51b61"}]}]}, @IFLA_AF_SPEC={0x48, 0x1a, 0x0, 0x1, [@AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}]}, @AF_BRIDGE={0x4}]}]}, 0x140}}, 0x0) 8.499542446s ago: executing program 2 (id=1533): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000a565f73686cc4680c16638c789875621c5ee1bb39215d9d22f275f5efd237a9421f5f9a4d47f6d7cd4005c"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='\b\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',froup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00', @ANYRESHEX=r2]) mount$fuseblk(0x0, &(0x7f0000004240)='./file0\x00', 0x0, 0x38c04e8, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000000), &(0x7f0000000180)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='fscache_resize\x00', r1}, 0xfffffffffffffcc7) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000007616068434a401e16f800000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000830a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200e9e071af50803063b3a622d8c5615b91a342655ec245000c1712f11f82ff0527a268094b8fadf98378c7e01794145d545876b335c90de073d83572cfaa7e5854238bc187079246ed43b46907cec9b0d3d6b79bf4006d36222f36d6e1376a6afd26b65e1b26a4324181ded26f9997da05"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, &(0x7f0000000280)={{0x9, 0x80}, {0x4, 0x7}, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r10, 0x54a3) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 8.418423647s ago: executing program 4 (id=1534): syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket(0xf, 0x6, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 8.028638301s ago: executing program 3 (id=1542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000209000000fcdbdf25070000001c00018008000b007369700008000500030000000600010002000000080004000100000024000800040004a58217153007cb61900d6dff5ad967bc000b000200000006000b00020000000800040000080000080006000400000008000400060000008f92d93987bc8980fb8d69f9493f9397f01637702edecff907646f0e08976b6d69c694b87a348a3d2249324be643ee7e49e171fb87dd07b4106987d69fe1cf47f0e87c0e65d8b03a"], 0x74}, 0x1, 0x0, 0x0, 0x881}, 0x41) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=@migrate={0xec, 0x21, 0x403, 0x70bd29, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0xf555b0e51fbdbd73, 0x3b}, 0x6e6bbb, 0x2}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x2b, 0x2, 0x0, 0x0, 0x2, 0x8}, {@in6=@empty, @in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@loopback, 0x33, 0x1, 0x0, 0x34ff, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8c000}, 0x20008010) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b4266ef0f01c9c4e2fd97cd66ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f784228c744240000700000c74424024e000000c7442406000000000f011424b8010000000f01d9c4033921820f47a753fd", 0x63}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 8.02649479s ago: executing program 3 (id=1543): r0 = timerfd_create(0x0, 0x180800) timerfd_gettime(r0, &(0x7f0000000000)) timerfd_settime(r0, 0x3, &(0x7f00000001c0), 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x6) timerfd_create(0x0, 0x180800) (async) timerfd_gettime(r0, &(0x7f0000000000)) (async) timerfd_settime(r0, 0x3, &(0x7f00000001c0), 0x0) (async) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x6) (async) 8.026177942s ago: executing program 3 (id=1544): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket(0x2, 0x3, 0x5) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000280)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x4, 0x800, 0x8, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0x4, 0x101}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r8, 0x4) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x22, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9e1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe94}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x4, 0x5, 0xa, 0x4, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x8, 0xa, 0x30, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x9, 0xb2, &(0x7f0000000640)=""/178, 0x40f00, 0x40, '\x00', r6, @fallback=0x22, r2, 0x8, &(0x7f0000000700)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x3, 0x9, 0x9}, 0x10, r8, 0xffffffffffffffff, 0x6, &(0x7f0000000880)=[r9, 0xffffffffffffffff, r10, r2], &(0x7f00000008c0)=[{0x4, 0x4, 0xd, 0x7}, {0x4, 0x2, 0x10, 0xc}, {0x4, 0x1, 0xc, 0x3}, {0x2, 0x1, 0x8, 0x1}, {0x2, 0x3, 0x0, 0x3}, {0x4, 0x5, 0xa, 0x4}], 0x10, 0x7fffffff, @void, @value}, 0x94) sendto$inet(r4, 0x0, 0x0, 0x20004840, &(0x7f0000000600)={0x2, 0x4e23, @remote}, 0x10) recvfrom$unix(r4, 0x0, 0x0, 0x10100, 0x0, 0x0) r11 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route(r11, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000190000032dbd7000fedbdf2502108003fc03ff0700250000405ed061c42f5e7a858fb6a2a664b06b4493bdae5defe32b4ee2d8d92544e174506f84df8d8c86174754f0ca9c226175619f4be49113e4cfdb23f3d97ec9923e11def093371c2e1b763ee34a7e29036e4c2d74d99eb75e5c0008deb9efdce62b3afd72e23c3f5078e4323abe4dac50"], 0x1c}, 0x1, 0x0, 0x0, 0x400a001}, 0x20001840) recvmmsg$unix(r11, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1}}], 0x1, 0x10101, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) 7.108563867s ago: executing program 3 (id=1545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r1, 0x2) flock(r1, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000003040)=""/4107, 0x100b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$6lowpan_enable(r4, &(0x7f0000001100)='1', 0x1) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$packet(r7, &(0x7f0000000200)={0x11, 0xd, r8, 0x1, 0x3, 0x6, @random="74f93d38e519"}, 0x14) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="014114c975e5807a2d90a115c3c43c925bf17f7825df38956e6967377f756fa362d316106fc9ba74523493d8552e696d3984922a4af41776681671da0664850ace396b5278b12cfa92", 0x49}], 0x10000233, &(0x7f0000000a40)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r10, 0x0, 0x400000, 0x9) r11 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_TRANSMIT(r11, 0xc0386105, 0x0) r12 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0xc, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r15}}) io_uring_enter(r12, 0x708, 0x41e3, 0x0, 0x0, 0x0) getsockopt(r9, 0x7fffffff, 0x5, &(0x7f0000001140)=""/187, &(0x7f0000001200)=0xbb) futex(&(0x7f000000cffc)=0x1, 0x3, 0x0, 0x0, 0x0, 0x40) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40088c4) socket(0x37, 0x3, 0x200) 4.018423629s ago: executing program 3 (id=1546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@loopback}, {@in=@initdev={0xac, 0x1e, 0x80, 0x0}, 0x0, 0x33}, @in=@local, {}, {0xc, 0x402, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000, 0x2, 0x0, 0x0, 0xea}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4000001}]}, 0x144}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x2e, 0x1, @thr={0x0, &(0x7f0000000140)="a3e50e778ede12f92a3622754a72ac4c1e6a1209095b88139e5f995be5fcbe9387c018dd7684a9f8f8ffffff35553524cea85bff65c56eff223cd563c97b34e6b688eb054f28394fabff"}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, &(0x7f0000000080)) read$FUSE(r2, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0xfffc, 0xbad, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xfffffe01, 0x8000, 0xfff, 0x0, 0xee00, 0x0, 0xc3fa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) r7 = userfaultfd(0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x1, 0xc, 0x13}, 0x18) move_mount(r1, &(0x7f00000000c0)='./file0/file0\x00', r8, &(0x7f0000000340)='./file0\x00', 0x4) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 4.017605582s ago: executing program 3 (id=1547): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xc, 0x8, 0x8, 0x4, 0x2a100, 0x1, 0x8, '\x00', 0x0, r3, 0x5, 0x5, 0x2, 0x0, @value=r4, @void, @void, @value}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x8000) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB=',msize=0x000000007ffff', @ANYBLOB="1ec59d58bcfa82310c3f63dc8f121c0da54631d9dbb907c5f7628d44dd5fc4af773bda7cbbf87def60670ad7db0159052e07662bda8868a4d6bffca61600cbd277ad9498b4b7f7dd0706915d080755f8aaa1bba8f930d576cb7a1b3378712f8d804ae87b5e89247ad72024464eff4ba3760cee6eedfbdfeed7"]) 0s ago: executing program 33 (id=1413): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x9, 0xf0e}, {0x3, 0xb, 0x4053e5, 0x20}, 0xa, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x1, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) kernel console output (not intermixed with test programs): tion=16777219 [ 61.804269][ T5940] Buffer I/O error on dev nbd0, logical block 1, async page read [ 61.807336][ T6901] I/O error, dev nbd0, sector 67107852 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.810294][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 61.813177][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776963, location=16776963 [ 61.816780][ T5940] Buffer I/O error on dev nbd0, logical block 1, async page read [ 61.819676][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777218, location=16777218 [ 61.822712][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 61.825991][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776962, location=16776962 [ 61.828948][ T5940] Buffer I/O error on dev nbd0, logical block 1, async page read [ 61.832182][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777070, location=16777070 [ 61.835273][ T5940] Buffer I/O error on dev nbd0, logical block 0, async page read [ 61.838665][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776814, location=16776814 [ 61.841336][ T5940] Buffer I/O error on dev nbd0, logical block 1, async page read [ 61.844582][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777068, location=16777068 [ 61.844675][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776812, location=16776812 [ 61.848000][ T5940] ldm_validate_partition_table(): Disk read failed. [ 61.850662][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 61.851279][ T40] audit: type=1400 audit(1749636801.092:380): avc: denied { setopt } for pid=6907 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.855221][ T5940] Dev nbd0: unable to read RDB block 0 [ 61.857406][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 61.860355][ T5940] nbd0: unable to read partition table [ 61.865847][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388609, location=8388609 [ 61.875309][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388353, location=8388353 [ 61.878581][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388608, location=8388608 [ 61.881521][ T5940] ldm_validate_partition_table(): Disk read failed. [ 61.881755][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388352, location=8388352 [ 61.884256][ T5940] Dev nbd0: unable to read RDB block 0 [ 61.884492][ T5940] nbd0: unable to read partition table [ 61.891460][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388607, location=8388607 [ 61.894924][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388351, location=8388351 [ 61.898147][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388459, location=8388459 [ 61.901403][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388203, location=8388203 [ 61.904914][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388457, location=8388457 [ 61.908200][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388201, location=8388201 [ 61.908968][ T40] audit: type=1326 audit(1749636801.152:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.1.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820138e929 code=0x7ffc0000 [ 61.911735][ T6901] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 61.918680][ T40] audit: type=1326 audit(1749636801.152:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.1.257" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f820138e929 code=0x7ffc0000 [ 61.921499][ T6901] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 61.932297][ T40] audit: type=1326 audit(1749636801.152:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.1.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820138e929 code=0x7ffc0000 [ 61.940144][ T40] audit: type=1326 audit(1749636801.152:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.1.257" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f820138e929 code=0x7ffc0000 [ 62.040169][ T6924] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.040338][ T6926] trusted_key: syz.1.260 sent an empty control message without MSG_MORE. [ 62.044334][ T6924] 9pnet_fd: p9_fd_create_unix (6924): problem connecting socket: ./file0: -111 [ 62.049124][ T6926] bridge_slave_0: invalid flags given to default FDB implementation [ 62.313495][ T6334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.363560][ C3] usb 7-1: yurex_control_callback - control failed: -2 [ 62.367705][ T5980] usb 7-1: USB disconnect, device number 3 [ 62.371912][ T5980] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 62.468333][ T6334] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.472332][ T6334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.475929][ T6334] usb 5-1: Product: syz [ 62.483499][ T6334] usb 5-1: Manufacturer: syz [ 62.485466][ T6334] usb 5-1: SerialNumber: syz [ 62.497747][ T6334] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 62.526878][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 62.937376][ T6334] usb 5-1: USB disconnect, device number 3 [ 62.957843][ T6950] Invalid option length (1047906) for dns_resolver key [ 63.079547][ T6946] Invalid option length (17161) for dns_resolver key [ 63.333501][ T6174] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.463563][ T6174] usb 7-1: device descriptor read/64, error -71 [ 63.479496][ T6984] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 63.723467][ T6174] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.803437][ T9] usb 5-1: Service connection timeout for: 256 [ 63.813500][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 63.816706][ T9] ath9k_htc: Failed to initialize the device [ 63.819422][ T6334] usb 5-1: ath9k_htc: USB layer deinitialized [ 63.853512][ T6174] usb 7-1: device descriptor read/64, error -71 [ 63.866251][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.975546][ T6174] usb usb7-port1: attempt power cycle [ 64.023527][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 64.028674][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 64.031524][ T24] usb 6-1: config 179 has no interface number 0 [ 64.033669][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 64.037099][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 64.040954][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 64.045766][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 64.049380][ T24] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.054660][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.058329][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.065215][ T6991] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.283741][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input11 [ 64.333470][ T6174] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.353869][ T6174] usb 7-1: device descriptor read/8, error -71 [ 64.477198][ T6991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.281'. [ 64.484604][ T24] usb 6-1: USB disconnect, device number 2 [ 64.487185][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 64.487225][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 64.494498][ T24] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 64.613487][ T6174] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.634787][ T6174] usb 7-1: device descriptor read/8, error -71 [ 64.747243][ T6174] usb usb7-port1: unable to enumerate USB device [ 65.043140][ T7024] kvm: pic: non byte read [ 65.047516][ T7024] kvm: pic: level sensitive irq not supported [ 65.047882][ T7024] kvm: pic: non byte read [ 65.052998][ T7024] kvm: pic: level sensitive irq not supported [ 65.053275][ T7024] kvm: pic: non byte read [ 65.060113][ T7024] kvm: pic: level sensitive irq not supported [ 65.060403][ T7024] kvm: pic: non byte read [ 65.067680][ T7024] kvm: pic: level sensitive irq not supported [ 65.067942][ T7024] kvm: pic: non byte read [ 65.072384][ T7024] kvm: pic: level sensitive irq not supported [ 65.072618][ T7024] kvm: pic: non byte read [ 65.077060][ T7024] kvm: pic: level sensitive irq not supported [ 65.077294][ T7024] kvm: pic: non byte read [ 65.081620][ T7024] kvm: pic: level sensitive irq not supported [ 65.081853][ T7024] kvm: pic: non byte read [ 65.087263][ T7024] kvm: pic: level sensitive irq not supported [ 65.087500][ T7024] kvm: pic: non byte read [ 65.210876][ T7049] netlink: 64 bytes leftover after parsing attributes in process `syz.0.294'. [ 65.256648][ T7052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'. [ 65.266541][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 65.269866][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 65.317398][ T7063] Invalid source name [ 65.318694][ T7063] UBIFS error (pid: 7063): cannot open "./file0", error -22 [ 65.319388][ T7064] Invalid source name [ 65.323005][ T7064] UBIFS error (pid: 7064): cannot open "./file0", error -22 [ 65.338344][ T7061] kvm: requested 37714 ns i8254 timer period limited to 200000 ns [ 65.346150][ T7060] kvm: requested 37714 ns i8254 timer period limited to 200000 ns [ 65.395577][ T7061] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 65.397743][ T7060] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 66.129903][ T7077] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 66.131925][ T7079] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 66.250260][ T7095] fuse: Bad value for 'fd' [ 66.348476][ T7109] ntfs3(sr0): Primary boot signature is not NTFS. [ 66.351216][ T7109] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 66.477214][ T7123] block device autoloading is deprecated and will be removed. [ 66.492759][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 66.492769][ T40] audit: type=1400 audit(1749636805.732:420): avc: denied { getopt } for pid=7131 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.514763][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 66.520885][ T7137] ======================================================= [ 66.520885][ T7137] WARNING: The mand mount option has been deprecated and [ 66.520885][ T7137] and is ignored by this kernel. Remove the mand [ 66.520885][ T7137] option from the mount to silence this warning. [ 66.520885][ T7137] ======================================================= [ 66.538619][ T7137] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.543496][ T7137] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.550405][ T7137] overlayfs: conflicting lowerdir path [ 66.557892][ T7143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 66.586734][ T40] audit: type=1400 audit(1749636805.832:421): avc: denied { bind } for pid=7142 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.619859][ T40] audit: type=1400 audit(1749636805.862:422): avc: denied { ioctl } for pid=7136 comm="syz.2.318" path="socket:[12282]" dev="sockfs" ino=12282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.654771][ T40] audit: type=1400 audit(1749636805.902:423): avc: denied { watch watch_reads } for pid=7149 comm="syz.0.324" path="/99/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.696415][ T40] audit: type=1400 audit(1749636805.942:424): avc: denied { getopt } for pid=7153 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.747147][ T7161] netlink: 278 bytes leftover after parsing attributes in process `syz.3.328'. [ 66.837271][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.848556][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.929002][ T7150] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.931805][ T7150] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.934864][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 66.936195][ T7150] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.940924][ T7150] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.018838][ T40] audit: type=1400 audit(1749636806.252:425): avc: denied { listen } for pid=7166 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.048834][ T40] audit: type=1400 audit(1749636806.292:426): avc: denied { write } for pid=7172 comm="syz.1.332" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.058341][ T40] audit: type=1400 audit(1749636806.292:427): avc: denied { open } for pid=7172 comm="syz.1.332" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.067556][ T9] usb 7-1: device descriptor read/64, error -71 [ 67.070732][ T40] audit: type=1400 audit(1749636806.292:428): avc: denied { ioctl } for pid=7172 comm="syz.1.332" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x3b86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.242182][ T40] audit: type=1400 audit(1749636806.482:429): avc: denied { ioctl } for pid=7188 comm="syz.3.338" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 67.271502][ T6931] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.303506][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 67.314292][ T7195] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 67.319039][ T7195] VFS: Can't find a romfs filesystem on dev nullb0. [ 67.319039][ T7195] [ 67.434655][ T6931] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.438890][ T6931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.444114][ T6931] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.446937][ T6931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.450725][ T9] usb 7-1: device descriptor read/64, error -71 [ 67.454531][ T6931] usb 5-1: config 0 descriptor?? [ 67.462444][ T6931] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 67.467021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.561501][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 67.564727][ T9] usb usb7-port1: attempt power cycle [ 67.614002][ T7215] bond1: entered promiscuous mode [ 67.615738][ T7215] bond1: entered allmulticast mode [ 67.618151][ T7215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.665587][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 67.670130][ T7220] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 67.673829][ T7220] cramfs: wrong magic [ 67.892590][ T7240] syz_tun: left allmulticast mode [ 67.895115][ T7240] syz_tun: left promiscuous mode [ 67.896864][ T7240] bridge0: port 3(syz_tun) entered disabled state [ 67.902756][ T7240] bridge_slave_0: left allmulticast mode [ 67.903500][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 67.905152][ T7240] bridge_slave_0: left promiscuous mode [ 67.908616][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.912396][ T7240] bridge_slave_1: left allmulticast mode [ 67.915599][ T7240] bridge_slave_1: left promiscuous mode [ 67.917427][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.922924][ T7240] bond0: (slave bond_slave_0): Releasing backup interface [ 67.923970][ T9] usb 7-1: device descriptor read/8, error -71 [ 67.930501][ T7240] bond0: (slave bond_slave_1): Releasing backup interface [ 67.940129][ T7240] team0: Port device team_slave_0 removed [ 67.947712][ T7240] team0: Port device team_slave_1 removed [ 67.950525][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.952891][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.956412][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.958747][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.975365][ T7246] vlan0: entered promiscuous mode [ 67.981431][ T7246] team0: Port device vlan0 added [ 68.077846][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.080636][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.093765][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.112672][ T7255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7255 comm=syz.3.360 [ 68.151961][ T7259] capability: warning: `syz.3.361' uses 32-bit capabilities (legacy support in use) [ 68.164284][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 68.195332][ T9] usb 7-1: device descriptor read/8, error -71 [ 68.253601][ T838] usb 6-1: Using ep0 maxpacket: 16 [ 68.257602][ T838] usb 6-1: config 64 has an invalid interface number: 163 but max is 1 [ 68.263592][ T838] usb 6-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 68.266487][ T838] usb 6-1: config 64 has an invalid interface number: 240 but max is 1 [ 68.269058][ T838] usb 6-1: config 64 has an invalid interface association descriptor of length 3, skipping [ 68.272272][ T838] usb 6-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 68.275681][ T838] usb 6-1: config 64 has no interface number 0 [ 68.277699][ T838] usb 6-1: config 64 has no interface number 1 [ 68.279712][ T838] usb 6-1: config 64 interface 163 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 68.286020][ T838] usb 6-1: config 64 interface 163 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 68.289460][ T838] usb 6-1: config 64 interface 163 altsetting 15 endpoint 0x5 has an invalid bInterval 124, changing to 10 [ 68.293085][ T838] usb 6-1: config 64 interface 163 altsetting 15 bulk endpoint 0xB has invalid maxpacket 1024 [ 68.297812][ T838] usb 6-1: config 64 interface 163 altsetting 15 bulk endpoint 0x3 has invalid maxpacket 1024 [ 68.301077][ T838] usb 6-1: config 64 interface 240 altsetting 111 has a duplicate endpoint with address 0x3, skipping [ 68.305206][ T838] usb 6-1: config 64 interface 240 altsetting 111 has an invalid descriptor for endpoint zero, skipping [ 68.308685][ T838] usb 6-1: config 64 interface 240 altsetting 111 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 68.312190][ T838] usb 6-1: config 64 interface 240 altsetting 111 has an invalid descriptor for endpoint zero, skipping [ 68.313577][ T9] usb usb7-port1: unable to enumerate USB device [ 68.316078][ T838] usb 6-1: config 64 interface 240 altsetting 111 has an endpoint descriptor with address 0x43, changing to 0x3 [ 68.321442][ T838] usb 6-1: config 64 interface 240 altsetting 111 has a duplicate endpoint with address 0x3, skipping [ 68.324863][ T838] usb 6-1: config 64 interface 240 altsetting 111 has a duplicate endpoint with address 0x5, skipping [ 68.328219][ T838] usb 6-1: config 64 interface 240 altsetting 111 has a duplicate endpoint with address 0x6, skipping [ 68.331659][ T838] usb 6-1: config 64 interface 240 altsetting 111 has an invalid descriptor for endpoint zero, skipping [ 68.335164][ T838] usb 6-1: config 64 interface 240 altsetting 111 has an invalid descriptor for endpoint zero, skipping [ 68.338564][ T838] usb 6-1: config 64 interface 240 altsetting 111 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 68.341990][ T838] usb 6-1: config 64 interface 240 altsetting 111 has a duplicate endpoint with address 0xA, skipping [ 68.345684][ T838] usb 6-1: config 64 interface 240 altsetting 111 has a duplicate endpoint with address 0xF, skipping [ 68.349018][ T838] usb 6-1: config 64 interface 240 altsetting 111 has a duplicate endpoint with address 0x3, skipping [ 68.352469][ T838] usb 6-1: config 64 interface 163 has no altsetting 0 [ 68.354814][ T838] usb 6-1: config 64 interface 240 has no altsetting 0 [ 68.358807][ T838] usb 6-1: Dual-Role OTG device on HNP port [ 68.360868][ T838] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff54, bcdDevice=ff.71 [ 68.364049][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.366838][ T838] usb 6-1: Product: à   [ 68.368226][ T838] usb 6-1: Manufacturer: à°„ [ 68.369758][ T838] usb 6-1: SerialNumber: С [ 68.374893][ T7242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 68.377211][ T7242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 68.379816][ T7275] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.491742][ T7277] fuse: Bad value for 'fd' [ 68.589408][ T838] option 6-1:64.163: GSM modem (1-port) converter detected [ 68.601487][ T838] usb 6-1: USB disconnect, device number 3 [ 68.609786][ T838] option 6-1:64.163: device disconnected [ 69.243989][ T7288] sctp: [Deprecated]: syz.1.371 (pid 7288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.243989][ T7288] Use struct sctp_sack_info instead [ 69.611981][ T7305] rtc_cmos 00:05: Alarms can be up to one day in the future [ 69.615666][ T7305] __nla_validate_parse: 1 callbacks suppressed [ 69.615675][ T7305] netlink: 696 bytes leftover after parsing attributes in process `syz.1.376'. [ 69.649737][ T7307] program syz.1.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.764169][ T7307] program syz.1.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.875338][ T7317] bridge1: entered promiscuous mode [ 70.075688][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 70.349469][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 70.354989][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 70.687639][ T7354] sp0: Synchronizing with TNC [ 71.069458][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.396'. [ 71.078139][ T7363] netlink: 196 bytes leftover after parsing attributes in process `syz.2.396'. [ 71.097160][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.208752][ T7353] [U] è [ 71.527568][ T7388] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 71.530030][ T7388] netlink: 780 bytes leftover after parsing attributes in process `syz.2.405'. [ 71.610126][ T7392] xt_policy: output policy not valid in PREROUTING and INPUT [ 71.865514][ T7409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7409 comm=syz.1.411 [ 71.871913][ T7414] xt_hashlimit: invalid interval [ 71.996908][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 72.028461][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 72.052346][ T7428] netlink: 'syz.3.414': attribute type 3 has an invalid length. [ 72.058286][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 72.058299][ T40] audit: type=1400 audit(1749636811.302:443): avc: denied { bind } for pid=7421 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.069705][ T40] audit: type=1400 audit(1749636811.302:444): avc: denied { name_bind } for pid=7421 comm="syz.3.414" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 72.079017][ T40] audit: type=1400 audit(1749636811.302:445): avc: denied { node_bind } for pid=7421 comm="syz.3.414" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 72.219848][ T7419] Process accounting resumed [ 72.240182][ T7433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.287478][ T7438] sit0: entered promiscuous mode [ 72.297046][ T7438] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 72.300314][ T7438] netlink: 1 bytes leftover after parsing attributes in process `syz.1.418'. [ 72.533942][ T7448] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 72.537208][ T7448] SELinux: failed to load policy [ 72.647930][ T7450] 9pnet_fd: Insufficient options for proto=fd [ 72.887023][ T7456] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 72.891642][ T7456] hsr_slave_0: left promiscuous mode [ 72.894739][ T7456] hsr_slave_1: left promiscuous mode [ 73.015642][ T7459] tmpfs: Bad value for 'mpol' [ 73.113703][ T7465] raw_sendmsg: syz.3.428 forgot to set AF_INET. Fix it! [ 73.189795][ T7474] xt_time: unknown flags 0xb4 [ 73.210690][ T40] audit: type=1400 audit(1749636812.452:446): avc: denied { read } for pid=7473 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.218935][ T7474] batadv0: entered promiscuous mode [ 73.222071][ T7474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.225345][ T7474] batadv0: left promiscuous mode [ 73.416686][ T7495] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.502515][ T6000] usb 5-1: USB disconnect, device number 4 [ 73.533278][ T40] audit: type=1400 audit(1749636812.772:447): avc: denied { mounton } for pid=7502 comm="syz.0.442" path="/101/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 73.607434][ T40] audit: type=1400 audit(1749636812.852:448): avc: denied { getopt } for pid=7511 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.613813][ T40] audit: type=1400 audit(1749636812.852:449): avc: denied { connect } for pid=7511 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.679188][ T7524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.684403][ T6019] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.853758][ T6019] usb 6-1: Using ep0 maxpacket: 8 [ 73.857573][ T6019] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 73.860152][ T6019] usb 6-1: config 179 has no interface number 0 [ 73.862134][ T6019] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 73.866264][ T6019] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 73.869704][ T6019] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 73.873151][ T6019] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 73.877422][ T6019] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 73.881518][ T6019] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 73.884618][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.893770][ T7498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.922613][ T7556] binder: 7555:7556 ioctl 4018620d 0 returned -22 [ 73.952272][ T40] audit: type=1400 audit(1749636813.192:450): avc: denied { connect } for pid=7557 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.977809][ T7560] binder: 7555:7560 ioctl c0306201 0 returned -14 [ 73.980122][ T40] audit: type=1400 audit(1749636813.222:451): avc: denied { write } for pid=7559 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.984064][ T7560] binder: 7555:7560 ioctl 5423 200000000000 returned -22 [ 74.087346][ T7566] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 74.090493][ T7566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.105616][ T6000] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input13 [ 74.305975][ T6000] usb 6-1: USB disconnect, device number 4 [ 74.307958][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 74.307980][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 74.314162][ T6000] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 74.643218][ T7592] cgroup: No subsys list or none specified [ 74.646426][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7592 comm=syz.2.471 [ 74.716209][ T7599] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 74.732396][ T7601] SELinux: truncated policydb string identifier [ 74.734568][ T7601] SELinux: failed to load policy [ 74.736473][ T40] audit: type=1400 audit(1749636813.982:452): avc: denied { read } for pid=7594 comm="syz.0.472" lport=42906 faddr=::ffff:10.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.791991][ T7611] netlink: 'syz.3.479': attribute type 29 has an invalid length. [ 74.796018][ T7611] netlink: 'syz.3.479': attribute type 29 has an invalid length. [ 74.798993][ T7611] __nla_validate_parse: 4 callbacks suppressed [ 74.799001][ T7611] netlink: 484 bytes leftover after parsing attributes in process `syz.3.479'. [ 74.895904][ T7625] netlink: 'syz.1.484': attribute type 11 has an invalid length. [ 74.899109][ T7625] netlink: 44 bytes leftover after parsing attributes in process `syz.1.484'. [ 75.163456][ T6174] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.293520][ T6174] usb 6-1: device descriptor read/64, error -71 [ 75.534057][ T6174] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.559825][ T7642] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 75.564422][ T7642] netlink: 'syz.3.489': attribute type 21 has an invalid length. [ 75.663465][ T6174] usb 6-1: device descriptor read/64, error -71 [ 75.686082][ T7649] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 75.690591][ T7649] lo: entered promiscuous mode [ 75.697596][ T7649] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 75.705984][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.711630][ T7649] bond0: (slave lo): Enslaving as an active interface with an up link [ 75.723014][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 75.756586][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.495'. [ 75.774581][ T6174] usb usb6-port1: attempt power cycle [ 75.835150][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 75.838718][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 75.949039][ T7675] overlayfs: failed to resolve './cgroup': -2 [ 75.969149][ T7675] 9pnet: Could not find request transport: 0xffffffffffffffff [ 76.026954][ T7686] fuse: Bad value for 'user_id' [ 76.028558][ T7686] fuse: Bad value for 'user_id' [ 76.113493][ T6174] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 76.133944][ T6174] usb 6-1: device descriptor read/8, error -71 [ 76.342457][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 76.394328][ T6174] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 76.426793][ T6174] usb 6-1: device descriptor read/8, error -71 [ 76.455098][ T7714] netlink: 'syz.0.513': attribute type 2 has an invalid length. [ 76.457484][ T7714] netlink: 784 bytes leftover after parsing attributes in process `syz.0.513'. [ 76.543614][ T6174] usb usb6-port1: unable to enumerate USB device [ 76.876424][ T7725] netlink: 'syz.2.517': attribute type 4 has an invalid length. [ 76.878877][ T7725] netlink: 152 bytes leftover after parsing attributes in process `syz.2.517'. [ 76.882590][ T7725] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.098771][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 77.098781][ T40] audit: type=1326 audit(1749636816.342:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.2.525" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f4838e929 code=0x0 [ 77.261916][ T40] audit: type=1400 audit(1749636816.502:463): avc: denied { mount } for pid=7762 comm="syz.2.530" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 77.263968][ T7763] overlayfs: failed to resolve './file1': -2 [ 77.272497][ T7763] netlink: 80 bytes leftover after parsing attributes in process `syz.2.530'. [ 77.576007][ T40] audit: type=1400 audit(1749636816.822:464): avc: denied { mount } for pid=7772 comm="syz.0.533" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.584436][ T40] audit: type=1400 audit(1749636816.822:465): avc: denied { remount } for pid=7772 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.591721][ T40] audit: type=1400 audit(1749636816.832:466): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.781311][ T7789] efs: device does not support 512 byte blocks [ 77.784037][ T7789] device does not support 512 byte blocks [ 77.784037][ T7789] [ 77.841966][ T7793] netlink: 'syz.0.540': attribute type 29 has an invalid length. [ 77.846381][ T7793] netlink: 'syz.0.540': attribute type 29 has an invalid length. [ 77.984060][ T7798] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 78.296849][ T40] audit: type=1400 audit(1749636817.542:467): avc: denied { listen } for pid=7845 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.336560][ T7850] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 78.339143][ T7850] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.342845][ T7850] vhci_hcd vhci_hcd.0: Device attached [ 78.346218][ T7851] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 78.349944][ T60] vhci_hcd: stop threads [ 78.351394][ T60] vhci_hcd: release socket [ 78.352805][ T60] vhci_hcd: disconnect device [ 78.355538][ T1341] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 78.493483][ T1341] usb 6-1: device descriptor read/64, error -71 [ 78.753508][ T1341] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 78.883496][ T1341] usb 6-1: device descriptor read/64, error -71 [ 78.886923][ T7811] ceph: No mds server is up or the cluster is laggy [ 78.930103][ T40] audit: type=1400 audit(1749636818.172:468): avc: denied { write } for pid=7858 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.937915][ T7860] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 78.939019][ T40] audit: type=1400 audit(1749636818.182:469): avc: denied { shutdown } for pid=7861 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.948784][ T40] audit: type=1400 audit(1749636818.192:470): avc: denied { ioctl } for pid=7858 comm="syz.0.557" path="socket:[16832]" dev="sockfs" ino=16832 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.993661][ T1341] usb usb6-port1: attempt power cycle [ 79.059169][ T40] audit: type=1400 audit(1749636818.302:471): avc: denied { create } for pid=7869 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.089850][ T7875] netlink: 'syz.3.561': attribute type 7 has an invalid length. [ 79.092433][ T7875] netlink: 'syz.3.561': attribute type 8 has an invalid length. [ 79.097690][ T7875] erspan0: entered promiscuous mode [ 79.100691][ T7875] batadv_slave_1: entered promiscuous mode [ 79.105035][ T7875] erspan0: left promiscuous mode [ 79.107262][ T7875] batadv_slave_1: left promiscuous mode [ 79.215570][ T7894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1048 sclass=netlink_route_socket pid=7894 comm=syz.3.566 [ 79.333578][ T1341] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 79.339127][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7919 comm=syz.2.575 [ 79.356104][ T1341] usb 6-1: device descriptor read/8, error -71 [ 79.384630][ T7928] gretap0: entered promiscuous mode [ 79.386845][ T7928] batadv_slave_1: entered promiscuous mode [ 79.389976][ T7928] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 79.392970][ T7928] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.593789][ T1341] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 79.613863][ T1341] usb 6-1: device descriptor read/8, error -71 [ 79.723916][ T1341] usb usb6-port1: unable to enumerate USB device [ 79.798060][ T7962] sctp: [Deprecated]: syz.2.589 (pid 7962) Use of int in max_burst socket option. [ 79.798060][ T7962] Use struct sctp_assoc_value instead [ 79.930105][ T7967] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 79.967570][ T7975] overlayfs: failed to clone upperpath [ 79.997602][ T7977] netlink: 'syz.3.593': attribute type 39 has an invalid length. [ 80.281441][ T7990] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 80.290986][ T7991] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 80.329952][ T7995] tmpfs: Bad value for 'mpol' [ 80.437595][ T8007] __nla_validate_parse: 12 callbacks suppressed [ 80.437607][ T8007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.604'. [ 80.489187][ T8011] lo: left promiscuous mode [ 80.491473][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.606'. [ 80.502280][ T8011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.536911][ T8016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.594555][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.608'. [ 80.597356][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 80.687053][ T8019] use of bytesused == 0 is deprecated and will be removed in the future, [ 80.690090][ T8019] use the actual size instead. [ 80.778799][ T8021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.610'. [ 81.266452][ T8051] fuse: Bad value for 'fd' [ 81.325557][ T10] cfg80211: failed to load regulatory.db [ 81.507131][ T8064] 9pnet: Could not find request transport: 0xffffffffffffffff [ 81.637876][ T8076] overlayfs: failed to clone upperpath [ 82.143554][ T1341] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 82.306289][ T1341] usb 5-1: not running at top speed; connect to a high speed hub [ 82.306734][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 82.306743][ T40] audit: type=1400 audit(1749636821.552:481): avc: denied { write } for pid=8100 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.310429][ T1341] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.325522][ T1341] usb 5-1: config 1 interface 0 has no altsetting 0 [ 82.329306][ T1341] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 82.332130][ T1341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.334871][ T1341] usb 5-1: Product: syz [ 82.336189][ T1341] usb 5-1: Manufacturer: syz [ 82.337640][ T1341] usb 5-1: SerialNumber: syz [ 82.340322][ T1341] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 82.343065][ T1341] usb 5-1: no configuration chosen from 1 choice [ 82.484616][ T40] audit: type=1400 audit(1749636821.732:482): avc: denied { map } for pid=8107 comm="syz.3.638" path="socket:[18472]" dev="sockfs" ino=18472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.249518][ T8136] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.648'. [ 83.462926][ T8138] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 83.473825][ T40] audit: type=1400 audit(1749636822.712:483): avc: denied { getopt } for pid=8137 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.652743][ T8148] overlayfs: failed to clone lowerpath [ 83.732790][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 83.735810][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'. [ 83.762454][ T40] audit: type=1400 audit(1749636823.002:484): avc: denied { audit_read } for pid=8154 comm="syz.3.655" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.769278][ T40] audit: type=1400 audit(1749636823.012:485): avc: denied { setattr } for pid=8154 comm="syz.3.655" name="PHONET" dev="sockfs" ino=16302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.821504][ T8159] sctp: [Deprecated]: syz.3.657 (pid 8159) Use of int in max_burst socket option. [ 83.821504][ T8159] Use struct sctp_assoc_value instead [ 84.004195][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 84.006944][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 84.714868][ T6000] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 84.863472][ T6000] usb 6-1: Using ep0 maxpacket: 32 [ 84.866508][ T6000] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 84.869271][ T6000] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 84.872925][ T6000] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 84.876608][ T6000] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 84.880929][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.885105][ T6000] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.888062][ T6000] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.890833][ T6000] usb 6-1: Product: syz [ 84.892260][ T6000] usb 6-1: Manufacturer: syz [ 84.894043][ T6000] usb 6-1: SerialNumber: syz [ 84.897145][ T6000] usb 6-1: config 0 descriptor?? [ 84.900901][ T6000] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.905918][ T6000] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.908722][ T10] usb 5-1: USB disconnect, device number 5 [ 85.015201][ T40] audit: type=1400 audit(1749636824.262:486): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 85.051920][ T40] audit: type=1400 audit(1749636824.292:487): avc: denied { write } for pid=8205 comm="syz.0.670" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.052202][ T8208] random: crng reseeded on system resumption [ 85.059001][ T40] audit: type=1400 audit(1749636824.292:488): avc: denied { open } for pid=8205 comm="syz.0.670" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.070424][ T8207] Hibernate inconsistent memory map detected! [ 85.072447][ T8207] PM: hibernation: Image mismatch: architecture specific data [ 85.105770][ T40] audit: type=1400 audit(1749636824.352:489): avc: denied { read } for pid=8186 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.111767][ T40] audit: type=1400 audit(1749636824.352:490): avc: denied { name_bind 0x1000000 } for pid=8211 comm="syz.3.672" path="socket:[17035]" dev="sockfs" ino=17035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.157368][ T8214] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 85.171727][ T6000] usb 6-1: USB disconnect, device number 13 [ 85.178931][ T6000] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 85.776019][ T8234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=8234 comm=syz.1.682 [ 85.808768][ T8239] Bluetooth: MGMT ver 1.23 [ 85.937918][ T8211] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 86.046221][ T8254] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 86.067882][ T8254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.077001][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.080746][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.085879][ T8255] SELinux: failed to load policy [ 86.090145][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.093302][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.096006][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.101256][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.113981][ T5297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.117776][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.121050][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.125557][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.186060][ T12] gretap0 (unregistering): left promiscuous mode [ 86.275190][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.285975][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.289234][ T12] bond0 (unregistering): Released all slaves [ 86.309275][ T8275] __nla_validate_parse: 1 callbacks suppressed [ 86.309287][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 86.314580][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 86.317816][ T8275] netlink: 'syz.1.694': attribute type 18 has an invalid length. [ 86.438324][ T12] tipc: Disabling bearer [ 86.441006][ T12] tipc: Left network mode [ 86.462770][ T8263] chnl_net:caif_netlink_parms(): no params data found [ 86.531928][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 86.600271][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.602841][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.605338][ T8263] bridge_slave_0: entered allmulticast mode [ 86.608046][ T8263] bridge_slave_0: entered promiscuous mode [ 86.628761][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.631103][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.633479][ T8263] bridge_slave_1: entered allmulticast mode [ 86.636338][ T8263] bridge_slave_1: entered promiscuous mode [ 86.667227][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.672096][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.704323][ T8263] team0: Port device team_slave_0 added [ 86.707641][ T8263] team0: Port device team_slave_1 added [ 86.741946][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.746038][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.757845][ T8263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.768702][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.771681][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.782502][ T8263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.788393][ T12] batadv_slave_1: left promiscuous mode [ 86.794617][ T12] hsr_slave_0: left promiscuous mode [ 86.800771][ T12] hsr_slave_1: left promiscuous mode [ 86.802866][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.808201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.264964][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.713'. [ 87.316977][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 87.316988][ T40] audit: type=1400 audit(1749636826.562:497): avc: denied { create } for pid=8352 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.325331][ T40] audit: type=1400 audit(1749636826.562:498): avc: denied { write } for pid=8352 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.331500][ T40] audit: type=1400 audit(1749636826.562:499): avc: denied { nlmsg_write } for pid=8352 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.422008][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.481339][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.997135][ T8263] hsr_slave_0: entered promiscuous mode [ 88.000124][ T8263] hsr_slave_1: entered promiscuous mode [ 88.002118][ T8263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.005644][ T8263] Cannot create hsr debugfs directory [ 88.027347][ T8366] overlayfs: failed to clone upperpath [ 88.059616][ T8366] set match dimension is over the limit! [ 88.090481][ T40] audit: type=1400 audit(1749636827.332:500): avc: denied { view } for pid=8369 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 88.157761][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 88.165409][ T40] audit: type=1400 audit(1749636827.402:501): avc: denied { execmem } for pid=8380 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.172611][ T40] audit: type=1800 audit(1749636827.412:502): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.720" name="dmabuf" dev="dmabuf" ino=4 res=0 errno=0 [ 88.203624][ T5297] Bluetooth: hci3: command tx timeout [ 88.228752][ T8263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.237469][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 88.240551][ T8263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.251377][ T8263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.263147][ T8263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.297934][ T8401] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 88.304159][ T40] audit: type=1400 audit(1749636827.552:503): avc: denied { create } for pid=8404 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 88.352596][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.369906][ T12] IPVS: stop unused estimator thread 0... [ 88.383056][ T8263] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.396009][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.398923][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.407663][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.409954][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.522472][ T40] audit: type=1400 audit(1749636827.762:504): avc: denied { ioctl } for pid=8437 comm="syz.2.730" path="socket:[17169]" dev="sockfs" ino=17169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.562298][ T8263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.700267][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.737'. [ 88.706556][ T8472] overlayfs: failed to clone upperpath [ 88.732003][ T8263] veth0_vlan: entered promiscuous mode [ 88.741012][ T8263] veth1_vlan: entered promiscuous mode [ 88.769706][ T8483] ieee802154 phy1 wpan1: encryption failed: -22 [ 88.778118][ T8478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.799006][ T8263] veth0_macvtap: entered promiscuous mode [ 88.803135][ T8263] veth1_macvtap: entered promiscuous mode [ 88.813072][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.819113][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.825838][ T8263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.828614][ T8263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.831346][ T8263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.836132][ T8263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.870024][ T8478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.875845][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 88.878716][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 88.918308][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.921259][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.942862][ T8478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.968078][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.971182][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.982289][ T40] audit: type=1400 audit(1749636828.222:505): avc: denied { mounton } for pid=8263 comm="syz-executor" path="/syzkaller.0fQaP3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 88.992099][ T40] audit: type=1400 audit(1749636828.232:506): avc: denied { mounton } for pid=8263 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 89.001364][ T8504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.030402][ T8478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.109627][ T8478] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.116446][ T8517] futex_wake_op: syz.4.744 tries to shift op by -1; fix this program [ 89.126644][ T8478] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.142709][ T8478] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.156819][ T8478] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.168662][ T8521] netlink: 'syz.4.745': attribute type 21 has an invalid length. [ 89.175968][ T8521] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 89.179284][ T8521] netlink: 780 bytes leftover after parsing attributes in process `syz.4.745'. [ 89.183809][ T8521] random: crng reseeded on system resumption [ 89.453777][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 89.459369][ T8544] netlink: 'syz.2.751': attribute type 21 has an invalid length. [ 89.461893][ T8544] netlink: 'syz.2.751': attribute type 6 has an invalid length. [ 89.624741][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 89.644732][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 89.648224][ T24] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 89.673316][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.684954][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.687446][ T24] usb 9-1: Product: 豃ꊇཱི쀩숸攃谯ʼnè í›œì¨‘縆íƒé‰Žè‚¯ê¡‡é¿Œî…¡ì¦¦æ¡«ïŒ¤ãŸïµ´é€±ã¿¸é‡¾æ¥¾ï¿¢ìžï¹†æ’ƒá‡‹ì°Šè”¸ë…´á¿ ì¦½ä€‡æ’¾ï—€è¬žå±Ÿå¶‡á‡‰à¼ƒá–ˆã—ˆîº¾ê¯™âŸ£ä’“⤑ሢ튎ã—æ¥ç“½âµšî‰³Å·ì¸²î½ƒê†ŠíŸ’㯮撇䇪ᮖå‚갱嚥᱿蒼㠱é±è¨¬ê›Ÿî»„䡌ꌢ嗸툮䩬꒜é›à·²åž¹ì¼‘伞驎盗毂煰âµè‚Ÿá¾‡ê¦³â¿‰à¸¿â¾²Õ·æ½Œéˆ¹ã¹„䆯ꀄ୺äŽëŠ™à¸¤ï•®ï°ëŸ° [ 89.704527][ T24] usb 9-1: Manufacturer: à Œ [ 89.706003][ T24] usb 9-1: SerialNumber: syz [ 89.920341][ T8521] dlm: Unknown command passed to DLM device : 255 [ 89.920341][ T8521] [ 89.928555][ T24] cdc_ncm 9-1:1.0: bind() failure [ 89.932658][ T24] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 89.935232][ T24] cdc_ncm 9-1:1.1: bind() failure [ 89.939382][ T24] usb 9-1: USB disconnect, device number 2 [ 90.069093][ T8587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.121607][ T8589] futex_wake_op: syz.1.768 tries to shift op by -1; fix this program [ 90.174621][ T8591] input: syz0 as /devices/virtual/input/input14 [ 90.177581][ T8591] input: failed to attach handler leds to device input14, error: -6 [ 90.283722][ T5297] Bluetooth: hci3: command tx timeout [ 90.326174][ T8604] overlayfs: failed to clone upperpath [ 90.625195][ T13] bond0: (slave lo): link status definitely down, disabling slave [ 90.631292][ T13] bond0: now running without any active interface! [ 90.886168][ T8642] /dev/sr0: Can't open blockdev [ 90.991766][ T8649] Invalid logical block size (46133) [ 91.443653][ T6000] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 91.498355][ T8660] delete_channel: no stack [ 91.608915][ T6000] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 91.622132][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 91.625999][ T6000] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.628862][ T6000] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 91.631482][ T6000] usb 9-1: Product: syz [ 91.632801][ T6000] usb 9-1: Manufacturer: syz [ 91.634514][ T6000] usb 9-1: SerialNumber: syz [ 91.638470][ T6000] usb 9-1: config 0 descriptor?? [ 91.648266][ T6000] usb 9-1: selecting invalid altsetting 0 [ 91.891868][ T24] usb 9-1: USB disconnect, device number 3 [ 92.640827][ T8737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.733466][ T6000] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 92.738519][ T8737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.802650][ T8737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.877449][ T8737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.883510][ T6000] usb 9-1: device descriptor read/64, error -71 [ 92.967012][ T8737] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.974718][ T8737] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982432][ T8737] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.989620][ T8737] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.039111][ T8740] sp0: Synchronizing with TNC [ 93.043248][ T8740] CIFS mount error: No usable UNC path provided in device string! [ 93.043248][ T8740] [ 93.046526][ T8740] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.123505][ T6000] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 93.134273][ T8742] __nla_validate_parse: 8 callbacks suppressed [ 93.134286][ T8742] netlink: 80 bytes leftover after parsing attributes in process `syz.1.803'. [ 93.141199][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 93.141209][ T40] audit: type=1400 audit(1749636832.382:518): avc: denied { write } for pid=8741 comm="syz.1.803" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.146300][ T8742] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.150947][ T40] audit: type=1400 audit(1749636832.382:519): avc: denied { map } for pid=8741 comm="syz.1.803" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.159704][ T40] audit: type=1400 audit(1749636832.382:520): avc: denied { execute } for pid=8741 comm="syz.1.803" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.253469][ T6000] usb 9-1: device descriptor read/64, error -71 [ 93.343799][ T8760] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:8 [ 93.354705][ T8760] sctp: [Deprecated]: syz.3.809 (pid 8760) Use of int in maxseg socket option. [ 93.354705][ T8760] Use struct sctp_assoc_value instead [ 93.365218][ T6000] usb usb9-port1: attempt power cycle [ 93.433182][ T8769] netlink: 596 bytes leftover after parsing attributes in process `syz.2.813'. [ 93.494963][ T40] audit: type=1400 audit(1749636832.742:521): avc: denied { read } for pid=8781 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.685848][ T8800] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.820'. [ 93.713692][ T6000] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 93.743874][ T6000] usb 9-1: device descriptor read/8, error -71 [ 93.924297][ T40] audit: type=1400 audit(1749636833.172:522): avc: denied { listen } for pid=8805 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.993513][ T6000] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 94.014780][ T6000] usb 9-1: device descriptor read/8, error -71 [ 94.022687][ T8813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.826'. [ 94.124081][ T6000] usb usb9-port1: unable to enumerate USB device [ 94.153728][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.828'. [ 94.157435][ T40] audit: type=1326 audit(1749636833.402:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.2.828" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f4838e929 code=0x0 [ 94.157831][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.828'. [ 94.286974][ T40] audit: type=1400 audit(1749636833.532:524): avc: denied { ioctl } for pid=8829 comm="syz.1.831" path="socket:[20194]" dev="sockfs" ino=20194 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 94.354793][ T8833] netlink: 'syz.1.831': attribute type 4 has an invalid length. [ 94.463547][ T8842] IPv6: sit1: Disabled Multicast RS [ 94.521271][ T40] audit: type=1400 audit(1749636833.762:525): avc: denied { write } for pid=8840 comm="syz.1.833" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 94.528271][ T40] audit: type=1400 audit(1749636833.762:526): avc: denied { open } for pid=8840 comm="syz.1.833" path="/191/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 94.539195][ T8845] block device autoloading is deprecated and will be removed. [ 94.548999][ T40] audit: type=1400 audit(1749636833.792:527): avc: denied { ioctl } for pid=8840 comm="syz.1.833" path="/191/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 94.568560][ T8848] overlayfs: failed to clone upperpath [ 94.594688][ T8841] md2: using deprecated bitmap file support [ 94.596683][ T8841] md2: error: bitmap file must be a regular file [ 94.673522][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 94.764997][ T5297] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 94.768765][ T5297] Bluetooth: hci3: Injecting HCI hardware error event [ 94.772404][ T5297] Bluetooth: hci3: hardware error 0x00 [ 94.834572][ T5980] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 94.985069][ T5980] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 94.987592][ T5980] usb 6-1: can't read configurations, error -61 [ 95.113597][ T5980] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 95.223895][ T8861] overlay: Unknown parameter 'pcr' [ 95.265573][ T5980] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 95.268004][ T5980] usb 6-1: can't read configurations, error -61 [ 95.270325][ T5980] usb usb6-port1: attempt power cycle [ 95.422698][ T8881] overlayfs: failed to clone upperpath [ 95.426087][ T8881] overlayfs: failed to clone lowerpath [ 95.429532][ T8881] netlink: 'syz.2.845': attribute type 1 has an invalid length. [ 95.432753][ T8881] netlink: 'syz.2.845': attribute type 4 has an invalid length. [ 95.436220][ T8881] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.845'. [ 95.442750][ T8881] overlayfs: failed to clone upperpath [ 95.598131][ T8901] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.603670][ T5980] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 95.630281][ T5980] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 95.632735][ T5980] usb 6-1: can't read configurations, error -61 [ 95.699815][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8921 comm=syz.3.855 [ 95.703973][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8921 comm=syz.3.855 [ 95.707832][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8921 comm=syz.3.855 [ 95.711705][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8921 comm=syz.3.855 [ 95.716615][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8921 comm=syz.3.855 [ 95.720470][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8921 comm=syz.3.855 [ 95.748481][ T8926] trusted_key: encrypted_key: master key parameter '' is invalid [ 95.764350][ T5980] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 95.785759][ T5980] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 95.793427][ T5980] usb 6-1: can't read configurations, error -61 [ 95.795737][ T5980] usb usb6-port1: unable to enumerate USB device [ 95.937095][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 95.940737][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.862'. [ 95.945570][ T8944] netlink: 'syz.3.862': attribute type 13 has an invalid length. [ 95.964488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.983807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.348479][ T8986] No source specified [ 96.532853][ T9019] overlayfs: failed to clone upperpath [ 96.532925][ T9020] overlayfs: failed to clone upperpath [ 96.853558][ T5297] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 97.325930][ T9038] 9pnet_virtio: no channels available for device syz [ 97.422104][ T9053] 8021q: VLANs not supported on bond0 [ 97.448727][ T9057] tmpfs: Cannot change global quota limit on remount [ 97.683163][ T9089] xt_hashlimit: size too large, truncated to 1048576 [ 97.689767][ T9078] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 97.724834][ T9094] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.745475][ T9095] /dev/nbd1: Can't open blockdev [ 97.822553][ T9110] SELinux: truncated policydb string identifier [ 97.825493][ T9110] SELinux: failed to load policy [ 97.880312][ T9124] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 98.004994][ T9142] Driver unsupported XDP return value 0 on prog (id 299) dev N/A, expect packet loss! [ 98.147200][ T9158] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 98.151343][ T9158] netlink: 'syz.4.927': attribute type 3 has an invalid length. [ 98.154837][ T9158] __nla_validate_parse: 3 callbacks suppressed [ 98.154846][ T9158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.927'. [ 98.196065][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 98.196077][ T40] audit: type=1400 audit(1749636837.442:553): avc: denied { write } for pid=9162 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.325541][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 98.328314][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 98.386771][ T9171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9171 comm=syz.3.931 [ 98.558915][ T9180] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 98.561332][ T9180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.934'. [ 98.724652][ T9192] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 98.776300][ T40] audit: type=1326 audit(1749636838.022:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.940" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f52d378e929 code=0x0 [ 99.216346][ T40] audit: type=1400 audit(1749636838.462:555): avc: denied { read } for pid=9231 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.255439][ T9235] team0: Port device bond0 removed [ 99.262210][ T9235] bond0: (slave bond_slave_0): Releasing backup interface [ 99.267872][ T9235] bond0: (slave bond_slave_1): Releasing backup interface [ 99.278333][ T9235] team0: Port device team_slave_0 removed [ 99.287096][ T9235] team0: Port device team_slave_1 removed [ 99.289366][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.291818][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.302476][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.305247][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.341207][ T9248] netlink: 'syz.1.953': attribute type 4 has an invalid length. [ 99.395769][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 99.642002][ T40] audit: type=1400 audit(1749636838.872:556): avc: denied { mount } for pid=9268 comm="syz.3.958" name="/" dev="9p" ino=35913878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.645735][ T9272] syz.4.959: attempt to access beyond end of device [ 99.645735][ T9272] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 99.655785][ T9272] syz.4.959: attempt to access beyond end of device [ 99.655785][ T9272] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 99.807500][ T9285] IPv4: Oversized IP packet from 127.202.26.0 [ 99.829946][ T40] audit: type=1400 audit(1749636839.072:557): avc: denied { ioctl } for pid=9290 comm="syz.2.966" path="socket:[21443]" dev="sockfs" ino=21443 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.887523][ T9296] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 99.891958][ T9296] overlayfs: missing 'lowerdir' [ 99.959191][ T9304] netlink: 260 bytes leftover after parsing attributes in process `syz.2.970'. [ 99.962304][ T9304] netlink: 260 bytes leftover after parsing attributes in process `syz.2.970'. [ 99.962456][ T9306] netlink: 56 bytes leftover after parsing attributes in process `syz.2.970'. [ 99.993905][ T40] audit: type=1400 audit(1749636839.232:558): avc: denied { getopt } for pid=9309 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.027665][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 100.056208][ T9323] pim6reg1: entered promiscuous mode [ 100.057919][ T9323] pim6reg1: entered allmulticast mode [ 100.116571][ T9334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.201380][ T9348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9348 comm=syz.2.986 [ 100.232723][ T9352] netlink: 'syz.2.987': attribute type 2 has an invalid length. [ 100.364137][ T9372] evm: overlay not supported [ 100.377255][ T40] audit: type=1400 audit(1749636839.622:559): avc: denied { create } for pid=9373 comm="syz.2.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 100.397328][ T40] audit: type=1400 audit(1749636839.642:560): avc: denied { map } for pid=9371 comm="syz.4.994" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.428863][ T9372] ubi31: attaching mtd0 [ 100.433583][ T9372] ubi31: scanning is finished [ 100.435245][ T9372] ubi31: empty MTD device detected [ 100.489644][ T40] audit: type=1400 audit(1749636839.732:561): avc: denied { shutdown } for pid=9378 comm="syz.2.996" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.493880][ T9385] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 100.499510][ T40] audit: type=1400 audit(1749636839.742:562): avc: denied { ioctl } for pid=9378 comm="syz.2.996" path="socket:[24579]" dev="sockfs" ino=24579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.499979][ T8705] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.515438][ T9385] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.519095][ T9372] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 100.521551][ T9372] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 100.524149][ T9372] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 100.526343][ T9372] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 100.528895][ T9372] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 100.531055][ T9372] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 100.533732][ T9372] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1167792987 [ 100.537012][ T9372] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 100.540698][ T9387] ubi31: background thread "ubi_bgt31d" started, PID 9387 [ 100.631794][ T9393] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.999'. [ 100.892381][ T9422] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 100.957113][ T9425] sch_tbf: burst 0 is lower than device syz_tun mtu (1514) ! [ 101.228337][ T9449] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.231205][ T9449] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.235624][ T9449] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.238297][ T9449] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.505821][ T9462] max out of range [ 101.853341][ T9480] ucma_write: process 646 (syz.1.1014) changed security contexts after opening file descriptor, this is not allowed. [ 102.533520][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 102.533628][ T5297] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.694417][ T9496] tmpfs: Unknown parameter 'grpquota7yÆÎ’•ÁÎÃtÊòàÓ_block_hardlim8e' [ 102.821184][ T9510] xt_hashlimit: max too large, truncated to 1048576 [ 102.827632][ T9510] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.922786][ T9518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.266212][ T9539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.322536][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 103.322552][ T40] audit: type=1400 audit(1749636842.562:568): avc: denied { getopt } for pid=9542 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.323516][ T9543] tmpfs: Invalid gid '0x00000000ffffffff' [ 103.337739][ T9543] __nla_validate_parse: 3 callbacks suppressed [ 103.337749][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 103.943803][ T9578] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 103.946639][ T9577] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 103.965195][ T40] audit: type=1400 audit(1749636843.172:569): avc: denied { connect } for pid=9576 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.983632][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'. [ 104.041240][ T40] audit: type=1400 audit(1749636843.282:570): avc: denied { accept } for pid=9601 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.140416][ T9615] tipc: Enabling of bearer rejected, failed to enable media [ 104.181284][ T40] audit: type=1400 audit(1749636843.422:571): avc: denied { accept } for pid=9616 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 104.391429][ T9638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=9638 comm=syz.2.1064 [ 104.507776][ T9643] input: syz0 as /devices/virtual/input/input16 [ 104.539519][ T9648] x_tables: duplicate underflow at hook 1 [ 104.619448][ T5297] block nbd1: Receive control failed (result -32) [ 104.635140][ T9643] block nbd1: shutting down sockets [ 104.791012][ T9663] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 104.836169][ T40] audit: type=1400 audit(1749636844.082:572): avc: denied { write } for pid=9666 comm="syz.1.1074" path="socket:[23231]" dev="sockfs" ino=23231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.903802][ T9674] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1075'. [ 105.041726][ T9684] ntfs3(sr0): Primary boot signature is not NTFS. [ 105.045092][ T9684] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 105.168880][ T9695] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 105.249480][ T40] audit: type=1400 audit(1749636844.492:573): avc: denied { append } for pid=9701 comm="syz.1.1080" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.416117][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 107.733495][ T5999] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 107.885876][ T5999] usb 6-1: config 1 interface 0 has no altsetting 0 [ 107.889924][ T5999] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.892807][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.895790][ T5999] usb 6-1: Product: syz [ 107.897172][ T5999] usb 6-1: Manufacturer: syz [ 107.898737][ T5999] usb 6-1: SerialNumber: syz [ 108.288250][ T9758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9758 comm=syz.2.1095 [ 108.307467][ T5999] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 108.340479][ T9762] hsr0: entered promiscuous mode [ 108.343015][ T9762] macvtap1: entered promiscuous mode [ 108.346591][ T9762] macvtap1: entered allmulticast mode [ 108.348707][ T9762] hsr0: entered allmulticast mode [ 108.350939][ T9762] hsr_slave_0: entered allmulticast mode [ 108.353306][ T9762] hsr_slave_1: entered allmulticast mode [ 108.359253][ T9762] hsr0: left allmulticast mode [ 108.361296][ T9762] hsr_slave_0: left allmulticast mode [ 108.363644][ T9762] hsr_slave_1: left allmulticast mode [ 108.488320][ T9767] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1099'. [ 108.491208][ T9767] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1099'. [ 108.598764][ T9772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=140 sclass=netlink_route_socket pid=9772 comm=syz.2.1101 [ 108.657490][ T40] audit: type=1400 audit(1749636847.902:574): avc: denied { read write } for pid=9748 comm="syz.1.1093" name="lp0" dev="devtmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 108.665181][ T40] audit: type=1400 audit(1749636847.902:575): avc: denied { open } for pid=9748 comm="syz.1.1093" path="/dev/usb/lp0" dev="devtmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 109.411396][ T9777] overlayfs: failed to clone upperpath [ 109.743426][ T40] audit: type=1400 audit(1749636848.982:576): avc: denied { getopt } for pid=9795 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.822247][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 109.868678][ T9805] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 109.965474][ T9814] overlayfs: failed to clone upperpath [ 110.057301][ T9820] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1115'. [ 110.214847][ C3] usblp0: nonzero write bulk status received: -71 [ 110.218590][ T6174] usb 6-1: USB disconnect, device number 18 [ 110.225596][ T6174] usblp0: removed [ 110.403220][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 110.471997][ T9842] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 110.575503][ T9856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.763771][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.796160][ T9873] netlink: 'syz.3.1133': attribute type 4 has an invalid length. [ 110.830939][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1134'. [ 110.834057][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1134'. [ 110.837557][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1134'. [ 110.841754][ T40] audit: type=1400 audit(1749636850.082:577): avc: denied { ioctl } for pid=9875 comm="syz.3.1134" path="socket:[24413]" dev="sockfs" ino=24413 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.879614][ T9876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9876 comm=syz.3.1134 [ 110.883697][ T9877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9877 comm=syz.3.1134 [ 110.889767][ T9876] delete_channel: no stack [ 110.891734][ T9876] delete_channel: no stack [ 111.001276][ T40] audit: type=1400 audit(1749636850.242:578): avc: denied { setopt } for pid=9886 comm="syz.3.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.039456][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 111.043175][ T9892] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 111.046328][ T9892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.054169][ T5999] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 111.084922][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 111.183476][ T5999] usb 6-1: device descriptor read/64, error -71 [ 111.423506][ T5999] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 111.553531][ T5999] usb 6-1: device descriptor read/64, error -71 [ 111.663775][ T5999] usb usb6-port1: attempt power cycle [ 111.774137][ T9931] overlayfs: failed to clone upperpath [ 111.777744][ T9931] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.927740][ T9943] openvswitch: netlink: EtherType 0 is less than min 600 [ 112.001065][ T40] audit: type=1400 audit(1749636851.242:579): avc: denied { read } for pid=9944 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.007396][ T5999] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 112.023905][ T5999] usb 6-1: device descriptor read/8, error -71 [ 112.263660][ T5999] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 112.284733][ T5999] usb 6-1: device descriptor read/8, error -71 [ 112.395326][ T5999] usb usb6-port1: unable to enumerate USB device [ 112.692476][ T9965] futex_wake_op: syz.4.1168 tries to shift op by 32; fix this program [ 113.162368][ T9988] batadv_slave_1: entered promiscuous mode [ 113.171412][ T9987] batadv_slave_1: left promiscuous mode [ 113.439449][T10008] batadv_slave_1: entered promiscuous mode [ 113.487498][T10007] batadv_slave_1: left promiscuous mode [ 113.622369][ T40] audit: type=1400 audit(1749636852.862:580): avc: denied { connect } for pid=10021 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.630352][ T40] audit: type=1400 audit(1749636852.862:581): avc: denied { getopt } for pid=10021 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.709296][ T40] audit: type=1400 audit(1749636852.952:582): avc: denied { mount } for pid=10030 comm="syz.4.1188" name="/" dev="rpc_pipefs" ino=24517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 113.716753][ T40] audit: type=1400 audit(1749636852.952:583): avc: denied { mounton } for pid=10030 comm="syz.4.1188" path="/55/file0" dev="rpc_pipefs" ino=24517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 113.720013][T10033] __nla_validate_parse: 6 callbacks suppressed [ 113.720024][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 113.721619][T10031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10031 comm=syz.4.1188 [ 113.735841][ T40] audit: type=1400 audit(1749636852.982:584): avc: denied { unmount } for pid=8263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 113.739121][T10033] vlan2: entered promiscuous mode [ 113.744370][T10033] veth1_virt_wifi: entered promiscuous mode [ 113.830215][T10041] xt_hashlimit: size too large, truncated to 1048576 [ 113.841497][T10043] binder: 10042:10043 ioctl c018620c 2000000000c0 returned -22 [ 113.885272][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 113.944310][T10039] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 114.105664][T10065] xt_hashlimit: size too large, truncated to 1048576 [ 114.109885][ T40] audit: type=1400 audit(1749636853.352:585): avc: denied { shutdown } for pid=10059 comm="syz.4.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.124607][ T40] audit: type=1400 audit(1749636853.372:586): avc: denied { create } for pid=10059 comm="syz.4.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.130810][ T40] audit: type=1400 audit(1749636853.372:587): avc: denied { ioctl } for pid=10059 comm="syz.4.1199" path="socket:[23473]" dev="sockfs" ino=23473 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.293651][ T9] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 114.402410][T10092] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 114.443485][T10098] netlink: 'syz.3.1211': attribute type 4 has an invalid length. [ 114.446109][T10098] netlink: 'syz.3.1211': attribute type 4 has an invalid length. [ 114.454775][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.458473][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 114.462478][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 114.465519][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.470004][ T9] usb 6-1: config 0 descriptor?? [ 114.476614][T10055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.501723][T10104] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 114.506119][T10104] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.511797][T10111] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 114.512422][ T40] audit: type=1400 audit(1749636853.752:588): avc: denied { watch watch_reads } for pid=10108 comm="syz.4.1216" path="pipe:[17062]" dev="pipefs" ino=17062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 114.565322][T10120] openvswitch: netlink: Key type 30 is not supported [ 114.569489][ T40] audit: type=1400 audit(1749636853.812:589): avc: denied { execute } for pid=10118 comm="syz.3.1219" path="/bus" dev="ramfs" ino=24576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 114.623433][ T40] audit: type=1400 audit(1749636853.862:590): avc: denied { read } for pid=10124 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.673182][T10130] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1224'. [ 114.720222][T10138] fuse: blksize only supported for fuseblk [ 114.722767][T10138] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 114.724188][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 114.727681][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 114.732364][ T9] usb 6-1: USB disconnect, device number 23 [ 114.749832][T10138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.778556][ T40] audit: type=1400 audit(1749636854.022:591): avc: denied { append } for pid=10143 comm="syz.4.1229" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.788992][T10138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.791412][T10138] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 114.791809][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'. [ 114.796207][T10138] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 114.839627][T10151] bond1: (slave dummy0): making interface the new active one [ 114.842292][T10151] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 114.925651][T10161] overlayfs: failed to clone upperpath [ 114.971117][T10164] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 115.170468][T10192] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.221629][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 115.259498][T10192] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.319722][T10208] input: syz0 as /devices/virtual/input/input17 [ 115.326652][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 115.329535][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 115.340311][T10196] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.343438][T10196] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.360023][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 115.363801][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 115.382371][T10192] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.385912][T10192] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.431586][ T5297] block nbd1: Receive control failed (result -32) [ 115.440871][ T6030] block nbd1: shutting down sockets [ 115.456045][T10192] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.459139][T10192] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.607924][T10192] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.610759][T10192] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.629883][T10192] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.633523][T10192] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.641276][T10192] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.644440][T10192] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.645812][T10226] mmap: syz.3.1245 (10226): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 115.656001][T10192] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.658824][T10192] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.835751][T10238] netlink: 'syz.1.1251': attribute type 13 has an invalid length. [ 115.838295][T10238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1251'. [ 116.012334][T10244] input: syz0 as /devices/virtual/input/input18 [ 116.146826][ T5297] block nbd4: Receive control failed (result -32) [ 116.152033][T10244] block nbd4: shutting down sockets [ 116.233049][T10263] 9pnet_virtio: no channels available for device syz [ 116.396027][T10291] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 116.398099][T10291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.401091][T10291] vhci_hcd vhci_hcd.0: Device attached [ 116.406857][T10293] vhci_hcd: connection closed [ 116.407001][ T8718] vhci_hcd: stop threads [ 116.410336][ T8718] vhci_hcd: release socket [ 116.411877][ T8718] vhci_hcd: disconnect device [ 116.745115][T10318] 9pnet: Unknown protocol version 9p2000.u Æíyf T}¿‹Izð [ 116.980284][T10331] bond2: entered promiscuous mode [ 116.982399][T10331] bond2: entered allmulticast mode [ 116.984981][T10331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.992855][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.195976][T10339] input: syz0 as /devices/virtual/input/input19 [ 117.306780][ T5297] block nbd4: Receive control failed (result -32) [ 117.313728][ T5940] block nbd4: shutting down sockets [ 117.326223][T10342] xt_l2tp: invalid flags combination: c [ 117.458726][T10346] overlayfs: failed to resolve './file0/file0': -2 [ 117.723647][ T838] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 117.749010][T10367] 9pnet_virtio: no channels available for device syz [ 117.874746][ T838] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 117.877374][ T838] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 117.879978][ T838] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 117.884594][ T838] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 117.888008][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 117.891444][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 117.897366][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 117.907232][ T838] usb 9-1: string descriptor 0 read error: -22 [ 117.910200][ T838] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 117.914886][ T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.920423][ T838] usb 9-1: config 0 descriptor?? [ 117.927318][T10354] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.933230][ T838] hub 9-1:0.0: bad descriptor, ignoring hub [ 117.936111][ T838] hub 9-1:0.0: probe with driver hub failed with error -5 [ 117.942080][ T838] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input20 [ 118.195089][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.199143][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.220053][ T6174] usb 9-1: USB disconnect, device number 8 [ 118.353451][T10426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10426 comm=syz.1.1308 [ 118.358850][T10426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10426 comm=syz.1.1308 [ 118.362818][T10426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=10426 comm=syz.1.1308 [ 118.435356][T10428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10428 comm=syz.1.1308 [ 118.481115][T10439] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 118.484251][T10439] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 119.324307][ T1143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.332701][ T1143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.353525][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.384021][T10492] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 119.408118][T10500] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 119.538118][T10510] __nla_validate_parse: 7 callbacks suppressed [ 119.538130][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 119.586111][T10512] SELinux: Context Ü is not valid (left unmapped). [ 119.590716][T10512] xt_l2tp: v2 doesn't support IP mode [ 119.817904][T10523] program syz.4.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.818149][T10524] program syz.4.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.830895][T10527] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 119.863863][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.880655][T10530] bridge0: port 3(syz_tun) entered blocking state [ 119.882922][T10530] bridge0: port 3(syz_tun) entered disabled state [ 119.886858][T10530] syz_tun: entered allmulticast mode [ 119.889930][T10530] syz_tun: entered promiscuous mode [ 119.891970][T10530] bridge0: port 3(syz_tun) entered blocking state [ 119.894150][T10530] bridge0: port 3(syz_tun) entered listening state [ 119.953897][ T5999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.271705][T10532] tipc: Can't bind to reserved service type 2 [ 121.197497][T10539] syz.1.1341: vmalloc error: size 3335753728, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.202344][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.1.1341 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 121.202371][T10539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.202381][T10539] Call Trace: [ 121.202386][T10539] [ 121.202391][T10539] dump_stack_lvl+0x16c/0x1f0 [ 121.202436][T10539] warn_alloc+0x248/0x3a0 [ 121.202462][T10539] ? __pfx_warn_alloc+0x10/0x10 [ 121.202481][T10539] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.202498][T10539] ? stack_depot_save_flags+0x3e0/0xa40 [ 121.202535][T10539] ? kasan_save_stack+0x42/0x60 [ 121.202556][T10539] ? kasan_save_stack+0x33/0x60 [ 121.202575][T10539] ? kasan_save_track+0x14/0x30 [ 121.202596][T10539] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 121.202613][T10539] ? __vb2_queue_alloc+0x8c9/0x1280 [ 121.202628][T10539] ? vb2_core_create_bufs+0x559/0xab0 [ 121.202648][T10539] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 121.202668][T10539] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 121.202699][T10539] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 121.202726][T10539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.202757][T10539] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 121.202777][T10539] vmalloc_user_noprof+0x9e/0xe0 [ 121.202796][T10539] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 121.202816][T10539] vb2_vmalloc_alloc+0x135/0x3f0 [ 121.202836][T10539] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 121.202854][T10539] __vb2_queue_alloc+0x8c9/0x1280 [ 121.202887][T10539] vb2_core_create_bufs+0x559/0xab0 [ 121.202910][T10539] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 121.202931][T10539] ? __pfx___mutex_trylock_common+0x10/0x10 [ 121.202962][T10539] ? __pfx___might_resched+0x10/0x10 [ 121.202988][T10539] ? rcu_is_watching+0x12/0xc0 [ 121.203015][T10539] vb2_create_bufs+0x5e8/0x840 [ 121.203047][T10539] ? __pfx_vb2_create_bufs+0x10/0x10 [ 121.203076][T10539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.203097][T10539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.203122][T10539] v4l_create_bufs+0x159/0x270 [ 121.203147][T10539] __video_do_ioctl+0xb3d/0xfc0 [ 121.203177][T10539] ? __might_fault+0xe3/0x190 [ 121.203199][T10539] ? __pfx___video_do_ioctl+0x10/0x10 [ 121.203236][T10539] video_usercopy+0x4cd/0x1720 [ 121.203268][T10539] ? __pfx___video_do_ioctl+0x10/0x10 [ 121.203292][T10539] ? selinux_kernel_read_file+0x70/0x130 [ 121.203320][T10539] ? __pfx_video_usercopy+0x10/0x10 [ 121.203385][T10539] v4l2_ioctl+0x1ba/0x250 [ 121.203411][T10539] ? __pfx_v4l2_ioctl+0x10/0x10 [ 121.203435][T10539] __x64_sys_ioctl+0x18e/0x210 [ 121.203458][T10539] do_syscall_64+0xcd/0x4c0 [ 121.203488][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.203507][T10539] RIP: 0033:0x7f820138e929 [ 121.203523][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.203540][T10539] RSP: 002b:00007f82021ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.203559][T10539] RAX: ffffffffffffffda RBX: 00007f82015b5fa0 RCX: 00007f820138e929 [ 121.203572][T10539] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 121.203583][T10539] RBP: 00007f8201410b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.203595][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.203605][T10539] R13: 0000000000000000 R14: 00007f82015b5fa0 R15: 00007ffd351991f8 [ 121.203633][T10539] [ 121.330445][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.333761][T10539] Mem-Info: [ 121.334870][T10539] active_anon:20976 inactive_anon:48 isolated_anon:0 [ 121.334870][T10539] active_file:5070 inactive_file:51487 isolated_file:0 [ 121.334870][T10539] unevictable:1768 dirty:204 writeback:0 [ 121.334870][T10539] slab_reclaimable:11310 slab_unreclaimable:75655 [ 121.334870][T10539] mapped:25250 shmem:5311 pagetables:1636 [ 121.334870][T10539] sec_pagetables:309 bounce:0 [ 121.334870][T10539] kernel_misc_reclaimable:0 [ 121.334870][T10539] free:424474 free_pcp:23916 free_cma:0 [ 121.347830][T10539] Node 0 active_anon:77604kB inactive_anon:192kB active_file:13296kB inactive_file:205752kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100992kB dirty:812kB writeback:0kB shmem:11556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13616kB pagetables:6200kB sec_pagetables:1236kB all_unreclaimable? yes Balloon:0kB [ 121.357765][T10539] Node 1 active_anon:6300kB inactive_anon:0kB active_file:6984kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:9688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:176kB pagetables:344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.367406][T10539] Node 0 DMA free:13556kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:384kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:344kB local_pcp:116kB free_cma:0kB [ 121.376221][T10539] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 121.377905][T10539] Node 0 DMA32 free:154092kB boost:61440kB min:88956kB low:95832kB high:102708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77604kB inactive_anon:192kB active_file:12912kB inactive_file:205752kB unevictable:3536kB writepending:812kB present:2080628kB managed:1264744kB mlocked:0kB bounce:0kB free_pcp:24212kB local_pcp:3492kB free_cma:0kB [ 121.386942][T10539] lowmem_reserve[]: 0 0 0 0 0 [ 121.388325][T10539] Node 1 Normal free:1530248kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6300kB inactive_anon:0kB active_file:6984kB inactive_file:196kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:71136kB local_pcp:0kB free_cma:0kB [ 121.397388][T10539] lowmem_reserve[]: 0 0 0 0 0 [ 121.398782][T10539] Node 0 DMA: 22*4kB (UM) 24*8kB (UM) 19*16kB (UM) 20*32kB (UM) 15*64kB (UME) 11*128kB (UME) 5*256kB (ME) 5*512kB (UME) 6*1024kB (UME) 0*2048kB 0*4096kB = 13576kB [ 121.403302][T10539] Node 0 DMA32: 1217*4kB (UME) 705*8kB (UME) 301*16kB (UME) 430*32kB (UME) 120*64kB (UME) 108*128kB (UME) 90*256kB (UME) 69*512kB (UME) 16*1024kB (UME) 6*2048kB (UM) 4*4096kB (UM) = 154012kB [ 121.408557][T10539] Node 1 Normal: 114*4kB (UME) 108*8kB (UME) 68*16kB (UME) 56*32kB (UME) 74*64kB (UME) 76*128kB (UME) 53*256kB (UME) 32*512kB (UME) 19*1024kB (UME) 6*2048kB (UME) 354*4096kB (UM) = 1530344kB [ 121.413900][T10539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.416514][T10539] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 121.419096][T10539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.421766][T10539] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 121.424527][T10539] 61864 total pagecache pages [ 121.425875][T10539] 0 pages in swap cache [ 121.427055][T10539] Free swap = 124996kB [ 121.428235][T10539] Total swap = 124996kB [ 121.429423][T10539] 1048443 pages RAM [ 121.430526][T10539] 0 pages HighMem/MovableOnly [ 121.431983][T10539] 282930 pages reserved [ 121.433228][T10539] 0 pages cma reserved [ 121.790962][T10555] input: syz0 as /devices/virtual/input/input21 [ 122.866323][ T5297] block nbd1: Receive control failed (result -32) [ 122.912863][T10557] block nbd1: shutting down sockets [ 122.959091][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 123.000555][T10574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 123.027318][T10574] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 123.031442][T10574] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1351'. [ 123.058509][T10579] netlink: 'syz.3.1352': attribute type 10 has an invalid length. [ 123.102658][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1356'. [ 123.154716][T10594] netlink: 'syz.1.1359': attribute type 1 has an invalid length. [ 123.223759][T10603] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 2, id = 0 [ 123.341502][T10610] fuse: Bad value for 'user_id' [ 123.343958][T10610] fuse: Bad value for 'user_id' [ 123.373468][ T5980] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 123.543764][ T5980] usb 9-1: Invalid ep0 maxpacket: 16 [ 123.643525][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.673584][ T5980] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 123.690963][T10622] fuse: Unknown parameter 'nÃYnì/}•·áí¹Üò½Êc¬ê¿Â§¿µn†|ž­0x00000000000000051844674407370955161500000000000000000000' [ 123.817559][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 123.817571][ T40] audit: type=1400 audit(1749636863.062:602): avc: denied { mount } for pid=10631 comm="syz.2.1370" name="/" dev="pstore" ino=4838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 123.826793][ T5980] usb 9-1: Invalid ep0 maxpacket: 16 [ 123.828789][ T5980] usb usb9-port1: attempt power cycle [ 123.849824][T10634] 9pnet_fd: p9_fd_create_unix (10634): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.960812][T10645] netlink: 'syz.2.1375': attribute type 39 has an invalid length. [ 123.992535][T10645] bridge0: port 3(syz_tun) entered disabled state [ 124.001827][T10645] syz_tun (unregistering): left allmulticast mode [ 124.004203][T10645] syz_tun (unregistering): left promiscuous mode [ 124.006432][T10645] bridge0: port 3(syz_tun) entered disabled state [ 124.148282][ T40] audit: type=1400 audit(1749636863.392:603): avc: denied { write } for pid=10646 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.173578][ T5980] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 124.194015][ T5980] usb 9-1: Invalid ep0 maxpacket: 16 [ 124.213899][ T8716] bond0: (slave lo): link status definitely up, 0 Mbps full duplex [ 124.217722][ T8716] bond0: active interface up! [ 124.320276][ T40] audit: type=1400 audit(1749636863.562:604): avc: denied { read } for pid=10652 comm="syz.1.1376" dev="sockfs" ino=28391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.330954][ T40] audit: type=1400 audit(1749636863.562:605): avc: denied { mounton } for pid=10652 comm="syz.1.1376" path="/proc/847/cgroup" dev="proc" ino=28395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 124.332661][ T5980] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 124.346730][ T40] audit: type=1400 audit(1749636863.562:606): avc: denied { lock } for pid=10652 comm="syz.1.1376" path="socket:[28391]" dev="sockfs" ino=28391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.355457][ T5980] usb 9-1: Invalid ep0 maxpacket: 16 [ 124.357372][ T5980] usb usb9-port1: unable to enumerate USB device [ 124.364774][ T40] audit: type=1400 audit(1749636863.612:607): avc: denied { associate } for pid=10654 comm="syz.3.1379" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 124.382949][T10660] netlink: 'syz.1.1380': attribute type 2 has an invalid length. [ 124.387221][T10660] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.1380'. [ 124.526483][T10671] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1384'. [ 125.015948][ T40] audit: type=1326 audit(1749636864.262:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.2.1378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4838e929 code=0x7fc00000 [ 125.130234][ T40] audit: type=1800 audit(1749636864.372:609): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1389" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 125.318260][ T40] audit: type=1400 audit(1749636864.562:610): avc: denied { nlmsg_write } for pid=10699 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 125.325031][ T40] audit: type=1400 audit(1749636864.562:611): avc: denied { audit_write } for pid=10699 comm="syz.2.1392" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 125.492480][T10723] overlay: Bad value for 'nfs_export' [ 125.497702][T10723] overlayfs: failed to clone upperpath [ 125.594173][T10741] netlink: 'syz.1.1402': attribute type 83 has an invalid length. [ 125.598015][T10741] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 125.651029][T10746] tmpfs: Bad value for 'mpol' [ 125.773191][T10756] tun0: tun_chr_ioctl cmd 1074025676 [ 125.774971][T10756] tun0: owner set to 0 [ 125.792626][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1408'. [ 125.795616][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1408'. [ 126.165025][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 126.186079][T10773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10773 comm=syz.4.1414 [ 126.191427][T10775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 126.198739][T10778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.388352][T10787] netlink: 'syz.3.1417': attribute type 11 has an invalid length. [ 126.401511][T10786] delete_channel: no stack [ 126.669030][T10831] lo: entered promiscuous mode [ 126.721913][T10840] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 126.729819][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 126.732726][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1435'. [ 126.776997][T10848] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1437'. [ 127.003132][T10867] netlink: 'syz.2.1443': attribute type 30 has an invalid length. [ 127.005692][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 127.014409][T10867] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.487033][T10891] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1179648) [ 127.711930][T10901] netlink: 'syz.3.1453': attribute type 10 has an invalid length. [ 127.719877][T10901] batman_adv: batadv0: Adding interface: team0 [ 127.721894][T10901] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.731325][T10901] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 127.736171][T10901] netlink: 'syz.3.1453': attribute type 10 has an invalid length. [ 127.738608][T10901] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1453'. [ 127.741451][T10901] team0: entered promiscuous mode [ 127.744824][T10901] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.747297][T10901] batman_adv: batadv0: Interface activated: team0 [ 127.749322][T10901] batman_adv: batadv0: Interface deactivated: team0 [ 127.751562][T10901] batman_adv: batadv0: Removing interface: team0 [ 127.756989][T10901] bridge0: port 1(team0) entered blocking state [ 127.759034][T10901] bridge0: port 1(team0) entered disabled state [ 127.761128][T10901] team0: entered allmulticast mode [ 127.762862][T10901] vlan0: entered allmulticast mode [ 127.764583][T10901] veth0_vlan: entered allmulticast mode [ 127.768700][T10901] bridge0: port 1(team0) entered blocking state [ 127.770848][T10901] bridge0: port 1(team0) entered forwarding state [ 127.871441][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1456'. [ 127.876159][T10913] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.962030][T10916] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 128.015909][T10922] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 128.456417][T10937] openvswitch: netlink: Missing key (keys=40, expected=100) [ 128.610478][T10947] overlayfs: failed to clone upperpath [ 129.241994][T10988] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.290922][T10990] SET target dimension over the limit! [ 129.329812][T10988] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.374727][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.381059][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.422283][T10988] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.426148][T10988] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.428979][T10988] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.431741][T10988] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.734882][T11011] No source specified [ 129.969208][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 129.969220][ T40] audit: type=1400 audit(1749636869.212:620): avc: denied { name_connect } for pid=11012 comm="syz.2.1488" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 130.115165][T11028] vlan2: entered promiscuous mode [ 130.116913][T11028] hsr_slave_1: entered promiscuous mode [ 130.118775][T11028] vlan2: entered allmulticast mode [ 130.120371][T11028] hsr_slave_1: entered allmulticast mode [ 130.161756][ T40] audit: type=1400 audit(1749636869.402:621): avc: denied { getopt } for pid=11032 comm="syz.3.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.328971][T11052] netlink: 'syz.4.1500': attribute type 1 has an invalid length. [ 130.342430][T11052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.354434][T11052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.357533][T11052] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 130.361291][T11052] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 130.375406][T11055] netlink: 'syz.3.1501': attribute type 3 has an invalid length. [ 130.378474][T11055] netlink: 'syz.3.1501': attribute type 1 has an invalid length. [ 130.383139][T11055] kAFS: unparsable volume name [ 130.401296][ T40] audit: type=1326 audit(1749636869.642:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.4.1500" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52d378e929 code=0x0 [ 130.410710][ T40] audit: type=1400 audit(1749636869.652:623): avc: denied { setattr } for pid=11059 comm="syz.3.1502" name="SCTP" dev="sockfs" ino=31772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.410727][T11060] sctp: [Deprecated]: syz.3.1502 (pid 11060) Use of int in maxseg socket option. [ 130.410727][T11060] Use struct sctp_assoc_value instead [ 130.506389][T11052] bond1: (slave dummy0): making interface the new active one [ 130.510346][T11052] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 130.559202][T11066] cgroup: Unknown subsys name 'cpuset' [ 130.598824][ T40] audit: type=1326 audit(1749636869.842:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.3.1505" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd40bd8e929 code=0x0 [ 130.704159][T11072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11072 comm=syz.2.1506 [ 131.198889][ T40] audit: type=1400 audit(1749636870.442:625): avc: denied { module_load } for pid=11076 comm="syz.4.1507" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 131.199641][T11077] kernel read not supported for file /policy (pid: 11077 comm: syz.4.1507) [ 131.342595][ T40] audit: type=1326 audit(1749636870.582:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.4.1510" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52d378e929 code=0x0 [ 131.508969][T11093] __nla_validate_parse: 4 callbacks suppressed [ 131.508987][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1512'. [ 131.617585][T11099] openvswitch: netlink: Unknown key attributes 2 [ 131.620542][T11099] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.628212][T11099] set match dimension is over the limit! [ 132.206445][T11122] program syz.4.1524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.525492][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.526095][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.678897][T11126] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1525'. [ 132.749904][T11132] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1527'. [ 132.916539][T11147] netlink: 'syz.2.1533': attribute type 4 has an invalid length. [ 133.083302][T11159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1537'. [ 133.089751][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 141.413983][ T1425] ================================================================== [ 141.417182][ T1425] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 141.419989][ T1425] Read of size 8 at addr ffff888057a9e020 by task aoe_tx0/1425 [ 141.423281][ T1425] [ 141.424618][ T1425] CPU: 3 UID: 0 PID: 1425 Comm: aoe_tx0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 141.424634][ T1425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.424641][ T1425] Call Trace: [ 141.424645][ T1425] [ 141.424650][ T1425] dump_stack_lvl+0x116/0x1f0 [ 141.424678][ T1425] print_report+0xcd/0x680 [ 141.424694][ T1425] ? __virt_addr_valid+0x81/0x610 [ 141.424705][ T1425] ? __phys_addr+0xe8/0x180 [ 141.424717][ T1425] ? handle_tx+0x5a5/0x630 [ 141.424734][ T1425] kasan_report+0xe0/0x110 [ 141.424749][ T1425] ? handle_tx+0x5a5/0x630 [ 141.424766][ T1425] handle_tx+0x5a5/0x630 [ 141.424784][ T1425] dev_hard_start_xmit+0x94/0x740 [ 141.424800][ T1425] __dev_queue_xmit+0x7eb/0x43e0 [ 141.424815][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.424832][ T1425] ? finish_task_switch.isra.0+0x221/0xc10 [ 141.424847][ T1425] ? rcu_is_watching+0x12/0xc0 [ 141.424861][ T1425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 141.424876][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 141.424893][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 141.424911][ T1425] ? do_raw_spin_lock+0x12c/0x2b0 [ 141.424924][ T1425] ? rcu_is_watching+0x12/0xc0 [ 141.424938][ T1425] tx+0xcc/0x190 [ 141.424948][ T1425] ? __pfx_tx+0x10/0x10 [ 141.424957][ T1425] kthread+0x1e1/0x3e0 [ 141.424972][ T1425] ? find_held_lock+0x2b/0x80 [ 141.424985][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.425000][ T1425] ? __pfx_default_wake_function+0x10/0x10 [ 141.425014][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.425029][ T1425] ? __kthread_parkme+0x19e/0x250 [ 141.425044][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.425059][ T1425] kthread+0x3c5/0x780 [ 141.425068][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.425078][ T1425] ? rcu_is_watching+0x12/0xc0 [ 141.425090][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.425104][ T1425] ret_from_fork+0x5d4/0x6f0 [ 141.425119][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.425127][ T1425] ret_from_fork_asm+0x1a/0x30 [ 141.425142][ T1425] [ 141.425146][ T1425] [ 141.492447][ T1425] Allocated by task 9667: [ 141.493810][ T1425] kasan_save_stack+0x33/0x60 [ 141.495287][ T1425] kasan_save_track+0x14/0x30 [ 141.496760][ T1425] __kasan_kmalloc+0xaa/0xb0 [ 141.498216][ T1425] alloc_tty_struct+0x96/0x8c0 [ 141.499793][ T1425] tty_init_dev.part.0+0x1e/0x500 [ 141.501504][ T1425] tty_open+0xa50/0xf90 [ 141.502916][ T1425] chrdev_open+0x231/0x6a0 [ 141.504415][ T1425] do_dentry_open+0x741/0x1c10 [ 141.506100][ T1425] vfs_open+0x82/0x3f0 [ 141.507468][ T1425] path_openat+0x1de4/0x2cb0 [ 141.508952][ T1425] do_filp_open+0x20b/0x470 [ 141.510507][ T1425] do_sys_openat2+0x11b/0x1d0 [ 141.512108][ T1425] __x64_sys_openat+0x174/0x210 [ 141.513617][ T1425] do_syscall_64+0xcd/0x4c0 [ 141.515044][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.516928][ T1425] [ 141.517774][ T1425] Freed by task 9: [ 141.518993][ T1425] kasan_save_stack+0x33/0x60 [ 141.520628][ T1425] kasan_save_track+0x14/0x30 [ 141.522327][ T1425] kasan_save_free_info+0x3b/0x60 [ 141.523927][ T1425] __kasan_slab_free+0x51/0x70 [ 141.525483][ T1425] kfree+0x2b4/0x4d0 [ 141.526702][ T1425] process_one_work+0x9cf/0x1b70 [ 141.528405][ T1425] worker_thread+0x6c8/0xf10 [ 141.529986][ T1425] kthread+0x3c5/0x780 [ 141.531462][ T1425] ret_from_fork+0x5d4/0x6f0 [ 141.532973][ T1425] ret_from_fork_asm+0x1a/0x30 [ 141.534664][ T1425] [ 141.535426][ T1425] Last potentially related work creation: [ 141.537229][ T1425] kasan_save_stack+0x33/0x60 [ 141.538889][ T1425] kasan_record_aux_stack+0xa7/0xc0 [ 141.540588][ T1425] insert_work+0x36/0x230 [ 141.541964][ T1425] __queue_work+0x97e/0x10f0 [ 141.543497][ T1425] queue_work_on+0x1a4/0x1f0 [ 141.544963][ T1425] release_tty+0x4de/0x5d0 [ 141.546106][ T5947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.546368][ T1425] tty_release_struct+0xb7/0xe0 [ 141.550161][ T1425] tty_release+0xe2d/0x1430 [ 141.550599][ T5947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.551624][ T1425] __fput+0x3ff/0xb70 [ 141.551636][ T1425] task_work_run+0x14d/0x240 [ 141.555975][ T5947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.557017][ T1425] do_exit+0x864/0x2bd0 [ 141.557034][ T1425] do_group_exit+0xd3/0x2a0 [ 141.557048][ T1425] get_signal+0x2673/0x26d0 [ 141.557059][ T1425] arch_do_signal_or_restart+0x8f/0x7d0 [ 141.560561][ T5947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.561095][ T1425] exit_to_user_mode_loop+0x84/0x110 [ 141.563155][ T5947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.564071][ T1425] do_syscall_64+0x3f6/0x4c0 [ 141.564092][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.564103][ T1425] [ 141.564106][ T1425] The buggy address belongs to the object at ffff888057a9e000 [ 141.564106][ T1425] which belongs to the cache kmalloc-cg-2k of size 2048 [ 141.564115][ T1425] The buggy address is located 32 bytes inside of [ 141.564115][ T1425] freed 2048-byte region [ffff888057a9e000, ffff888057a9e800) [ 141.564126][ T1425] [ 141.564129][ T1425] The buggy address belongs to the physical page: [ 141.564135][ T1425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057a99000 pfn:0x57a98 [ 141.564145][ T1425] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 141.564154][ T1425] memcg:ffff888054b32681 [ 141.594208][ T1425] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 141.596797][ T1425] page_type: f5(slab) [ 141.598070][ T1425] raw: 00fff00000000240 ffff88801b84c140 ffffea0001591210 ffffea0001227210 [ 141.600695][ T1425] raw: ffff888057a99000 0000000000080006 00000000f5000000 ffff888054b32681 [ 141.603337][ T1425] head: 00fff00000000240 ffff88801b84c140 ffffea0001591210 ffffea0001227210 [ 141.606008][ T1425] head: ffff888057a99000 0000000000080006 00000000f5000000 ffff888054b32681 [ 141.608656][ T1425] head: 00fff00000000003 ffffea00015ea601 00000000ffffffff 00000000ffffffff [ 141.611353][ T1425] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 141.614017][ T1425] page dumped because: kasan: bad access detected [ 141.615993][ T1425] page_owner tracks the page as allocated [ 141.617759][ T1425] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9635, tgid 9634 (syz.2.1064), ts 104339410222, free_ts 104067596549 [ 141.624194][ T1425] post_alloc_hook+0x1c0/0x230 [ 141.625679][ T1425] get_page_from_freelist+0x1321/0x3890 [ 141.627374][ T1425] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 141.629182][ T1425] alloc_pages_mpol+0x1fb/0x550 [ 141.630680][ T1425] new_slab+0x23b/0x330 [ 141.631987][ T1425] ___slab_alloc+0xd9c/0x1940 [ 141.633454][ T1425] __slab_alloc.constprop.0+0x56/0xb0 [ 141.635129][ T1425] __kmalloc_noprof+0x2f2/0x510 [ 141.636649][ T1425] __register_sysctl_table+0xb3/0x1900 [ 141.638351][ T1425] __devinet_sysctl_register+0x1b9/0x360 [ 141.640100][ T1425] devinet_sysctl_register+0x17b/0x200 [ 141.641805][ T1425] inetdev_init+0x2b8/0x5a0 [ 141.643230][ T1425] inetdev_event+0xc5f/0x18a0 [ 141.644681][ T1425] notifier_call_chain+0xbc/0x410 [ 141.646294][ T1425] call_netdevice_notifiers_info+0xbe/0x140 [ 141.648125][ T1425] register_netdevice+0x182e/0x2270 [ 141.649744][ T1425] page last free pid 9605 tgid 9604 stack trace: [ 141.651723][ T1425] __free_frozen_pages+0x7fe/0x1180 [ 141.653341][ T1425] __put_partials+0x16d/0x1c0 [ 141.654821][ T1425] qlist_free_all+0x4d/0x120 [ 141.656264][ T1425] kasan_quarantine_reduce+0x195/0x1e0 [ 141.658002][ T1425] __kasan_slab_alloc+0x69/0x90 [ 141.659525][ T1425] __kmalloc_noprof+0x1d4/0x510 [ 141.661073][ T1425] tomoyo_realpath_from_path+0xc2/0x6e0 [ 141.662808][ T1425] tomoyo_path_number_perm+0x245/0x580 [ 141.664502][ T1425] security_file_ioctl+0x9b/0x240 [ 141.666085][ T1425] __x64_sys_ioctl+0xb7/0x210 [ 141.667554][ T1425] do_syscall_64+0xcd/0x4c0 [ 141.668993][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.670869][ T1425] [ 141.671630][ T1425] Memory state around the buggy address: [ 141.673328][ T1425] ffff888057a9df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.675791][ T1425] ffff888057a9df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.678272][ T1425] >ffff888057a9e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.680768][ T1425] ^ [ 141.682386][ T1425] ffff888057a9e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.684849][ T1425] ffff888057a9e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.687313][ T1425] ================================================================== [ 141.689831][ T1425] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.692065][ T1425] CPU: 3 UID: 0 PID: 1425 Comm: aoe_tx0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 141.695629][ T1425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.698913][ T1425] Call Trace: [ 141.699926][ T1425] [ 141.700862][ T1425] dump_stack_lvl+0x3d/0x1f0 [ 141.702328][ T1425] panic+0x71c/0x800 [ 141.703564][ T1425] ? __pfx_panic+0x10/0x10 [ 141.704962][ T1425] ? irqentry_exit+0x3b/0x90 [ 141.706420][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.708035][ T1425] ? handle_tx+0x5a5/0x630 [ 141.709437][ T1425] ? check_panic_on_warn+0x1f/0xb0 [ 141.711078][ T1425] ? handle_tx+0x5a5/0x630 [ 141.712478][ T1425] check_panic_on_warn+0xab/0xb0 [ 141.714041][ T1425] end_report+0x107/0x170 [ 141.715395][ T1425] kasan_report+0xee/0x110 [ 141.716835][ T1425] ? handle_tx+0x5a5/0x630 [ 141.718243][ T1425] handle_tx+0x5a5/0x630 [ 141.719578][ T1425] dev_hard_start_xmit+0x94/0x740 [ 141.721178][ T1425] __dev_queue_xmit+0x7eb/0x43e0 [ 141.722734][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.724356][ T1425] ? finish_task_switch.isra.0+0x221/0xc10 [ 141.726174][ T1425] ? rcu_is_watching+0x12/0xc0 [ 141.727668][ T1425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 141.729338][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 141.730909][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 141.732463][ T1425] ? do_raw_spin_lock+0x12c/0x2b0 [ 141.734178][ T1425] ? rcu_is_watching+0x12/0xc0 [ 141.735699][ T1425] tx+0xcc/0x190 [ 141.736857][ T1425] ? __pfx_tx+0x10/0x10 [ 141.738188][ T1425] kthread+0x1e1/0x3e0 [ 141.739498][ T1425] ? find_held_lock+0x2b/0x80 [ 141.741004][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.742487][ T1425] ? __pfx_default_wake_function+0x10/0x10 [ 141.744306][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.745961][ T1425] ? __kthread_parkme+0x19e/0x250 [ 141.747541][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.748999][ T1425] kthread+0x3c5/0x780 [ 141.750299][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.751770][ T1425] ? rcu_is_watching+0x12/0xc0 [ 141.753270][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.754722][ T1425] ret_from_fork+0x5d4/0x6f0 [ 141.756187][ T1425] ? __pfx_kthread+0x10/0x10 [ 141.757643][ T1425] ret_from_fork_asm+0x1a/0x30 [ 141.759149][ T1425] [ 141.760813][ T1425] Kernel Offset: disabled [ 141.762190][ T1425] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:14:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=0000000000000002 RCX=0000000072cf0975 RDX=0000000000000000 RSI=00000000ac718d00 RDI=ffff88802a194880 RBP=ffff88802a194880 RSP=ffffc90003507208 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000050 R11=0000000000000001 R12=ffff88802a195370 R13=ffff88802a1953c0 R14=0000000000000002 R15=0000000000000001 RIP=ffffffff81985e72 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ffcfae5be0 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd35198490 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8201411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8201411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8201411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8201411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8201411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8201411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88802a0d4880 RSI=ffffffff816a23e1 RDI=ffffffff8c157060 RBP=ffff88805d3c8d40 RSP=ffffc90005c6f6a8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90a80c57 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a53cc00 R15=ffffed100ba791a8 RIP=ffffffff8b7fa7ff RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fafce400218 CR3=0000000039720000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafd2b84d00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000030000000a 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 000000040000000d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557b546aac 000055557b5469b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557b54af30 000055557b545e40 000000000000000b 0000000500000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557b546f90 000055557b554740 0000000100000019 0000555500000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0413c60800081872 f200000000000000 0000000000000032 ffffffff00000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0012100001000018 0806081e0e881007 801c051000000033 0780040600000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0190030008000188 0300040001840318 0200018200000034 0180030000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1808060c010dde01 80040000001c1006 0000001a10060601 72f4000000000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001ff ffffffffffffffd7 0801d80300000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040601d400000000 01d00300100001c0 0300080001b80300 080001b000000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100001a000000000 0190030008000188 0300040001840318 0200018200000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=a32a44b7d318da53 RBX=ffffffff8e789be0 RCX=ffffc900037a794c RDX=0000000000000001 RSI=ffffffff8e789be0 RDI=ffff888024df8b18 RBP=0000000000002dc2 RSP=ffffc900037a7940 R8 =e1378da05dbae214 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff8214747e R13=0000000000000283 R14=ffff888024df8000 R15=0000000000000002 RIP=ffffffff81987830 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560ba6500 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ca1bb6038 CR3=000000010c11b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ca26ed100 00007f0ca1b84440 00007f0ca1b84458 00007f0ca1b844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b5315 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc9000701f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b088360 R15=ffffffff855b52b0 RIP=ffffffff855b533f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000000c8 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000002 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ffcfb15450 000055ffcfb15450 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ffcfb6bb90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b8bff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b8bff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2d1e 2f2f2f444c465b5c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 564045025b414a59 4a021a190116181e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ffcfb75780 000055ffcfaea000 000055ffcfaf7e40 000055ffcfaf36b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ffcfaf96b0 000055ffcfb6bb90 000055ffcfb76000 000055ffcfaeb5a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ffcfaf3e30 000055ffcfb01100 000055ffcfaebf00 000055ffcfaf79e0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ffcfaeb520 000055ffcfae27b0 000055ffcfae3a60 000055ffcfae9aa0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030003100393100 303330383d490031 3d0035003038303d 4e4e000036323239 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000